Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4C3CXQrKysED9AhZm2zPwGVU1yHKZaVveVUdr3DygncR/0/3137372e3232312e3134322e302f32332d3234203d3e20323730373335.roa
File:                     3137372e3232312e3134322e302f32332d3234203d3e20323730373335.roa (raw, json)
Hash identifier:          xmxpJWGcnm9dCXmIT/urj+WRvwn37BSD96T5xQimPJw=
Subject key identifier:   4A:80:C8:66:01:B9:4C:64:E7:1B:C3:1F:AB:1D:15:09:7E:73:9F:EB
Certificate issuer:       /CN=2FA59197ADC5E55FC5D0AB6AA4FC7F5F1A95685E
Certificate serial:       6072C897E65F4959986523FFCB0102866B5CB8D8
Authority key identifier: 2F:A5:91:97:AD:C5:E5:5F:C5:D0:AB:6A:A4:FC:7F:5F:1A:95:68:5E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2FA59197ADC5E55FC5D0AB6AA4FC7F5F1A95685E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4C3CXQrKysED9AhZm2zPwGVU1yHKZaVveVUdr3DygncR/0/3137372e3232312e3134322e302f32332d3234203d3e20323730373335.roa
Signing time:             Wed 12 Jul 2023 13:30:28 +0000
ROA not before:           Wed 12 Jul 2023 13:25:28 +0000
ROA not after:            Wed 10 Jul 2024 13:30:28 +0000
asID:                     270735
IP address blocks:        177.221.142.0/23 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:72:c8:97:e6:5f:49:59:98:65:23:ff:cb:01:02:86:6b:5c:b8:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2FA59197ADC5E55FC5D0AB6AA4FC7F5F1A95685E
        Validity
            Not Before: Jul 12 13:25:28 2023 GMT
            Not After : Jul 10 13:30:28 2024 GMT
        Subject: CN=4A80C86601B94C64E71BC31FAB1D15097E739FEB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:27:a3:66:dc:dc:f9:84:ce:a5:6b:ae:02:63:
                    d8:a8:ab:31:35:f3:52:b8:22:a0:41:e4:6b:7e:9a:
                    14:1a:aa:c7:5e:77:ed:5a:b3:5d:c6:ac:93:98:38:
                    a3:45:0b:1d:95:66:2d:85:77:3d:49:67:98:b6:b0:
                    69:f2:ab:ff:b6:af:0b:e9:95:59:46:d1:1f:69:75:
                    cf:ac:92:10:26:f7:fa:69:e3:d7:2e:32:52:66:d4:
                    84:af:e4:f5:12:5f:70:24:89:9b:44:a1:04:96:85:
                    50:87:9b:65:15:a2:12:c9:ef:da:bd:89:6e:fe:43:
                    f7:ee:95:da:b5:d0:8a:f5:26:ca:88:31:a7:de:d6:
                    80:ea:7b:98:86:f2:31:03:72:60:55:7f:df:f9:88:
                    06:2d:84:d3:30:c2:20:5e:d8:40:44:8e:4e:e5:79:
                    6e:df:6e:05:c2:1b:7f:a7:23:ac:16:0a:0d:01:d6:
                    74:bd:3c:58:d7:da:6d:5f:fb:b1:09:41:dd:96:a8:
                    e2:44:5e:bb:4a:fd:02:1d:67:46:25:c7:1a:49:98:
                    97:df:16:30:13:0d:52:f8:08:90:3e:07:9f:1d:d3:
                    6f:64:43:4b:df:0f:f4:a5:cd:61:72:7e:8c:93:06:
                    3b:20:1c:53:63:e2:8c:49:5b:9c:0e:7c:ab:f5:c0:
                    c5:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:80:C8:66:01:B9:4C:64:E7:1B:C3:1F:AB:1D:15:09:7E:73:9F:EB
            X509v3 Authority Key Identifier:
                keyid:2F:A5:91:97:AD:C5:E5:5F:C5:D0:AB:6A:A4:FC:7F:5F:1A:95:68:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4C3CXQrKysED9AhZm2zPwGVU1yHKZaVveVUdr3DygncR/0/2FA59197ADC5E55FC5D0AB6AA4FC7F5F1A95685E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2FA59197ADC5E55FC5D0AB6AA4FC7F5F1A95685E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4C3CXQrKysED9AhZm2zPwGVU1yHKZaVveVUdr3DygncR/0/3137372e3232312e3134322e302f32332d3234203d3e20323730373335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.221.142.0/23

    Signature Algorithm: sha256WithRSAEncryption
         ab:0c:c6:8b:d6:8e:c8:70:20:a2:79:14:f6:ae:b2:a5:02:85:
         1b:1f:07:83:2a:e0:dd:e7:e3:bd:3e:4e:dc:c0:b8:07:34:65:
         a3:9a:9d:c7:b0:b2:c1:89:05:73:fe:84:0b:6b:df:d2:47:49:
         a0:66:cd:a5:85:ca:c5:f8:05:b5:a1:21:03:78:83:e2:2f:89:
         ec:0f:f1:43:da:4a:02:7f:81:78:18:da:88:be:09:67:3a:6b:
         5c:a7:47:e1:3d:70:40:4a:1c:8a:6f:8e:d3:2f:92:9a:2f:e4:
         1d:07:81:8d:fb:e2:a7:48:69:f2:72:0e:40:c0:f6:7f:5e:51:
         f1:10:7a:2a:12:9e:d6:10:ca:b6:87:0e:76:ae:26:9c:d1:b2:
         81:eb:68:fe:3f:f5:b0:28:28:3f:7c:53:6f:46:9a:d4:d8:e2:
         8b:10:bf:5f:a4:c3:e9:d0:95:ec:6b:2e:ae:95:a8:83:f1:26:
         38:01:2e:89:40:f1:6c:a6:bd:28:96:88:5a:cd:f3:7a:15:27:
         ba:56:f9:ff:42:bb:cf:f9:82:c9:3a:0b:d5:65:74:fb:8e:5a:
         01:00:ee:60:db:d8:f4:94:2f:d1:00:a1:0b:1c:3a:16:61:c5:
         61:8c:1e:56:64:fb:b3:b8:70:47:f5:84:ff:9a:7f:f4:4f:ae:
         a3:d4:b2:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 14:24:01 2025 by rpki-client