Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6gQzrWBgd6XKxxsYda2xQdTjRD7wy12EmHzHcXtv7B9g/0/3137372e3135352e3138312e302f32342d3234203d3e20323634313030.roa
File:                     3137372e3135352e3138312e302f32342d3234203d3e20323634313030.roa (raw, json)
Hash identifier:          r41SJ0shV5yc1SNfVhtDLvybVscgKMRVxo9tOHLIsvQ=
Subject key identifier:   85:B9:97:49:1B:6B:65:9C:06:E6:B6:A7:10:57:54:DB:37:F8:51:71
Certificate issuer:       /CN=9C69433B8D6274966EFAB9F616C73F596D0026FA
Certificate serial:       500E3E892F84794080D30C36DD36B0B82D9EB97A
Authority key identifier: 9C:69:43:3B:8D:62:74:96:6E:FA:B9:F6:16:C7:3F:59:6D:00:26:FA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9C69433B8D6274966EFAB9F616C73F596D0026FA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6gQzrWBgd6XKxxsYda2xQdTjRD7wy12EmHzHcXtv7B9g/0/3137372e3135352e3138312e302f32342d3234203d3e20323634313030.roa
Signing time:             Mon 02 Dec 2024 12:08:47 +0000
ROA not before:           Mon 02 Dec 2024 12:03:47 +0000
ROA not after:            Mon 01 Dec 2025 12:08:47 +0000
asID:                     264100
IP address blocks:        177.155.181.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:0e:3e:89:2f:84:79:40:80:d3:0c:36:dd:36:b0:b8:2d:9e:b9:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9C69433B8D6274966EFAB9F616C73F596D0026FA
        Validity
            Not Before: Dec  2 12:03:47 2024 GMT
            Not After : Dec  1 12:08:47 2025 GMT
        Subject: CN=85B997491B6B659C06E6B6A7105754DB37F85171
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:5a:9b:70:0d:d1:02:b9:c9:7a:e0:d7:61:b3:
                    3d:ab:45:9b:2c:85:4a:d4:3c:79:7b:8a:be:a9:4f:
                    7d:9a:fc:0e:9d:1a:b7:cb:3d:ac:c7:b2:84:73:ee:
                    76:67:3f:ab:b2:a9:93:3c:51:59:4a:33:b5:15:09:
                    0b:29:05:1d:12:e8:e1:5c:0d:12:7d:3c:d8:c4:6b:
                    3e:f3:72:d7:ce:f5:15:65:f0:fd:db:57:17:d8:48:
                    24:2d:70:e1:9f:6b:28:ff:78:2c:38:e4:1c:5e:ee:
                    62:e8:f2:51:8a:87:73:b6:e2:4e:84:2c:aa:20:3f:
                    b9:e1:51:d6:1c:33:2e:01:67:c5:ca:f2:4b:50:b0:
                    c2:87:ee:46:bc:ed:45:78:29:5f:79:af:bb:a6:a7:
                    00:06:4f:62:f5:24:7b:23:71:3b:80:c3:87:d3:ed:
                    6c:ad:8e:ca:29:ea:a3:b8:2d:b4:b0:29:0f:d6:7d:
                    9f:8b:cd:a3:06:92:b0:8b:42:34:2f:4e:e8:f1:0e:
                    f1:36:a8:36:2d:d5:df:a0:e8:8c:c8:7c:07:81:5a:
                    5f:09:22:a6:8a:81:1d:31:e6:71:5b:57:13:39:29:
                    91:ec:a6:32:f8:04:a8:e1:11:12:32:37:1f:53:11:
                    5c:ba:a8:22:cb:3a:13:68:62:aa:ba:9e:b3:bf:82:
                    f3:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:B9:97:49:1B:6B:65:9C:06:E6:B6:A7:10:57:54:DB:37:F8:51:71
            X509v3 Authority Key Identifier:
                keyid:9C:69:43:3B:8D:62:74:96:6E:FA:B9:F6:16:C7:3F:59:6D:00:26:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6gQzrWBgd6XKxxsYda2xQdTjRD7wy12EmHzHcXtv7B9g/0/9C69433B8D6274966EFAB9F616C73F596D0026FA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9C69433B8D6274966EFAB9F616C73F596D0026FA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6gQzrWBgd6XKxxsYda2xQdTjRD7wy12EmHzHcXtv7B9g/0/3137372e3135352e3138312e302f32342d3234203d3e20323634313030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.155.181.0/24

    Signature Algorithm: sha256WithRSAEncryption
         92:6f:11:7d:a7:be:9f:11:da:bf:b3:89:5e:f1:20:17:e2:42:
         57:a7:fc:b0:f6:2b:02:5e:55:d2:0f:4f:76:0c:80:29:fa:e2:
         2a:90:a6:b8:59:1e:13:de:7c:32:f8:21:7c:9a:b3:27:f4:5b:
         fe:2e:9b:7a:71:be:34:11:0b:90:74:2c:ad:a2:9a:e2:15:c5:
         9a:ae:92:4f:11:48:46:3e:7f:b4:fa:02:6f:78:dd:ce:d8:78:
         2c:01:81:c2:a6:cc:ee:9a:18:6e:d9:da:30:24:77:d8:05:23:
         58:7f:5c:3c:2b:c0:e1:db:06:2a:93:19:16:22:29:43:e8:c5:
         1a:87:16:08:ab:80:0c:22:b4:13:2a:0d:a2:b5:ee:a3:cc:80:
         d4:ad:d5:7f:2f:c4:e5:99:9e:bf:7f:18:20:aa:f7:0d:29:b5:
         35:35:e4:d6:fd:3e:cb:ba:d9:a0:07:72:de:24:93:7d:9d:f7:
         3c:01:d1:63:5b:e4:2f:f4:fb:43:1b:b3:0d:6a:6e:e2:39:95:
         80:f0:00:2f:a1:ae:e1:c5:f7:f9:f1:1f:26:4f:cd:72:57:6d:
         cf:1a:9e:10:24:19:a7:60:cf:f7:dd:d2:7c:e4:73:fa:b2:b3:
         b0:33:21:d5:23:69:23:a3:03:a4:2e:37:ec:f3:3f:db:d4:0b:
         7c:6b:78:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 15:22:46 2025 by rpki-client