Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4BbHUHUuKBN6ZfxGERJtCGtooGkfLKFBS1hQs29ZUWoH/0/3137372e36362e37362e302f32322d3232203d3e20323634313137.roa
File:                     3137372e36362e37362e302f32322d3232203d3e20323634313137.roa (raw, json)
Hash identifier:          kFlgG8po26nl05c4u9SNMc0rRyEiaP+kJIfy0wUnzsw=
Subject key identifier:   2B:52:E4:A6:6D:60:05:1A:1D:3C:01:DD:12:6A:6B:17:F7:24:B5:21
Certificate issuer:       /CN=45CE16AA7939EB17050D2F7FB4EE87F4A355D81D
Certificate serial:       31D9D42580165CF01D148C17F95D971E06FA0E5D
Authority key identifier: 45:CE:16:AA:79:39:EB:17:05:0D:2F:7F:B4:EE:87:F4:A3:55:D8:1D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/45CE16AA7939EB17050D2F7FB4EE87F4A355D81D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4BbHUHUuKBN6ZfxGERJtCGtooGkfLKFBS1hQs29ZUWoH/0/3137372e36362e37362e302f32322d3232203d3e20323634313137.roa
Signing time:             Tue 23 Aug 2022 14:18:51 +0000
ROA not before:           Tue 23 Aug 2022 14:13:51 +0000
ROA not after:            Tue 22 Aug 2023 14:18:51 +0000
asID:                     264117
IP address blocks:        177.66.76.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:d9:d4:25:80:16:5c:f0:1d:14:8c:17:f9:5d:97:1e:06:fa:0e:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45CE16AA7939EB17050D2F7FB4EE87F4A355D81D
        Validity
            Not Before: Aug 23 14:13:51 2022 GMT
            Not After : Aug 22 14:18:51 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:ff:d8:43:29:b5:c5:ba:26:f6:37:d0:1b:3b:
                    de:51:ef:93:3e:fb:93:da:fc:87:92:c7:78:fc:13:
                    ac:e3:b0:5c:2f:c1:3a:e9:30:7a:20:63:f9:6e:ff:
                    3f:8c:fd:d1:74:c1:02:a2:ba:ff:ab:8b:b9:9f:4f:
                    ee:22:e9:4c:5b:a0:c7:1e:0c:0b:7c:12:eb:05:d2:
                    5a:b2:a2:f4:37:f0:a8:1c:ac:5b:9a:bf:63:51:3a:
                    97:b1:51:6e:b1:80:bc:59:e2:4e:63:49:10:6a:38:
                    7b:81:61:24:45:79:d6:93:97:4f:e1:d3:de:3f:c9:
                    b6:9b:5a:0d:d3:34:fc:b0:59:c1:5d:ce:00:1b:7f:
                    ae:26:66:e3:0f:b4:1a:e5:aa:e9:09:de:d1:c0:53:
                    40:fe:5c:d1:0f:5f:74:68:65:b2:f5:5b:44:c6:4f:
                    ce:fc:d8:b6:ad:1c:13:ce:d6:55:1a:cf:a0:ff:11:
                    a3:31:3c:7a:25:23:58:53:ac:12:42:7a:09:2b:82:
                    4d:b0:81:66:34:b0:64:51:4f:ef:a7:73:e7:56:eb:
                    bd:6b:41:77:2b:15:94:e7:53:83:a4:f6:ab:44:5f:
                    25:68:5f:81:bc:88:d7:9d:c2:33:99:09:ea:87:f8:
                    c0:47:ae:bb:e1:4f:28:f9:7c:ca:5f:05:1a:fb:07:
                    77:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:52:E4:A6:6D:60:05:1A:1D:3C:01:DD:12:6A:6B:17:F7:24:B5:21
            X509v3 Authority Key Identifier:
                keyid:45:CE:16:AA:79:39:EB:17:05:0D:2F:7F:B4:EE:87:F4:A3:55:D8:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4BbHUHUuKBN6ZfxGERJtCGtooGkfLKFBS1hQs29ZUWoH/0/45CE16AA7939EB17050D2F7FB4EE87F4A355D81D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/45CE16AA7939EB17050D2F7FB4EE87F4A355D81D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4BbHUHUuKBN6ZfxGERJtCGtooGkfLKFBS1hQs29ZUWoH/0/3137372e36362e37362e302f32322d3232203d3e20323634313137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.66.76.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5c:18:a4:fc:bc:10:6b:c8:64:d4:ce:a6:46:e1:63:d0:62:d6:
         3e:cb:90:14:50:f3:ae:c3:b3:43:f4:6e:7d:b0:a5:bf:b0:1c:
         22:df:69:46:b4:a4:31:29:e6:94:05:9d:11:90:11:00:d9:fd:
         91:19:6c:ab:1a:f8:33:41:04:1e:75:1c:60:58:77:8d:bc:6d:
         dc:67:4d:95:a1:33:5f:70:f9:a7:b1:27:d0:32:40:fc:4f:4f:
         73:c9:92:4c:3b:2f:bb:ae:d5:5f:ed:ed:b5:99:07:f6:2d:40:
         e9:9d:52:6e:7d:ee:e0:7d:3a:75:45:fa:c1:31:fc:bc:e3:01:
         6e:4c:45:61:81:67:e4:81:20:44:0d:5b:a8:77:e6:27:a3:2d:
         72:77:38:30:df:bf:ee:66:f2:df:28:37:ff:90:de:28:ac:68:
         5d:49:b4:d3:03:99:97:78:b1:d6:f1:31:9b:3c:83:2a:ed:ec:
         10:79:1a:03:01:6b:e9:8f:a0:b9:4e:f5:54:58:3a:0f:3d:09:
         46:c3:a4:b2:a3:26:a4:f7:fd:32:91:94:70:0d:53:57:a4:d7:
         c4:cd:5e:01:a3:c3:78:1a:34:4b:68:f1:9f:79:c5:fc:99:e8:
         37:e7:41:a9:a8:f9:d9:9f:00:5d:d9:76:d2:f0:cd:7c:0d:24:
         ab:a4:92:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:05:54 2025 by rpki-client