Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/681DJFq6xXWyA7nWN5FGg8NwEsfXnmXKjKgzmSATPsLt/1/3137372e3133362e3231302e302f32332d3233203d3e203532363835.roa
File:                     3137372e3133362e3231302e302f32332d3233203d3e203532363835.roa (raw, json)
Hash identifier:          8ViuphIJ5LbcjrfRchHYZIcLKRrnBBM6V46d992aBcc=
Subject key identifier:   1B:F1:2B:6B:0B:47:83:B0:3F:7D:E8:56:04:2A:E0:D0:D5:40:B9:82
Certificate issuer:       /CN=38CF6774B52D8A608752303C08D8139ABB69E3F0
Certificate serial:       1341A75B63402FBC2C37F4CF1A2C2B57289634B6
Authority key identifier: 38:CF:67:74:B5:2D:8A:60:87:52:30:3C:08:D8:13:9A:BB:69:E3:F0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/38CF6774B52D8A608752303C08D8139ABB69E3F0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/681DJFq6xXWyA7nWN5FGg8NwEsfXnmXKjKgzmSATPsLt/1/3137372e3133362e3231302e302f32332d3233203d3e203532363835.roa
Signing time:             Wed 05 Mar 2025 20:59:45 +0000
ROA not before:           Wed 05 Mar 2025 20:54:45 +0000
ROA not after:            Wed 04 Mar 2026 20:59:45 +0000
asID:                     52685
IP address blocks:        177.136.210.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:41:a7:5b:63:40:2f:bc:2c:37:f4:cf:1a:2c:2b:57:28:96:34:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38CF6774B52D8A608752303C08D8139ABB69E3F0
        Validity
            Not Before: Mar  5 20:54:45 2025 GMT
            Not After : Mar  4 20:59:45 2026 GMT
        Subject: CN=1BF12B6B0B4783B03F7DE856042AE0D0D540B982
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:dc:70:24:74:e1:cf:8d:0c:cd:78:aa:01:20:
                    63:d0:cb:af:90:d2:46:52:c2:da:63:12:6c:24:50:
                    8f:5c:98:3b:ce:a2:5c:5e:67:75:9e:5b:c9:7e:10:
                    21:d6:72:97:a9:1b:33:18:c7:29:3d:ce:62:ee:a5:
                    06:98:d9:bd:bb:85:d2:7a:9f:63:ee:8d:56:fd:3c:
                    62:5a:6e:42:e1:24:21:0c:b2:4f:fb:35:6c:b2:d2:
                    60:7d:85:f9:b0:b1:90:ad:26:68:49:9b:31:81:0e:
                    ed:0e:e5:1f:f8:36:b3:cd:a4:50:74:a5:f0:be:47:
                    5b:8a:d2:02:08:75:ee:83:a7:43:32:dc:52:57:d1:
                    37:b4:e9:a1:71:0c:d8:a3:51:2a:1e:3c:00:55:25:
                    4b:28:b3:fe:27:98:b5:27:9a:1f:23:48:55:0e:02:
                    2b:f1:a2:c1:31:68:e2:b2:2f:86:7c:f1:52:87:10:
                    c7:b9:c6:97:c9:2c:0d:6f:2a:bb:4a:bb:cd:42:18:
                    d2:6a:c3:b0:58:65:62:7c:bd:18:14:23:7c:3e:9f:
                    5f:54:b0:7e:57:6a:ea:76:e6:fc:6e:d2:93:a8:88:
                    02:97:29:c7:24:2a:eb:5d:de:e5:34:77:70:1d:12:
                    21:2d:4e:bb:95:d2:a6:7f:c4:2f:56:b7:e0:65:7c:
                    4f:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:F1:2B:6B:0B:47:83:B0:3F:7D:E8:56:04:2A:E0:D0:D5:40:B9:82
            X509v3 Authority Key Identifier:
                keyid:38:CF:67:74:B5:2D:8A:60:87:52:30:3C:08:D8:13:9A:BB:69:E3:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/681DJFq6xXWyA7nWN5FGg8NwEsfXnmXKjKgzmSATPsLt/1/38CF6774B52D8A608752303C08D8139ABB69E3F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/38CF6774B52D8A608752303C08D8139ABB69E3F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/681DJFq6xXWyA7nWN5FGg8NwEsfXnmXKjKgzmSATPsLt/1/3137372e3133362e3231302e302f32332d3233203d3e203532363835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.136.210.0/23

    Signature Algorithm: sha256WithRSAEncryption
         97:ed:ee:7c:29:05:64:80:49:0b:3e:5b:94:29:6d:20:89:aa:
         54:f6:c0:15:c1:3d:3f:d9:01:8f:8c:72:93:e9:c4:a7:b4:d9:
         22:8a:a1:5f:2f:f3:f1:01:4c:b7:17:67:da:92:76:0c:b0:a8:
         5a:25:2d:c8:f1:58:b3:6c:9f:a5:f5:32:d4:50:a5:9a:74:e7:
         67:d4:f4:2a:29:df:82:4c:87:a1:85:19:dc:83:cc:73:90:13:
         fb:55:e7:27:bf:f1:f5:40:63:d3:46:af:fe:78:c9:ec:85:15:
         82:32:ed:59:ff:cb:e3:58:f8:d5:3c:42:ef:f4:3f:86:dc:a0:
         00:fa:43:b6:6b:b7:8b:0c:b9:f1:7e:4c:5b:0b:42:46:80:93:
         9b:da:74:2a:fe:33:4a:f3:f0:cb:e2:8f:ab:1f:7a:f1:0b:7e:
         d2:be:65:8c:f9:91:e3:4f:d9:a2:17:97:5f:06:3c:44:c5:6e:
         7c:3a:d4:97:97:1e:54:ea:ca:ba:2a:95:e2:c3:04:86:ea:2d:
         08:56:90:74:ea:0c:76:a0:c7:7a:df:8e:d4:42:e2:d9:7a:db:
         1a:9b:35:f6:f5:df:b6:28:64:a9:8b:ed:56:97:cb:c7:17:5b:
         cd:ab:91:69:c3:0e:68:01:b8:24:b3:e5:d4:fc:64:9d:5e:23:
         b5:cd:e2:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:16:26 2025 by rpki-client