Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/681DJFq6xXWyA7nWN5FGg8NwEsfXnmXKjKgzmSATPsLt/1/3137372e3133362e3231322e302f32322d3232203d3e203532363835.roa
File:                     3137372e3133362e3231322e302f32322d3232203d3e203532363835.roa (raw, json)
Hash identifier:          eZWZ1ryECjASawh5LLlLAUiYartIAROEtuKy4665aMw=
Subject key identifier:   42:82:F7:5E:BA:F0:2C:B0:A6:8F:7B:2F:29:FC:90:52:F3:78:86:A6
Certificate issuer:       /CN=38CF6774B52D8A608752303C08D8139ABB69E3F0
Certificate serial:       52B6F1A92812E7E8A3A128E53E4A8F2642A39F82
Authority key identifier: 38:CF:67:74:B5:2D:8A:60:87:52:30:3C:08:D8:13:9A:BB:69:E3:F0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/38CF6774B52D8A608752303C08D8139ABB69E3F0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/681DJFq6xXWyA7nWN5FGg8NwEsfXnmXKjKgzmSATPsLt/1/3137372e3133362e3231322e302f32322d3232203d3e203532363835.roa
Signing time:             Wed 05 Mar 2025 20:59:41 +0000
ROA not before:           Wed 05 Mar 2025 20:54:41 +0000
ROA not after:            Wed 04 Mar 2026 20:59:41 +0000
asID:                     52685
IP address blocks:        177.136.212.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:b6:f1:a9:28:12:e7:e8:a3:a1:28:e5:3e:4a:8f:26:42:a3:9f:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38CF6774B52D8A608752303C08D8139ABB69E3F0
        Validity
            Not Before: Mar  5 20:54:41 2025 GMT
            Not After : Mar  4 20:59:41 2026 GMT
        Subject: CN=4282F75EBAF02CB0A68F7B2F29FC9052F37886A6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:35:1b:88:f9:79:5e:77:b8:38:dc:04:ba:61:
                    63:48:f0:bd:1a:4b:c0:50:d8:58:8a:4a:58:db:3f:
                    8f:82:2b:21:ab:58:b2:bb:0d:6a:77:aa:0a:f4:74:
                    53:61:48:30:ba:26:2f:c4:ad:e4:c8:e6:e4:b5:5c:
                    eb:48:f0:39:a0:c7:0c:7b:3b:aa:64:40:7e:c1:9a:
                    0b:8a:3b:ff:93:9d:5f:21:dd:b5:d9:9a:23:d1:83:
                    95:a6:86:7c:4d:68:c8:c0:6d:c2:16:39:a3:e1:eb:
                    ad:73:9d:be:a8:1d:c2:fd:0e:07:98:0d:91:12:c6:
                    52:d1:85:3a:98:54:5a:a2:8f:4c:d2:c8:31:2e:b1:
                    b3:1c:7f:e0:eb:67:cc:a1:ee:ce:1b:df:02:58:22:
                    9e:21:cf:f4:1a:43:0e:ee:a3:57:2a:e1:ba:62:5e:
                    5d:04:22:31:b3:a7:08:81:98:f1:e3:5b:d2:91:e2:
                    91:dc:09:50:87:61:e5:64:e1:b4:39:fb:65:f1:23:
                    71:bb:39:bc:02:07:f0:3b:3a:12:8b:06:7c:67:a6:
                    4f:f9:94:a6:f8:15:ce:68:84:f2:a5:6e:c2:89:46:
                    49:fe:65:24:6f:87:15:3a:01:b0:3c:27:8b:f7:92:
                    5a:63:d2:34:ee:d5:87:b4:95:1d:c9:5d:b7:1d:c9:
                    ee:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:82:F7:5E:BA:F0:2C:B0:A6:8F:7B:2F:29:FC:90:52:F3:78:86:A6
            X509v3 Authority Key Identifier:
                keyid:38:CF:67:74:B5:2D:8A:60:87:52:30:3C:08:D8:13:9A:BB:69:E3:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/681DJFq6xXWyA7nWN5FGg8NwEsfXnmXKjKgzmSATPsLt/1/38CF6774B52D8A608752303C08D8139ABB69E3F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/38CF6774B52D8A608752303C08D8139ABB69E3F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/681DJFq6xXWyA7nWN5FGg8NwEsfXnmXKjKgzmSATPsLt/1/3137372e3133362e3231322e302f32322d3232203d3e203532363835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.136.212.0/22

    Signature Algorithm: sha256WithRSAEncryption
         86:25:04:80:5b:00:16:e6:82:8a:7d:a0:48:f4:c3:17:13:9b:
         43:ab:77:fa:a3:5f:0b:5c:33:11:67:63:8f:e5:83:56:54:b5:
         8f:2e:03:14:5d:c3:56:2f:03:39:3b:b6:1f:73:40:b5:95:db:
         4a:d4:1e:28:f4:67:e3:70:8d:ea:f7:4e:a4:89:aa:1f:ed:30:
         ff:99:df:9c:cb:2c:a0:f2:e7:69:d5:bb:1c:56:7c:3b:d8:0d:
         00:92:b6:97:d9:86:96:86:5a:48:6e:94:09:2c:f4:5d:b9:b5:
         03:9a:99:e4:2c:8e:1b:1f:b5:e5:d2:5a:a7:8f:b5:0d:47:4c:
         f3:c4:71:03:73:dd:cd:a4:54:5f:78:6c:1e:b6:7d:b2:12:ab:
         75:95:16:2e:60:b8:81:2c:b1:91:cf:cc:9f:1a:cb:ed:09:04:
         fe:98:87:c9:01:95:e9:49:83:88:f6:1e:01:33:39:ab:c3:b6:
         e8:3f:4e:bc:45:30:5a:f9:00:49:57:10:2b:2b:a3:e1:e1:15:
         37:62:a0:1b:7c:ff:51:29:f7:cb:0c:bd:1c:2b:46:80:ce:f0:
         86:27:d1:55:f1:f8:2c:79:3b:c1:16:7a:0e:6d:2c:45:42:b5:
         a8:ea:31:0b:8e:c2:29:5a:0f:f8:bc:5b:35:87:3d:5c:fb:06:
         77:6e:c3:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 01:03:03 2025 by rpki-client