Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6WjFVXhb8Fug1HEnMxjo4KGLYTwL1hiVAqPMV8zH1Uqw/0/3137372e38362e3135352e302f32342d3234203d3e203532353732.roa
File:                     3137372e38362e3135352e302f32342d3234203d3e203532353732.roa (raw, json)
Hash identifier:          +fdJUkyk9uTvMJgLwErX9ET3w1tUEQIi4XnY9xFTcbA=
Subject key identifier:   E6:B1:42:3F:FE:2B:32:20:7A:76:1D:FD:E2:63:4C:37:15:9D:AE:A9
Certificate issuer:       /CN=C2FA7094B77987CDDAD3EDA50C3F506A36BF8E7B
Certificate serial:       737A711708253B972ED6FADD2BD3B6FAF0C49EEC
Authority key identifier: C2:FA:70:94:B7:79:87:CD:DA:D3:ED:A5:0C:3F:50:6A:36:BF:8E:7B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C2FA7094B77987CDDAD3EDA50C3F506A36BF8E7B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6WjFVXhb8Fug1HEnMxjo4KGLYTwL1hiVAqPMV8zH1Uqw/0/3137372e38362e3135352e302f32342d3234203d3e203532353732.roa
Signing time:             Tue 08 Mar 2022 13:55:31 +0000
ROA not before:           Tue 08 Mar 2022 13:50:31 +0000
ROA not after:            Tue 07 Mar 2023 13:55:31 +0000
asID:                     52572
IP address blocks:        177.86.155.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:7a:71:17:08:25:3b:97:2e:d6:fa:dd:2b:d3:b6:fa:f0:c4:9e:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C2FA7094B77987CDDAD3EDA50C3F506A36BF8E7B
        Validity
            Not Before: Mar  8 13:50:31 2022 GMT
            Not After : Mar  7 13:55:31 2023 GMT
        Subject: CN=3082010A0282010100C5663AEE43E6F1E61CCABF0CB7A994E81049D17517D07137F382F461633DA9B86D3947149B48FE189E95EAD3D8ACD793A62F37299F0E4B82BC63DBD89A9D1CD38173E9B3A0546AE33F90C38E2470D803D301CC723DC84F99E82CF3E6BF0A3765ADD31C78DF7E6778BD860EBBAE0A0943F967AEB50EE6CCDCD4045E1ECD21EA86B185FF264D2AF8F28ADBB5812880C683F3414B3943F771F23B176E431FF2B53C5CD786A6E7FBC1CFA86FB2FD1898F0F0BA1F6761668F6E53391D487FDE1338334D91FE57BCCBE4F649D751BA868FA124E1193C534B2BA08DC7A72A1851EA277ACEBB94DD42BD60A7B0982CC5AF7F60AFA14CBC1DE9ED0DF344A3A160D04BFCFB0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:66:3a:ee:43:e6:f1:e6:1c:ca:bf:0c:b7:a9:
                    94:e8:10:49:d1:75:17:d0:71:37:f3:82:f4:61:63:
                    3d:a9:b8:6d:39:47:14:9b:48:fe:18:9e:95:ea:d3:
                    d8:ac:d7:93:a6:2f:37:29:9f:0e:4b:82:bc:63:db:
                    d8:9a:9d:1c:d3:81:73:e9:b3:a0:54:6a:e3:3f:90:
                    c3:8e:24:70:d8:03:d3:01:cc:72:3d:c8:4f:99:e8:
                    2c:f3:e6:bf:0a:37:65:ad:d3:1c:78:df:7e:67:78:
                    bd:86:0e:bb:ae:0a:09:43:f9:67:ae:b5:0e:e6:cc:
                    dc:d4:04:5e:1e:cd:21:ea:86:b1:85:ff:26:4d:2a:
                    f8:f2:8a:db:b5:81:28:80:c6:83:f3:41:4b:39:43:
                    f7:71:f2:3b:17:6e:43:1f:f2:b5:3c:5c:d7:86:a6:
                    e7:fb:c1:cf:a8:6f:b2:fd:18:98:f0:f0:ba:1f:67:
                    61:66:8f:6e:53:39:1d:48:7f:de:13:38:33:4d:91:
                    fe:57:bc:cb:e4:f6:49:d7:51:ba:86:8f:a1:24:e1:
                    19:3c:53:4b:2b:a0:8d:c7:a7:2a:18:51:ea:27:7a:
                    ce:bb:94:dd:42:bd:60:a7:b0:98:2c:c5:af:7f:60:
                    af:a1:4c:bc:1d:e9:ed:0d:f3:44:a3:a1:60:d0:4b:
                    fc:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:B1:42:3F:FE:2B:32:20:7A:76:1D:FD:E2:63:4C:37:15:9D:AE:A9
            X509v3 Authority Key Identifier:
                keyid:C2:FA:70:94:B7:79:87:CD:DA:D3:ED:A5:0C:3F:50:6A:36:BF:8E:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6WjFVXhb8Fug1HEnMxjo4KGLYTwL1hiVAqPMV8zH1Uqw/0/C2FA7094B77987CDDAD3EDA50C3F506A36BF8E7B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C2FA7094B77987CDDAD3EDA50C3F506A36BF8E7B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6WjFVXhb8Fug1HEnMxjo4KGLYTwL1hiVAqPMV8zH1Uqw/0/3137372e38362e3135352e302f32342d3234203d3e203532353732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.86.155.0/24

    Signature Algorithm: sha256WithRSAEncryption
         36:06:1a:21:32:3f:7d:1e:d6:ed:41:82:6c:56:41:a3:69:ff:
         c8:99:70:f2:62:09:d9:09:c8:16:81:07:78:1f:8c:9f:20:b6:
         72:ab:05:6f:1c:fe:ef:42:aa:1e:e8:d0:31:21:cb:a8:da:73:
         18:d3:11:23:45:7c:7b:e8:f1:9b:0d:89:d1:1d:b0:ad:e8:67:
         1c:b2:73:7a:00:97:23:ef:53:03:14:20:ac:04:23:e1:a0:32:
         48:f2:0f:43:bc:f6:76:ec:cc:51:db:a1:36:db:3a:69:a9:2f:
         bc:a2:27:55:25:60:63:14:28:1e:70:18:3d:00:b4:22:a7:37:
         d6:bf:4b:d3:b2:e3:03:5c:0a:72:42:f7:ba:f6:ac:0c:17:89:
         85:04:6b:2b:5d:3d:04:e3:6d:1f:bf:8b:d6:47:f8:82:47:39:
         fc:54:33:51:42:9c:ff:e8:d6:21:ad:83:39:26:dc:87:1f:80:
         ee:dd:4e:c6:54:f5:ad:4b:6e:e2:96:d8:6a:93:8c:b9:34:75:
         c6:cf:2c:73:53:20:24:b3:a5:5e:63:20:df:75:45:c8:a1:f7:
         ba:a3:d4:85:7d:83:93:b6:50:b2:76:19:9e:d3:bd:80:f1:cd:
         9a:b9:b7:87:d8:8c:3f:98:ef:f3:4d:3e:4b:99:58:65:ae:e4:
         15:84:7a:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 01:33:36 2025 by rpki-client