Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4ZTDHniW5Ju8wypiefuiaKv6mmi6NPfrZKMf2pDLnwn3/0/3137372e31302e33362e302f32332d3233203d3e20323632383432.roa
File:                     3137372e31302e33362e302f32332d3233203d3e20323632383432.roa (raw, json)
Hash identifier:          +n9VoWQtZfAd6acxaZosCiXmOMtmZw3EwxFGfYgO8nQ=
Subject key identifier:   A3:21:25:E2:EC:5F:82:B0:69:E0:64:11:86:E0:BE:D4:84:F4:B1:BF
Certificate issuer:       /CN=F3C503ABBC390447BF8B9D6227C8528A8D2A3ADB
Certificate serial:       119F9BD9FDC33E464BEAC8EC23C631CF64D6AD57
Authority key identifier: F3:C5:03:AB:BC:39:04:47:BF:8B:9D:62:27:C8:52:8A:8D:2A:3A:DB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F3C503ABBC390447BF8B9D6227C8528A8D2A3ADB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4ZTDHniW5Ju8wypiefuiaKv6mmi6NPfrZKMf2pDLnwn3/0/3137372e31302e33362e302f32332d3233203d3e20323632383432.roa
Signing time:             Wed 06 Jul 2022 15:53:51 +0000
ROA not before:           Wed 06 Jul 2022 15:48:51 +0000
ROA not after:            Wed 05 Jul 2023 15:53:51 +0000
asID:                     262842
IP address blocks:        177.10.36.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:9f:9b:d9:fd:c3:3e:46:4b:ea:c8:ec:23:c6:31:cf:64:d6:ad:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3C503ABBC390447BF8B9D6227C8528A8D2A3ADB
        Validity
            Not Before: Jul  6 15:48:51 2022 GMT
            Not After : Jul  5 15:53:51 2023 GMT
        Subject: CN=A32125E2EC5F82B069E0641186E0BED484F4B1BF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:e2:6b:52:72:59:9c:d4:74:cf:67:bc:6a:c6:
                    cc:ef:13:20:64:42:42:f8:ef:6b:dc:97:9a:22:a6:
                    1c:cd:36:21:89:7c:f6:dd:ca:f6:20:0e:d5:bb:dc:
                    cc:e9:f9:ca:6b:5c:36:16:ae:48:22:b5:f6:50:e9:
                    f6:67:d6:6f:f2:2c:3f:91:7c:35:67:3e:b9:4a:42:
                    b3:55:df:f3:fc:ab:a0:e7:bc:1f:84:f2:07:2f:c5:
                    68:34:87:35:dc:59:c3:c1:95:dc:b6:52:e8:9a:35:
                    b2:53:b8:30:02:ea:b8:67:bd:d0:4f:7d:59:64:93:
                    c5:f8:16:d2:95:a8:91:f8:bb:55:24:c7:d0:5e:c8:
                    82:9d:56:a9:f8:38:34:9e:78:01:44:88:40:fa:cf:
                    7b:82:e4:16:ed:4c:77:14:32:73:b0:6d:c5:e5:c4:
                    92:1a:9b:f3:41:f5:f7:fd:d5:e2:d4:e9:5c:2a:a9:
                    00:48:52:3a:91:f1:4d:6a:f2:ac:ca:e9:8a:69:72:
                    3d:4e:56:d9:ea:3e:ee:9e:06:b9:c2:72:a3:f4:80:
                    78:c0:88:ad:9d:54:ea:9c:bc:45:08:c3:54:66:20:
                    3e:c1:a4:d5:96:b3:a8:9a:40:34:70:7e:b6:84:4b:
                    4b:cc:80:1a:82:58:89:37:3a:ed:8d:cf:91:40:95:
                    b6:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:21:25:E2:EC:5F:82:B0:69:E0:64:11:86:E0:BE:D4:84:F4:B1:BF
            X509v3 Authority Key Identifier:
                keyid:F3:C5:03:AB:BC:39:04:47:BF:8B:9D:62:27:C8:52:8A:8D:2A:3A:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4ZTDHniW5Ju8wypiefuiaKv6mmi6NPfrZKMf2pDLnwn3/0/F3C503ABBC390447BF8B9D6227C8528A8D2A3ADB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F3C503ABBC390447BF8B9D6227C8528A8D2A3ADB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4ZTDHniW5Ju8wypiefuiaKv6mmi6NPfrZKMf2pDLnwn3/0/3137372e31302e33362e302f32332d3233203d3e20323632383432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.10.36.0/23

    Signature Algorithm: sha256WithRSAEncryption
         65:94:60:7b:3d:1f:cf:16:cb:1f:1f:f6:e6:a4:a9:99:d0:a3:
         a8:2c:48:22:ec:e7:ca:cd:3f:77:a6:ec:55:12:00:5f:40:05:
         29:0b:e5:94:58:f8:6d:eb:b6:f5:39:6d:09:55:74:c7:5c:5c:
         eb:a1:47:f9:de:bd:75:87:29:b4:e2:2c:49:17:61:f5:ee:4e:
         5a:80:7d:bd:47:99:9b:6b:71:14:93:8f:b5:22:b8:37:40:d1:
         c1:75:c6:8d:c9:e7:a5:ca:48:13:67:5e:ea:bd:09:31:e6:07:
         9a:11:6d:25:2e:f3:a7:66:99:58:3e:4c:27:b6:7b:3d:f5:4b:
         7b:49:d3:32:01:17:df:1d:c4:2e:8c:60:32:37:46:dd:9e:e2:
         62:fc:55:91:b3:f1:25:6f:96:d2:13:d0:09:be:3a:89:d8:04:
         2e:ff:da:19:23:7c:e8:c6:31:35:3e:29:81:e3:d8:78:72:a6:
         1f:f5:be:f0:22:d4:86:a4:2a:b2:d7:4d:e6:40:5c:a1:ab:2c:
         c0:6c:79:73:db:6e:b3:1f:b2:dd:70:06:78:59:62:a9:fb:35:
         77:d8:bb:1a:b1:db:58:09:6c:8c:41:8d:57:30:ee:ef:e0:57:
         89:53:82:dd:d4:49:b4:cb:2c:ef:23:19:a0:ba:ff:a6:a7:cb:
         84:e8:f0:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:48:20 2025 by rpki-client