Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3CBkf4rHLX1rWqXcgt5sHj57NtN7NYzoc6CjY32YajXv/1/3137372e33362e3135352e302f32342d3234203d3e20323632343031.roa
File:                     3137372e33362e3135352e302f32342d3234203d3e20323632343031.roa (raw, json)
Hash identifier:          hCItxLHXhqEzq8Hf2MHdkCTsLGxP1vx3pmElaqpH+hU=
Subject key identifier:   08:72:02:C0:A3:DC:13:25:57:FE:63:49:D6:7E:06:03:B1:5D:91:61
Certificate issuer:       /CN=04C4B46503207481A5E29CE8E450E83C917B2F22
Certificate serial:       58C9C40A11A42515ADACA781FFAB15856ECEA71F
Authority key identifier: 04:C4:B4:65:03:20:74:81:A5:E2:9C:E8:E4:50:E8:3C:91:7B:2F:22
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/04C4B46503207481A5E29CE8E450E83C917B2F22.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3CBkf4rHLX1rWqXcgt5sHj57NtN7NYzoc6CjY32YajXv/1/3137372e33362e3135352e302f32342d3234203d3e20323632343031.roa
Signing time:             Thu 06 Mar 2025 11:29:52 +0000
ROA not before:           Thu 06 Mar 2025 11:24:52 +0000
ROA not after:            Thu 05 Mar 2026 11:29:52 +0000
asID:                     262401
IP address blocks:        177.36.155.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:c9:c4:0a:11:a4:25:15:ad:ac:a7:81:ff:ab:15:85:6e:ce:a7:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04C4B46503207481A5E29CE8E450E83C917B2F22
        Validity
            Not Before: Mar  6 11:24:52 2025 GMT
            Not After : Mar  5 11:29:52 2026 GMT
        Subject: CN=087202C0A3DC132557FE6349D67E0603B15D9161
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:54:5f:1f:56:32:1a:0d:2c:83:c7:c3:03:a8:
                    04:c8:9e:bb:08:6a:8b:1c:2b:89:05:28:f6:aa:ba:
                    03:b6:6a:f1:43:40:d9:8a:be:63:86:f0:b4:70:56:
                    7d:ae:1f:5e:15:83:29:48:ea:2b:b2:2e:88:85:dd:
                    d6:95:c7:c4:74:9b:d4:ad:d2:a2:e6:a2:6f:55:bd:
                    54:a9:9d:09:b0:23:98:f0:e5:13:a9:30:1e:1e:70:
                    39:82:9e:7c:9a:93:15:25:3d:47:74:68:40:fc:1f:
                    a5:aa:fb:12:bc:2e:25:d5:6a:01:82:85:9d:34:e5:
                    ff:83:d1:a8:76:f2:14:3a:80:21:cb:b7:fb:86:b5:
                    91:40:e6:0f:bd:7b:25:40:df:bc:be:d3:89:a2:40:
                    ad:0c:04:11:7f:58:77:0b:97:e2:29:8f:71:0b:25:
                    e8:ea:f1:4d:53:9b:5a:97:a4:b4:4e:fd:81:95:6c:
                    23:1e:ae:22:a5:41:41:3e:64:47:73:52:5d:57:1e:
                    c1:03:23:f5:fe:2d:87:d4:41:b2:43:ff:18:37:cd:
                    55:b0:c0:bc:76:2e:9f:ff:58:56:ec:f6:19:56:b1:
                    04:63:6f:e6:8d:80:77:94:a7:3f:d7:79:eb:87:03:
                    60:ca:3e:b3:34:8f:e3:c2:5c:01:00:f6:23:d4:d2:
                    de:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:72:02:C0:A3:DC:13:25:57:FE:63:49:D6:7E:06:03:B1:5D:91:61
            X509v3 Authority Key Identifier:
                keyid:04:C4:B4:65:03:20:74:81:A5:E2:9C:E8:E4:50:E8:3C:91:7B:2F:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3CBkf4rHLX1rWqXcgt5sHj57NtN7NYzoc6CjY32YajXv/1/04C4B46503207481A5E29CE8E450E83C917B2F22.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/04C4B46503207481A5E29CE8E450E83C917B2F22.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3CBkf4rHLX1rWqXcgt5sHj57NtN7NYzoc6CjY32YajXv/1/3137372e33362e3135352e302f32342d3234203d3e20323632343031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.36.155.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2c:71:c5:75:51:24:c2:2f:a0:30:89:28:4b:ca:f6:20:9a:d3:
         46:1f:37:85:bc:25:9e:be:fb:2c:66:16:f2:a1:98:46:1f:28:
         7c:b6:60:72:06:c2:cc:e8:fd:7b:0f:2c:57:3a:8d:cd:1d:12:
         f3:c0:83:68:cd:de:17:ea:18:bd:bb:93:7a:80:a0:06:52:d7:
         f3:0a:70:34:a6:d3:e2:1e:88:7a:02:31:48:d6:2f:ec:81:4a:
         df:00:85:9a:b2:0b:0c:6f:70:8d:d4:ab:db:9d:b7:ef:1f:52:
         f2:2b:13:27:7b:bc:34:41:c8:d4:62:5f:a9:c1:8c:65:ef:7c:
         1d:83:60:25:bc:42:a1:41:ec:d3:f2:42:b0:9a:ec:d3:ec:b9:
         fd:ef:48:d3:05:fc:11:d4:50:c6:10:81:f7:04:93:2c:29:21:
         81:05:13:70:70:14:74:fa:ba:ca:9d:ac:aa:f2:01:73:bc:d3:
         da:cf:d7:4e:a7:8f:a2:40:dd:93:0e:e8:04:9f:2b:ae:39:47:
         fc:72:38:2f:6d:3d:38:df:1a:6e:3d:03:06:46:33:7d:ab:0a:
         c4:00:b5:6c:c0:a1:be:9c:c2:a5:8c:0c:27:1c:02:c2:f8:8c:
         9d:59:e7:b7:59:a1:5b:b2:f4:9b:77:cc:21:49:46:8b:7e:53:
         65:65:27:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 05:37:51 2025 by rpki-client