Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/681DJFq6xXWyA7nWN5FGg8NwEsfXnmXKjKgzmSATPsLt/0/3137372e3133362e3230382e302f32322d3232203d3e203532363835.roa
File:                     3137372e3133362e3230382e302f32322d3232203d3e203532363835.roa (raw, json)
Hash identifier:          m1CnVb9sqz3I6PZEZ89sm/c+NekLaz80yU+z2S8zGp0=
Subject key identifier:   2C:0A:C0:E2:D7:98:24:65:D4:22:86:80:A8:5E:84:5D:F5:A2:CA:56
Certificate issuer:       /CN=74869BE33EABA28B9D63EED4592740833EA9826B
Certificate serial:       4B65272D78535E39060C80220F4A4842F7C89481
Authority key identifier: 74:86:9B:E3:3E:AB:A2:8B:9D:63:EE:D4:59:27:40:83:3E:A9:82:6B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/74869BE33EABA28B9D63EED4592740833EA9826B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/681DJFq6xXWyA7nWN5FGg8NwEsfXnmXKjKgzmSATPsLt/0/3137372e3133362e3230382e302f32322d3232203d3e203532363835.roa
Signing time:             Mon 08 Apr 2024 19:43:37 +0000
ROA not before:           Mon 08 Apr 2024 19:38:37 +0000
ROA not after:            Mon 07 Apr 2025 19:43:37 +0000
asID:                     52685
IP address blocks:        177.136.208.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:65:27:2d:78:53:5e:39:06:0c:80:22:0f:4a:48:42:f7:c8:94:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74869BE33EABA28B9D63EED4592740833EA9826B
        Validity
            Not Before: Apr  8 19:38:37 2024 GMT
            Not After : Apr  7 19:43:37 2025 GMT
        Subject: CN=2C0AC0E2D7982465D4228680A85E845DF5A2CA56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:31:f4:d9:f6:86:99:26:80:ee:50:36:fc:2c:
                    6a:eb:f8:42:dc:5a:21:92:1d:18:41:2f:39:4e:56:
                    41:f3:9e:7e:ad:56:d1:2f:87:84:64:91:75:3a:4d:
                    ff:20:b2:41:7c:68:b0:30:5f:06:71:76:4c:a6:9f:
                    cc:34:be:b4:2f:70:5a:ea:58:ca:92:34:be:68:80:
                    a1:fc:59:a2:12:6f:d3:48:07:10:7b:48:40:af:f6:
                    21:ca:58:26:40:52:51:88:10:54:95:98:eb:74:b3:
                    91:8a:e5:36:e2:a1:c2:66:56:85:37:57:e4:ed:ba:
                    b7:0f:1b:d9:49:05:e6:37:29:bc:33:28:83:3d:9d:
                    e7:d6:36:68:2a:30:cf:72:49:dd:54:26:ee:93:7e:
                    01:14:8f:82:80:f8:97:6b:f1:62:99:f5:80:f9:27:
                    c9:ad:e2:46:96:67:fd:08:a7:a9:30:27:27:ed:f2:
                    95:46:a5:01:23:23:7d:4a:a2:75:62:60:0a:0b:91:
                    54:d6:b7:09:48:8c:da:c9:70:92:42:c3:aa:bb:70:
                    c4:d0:5c:69:04:e9:fa:76:53:6e:b9:42:d7:21:bc:
                    29:f9:f8:1b:e1:e3:2b:13:d4:fb:37:7c:5b:e1:33:
                    d2:dc:09:c8:f5:1d:bb:fd:b0:2c:0b:57:19:cd:62:
                    e1:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:0A:C0:E2:D7:98:24:65:D4:22:86:80:A8:5E:84:5D:F5:A2:CA:56
            X509v3 Authority Key Identifier:
                keyid:74:86:9B:E3:3E:AB:A2:8B:9D:63:EE:D4:59:27:40:83:3E:A9:82:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/681DJFq6xXWyA7nWN5FGg8NwEsfXnmXKjKgzmSATPsLt/0/74869BE33EABA28B9D63EED4592740833EA9826B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/74869BE33EABA28B9D63EED4592740833EA9826B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/681DJFq6xXWyA7nWN5FGg8NwEsfXnmXKjKgzmSATPsLt/0/3137372e3133362e3230382e302f32322d3232203d3e203532363835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.136.208.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4b:a3:3e:5d:76:ec:9d:f2:e7:37:10:74:13:b9:f2:ff:59:0a:
         1d:30:f6:99:a5:d4:0b:5d:da:c1:21:b8:c3:5b:dd:83:d5:af:
         7a:54:82:69:f7:09:57:39:3c:e0:47:a3:b4:eb:64:0e:61:61:
         f0:64:92:c1:fb:39:5b:9f:55:42:de:5b:87:b6:b3:59:82:e8:
         4a:98:9c:78:59:77:e1:4d:8f:e7:a1:b9:fb:3d:b3:93:c7:94:
         99:a8:e0:04:d3:15:00:92:26:45:e1:3d:e9:57:e7:f1:11:f0:
         b6:a7:da:62:c2:9d:2d:14:d9:c1:ac:44:20:ae:0c:c6:2f:4b:
         e1:3a:9c:42:09:82:79:ec:1b:47:58:91:6d:f9:cc:be:1d:76:
         10:6d:1a:4c:15:92:97:6d:74:85:3a:dc:d6:97:bb:aa:ab:f7:
         b6:cc:73:60:ba:5e:3e:24:ba:a7:11:a0:4a:f8:68:a8:89:49:
         ec:50:31:54:05:5c:62:42:0e:87:6b:45:7d:bc:1a:bf:79:41:
         41:fb:d7:80:a8:25:a6:51:da:c0:23:c0:c1:a0:87:aa:8a:73:
         53:2f:7c:a5:ab:93:c7:23:60:5e:87:22:3c:4d:57:79:aa:3e:
         b7:fa:0f:cd:bd:e7:65:a1:8b:60:e2:48:e0:db:fb:bf:f4:a4:
         28:40:7a:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:11:25 2025 by rpki-client