Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5DStw3JiYMo8QnDAcZZE5UhgCZP5dSuSxQGJtx7qFzgd/0/3230312e37372e3136302e302f32302d3332203d3e203238363536.roa
File:                     3230312e37372e3136302e302f32302d3332203d3e203238363536.roa (raw, json)
Hash identifier:          JcqmEhHKchCkPVR1rBTTzFDkv/AGH55Q4nV2IUqJg3Q=
Subject key identifier:   B8:E8:BE:D9:6B:C0:8A:BE:69:8F:E2:8A:6F:E5:A2:69:D4:F8:2D:3F
Certificate issuer:       /CN=4CDDB0C229BCD83EF9BF28321F0AD966E019B5AF
Certificate serial:       4777541705F8C0F611780A90F3DDE316059589C0
Authority key identifier: 4C:DD:B0:C2:29:BC:D8:3E:F9:BF:28:32:1F:0A:D9:66:E0:19:B5:AF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4CDDB0C229BCD83EF9BF28321F0AD966E019B5AF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5DStw3JiYMo8QnDAcZZE5UhgCZP5dSuSxQGJtx7qFzgd/0/3230312e37372e3136302e302f32302d3332203d3e203238363536.roa
Signing time:             Mon 27 Mar 2023 17:40:47 +0000
ROA not before:           Mon 27 Mar 2023 17:35:47 +0000
ROA not after:            Mon 25 Mar 2024 17:40:47 +0000
asID:                     28656
IP address blocks:        201.77.160.0/20 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:77:54:17:05:f8:c0:f6:11:78:0a:90:f3:dd:e3:16:05:95:89:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4CDDB0C229BCD83EF9BF28321F0AD966E019B5AF
        Validity
            Not Before: Mar 27 17:35:47 2023 GMT
            Not After : Mar 25 17:40:47 2024 GMT
        Subject: CN=B8E8BED96BC08ABE698FE28A6FE5A269D4F82D3F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:c5:8d:21:fe:40:f7:50:96:bd:4b:54:26:18:
                    7b:21:6a:00:01:bd:33:2e:5b:d6:cd:32:34:6e:53:
                    00:1e:df:c4:6d:bf:9c:79:6c:27:90:93:aa:2f:97:
                    fe:01:7d:68:fe:53:0c:d3:8f:91:2e:00:f5:c5:5b:
                    92:13:1d:c0:4b:45:c7:6d:40:1b:93:ee:78:3a:34:
                    4f:af:75:68:b4:dc:77:34:d9:de:c9:3a:06:7e:c1:
                    b8:52:11:c2:66:4c:40:86:dd:f5:bb:be:f9:6e:88:
                    69:91:59:1b:a5:77:7b:76:6e:76:3a:ab:c3:3a:f3:
                    27:6a:cb:b4:25:bc:99:2a:a0:46:fc:52:f8:be:68:
                    d5:54:7f:6d:08:5f:82:1f:8f:70:dc:8f:d2:25:6b:
                    ea:15:b8:16:57:fa:cf:c4:f9:25:59:50:11:b3:f3:
                    25:9e:18:ed:49:08:35:ae:11:42:ae:d1:ea:06:e2:
                    25:ee:7c:ac:59:11:15:89:fc:f2:96:3c:31:83:cd:
                    54:e0:11:a6:75:22:09:f5:df:7b:39:63:73:c3:92:
                    28:ce:81:ab:a7:ee:63:9e:a1:3d:ab:ea:5b:ae:0f:
                    43:e3:97:c4:85:dd:00:b7:1c:5a:b7:2a:59:f9:b0:
                    ee:1c:4e:21:46:85:b7:8a:31:72:1d:64:2d:e4:db:
                    61:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:E8:BE:D9:6B:C0:8A:BE:69:8F:E2:8A:6F:E5:A2:69:D4:F8:2D:3F
            X509v3 Authority Key Identifier:
                keyid:4C:DD:B0:C2:29:BC:D8:3E:F9:BF:28:32:1F:0A:D9:66:E0:19:B5:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5DStw3JiYMo8QnDAcZZE5UhgCZP5dSuSxQGJtx7qFzgd/0/4CDDB0C229BCD83EF9BF28321F0AD966E019B5AF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4CDDB0C229BCD83EF9BF28321F0AD966E019B5AF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5DStw3JiYMo8QnDAcZZE5UhgCZP5dSuSxQGJtx7qFzgd/0/3230312e37372e3136302e302f32302d3332203d3e203238363536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.77.160.0/20

    Signature Algorithm: sha256WithRSAEncryption
         c6:b1:06:f8:bf:88:cd:4f:4f:cd:3e:c8:b0:3b:e2:e8:83:37:
         cd:db:7c:20:52:53:4f:11:38:04:78:a9:16:2c:1c:5f:2a:d9:
         58:0e:c5:60:63:a4:d2:6a:ff:56:bf:03:70:9d:a0:25:d3:c6:
         b8:f0:f0:88:e7:14:5c:0b:3d:98:0b:d3:4d:e1:d9:0e:5f:93:
         11:bd:c5:85:8c:a5:71:72:ec:18:ea:10:56:13:fc:8a:c9:39:
         62:eb:cb:11:27:ee:b3:81:79:ec:06:a3:25:f4:44:7a:ff:cb:
         6a:33:91:3e:27:2b:e8:6b:24:f4:25:8a:39:c4:24:51:79:e4:
         e5:f6:ba:a8:64:55:c6:cc:e9:26:e1:32:6f:51:7b:76:f6:75:
         cd:15:57:8e:0c:67:24:cf:ab:27:a2:d4:a6:59:e2:85:19:af:
         72:4c:5d:45:d0:52:42:5c:c7:6f:39:6a:31:6f:21:42:4c:02:
         d2:a2:27:7c:00:26:fb:6f:0f:39:4b:3e:3b:c0:e7:47:ad:65:
         0b:9f:5c:4e:6a:bb:39:2f:57:27:eb:ec:c2:dc:27:b0:ec:2a:
         ae:ae:df:ea:87:0c:6e:cb:bd:18:84:9a:41:c2:a7:97:c7:54:
         62:e8:da:c3:03:e8:e8:02:75:2c:0c:70:4e:4b:7f:69:b8:1a:
         63:1b:56:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 04:05:09 2025 by rpki-client