Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7J3LUsDxVKTEfgy8mcCHesqrNxLskkKzqhEpgQCV6pZs/1/3137372e3130352e3233362e302f32322d3232203d3e20323632333133.roa
File:                     3137372e3130352e3233362e302f32322d3232203d3e20323632333133.roa (raw, json)
Hash identifier:          2WuJ62P20QoP7GuMFb9Q36A/ScwM9FmmKz84qAFpuAk=
Subject key identifier:   5C:00:C3:6A:7E:C2:6D:1C:31:42:35:A9:59:1E:E1:23:00:F8:55:B3
Certificate issuer:       /CN=D04756CB00F9822A8A50C47FD94CEC5DF31DA94B
Certificate serial:       08C1E0948FF51B6CE005EBFCF2E2E9C45CB23154
Authority key identifier: D0:47:56:CB:00:F9:82:2A:8A:50:C4:7F:D9:4C:EC:5D:F3:1D:A9:4B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D04756CB00F9822A8A50C47FD94CEC5DF31DA94B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7J3LUsDxVKTEfgy8mcCHesqrNxLskkKzqhEpgQCV6pZs/1/3137372e3130352e3233362e302f32322d3232203d3e20323632333133.roa
Signing time:             Wed 05 Mar 2025 22:00:26 +0000
ROA not before:           Wed 05 Mar 2025 21:55:26 +0000
ROA not after:            Wed 04 Mar 2026 22:00:26 +0000
asID:                     262313
IP address blocks:        177.105.236.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:c1:e0:94:8f:f5:1b:6c:e0:05:eb:fc:f2:e2:e9:c4:5c:b2:31:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D04756CB00F9822A8A50C47FD94CEC5DF31DA94B
        Validity
            Not Before: Mar  5 21:55:26 2025 GMT
            Not After : Mar  4 22:00:26 2026 GMT
        Subject: CN=5C00C36A7EC26D1C314235A9591EE12300F855B3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:17:b9:47:d0:97:70:1e:02:e4:5f:5a:f1:b3:
                    95:58:7e:2d:91:01:54:ac:e8:5d:bc:92:78:31:96:
                    9f:46:15:01:a5:14:56:41:56:fd:13:20:a8:02:39:
                    5a:f4:a5:ba:54:67:5e:34:3f:f4:64:2a:e3:05:6b:
                    b1:c1:a9:eb:e2:eb:15:99:3c:52:c9:a4:71:48:91:
                    ae:a2:7c:55:93:74:16:1a:42:52:ef:40:7f:bb:0d:
                    52:b3:8d:69:17:d3:c1:e6:e3:4d:11:83:b4:2b:e7:
                    87:0a:86:43:3a:f6:e0:e1:0c:73:4f:0c:9d:26:4d:
                    8b:72:e5:bd:d3:ce:38:3f:07:6b:9f:d7:f4:4d:54:
                    bf:cf:ed:ee:a4:27:3b:50:14:61:78:d4:87:cf:16:
                    0e:64:8c:0e:37:f3:a1:11:51:48:00:dc:75:9d:fe:
                    41:2a:2c:e3:ca:fe:d6:38:80:a4:29:38:d5:dc:af:
                    b7:ec:c1:29:8e:61:99:bb:40:9a:87:15:07:eb:e6:
                    26:1d:a0:42:e4:15:ef:f0:9c:73:72:f6:f0:9d:60:
                    20:40:03:df:30:b8:14:ad:6e:0f:43:78:d5:34:78:
                    cf:e6:b3:7f:96:87:b5:55:a5:a8:87:14:e4:43:e0:
                    4e:ea:ef:eb:4a:0d:5c:90:f9:8a:46:19:4e:6a:74:
                    ab:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:00:C3:6A:7E:C2:6D:1C:31:42:35:A9:59:1E:E1:23:00:F8:55:B3
            X509v3 Authority Key Identifier:
                keyid:D0:47:56:CB:00:F9:82:2A:8A:50:C4:7F:D9:4C:EC:5D:F3:1D:A9:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7J3LUsDxVKTEfgy8mcCHesqrNxLskkKzqhEpgQCV6pZs/1/D04756CB00F9822A8A50C47FD94CEC5DF31DA94B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D04756CB00F9822A8A50C47FD94CEC5DF31DA94B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7J3LUsDxVKTEfgy8mcCHesqrNxLskkKzqhEpgQCV6pZs/1/3137372e3130352e3233362e302f32322d3232203d3e20323632333133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.105.236.0/22

    Signature Algorithm: sha256WithRSAEncryption
         47:41:a3:b9:4e:1b:34:83:7c:c8:ab:f7:1c:bb:58:25:47:95:
         d0:69:4f:f6:c1:7f:36:d9:e2:e9:2b:60:37:2b:6d:c7:a3:f3:
         94:6b:d4:fb:83:73:39:08:b8:51:9f:60:f4:52:a8:9a:ee:88:
         bd:77:fd:17:a3:a9:54:4f:d8:d1:2f:b9:49:28:06:25:73:dd:
         c2:11:a4:fd:18:f0:d4:7b:b5:33:5c:e1:93:2d:58:cf:2e:70:
         5b:2c:cc:ed:5f:68:e7:02:b6:42:8c:fc:f2:26:ec:c0:7f:21:
         0f:d5:07:f6:22:95:af:ec:9f:d9:9b:1d:56:0c:93:fc:53:3f:
         0f:78:fd:61:0a:97:46:32:ea:56:60:74:0f:c9:d3:ca:70:21:
         2a:ed:4f:83:2e:d6:b7:83:f0:3e:01:14:3e:c0:80:87:65:16:
         19:12:3c:50:f6:40:d0:fe:53:02:d8:9f:78:65:13:3e:63:01:
         98:6e:5e:30:ba:47:42:99:03:c2:40:7b:6b:e4:7d:9d:a3:3d:
         f5:69:ff:5f:22:3b:9c:c0:10:58:29:0f:cb:86:9b:1f:dd:9f:
         8a:8c:07:ec:53:33:52:19:d2:fc:96:ad:02:93:44:12:14:ab:
         51:de:ac:5f:12:05:6e:05:d7:1d:07:40:74:9d:46:15:6d:11:
         22:0f:28:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:20:03 2025 by rpki-client