Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/681DJFq6xXWyA7nWN5FGg8NwEsfXnmXKjKgzmSATPsLt/1/3137372e3133362e3230392e302f32342d3234203d3e203532363835.roa
File:                     3137372e3133362e3230392e302f32342d3234203d3e203532363835.roa (raw, json)
Hash identifier:          iTgFh1pgfdk/TynM2a6xQNX40sSd9issA2xD5LYKNN4=
Subject key identifier:   6B:0A:30:E8:44:47:F7:BC:98:11:F5:A0:6D:62:2F:2D:39:1B:AD:AD
Certificate issuer:       /CN=38CF6774B52D8A608752303C08D8139ABB69E3F0
Certificate serial:       1D90714D7AD68278C1527F2CC61D3AFC47E27B64
Authority key identifier: 38:CF:67:74:B5:2D:8A:60:87:52:30:3C:08:D8:13:9A:BB:69:E3:F0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/38CF6774B52D8A608752303C08D8139ABB69E3F0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/681DJFq6xXWyA7nWN5FGg8NwEsfXnmXKjKgzmSATPsLt/1/3137372e3133362e3230392e302f32342d3234203d3e203532363835.roa
Signing time:             Wed 05 Mar 2025 20:59:42 +0000
ROA not before:           Wed 05 Mar 2025 20:54:42 +0000
ROA not after:            Wed 04 Mar 2026 20:59:42 +0000
asID:                     52685
IP address blocks:        177.136.209.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:90:71:4d:7a:d6:82:78:c1:52:7f:2c:c6:1d:3a:fc:47:e2:7b:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38CF6774B52D8A608752303C08D8139ABB69E3F0
        Validity
            Not Before: Mar  5 20:54:42 2025 GMT
            Not After : Mar  4 20:59:42 2026 GMT
        Subject: CN=6B0A30E84447F7BC9811F5A06D622F2D391BADAD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:c0:c6:e5:dc:b4:fd:b1:29:21:25:2e:df:42:
                    81:dc:bc:5a:53:b6:80:6b:a8:04:0a:a8:6a:08:2a:
                    22:24:49:3d:e8:fb:b2:30:44:0f:f5:5f:68:be:b8:
                    3f:d8:35:2f:aa:68:e9:b5:8f:a1:07:40:69:26:09:
                    73:65:4e:ab:e7:a7:4e:f8:b9:2e:6f:00:40:a5:a0:
                    d9:05:74:e6:95:23:77:a3:fc:72:f6:14:82:72:ce:
                    8a:02:fb:8c:2f:29:b3:ae:fa:3c:54:89:35:36:b4:
                    f0:88:95:b8:b7:0e:10:69:3b:37:05:d7:da:d0:27:
                    ac:de:e0:52:cf:3b:78:01:80:6d:67:8a:b6:c9:6b:
                    df:5b:ad:f8:f3:be:cd:33:ac:2e:6f:e5:33:11:4e:
                    0c:a5:4e:b8:b7:50:2c:38:50:46:0d:0a:24:67:27:
                    9f:54:16:4a:b0:ac:4b:f8:e7:a3:55:9a:eb:91:37:
                    3f:16:1d:ae:3e:4b:71:9e:96:fc:0b:92:33:9d:f3:
                    f1:92:34:ef:4e:1a:21:03:2c:88:5e:dd:80:b9:92:
                    de:3a:25:5a:f2:2c:e9:2c:7f:b8:a1:67:2c:8e:c6:
                    7a:d7:77:9a:f3:82:dc:f2:4d:6e:73:d4:3c:ad:da:
                    29:f0:a9:26:67:ce:59:34:07:f5:6f:ef:6f:aa:c0:
                    8b:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:0A:30:E8:44:47:F7:BC:98:11:F5:A0:6D:62:2F:2D:39:1B:AD:AD
            X509v3 Authority Key Identifier:
                keyid:38:CF:67:74:B5:2D:8A:60:87:52:30:3C:08:D8:13:9A:BB:69:E3:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/681DJFq6xXWyA7nWN5FGg8NwEsfXnmXKjKgzmSATPsLt/1/38CF6774B52D8A608752303C08D8139ABB69E3F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/38CF6774B52D8A608752303C08D8139ABB69E3F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/681DJFq6xXWyA7nWN5FGg8NwEsfXnmXKjKgzmSATPsLt/1/3137372e3133362e3230392e302f32342d3234203d3e203532363835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.136.209.0/24

    Signature Algorithm: sha256WithRSAEncryption
         41:d9:c1:6b:da:45:56:3d:b8:bd:af:12:9e:3a:9e:e0:5a:48:
         71:4e:01:fe:e7:02:7b:49:75:fc:1c:ef:66:e6:5a:8f:70:81:
         e8:c0:49:f9:0d:cd:d0:5b:05:14:2c:90:9f:7f:b2:21:3f:be:
         60:8b:66:c3:88:25:54:05:68:91:7a:0b:24:d7:ad:1d:97:fd:
         f5:ae:5b:1e:49:ae:bd:f2:71:55:1c:65:57:4a:2f:59:b2:a2:
         87:67:9e:3c:07:73:1a:7d:2a:66:7f:df:d1:dd:9e:64:3a:2e:
         24:dd:56:aa:43:b5:ed:23:b6:0f:30:83:0b:d3:4b:ef:00:0e:
         eb:ff:d2:ea:3b:f3:77:a1:54:29:e7:22:e1:38:12:35:f0:0c:
         f8:80:85:64:c8:ad:3a:16:f5:c7:d9:5d:d8:bc:0a:73:f7:f6:
         3d:8d:f4:00:89:f8:16:ff:fa:bb:c8:da:14:12:4d:18:1d:77:
         2e:aa:ac:14:ce:c5:a4:b7:50:77:52:64:a3:56:5c:24:8f:21:
         3a:1a:17:70:1f:4a:20:ea:ef:ec:33:c0:4b:83:a2:60:c8:0e:
         71:68:40:50:27:a0:57:57:03:0b:68:88:25:9e:ff:12:f2:2a:
         b3:30:df:c3:ed:bf:db:25:03:45:06:b2:90:9a:4a:0a:2f:77:
         70:d0:bd:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:20:04 2025 by rpki-client