Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3CBkf4rHLX1rWqXcgt5sHj57NtN7NYzoc6CjY32YajXv/1/3137372e33362e3135382e302f32342d3234203d3e20323632343031.roa
File:                     3137372e33362e3135382e302f32342d3234203d3e20323632343031.roa (raw, json)
Hash identifier:          8kKCSSk5zhW5FL469ZJUifoo4McdPL8fIh2BXCnOQ+g=
Subject key identifier:   BC:12:72:18:A1:40:F2:7E:A3:51:FF:D5:C8:67:6E:65:79:91:D2:E2
Certificate issuer:       /CN=04C4B46503207481A5E29CE8E450E83C917B2F22
Certificate serial:       0FB296345271FBE39A46E202F99F214438972974
Authority key identifier: 04:C4:B4:65:03:20:74:81:A5:E2:9C:E8:E4:50:E8:3C:91:7B:2F:22
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/04C4B46503207481A5E29CE8E450E83C917B2F22.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3CBkf4rHLX1rWqXcgt5sHj57NtN7NYzoc6CjY32YajXv/1/3137372e33362e3135382e302f32342d3234203d3e20323632343031.roa
Signing time:             Thu 06 Mar 2025 11:29:50 +0000
ROA not before:           Thu 06 Mar 2025 11:24:50 +0000
ROA not after:            Thu 05 Mar 2026 11:29:50 +0000
asID:                     262401
IP address blocks:        177.36.158.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:b2:96:34:52:71:fb:e3:9a:46:e2:02:f9:9f:21:44:38:97:29:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04C4B46503207481A5E29CE8E450E83C917B2F22
        Validity
            Not Before: Mar  6 11:24:50 2025 GMT
            Not After : Mar  5 11:29:50 2026 GMT
        Subject: CN=BC127218A140F27EA351FFD5C8676E657991D2E2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:36:84:43:a4:4b:13:e3:17:de:c6:36:56:60:
                    9e:aa:10:65:9b:26:ca:4b:50:0f:a0:e3:d2:4e:c9:
                    6a:41:f4:75:2c:94:61:af:2f:6b:24:63:73:29:a7:
                    a1:34:b0:73:db:98:33:02:7c:5d:25:45:6b:3e:02:
                    d3:19:f1:1a:e4:b3:24:ac:c3:5b:24:77:7d:20:94:
                    a2:f9:bc:4b:cb:93:ca:d3:b9:d3:14:7a:cb:06:96:
                    eb:40:f8:e9:14:71:49:2d:26:18:29:90:9c:72:6b:
                    2b:6e:46:ce:3b:09:2f:b6:fb:68:52:3c:83:d8:fb:
                    7d:4b:3f:ec:c7:1d:db:1e:8d:d2:ea:88:e0:53:2e:
                    ac:4d:e9:63:61:2d:fc:de:65:b6:d8:5a:05:90:e6:
                    fb:32:5a:eb:62:ce:27:8c:27:24:b4:40:fa:26:94:
                    1a:36:25:b6:18:8d:66:92:0a:85:ac:33:65:13:2f:
                    f0:2c:53:55:bf:ce:45:f2:a4:26:d9:90:f0:09:0f:
                    fc:f8:cb:f0:8a:15:6d:5b:2f:dd:7d:6e:97:78:a6:
                    e6:a1:e1:88:57:3f:15:03:95:ad:0d:e0:0e:76:65:
                    27:66:0f:4b:c7:01:22:fe:41:05:32:a7:97:59:ed:
                    84:7e:4f:b7:ef:80:2f:75:86:40:ef:f9:90:bf:4e:
                    d1:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:12:72:18:A1:40:F2:7E:A3:51:FF:D5:C8:67:6E:65:79:91:D2:E2
            X509v3 Authority Key Identifier:
                keyid:04:C4:B4:65:03:20:74:81:A5:E2:9C:E8:E4:50:E8:3C:91:7B:2F:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3CBkf4rHLX1rWqXcgt5sHj57NtN7NYzoc6CjY32YajXv/1/04C4B46503207481A5E29CE8E450E83C917B2F22.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/04C4B46503207481A5E29CE8E450E83C917B2F22.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3CBkf4rHLX1rWqXcgt5sHj57NtN7NYzoc6CjY32YajXv/1/3137372e33362e3135382e302f32342d3234203d3e20323632343031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.36.158.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8e:de:fd:89:86:12:7f:4c:11:db:ef:f4:59:27:15:7b:d1:eb:
         f8:6b:58:67:0a:b8:c7:60:b6:93:28:be:cc:e9:48:5f:8b:5e:
         40:f7:2f:90:8e:38:bb:3f:21:ac:0f:16:05:17:ed:33:d6:7c:
         60:2d:21:fa:4e:93:1b:02:78:73:83:d5:10:99:a4:7a:d2:b3:
         ab:57:f8:ab:92:ba:cb:49:d7:e7:62:b3:7a:18:cb:f2:da:a2:
         86:c1:e5:ac:6e:9b:b6:91:a7:58:d0:87:3c:cb:10:8c:49:67:
         61:ad:7d:cd:9b:f5:a3:8e:9b:34:0d:d4:1a:12:53:c5:7f:d8:
         a3:4e:42:13:da:3e:fc:f5:f5:70:f8:60:3f:b9:79:e9:83:ea:
         57:4e:47:f0:a6:ec:38:30:3c:4b:69:65:5e:a2:32:80:52:1f:
         fe:ec:7e:8c:b6:91:a6:ba:52:e5:3b:92:b6:72:b4:57:99:6a:
         a8:91:c3:4d:c0:61:6d:dd:1e:8a:0d:e3:c4:70:40:e0:9f:34:
         a2:85:4a:b3:cc:56:c8:4a:15:a8:c3:b7:b1:8a:d3:2e:1e:3c:
         df:92:cd:6d:03:30:a3:bc:9c:21:31:98:74:62:f5:44:6b:ea:
         f1:4a:3d:be:39:90:ab:87:72:11:a9:c1:f7:22:3a:d9:fe:e1:
         e4:cd:64:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 05:42:37 2025 by rpki-client