Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4s5hLinVUasaeu9eoJQPw6DUzZ242LEB8XpZTuKZNSEc/1/3137372e31322e3234332e302f32342d3234203d3e20323632383636.roa
File:                     3137372e31322e3234332e302f32342d3234203d3e20323632383636.roa (raw, json)
Hash identifier:          qjRIqcU/qlgIVin9k8C/Nl/uHYIXgP03j8xn8l4333Q=
Subject key identifier:   F0:2C:D3:0C:61:E1:E5:84:8B:AF:74:01:A3:9F:71:61:DF:5D:6D:DC
Certificate issuer:       /CN=732B1140085142A7D7474788EEF465DEABBE5080
Certificate serial:       6936386D5AF710B93E60660CE955FF72BDEE0444
Authority key identifier: 73:2B:11:40:08:51:42:A7:D7:47:47:88:EE:F4:65:DE:AB:BE:50:80
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/732B1140085142A7D7474788EEF465DEABBE5080.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4s5hLinVUasaeu9eoJQPw6DUzZ242LEB8XpZTuKZNSEc/1/3137372e31322e3234332e302f32342d3234203d3e20323632383636.roa
Signing time:             Thu 06 Mar 2025 01:21:39 +0000
ROA not before:           Thu 06 Mar 2025 01:16:39 +0000
ROA not after:            Thu 05 Mar 2026 01:21:39 +0000
asID:                     262866
IP address blocks:        177.12.243.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:36:38:6d:5a:f7:10:b9:3e:60:66:0c:e9:55:ff:72:bd:ee:04:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=732B1140085142A7D7474788EEF465DEABBE5080
        Validity
            Not Before: Mar  6 01:16:39 2025 GMT
            Not After : Mar  5 01:21:39 2026 GMT
        Subject: CN=F02CD30C61E1E5848BAF7401A39F7161DF5D6DDC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:6a:80:ac:d7:b5:0c:e9:c7:4d:65:b6:87:a4:
                    f3:69:ce:0d:dd:f5:93:80:3d:0d:c8:f0:9d:42:fe:
                    e2:19:f2:e3:8b:62:76:28:f3:a7:4d:52:03:0e:3a:
                    39:7f:e4:ca:29:dc:ea:be:ba:b7:5d:48:00:70:8c:
                    24:bf:c8:10:44:5f:6a:d1:7e:37:a0:05:4a:d8:40:
                    01:c9:99:90:73:bc:2d:88:43:97:d1:ee:11:67:b2:
                    8b:f3:f1:c6:41:c2:2c:08:35:01:ff:2d:99:ad:33:
                    87:86:ec:01:ea:c4:5c:a6:8d:13:df:50:ea:65:87:
                    91:94:05:97:79:3c:ee:f8:5d:63:a6:b1:98:61:dc:
                    59:30:2d:b7:f3:c9:b0:ab:e7:2b:b7:84:84:d3:af:
                    c5:db:5a:0d:1c:af:67:0f:8b:75:26:ee:1b:f4:0c:
                    21:4e:34:ff:79:c2:c7:3a:3a:f8:9f:19:65:0c:74:
                    7f:a0:e9:b6:2f:75:94:ce:06:a4:71:c8:55:a8:71:
                    6d:7d:70:95:b3:c0:27:25:b9:a3:a6:92:57:bc:59:
                    c5:6a:be:08:7d:e7:13:3d:ed:f2:68:9e:94:aa:4d:
                    6e:3c:9a:a0:93:bf:f3:25:26:9b:92:8f:60:fc:59:
                    8d:ac:90:1a:0b:e4:9d:4b:43:e4:6f:f1:c5:e4:3a:
                    bf:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:2C:D3:0C:61:E1:E5:84:8B:AF:74:01:A3:9F:71:61:DF:5D:6D:DC
            X509v3 Authority Key Identifier:
                keyid:73:2B:11:40:08:51:42:A7:D7:47:47:88:EE:F4:65:DE:AB:BE:50:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4s5hLinVUasaeu9eoJQPw6DUzZ242LEB8XpZTuKZNSEc/1/732B1140085142A7D7474788EEF465DEABBE5080.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/732B1140085142A7D7474788EEF465DEABBE5080.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4s5hLinVUasaeu9eoJQPw6DUzZ242LEB8XpZTuKZNSEc/1/3137372e31322e3234332e302f32342d3234203d3e20323632383636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.12.243.0/24

    Signature Algorithm: sha256WithRSAEncryption
         01:fb:cc:5f:24:ee:96:86:69:3e:5e:56:ff:9f:02:b4:68:38:
         ba:25:3a:5e:e3:12:a2:ba:2e:23:5e:89:bf:fe:bc:0d:e1:c0:
         56:3d:dc:7d:2f:54:d0:e3:16:27:b4:f7:fb:0e:9e:e7:86:bb:
         31:b4:d6:b8:e6:9d:a5:40:63:e7:bc:57:1a:74:ad:14:90:22:
         eb:68:7f:d2:76:e7:cd:25:6a:8e:0d:1e:45:be:81:44:32:af:
         d8:8e:54:f1:09:53:09:4f:1a:ab:cd:2e:50:6e:32:fc:47:af:
         2d:2e:29:ce:82:da:90:82:16:12:cd:02:cd:4e:15:18:84:c7:
         b8:b1:fa:1b:f2:e8:f8:e5:50:33:40:5b:fb:96:df:0c:ac:9c:
         53:f8:ef:0e:c6:56:65:7e:3c:b0:0c:41:64:08:fd:e6:30:0b:
         b8:49:1b:0e:7d:c7:19:14:e1:e0:ec:7f:17:f7:5a:5c:a3:ce:
         7d:41:c7:6e:fe:de:89:f5:37:34:50:58:de:ed:ae:bb:e6:c8:
         41:dd:73:1d:c8:55:e7:0d:61:6b:74:c0:f6:41:9a:fd:60:49:
         14:f4:96:ff:5c:e7:37:0d:41:90:47:22:14:9f:a4:13:fe:06:
         07:0e:18:9f:a6:ca:49:bf:35:0e:49:84:cb:2e:42:7b:28:25:
         c2:60:1b:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 00:33:25 2025 by rpki-client