Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6gQzrWBgd6XKxxsYda2xQdTjRD7wy12EmHzHcXtv7B9g/0/3137372e3135352e3138362e302f32342d3234203d3e20323634313030.roa
File:                     3137372e3135352e3138362e302f32342d3234203d3e20323634313030.roa (raw, json)
Hash identifier:          ezoVwxWlSEUj0tEfIm/dKh97e63F/C6RzPh8LCIbVKo=
Subject key identifier:   AE:3F:39:A3:8C:4C:17:9D:D9:38:BD:81:99:BC:77:13:0F:F0:F1:13
Certificate issuer:       /CN=9C69433B8D6274966EFAB9F616C73F596D0026FA
Certificate serial:       5D0ACD77CF7357C571CA0CB4D1914671E5F2723C
Authority key identifier: 9C:69:43:3B:8D:62:74:96:6E:FA:B9:F6:16:C7:3F:59:6D:00:26:FA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9C69433B8D6274966EFAB9F616C73F596D0026FA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6gQzrWBgd6XKxxsYda2xQdTjRD7wy12EmHzHcXtv7B9g/0/3137372e3135352e3138362e302f32342d3234203d3e20323634313030.roa
Signing time:             Mon 02 Dec 2024 12:08:24 +0000
ROA not before:           Mon 02 Dec 2024 12:03:24 +0000
ROA not after:            Mon 01 Dec 2025 12:08:24 +0000
asID:                     264100
IP address blocks:        177.155.186.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:0a:cd:77:cf:73:57:c5:71:ca:0c:b4:d1:91:46:71:e5:f2:72:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9C69433B8D6274966EFAB9F616C73F596D0026FA
        Validity
            Not Before: Dec  2 12:03:24 2024 GMT
            Not After : Dec  1 12:08:24 2025 GMT
        Subject: CN=AE3F39A38C4C179DD938BD8199BC77130FF0F113
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:3c:74:29:34:7c:e0:50:84:29:d9:dc:93:37:
                    ee:42:43:38:1d:ad:aa:1e:67:d6:21:53:1c:3a:f6:
                    e4:7f:00:34:b5:b8:3b:ca:e3:8d:a4:39:c9:d0:46:
                    7b:64:e0:5d:6e:98:37:5c:eb:44:59:4c:5d:9f:d4:
                    1a:6e:cc:ad:bc:ff:e8:b2:68:5c:b3:c0:36:6e:65:
                    f6:48:a8:3b:5d:45:e5:cf:a3:9b:d1:3e:af:23:1f:
                    b7:b8:09:53:9e:e2:69:c1:61:55:a0:3a:c7:0f:cd:
                    0c:70:b1:25:52:c8:4f:ab:90:38:25:56:d8:74:d6:
                    72:11:55:a7:12:5d:44:d5:a6:ed:fa:cf:7f:4b:a3:
                    0c:44:62:44:66:ef:2a:1d:1a:fb:ed:61:3a:d9:e1:
                    a0:5c:4d:fe:33:ea:68:dc:c0:05:a5:74:3c:a4:17:
                    51:d3:ef:73:35:48:eb:d7:5e:fd:8d:ed:18:38:d3:
                    a4:9f:3b:9a:7c:a2:42:03:b0:73:aa:7d:15:f7:12:
                    64:30:50:08:11:1d:74:e2:00:02:8d:54:e0:45:77:
                    9f:61:6e:79:b1:97:50:bb:47:be:16:10:37:66:1c:
                    5f:79:31:b8:fa:f2:80:39:44:64:4a:90:7e:4f:13:
                    1a:ed:2d:48:44:65:3b:ae:a6:58:ba:23:ee:d7:7d:
                    d3:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:3F:39:A3:8C:4C:17:9D:D9:38:BD:81:99:BC:77:13:0F:F0:F1:13
            X509v3 Authority Key Identifier:
                keyid:9C:69:43:3B:8D:62:74:96:6E:FA:B9:F6:16:C7:3F:59:6D:00:26:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6gQzrWBgd6XKxxsYda2xQdTjRD7wy12EmHzHcXtv7B9g/0/9C69433B8D6274966EFAB9F616C73F596D0026FA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9C69433B8D6274966EFAB9F616C73F596D0026FA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6gQzrWBgd6XKxxsYda2xQdTjRD7wy12EmHzHcXtv7B9g/0/3137372e3135352e3138362e302f32342d3234203d3e20323634313030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.155.186.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d8:c1:e9:91:96:06:07:c6:8e:98:97:c9:78:ad:57:bd:a7:54:
         30:e9:29:ef:7e:fd:11:b9:b4:ea:43:20:38:0e:80:25:14:52:
         e6:bf:21:a4:22:8c:3c:6a:fe:7f:d5:02:2d:dd:05:02:b2:94:
         9c:11:58:7d:af:fd:f9:5a:29:c7:03:80:68:56:46:15:19:04:
         59:8e:de:76:e9:b0:9b:98:6c:86:c1:07:c0:d2:97:42:23:f6:
         b5:1b:d3:2e:87:44:02:35:56:59:14:dd:de:7b:54:a1:96:29:
         a6:cb:c6:c6:c6:0f:c5:a1:85:34:ab:1e:47:50:01:b8:60:b0:
         57:59:4a:83:c3:0d:b8:d6:1b:49:b7:80:b5:0d:96:42:fc:43:
         e8:88:62:3a:35:ba:6b:7f:d6:15:6b:20:98:e7:a0:6f:15:5d:
         51:87:4c:a7:9c:bd:d8:3b:e4:76:94:7b:21:b2:68:ec:64:92:
         d6:24:25:1c:a4:c5:d2:75:50:ce:a3:29:78:2e:2c:2c:1a:52:
         5d:d6:d8:b1:42:f0:4d:8f:26:dd:aa:8b:97:e1:6c:2f:32:32:
         67:cb:7d:a1:8d:dc:cf:ca:2a:87:48:81:39:63:2d:8f:02:58:
         b5:9c:d2:b9:ce:55:78:f8:3f:dd:3e:2b:f3:eb:dd:05:07:00:
         03:f4:00:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 15:27:58 2025 by rpki-client