Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6WjFVXhb8Fug1HEnMxjo4KGLYTwL1hiVAqPMV8zH1Uqw/0/3137372e38362e3135332e302f32342d3234203d3e203532353732.roa
File:                     3137372e38362e3135332e302f32342d3234203d3e203532353732.roa (raw, json)
Hash identifier:          DTIgESSq8lmY1G03qqb185mXlaIeuD85hK2LdLFyoro=
Subject key identifier:   30:92:F1:8F:4B:50:E9:B0:EA:D5:73:0F:E6:1B:C4:AD:B6:61:B0:67
Certificate issuer:       /CN=C2FA7094B77987CDDAD3EDA50C3F506A36BF8E7B
Certificate serial:       30A84493535A1C6A3E8D5EC21E4D20B8C0DF7AB7
Authority key identifier: C2:FA:70:94:B7:79:87:CD:DA:D3:ED:A5:0C:3F:50:6A:36:BF:8E:7B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C2FA7094B77987CDDAD3EDA50C3F506A36BF8E7B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6WjFVXhb8Fug1HEnMxjo4KGLYTwL1hiVAqPMV8zH1Uqw/0/3137372e38362e3135332e302f32342d3234203d3e203532353732.roa
Signing time:             Tue 08 Mar 2022 13:54:56 +0000
ROA not before:           Tue 08 Mar 2022 13:49:56 +0000
ROA not after:            Tue 07 Mar 2023 13:54:56 +0000
asID:                     52572
IP address blocks:        177.86.153.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:a8:44:93:53:5a:1c:6a:3e:8d:5e:c2:1e:4d:20:b8:c0:df:7a:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C2FA7094B77987CDDAD3EDA50C3F506A36BF8E7B
        Validity
            Not Before: Mar  8 13:49:56 2022 GMT
            Not After : Mar  7 13:54:56 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:ad:9f:4f:8c:20:65:30:68:74:bf:7b:a7:a1:
                    c7:a5:c1:da:33:34:9d:4b:b5:34:b7:53:f8:67:91:
                    c8:e8:f4:df:bb:80:cb:4d:f2:f3:4b:71:1b:db:4f:
                    65:8e:87:21:f8:9e:0f:51:27:cd:be:b9:31:6c:0e:
                    d3:c6:59:50:87:ef:1e:9e:65:c3:23:b8:7b:06:df:
                    77:67:b1:84:40:f6:6d:2b:ce:40:4b:75:8e:8e:7d:
                    4e:d8:52:a2:b0:68:d3:1f:87:80:ef:1c:2f:a3:a6:
                    4d:bc:80:36:73:3f:31:d6:70:01:43:b5:94:10:0b:
                    75:74:d3:99:af:30:eb:69:67:ce:71:19:6c:e0:e2:
                    b8:ae:8f:2d:ee:83:8d:79:ce:01:06:0e:59:28:d2:
                    12:05:6f:26:24:2f:b6:90:f5:06:b6:d9:cd:a3:8e:
                    0b:4e:26:39:ea:9e:64:ba:9f:3a:11:11:f1:5c:1a:
                    59:6f:c1:a6:cf:3d:3f:c7:aa:e5:91:fb:32:66:d1:
                    35:a6:cb:0c:40:43:31:7b:0a:9f:c4:41:71:63:03:
                    20:25:7c:96:65:23:49:87:bf:07:4c:5b:d0:74:03:
                    10:46:49:ce:22:33:37:81:3a:87:35:26:fe:c3:d6:
                    61:bc:be:f3:a8:53:b6:4d:0f:15:a0:c7:f7:9d:7c:
                    17:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:92:F1:8F:4B:50:E9:B0:EA:D5:73:0F:E6:1B:C4:AD:B6:61:B0:67
            X509v3 Authority Key Identifier:
                keyid:C2:FA:70:94:B7:79:87:CD:DA:D3:ED:A5:0C:3F:50:6A:36:BF:8E:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6WjFVXhb8Fug1HEnMxjo4KGLYTwL1hiVAqPMV8zH1Uqw/0/C2FA7094B77987CDDAD3EDA50C3F506A36BF8E7B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C2FA7094B77987CDDAD3EDA50C3F506A36BF8E7B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6WjFVXhb8Fug1HEnMxjo4KGLYTwL1hiVAqPMV8zH1Uqw/0/3137372e38362e3135332e302f32342d3234203d3e203532353732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.86.153.0/24

    Signature Algorithm: sha256WithRSAEncryption
         66:a7:9e:3c:94:0f:32:94:7e:d3:86:51:e0:cd:17:26:55:55:
         07:fd:92:7b:9c:2f:2e:4d:bf:d6:61:89:43:eb:89:a6:9d:74:
         b7:29:a8:97:23:8a:a1:40:45:5b:37:d4:c0:12:7c:13:de:8c:
         51:5d:e1:ca:b7:44:7b:1a:ae:9b:4c:4a:95:3e:cd:28:4e:5e:
         18:86:44:0c:72:e0:9f:8a:4f:a2:c8:e1:31:d3:e0:b4:d2:05:
         d7:47:2a:9c:b2:d9:20:3e:8a:f6:76:c9:6e:a0:b5:8d:83:aa:
         7c:83:19:92:6b:5a:3e:b5:82:d2:31:c8:32:be:a0:25:26:81:
         ee:fc:f9:5c:f1:9e:93:01:30:06:c5:4c:b3:24:6d:1b:a6:b7:
         ce:fe:95:36:04:b3:07:51:c3:e5:07:1d:81:ff:a8:cd:ee:e3:
         6e:82:e2:34:34:64:1d:59:77:00:e7:58:8e:5f:fd:25:07:43:
         a8:f4:fa:fb:46:df:11:77:56:df:f3:ef:7f:77:54:e6:ca:83:
         df:d8:c7:f7:bb:15:2a:51:b1:4b:26:fa:95:37:34:40:9d:3d:
         a3:57:4e:12:bc:f5:98:26:c5:81:25:00:58:47:bb:ab:b8:00:
         bf:e5:1d:e4:1a:10:b3:1d:73:1b:a8:1e:fb:4c:ea:54:36:1f:
         79:4a:3c:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:43:22 2025 by rpki-client