Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/681DJFq6xXWyA7nWN5FGg8NwEsfXnmXKjKgzmSATPsLt/1/3137372e3133362e3231332e302f32342d3234203d3e203532363835.roa
File:                     3137372e3133362e3231332e302f32342d3234203d3e203532363835.roa (raw, json)
Hash identifier:          agcXEf5LXvIuordnSaEiW8KIMNlJ24jv+6uUL0eFsX0=
Subject key identifier:   AD:A5:E6:58:DA:E6:7E:7C:85:AB:12:C1:4F:3D:58:2B:4A:64:9D:8A
Certificate issuer:       /CN=38CF6774B52D8A608752303C08D8139ABB69E3F0
Certificate serial:       5313D6DB31728CF5D2B49BA88F25F7527F8A6231
Authority key identifier: 38:CF:67:74:B5:2D:8A:60:87:52:30:3C:08:D8:13:9A:BB:69:E3:F0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/38CF6774B52D8A608752303C08D8139ABB69E3F0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/681DJFq6xXWyA7nWN5FGg8NwEsfXnmXKjKgzmSATPsLt/1/3137372e3133362e3231332e302f32342d3234203d3e203532363835.roa
Signing time:             Wed 05 Mar 2025 20:59:40 +0000
ROA not before:           Wed 05 Mar 2025 20:54:40 +0000
ROA not after:            Wed 04 Mar 2026 20:59:40 +0000
asID:                     52685
IP address blocks:        177.136.213.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:13:d6:db:31:72:8c:f5:d2:b4:9b:a8:8f:25:f7:52:7f:8a:62:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38CF6774B52D8A608752303C08D8139ABB69E3F0
        Validity
            Not Before: Mar  5 20:54:40 2025 GMT
            Not After : Mar  4 20:59:40 2026 GMT
        Subject: CN=ADA5E658DAE67E7C85AB12C14F3D582B4A649D8A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:d2:01:87:20:5c:c1:a3:2b:28:21:65:1a:c1:
                    c7:d6:84:5e:56:e2:0a:9e:61:e9:49:cc:f4:c3:82:
                    83:52:28:69:91:d6:4b:f8:7d:ae:f4:53:33:cd:b0:
                    01:a6:4e:dc:1b:da:73:1d:ec:bb:0d:22:bd:ee:77:
                    ef:11:34:77:8e:47:13:09:4f:cc:a7:3b:65:6d:2d:
                    ff:55:37:5c:ca:e5:80:9d:e0:8d:92:40:89:32:3d:
                    9c:9c:83:25:c8:cf:df:6d:b8:e0:8c:f9:a6:ab:61:
                    1a:a3:c7:67:0d:2f:57:62:71:70:91:15:30:33:d5:
                    20:a9:c5:a7:a9:ae:de:eb:59:25:0e:eb:ca:ff:6a:
                    cc:15:56:b0:51:99:ae:02:16:93:90:2a:99:6b:0e:
                    10:9c:34:d5:c8:a7:b4:8e:10:b7:ef:e3:69:f9:8c:
                    26:ef:47:6e:59:7d:18:e9:b9:96:42:66:e9:6a:b6:
                    cc:9a:fc:dc:25:d5:98:fe:58:24:73:46:ef:5d:c4:
                    c3:f7:98:6a:83:a9:80:c9:e8:7b:0f:fa:c7:45:85:
                    38:ca:a3:bd:d2:1c:db:30:97:9f:c4:d3:27:fe:5f:
                    5d:36:7e:8b:be:a2:1d:e7:a8:45:00:db:f2:55:58:
                    78:2e:d1:49:42:bd:ab:44:3e:bc:99:d5:98:1f:1a:
                    09:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:A5:E6:58:DA:E6:7E:7C:85:AB:12:C1:4F:3D:58:2B:4A:64:9D:8A
            X509v3 Authority Key Identifier:
                keyid:38:CF:67:74:B5:2D:8A:60:87:52:30:3C:08:D8:13:9A:BB:69:E3:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/681DJFq6xXWyA7nWN5FGg8NwEsfXnmXKjKgzmSATPsLt/1/38CF6774B52D8A608752303C08D8139ABB69E3F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/38CF6774B52D8A608752303C08D8139ABB69E3F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/681DJFq6xXWyA7nWN5FGg8NwEsfXnmXKjKgzmSATPsLt/1/3137372e3133362e3231332e302f32342d3234203d3e203532363835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.136.213.0/24

    Signature Algorithm: sha256WithRSAEncryption
         56:a3:b4:10:9e:e3:24:97:ef:24:78:d5:04:75:55:e5:e4:5b:
         02:99:a7:0c:4e:2b:56:5a:2a:0f:cf:4d:03:20:be:2f:db:b6:
         d6:4a:c9:ad:6a:af:62:f7:84:ae:d0:66:1b:36:10:28:d5:12:
         55:ee:cf:6b:6f:f8:d1:9a:39:7d:ef:b0:39:51:96:75:80:ca:
         5c:17:48:1d:ea:7f:f3:ec:ca:36:2f:49:b1:2b:9f:95:97:d0:
         70:6f:5f:52:f2:e8:6d:f2:39:75:23:91:5a:87:04:7a:af:74:
         7d:76:d6:55:62:c2:82:3d:9a:40:43:8b:9e:94:4a:b5:9e:d0:
         f3:7c:d9:dd:f6:9d:e0:ae:5b:21:6c:12:d8:a4:2a:ff:3a:6d:
         6b:15:8c:bb:3f:9b:6f:e1:3a:fe:88:68:c4:73:7f:f4:a9:3f:
         04:2a:8d:ab:48:65:5d:b1:ad:88:3d:35:6c:60:80:f8:27:47:
         a5:52:17:89:0c:34:f9:64:df:d8:4a:2c:a5:7f:51:de:59:3c:
         9c:57:bd:29:24:b6:cf:36:54:a7:77:f3:d2:8c:15:a7:57:d7:
         af:48:bc:08:e8:31:3d:c5:65:f7:d8:85:6a:86:b1:01:ad:81:
         2f:5b:9a:05:95:8d:c1:7c:e8:95:a7:e4:9b:d6:11:d6:ca:82:
         0e:bb:18:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:18:04 2025 by rpki-client