Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/0/3137372e33362e3136302e302f32302d3234203d3e203238363639.roa
File:                     3137372e33362e3136302e302f32302d3234203d3e203238363639.roa (raw, json)
Hash identifier:          9LoFNaBEvnnUd8Eh6/oLjufxFeoT4eOuS6WYa+8E/Us=
Subject key identifier:   28:B5:F3:4E:95:C7:5D:AF:8F:E0:05:33:88:8A:B3:C0:C2:66:DF:8C
Certificate issuer:       /CN=36DF3C54C34BC0040ABBBE412EC6948C87D1622A
Certificate serial:       0CC5AB9E95EEAA3F3B678318403980046BF5DA0E
Authority key identifier: 36:DF:3C:54:C3:4B:C0:04:0A:BB:BE:41:2E:C6:94:8C:87:D1:62:2A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/36DF3C54C34BC0040ABBBE412EC6948C87D1622A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/0/3137372e33362e3136302e302f32302d3234203d3e203238363639.roa
Signing time:             Fri 03 Nov 2023 13:04:50 +0000
ROA not before:           Fri 03 Nov 2023 12:59:50 +0000
ROA not after:            Fri 01 Nov 2024 13:04:50 +0000
asID:                     28669
IP address blocks:        177.36.160.0/20 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:c5:ab:9e:95:ee:aa:3f:3b:67:83:18:40:39:80:04:6b:f5:da:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=36DF3C54C34BC0040ABBBE412EC6948C87D1622A
        Validity
            Not Before: Nov  3 12:59:50 2023 GMT
            Not After : Nov  1 13:04:50 2024 GMT
        Subject: CN=28B5F34E95C75DAF8FE00533888AB3C0C266DF8C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:78:35:31:bf:f6:99:9a:27:9d:3e:d4:fd:e4:
                    bf:1a:ba:0f:03:5b:17:d3:54:57:f3:6f:d6:c9:9d:
                    b4:fe:62:f8:1c:9c:02:61:55:57:14:18:4a:1f:fa:
                    30:e2:5c:10:5e:a3:67:c0:4e:62:e8:d2:64:5e:78:
                    88:20:56:bc:f2:18:ae:33:11:c5:01:ef:ec:f8:45:
                    f2:c3:f3:64:51:fa:9c:1b:29:37:1e:84:17:55:18:
                    2f:5d:b3:87:cd:96:7b:5c:c3:6c:91:51:db:07:eb:
                    a2:f5:d0:3e:7e:64:47:d5:24:ef:5e:be:f4:90:2c:
                    55:7c:ef:cd:a7:66:59:98:5d:f3:a2:89:0f:f3:f1:
                    68:fd:1f:fa:c0:96:4f:a5:3c:33:7b:23:b7:b4:af:
                    26:72:08:37:cb:f0:85:cb:63:62:0c:61:f7:86:75:
                    c4:91:25:15:e4:bb:0a:8d:5e:27:cc:0b:76:da:fa:
                    db:53:34:17:db:0d:c6:76:f7:75:67:ef:50:7e:a4:
                    be:eb:90:44:8c:36:03:55:a1:21:bc:2d:34:4b:4b:
                    16:da:a4:87:3b:c4:14:3e:09:dd:bd:67:18:9a:ca:
                    85:a4:15:8f:af:8f:97:9a:e6:32:5b:1e:4f:f3:49:
                    62:61:78:0d:81:8d:ee:eb:1c:1f:fd:c2:7f:5b:b5:
                    8f:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:B5:F3:4E:95:C7:5D:AF:8F:E0:05:33:88:8A:B3:C0:C2:66:DF:8C
            X509v3 Authority Key Identifier:
                keyid:36:DF:3C:54:C3:4B:C0:04:0A:BB:BE:41:2E:C6:94:8C:87:D1:62:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/0/36DF3C54C34BC0040ABBBE412EC6948C87D1622A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/36DF3C54C34BC0040ABBBE412EC6948C87D1622A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/0/3137372e33362e3136302e302f32302d3234203d3e203238363639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.36.160.0/20

    Signature Algorithm: sha256WithRSAEncryption
         71:61:69:da:4d:35:20:0f:a9:7e:17:dc:85:c4:86:88:77:8d:
         4d:c9:a9:9e:52:ec:03:0b:39:4f:5d:b3:4d:11:0c:a9:2f:9d:
         64:e8:24:29:94:04:2f:64:ce:e8:09:85:d9:ca:80:f4:6e:18:
         59:47:5f:da:c9:a4:0e:e0:fb:9f:84:ad:24:ef:a6:05:c4:d7:
         e5:90:ef:65:01:df:f5:eb:14:3c:5d:c1:bd:c1:6f:07:28:7c:
         36:65:72:76:31:e2:af:19:f8:61:cb:15:26:d0:96:b2:56:a3:
         7d:8e:bd:9b:a9:16:63:a9:37:aa:ac:a8:cd:3e:02:70:65:c3:
         09:b0:9e:2f:e8:84:d9:07:f4:98:57:a1:85:fe:f5:86:a7:62:
         b9:45:49:bf:d1:1b:74:fb:34:07:f7:ad:f9:4f:7c:40:9b:e5:
         28:64:60:8a:24:f9:76:11:03:a9:55:13:15:d3:90:ea:6e:55:
         51:13:e7:16:f0:b1:6c:fa:08:97:c0:84:cb:90:15:ca:6d:df:
         18:0d:ec:b0:9f:3e:a9:17:d4:31:13:8a:b8:ff:1c:e3:39:51:
         26:58:d7:d0:d4:61:a8:61:90:fd:13:78:c6:8c:73:f3:53:bf:
         8e:0c:15:49:30:30:89:f4:0d:ab:24:b2:6e:45:e7:57:7a:40:
         5b:ed:63:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 12:04:14 2025 by rpki-client