Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AGS4xfD5qP5JBXbKKTkeJZp9V4NDJuKTr53B8dJYjtA/0/3137372e37352e34392e302f32342d3234203d3e20323632353838.roa
File:                     3137372e37352e34392e302f32342d3234203d3e20323632353838.roa (raw, json)
Hash identifier:          ElI8EGj6Z0sxasuT5AVNlOIHvB4vCVXbLI2OWWQlUEc=
Subject key identifier:   79:43:39:18:12:33:86:36:C9:4A:B2:61:CE:D2:75:B3:F5:41:D8:21
Certificate issuer:       /CN=5CC02E8E2938AFADEA467289D4C793583546A57D
Certificate serial:       59500791532560F7D6398181D4D7370208329556
Authority key identifier: 5C:C0:2E:8E:29:38:AF:AD:EA:46:72:89:D4:C7:93:58:35:46:A5:7D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5CC02E8E2938AFADEA467289D4C793583546A57D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AGS4xfD5qP5JBXbKKTkeJZp9V4NDJuKTr53B8dJYjtA/0/3137372e37352e34392e302f32342d3234203d3e20323632353838.roa
Signing time:             Sat 09 Apr 2022 14:19:00 +0000
ROA not before:           Sat 09 Apr 2022 14:14:00 +0000
ROA not after:            Sat 08 Apr 2023 14:19:00 +0000
asID:                     262588
IP address blocks:        177.75.49.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:50:07:91:53:25:60:f7:d6:39:81:81:d4:d7:37:02:08:32:95:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5CC02E8E2938AFADEA467289D4C793583546A57D
        Validity
            Not Before: Apr  9 14:14:00 2022 GMT
            Not After : Apr  8 14:19:00 2023 GMT
        Subject: CN=7943391812338636C94AB261CED275B3F541D821
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:c7:29:2c:69:03:9a:a6:9d:7b:fa:19:df:35:
                    47:76:01:f7:b5:23:72:e9:df:d0:cf:db:3d:dd:fd:
                    86:82:18:7f:65:4f:8c:82:4c:f5:8e:1b:bf:77:51:
                    8e:9b:9f:f0:df:9d:c5:5c:f4:11:cb:d3:24:73:d0:
                    ff:55:68:4e:84:24:c2:e2:a7:3c:d4:e4:70:42:d6:
                    4b:62:7b:7c:14:d0:ac:83:18:c4:66:20:75:f6:24:
                    5a:14:0e:58:84:3c:0e:11:42:d1:f2:7a:39:21:9a:
                    06:60:3a:4a:2d:b9:5e:0e:c9:fa:df:04:d6:a5:cd:
                    00:6c:14:22:d8:41:5f:4b:75:f6:bc:e0:a7:92:c9:
                    d4:c3:4b:4c:fa:a1:c4:42:ea:98:e3:a1:3b:2a:3b:
                    2f:6f:0f:6f:c7:55:f5:e1:81:f7:f4:a8:60:c9:44:
                    00:c5:11:10:c2:aa:67:a7:86:02:a1:59:0e:32:db:
                    3d:96:0c:a7:93:e6:1b:65:0a:0d:f2:a8:b9:8b:b1:
                    c6:a8:b1:d6:d1:0b:84:38:4a:31:f2:76:70:ef:86:
                    f3:ab:a5:27:43:cf:f0:a7:53:67:9e:4f:4c:5c:f1:
                    52:b7:aa:57:10:a9:9c:ec:66:5d:08:df:2b:e7:09:
                    2e:76:fd:04:4d:eb:a3:df:18:51:c0:34:d6:d7:65:
                    46:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:43:39:18:12:33:86:36:C9:4A:B2:61:CE:D2:75:B3:F5:41:D8:21
            X509v3 Authority Key Identifier:
                keyid:5C:C0:2E:8E:29:38:AF:AD:EA:46:72:89:D4:C7:93:58:35:46:A5:7D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AGS4xfD5qP5JBXbKKTkeJZp9V4NDJuKTr53B8dJYjtA/0/5CC02E8E2938AFADEA467289D4C793583546A57D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5CC02E8E2938AFADEA467289D4C793583546A57D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AGS4xfD5qP5JBXbKKTkeJZp9V4NDJuKTr53B8dJYjtA/0/3137372e37352e34392e302f32342d3234203d3e20323632353838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.75.49.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2f:e9:c3:d1:80:fc:97:e1:30:d3:3a:ba:01:1a:f5:8c:d1:de:
         d3:4a:24:b8:d1:d7:d0:ac:d4:25:c2:64:a4:11:6a:c4:82:f8:
         36:67:31:b1:23:45:15:99:66:da:23:f4:ae:6b:90:34:be:92:
         b5:95:73:49:37:21:c8:ee:2f:6d:a0:af:3e:71:49:53:36:2a:
         09:00:a3:41:53:a8:6b:72:c1:21:52:14:fc:be:06:89:21:7e:
         41:80:c0:bd:3c:4f:51:ac:45:4b:4b:cd:d9:d4:2d:83:38:b7:
         7e:01:74:cd:2e:0c:46:8c:54:57:90:c8:e1:2b:d5:66:0c:ba:
         fa:b5:93:e3:e3:e9:e0:84:2b:b7:49:4c:37:24:9a:a2:a9:63:
         c2:62:aa:26:e4:05:bf:a3:10:21:ef:75:cf:90:f5:db:3e:65:
         ef:da:d3:3d:d6:0c:d7:1a:eb:76:a5:bf:70:4c:48:d8:14:c2:
         a6:ef:85:10:c2:fe:1b:1d:83:80:92:a3:5f:35:b6:97:af:53:
         a7:43:e9:a7:45:2e:fd:01:a0:1f:97:1b:d2:24:7b:77:f1:2f:
         3a:88:fb:43:37:51:e9:4a:d1:a9:12:d3:52:a4:73:17:88:2a:
         da:69:0d:0b:bb:98:49:6c:5c:90:53:78:26:7e:f6:c6:ec:d1:
         e4:77:00:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 02:55:39 2025 by rpki-client