Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/0/3137372e3133372e36342e302f32302d3234203d3e203238363639.roa
File:                     3137372e3133372e36342e302f32302d3234203d3e203238363639.roa (raw, json)
Hash identifier:          rcIYjKvL3HCVEPuKGr3YoECyUu28OctbL59AWq855O0=
Subject key identifier:   86:30:D5:01:67:A5:E0:5B:35:29:ED:B9:84:84:F8:FC:39:5F:B7:33
Certificate issuer:       /CN=36DF3C54C34BC0040ABBBE412EC6948C87D1622A
Certificate serial:       68D31D85B09CB45A80FF58B2B995A578284DED33
Authority key identifier: 36:DF:3C:54:C3:4B:C0:04:0A:BB:BE:41:2E:C6:94:8C:87:D1:62:2A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/36DF3C54C34BC0040ABBBE412EC6948C87D1622A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/0/3137372e3133372e36342e302f32302d3234203d3e203238363639.roa
Signing time:             Fri 03 Nov 2023 13:03:57 +0000
ROA not before:           Fri 03 Nov 2023 12:58:57 +0000
ROA not after:            Fri 01 Nov 2024 13:03:57 +0000
asID:                     28669
IP address blocks:        177.137.64.0/20 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:d3:1d:85:b0:9c:b4:5a:80:ff:58:b2:b9:95:a5:78:28:4d:ed:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=36DF3C54C34BC0040ABBBE412EC6948C87D1622A
        Validity
            Not Before: Nov  3 12:58:57 2023 GMT
            Not After : Nov  1 13:03:57 2024 GMT
        Subject: CN=8630D50167A5E05B3529EDB98484F8FC395FB733
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:c3:98:bf:82:9a:48:85:b8:bd:5d:ad:47:a5:
                    32:a9:2b:6d:46:d5:8b:1a:73:a9:73:f8:75:f2:8f:
                    9e:27:1c:ac:d6:fc:af:3d:83:5d:4d:70:04:3a:c4:
                    94:1a:f0:30:04:11:46:1b:84:de:04:9a:db:17:97:
                    f3:30:2a:9c:54:75:d8:0f:04:aa:21:48:54:01:b4:
                    90:f4:82:b5:79:5f:8e:78:5b:95:0c:08:19:85:ce:
                    62:c9:75:50:4c:28:75:31:31:f6:60:66:25:99:15:
                    42:5a:75:8a:4d:56:4e:22:9b:1b:96:6d:43:5c:e2:
                    ad:57:a2:98:0e:92:c3:2e:67:08:cc:d6:3a:8c:83:
                    c7:a1:52:1c:0d:b6:21:4f:60:77:64:ee:1a:83:e7:
                    96:04:a8:2c:6c:03:68:0a:13:a8:42:3a:d1:e7:45:
                    15:e6:a9:07:9b:34:03:c5:37:10:58:cb:1a:2d:d4:
                    c0:31:37:78:9f:ee:41:81:75:62:69:98:fc:91:5c:
                    2d:99:4e:93:f7:4f:56:57:98:2e:dd:24:1f:db:d8:
                    1c:fe:90:15:ef:e6:a8:b8:8e:17:19:72:3b:d5:96:
                    2d:75:03:eb:78:1c:ea:92:e9:dc:cf:9a:43:25:53:
                    e8:41:fe:81:cb:7b:37:fd:4a:ad:21:c1:71:20:af:
                    ce:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:30:D5:01:67:A5:E0:5B:35:29:ED:B9:84:84:F8:FC:39:5F:B7:33
            X509v3 Authority Key Identifier:
                keyid:36:DF:3C:54:C3:4B:C0:04:0A:BB:BE:41:2E:C6:94:8C:87:D1:62:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/0/36DF3C54C34BC0040ABBBE412EC6948C87D1622A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/36DF3C54C34BC0040ABBBE412EC6948C87D1622A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/0/3137372e3133372e36342e302f32302d3234203d3e203238363639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.137.64.0/20

    Signature Algorithm: sha256WithRSAEncryption
         97:ad:e6:58:4c:e8:8d:af:22:bd:81:17:9e:29:d5:27:1b:bf:
         94:f9:b5:33:3d:3f:26:db:fc:25:21:86:dd:7e:cc:47:a3:e5:
         ee:67:b2:f1:5b:87:15:2b:c5:ee:e6:1d:31:73:60:a4:7e:1a:
         60:56:1d:be:9b:39:05:b1:07:ad:43:6e:5e:04:fc:a4:bd:73:
         07:d4:d5:89:a7:7d:b2:29:90:fe:14:6b:02:9f:65:02:96:09:
         c2:41:ea:f1:e2:3f:6b:ac:3e:d4:18:9e:d5:b2:12:df:85:5c:
         27:a0:30:8a:14:15:cc:5b:50:b5:98:29:8f:bc:14:59:5c:a5:
         ca:fb:05:97:64:2f:26:ef:47:ff:11:7a:d0:cf:ad:b3:f9:95:
         88:76:c5:70:59:ff:7b:62:ac:91:24:04:0b:7f:98:ac:37:0f:
         d6:2c:1b:2d:ec:81:f9:c9:4f:5c:61:8c:0b:37:0b:5f:31:be:
         ce:98:d9:d3:68:f8:cc:05:e1:53:2a:2d:15:8e:a2:27:ec:95:
         d9:ec:84:38:9c:18:ec:71:50:9a:35:96:80:4b:ce:bc:68:bf:
         97:29:5b:59:c1:65:9b:f8:93:de:a3:5b:85:0a:c0:e3:86:d4:
         70:71:53:87:f2:5a:91:e2:bc:c0:2b:92:43:75:d1:13:8b:aa:
         7a:9f:3b:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 16:05:24 2025 by rpki-client