Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D6M24PGbfcRFKHJ5YxvqZQ7pUHFRpJPTmaYi219ez336/0/3137372e3133372e3139392e302f32342d3234203d3e203533303539.roa
File:                     3137372e3133372e3139392e302f32342d3234203d3e203533303539.roa (raw, json)
Hash identifier:          QYMuQqsDy1SRT+6AFWrV9yYrJhn+NAOuyq/9ywDkdnU=
Subject key identifier:   61:90:2B:B0:EA:C1:46:8B:3D:16:40:1C:3B:6E:9C:AA:31:7A:F7:AA
Certificate issuer:       /CN=F245A20DD754102EB4C5ADABE8FDF7C8F30AF3E8
Certificate serial:       4EF1B7C34E10C9000FF5F9374856A386FFF11B27
Authority key identifier: F2:45:A2:0D:D7:54:10:2E:B4:C5:AD:AB:E8:FD:F7:C8:F3:0A:F3:E8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F245A20DD754102EB4C5ADABE8FDF7C8F30AF3E8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D6M24PGbfcRFKHJ5YxvqZQ7pUHFRpJPTmaYi219ez336/0/3137372e3133372e3139392e302f32342d3234203d3e203533303539.roa
Signing time:             Tue 13 Sep 2022 09:05:28 +0000
ROA not before:           Tue 13 Sep 2022 09:00:28 +0000
ROA not after:            Tue 12 Sep 2023 09:05:28 +0000
asID:                     53059
IP address blocks:        177.137.199.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:f1:b7:c3:4e:10:c9:00:0f:f5:f9:37:48:56:a3:86:ff:f1:1b:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F245A20DD754102EB4C5ADABE8FDF7C8F30AF3E8
        Validity
            Not Before: Sep 13 09:00:28 2022 GMT
            Not After : Sep 12 09:05:28 2023 GMT
        Subject: CN=61902BB0EAC1468B3D16401C3B6E9CAA317AF7AA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:15:44:90:18:0c:08:cc:9d:d8:12:e2:3a:4b:
                    18:b3:9f:9f:14:ee:ab:bf:d5:12:36:98:ef:fd:31:
                    6a:33:2c:20:39:67:45:1d:f7:cd:b2:fe:67:ac:c6:
                    ca:34:ad:eb:46:a5:07:8d:76:19:35:59:fe:12:ea:
                    df:36:d5:cb:3e:6f:14:f5:ca:f9:dd:1b:38:eb:f1:
                    77:99:b5:e2:c2:aa:af:39:ac:01:3b:a0:df:fb:41:
                    a7:cd:70:30:0f:83:c4:15:80:63:7b:b2:25:3e:1d:
                    37:17:7f:2e:cf:ae:56:33:62:8d:74:78:c7:c0:ee:
                    c2:39:7e:2c:f1:4e:96:8c:e6:d5:e7:73:de:27:1f:
                    71:64:f9:b8:57:ae:18:95:cc:8f:77:d5:f3:e7:98:
                    ca:a1:31:5a:9b:1b:cb:f4:f9:84:e1:34:ed:27:58:
                    94:fd:ec:ea:0e:80:d2:a9:43:07:b8:c5:6f:2e:36:
                    bd:73:f1:55:02:c9:7f:21:18:2e:30:17:a7:0e:10:
                    3d:18:a6:07:c7:62:c0:f9:4a:5c:f8:3b:5c:4b:b3:
                    ad:c3:fc:c3:b5:09:ed:e6:fe:c8:f4:8e:63:b6:a4:
                    78:6f:a2:e4:09:ac:88:40:93:3c:c3:7e:bb:36:6d:
                    70:43:d4:3d:6d:78:d0:32:70:23:62:f7:95:d9:41:
                    ac:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:90:2B:B0:EA:C1:46:8B:3D:16:40:1C:3B:6E:9C:AA:31:7A:F7:AA
            X509v3 Authority Key Identifier:
                keyid:F2:45:A2:0D:D7:54:10:2E:B4:C5:AD:AB:E8:FD:F7:C8:F3:0A:F3:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D6M24PGbfcRFKHJ5YxvqZQ7pUHFRpJPTmaYi219ez336/0/F245A20DD754102EB4C5ADABE8FDF7C8F30AF3E8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F245A20DD754102EB4C5ADABE8FDF7C8F30AF3E8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D6M24PGbfcRFKHJ5YxvqZQ7pUHFRpJPTmaYi219ez336/0/3137372e3133372e3139392e302f32342d3234203d3e203533303539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.137.199.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b8:9f:e7:77:0a:bb:c3:4f:12:8f:d3:82:f9:2b:57:8e:60:b0:
         86:97:1b:06:85:78:2a:5f:0b:1a:f5:41:f4:24:e9:82:f6:f7:
         a9:0e:5b:03:5f:7d:0b:47:f2:d9:ff:6f:f6:cf:dc:52:ff:d8:
         d5:6c:72:34:59:87:57:86:5c:f7:1e:04:ae:70:24:ec:61:1a:
         de:4b:ab:97:b5:b8:ad:aa:7f:0a:9a:de:94:15:52:21:bd:f2:
         a3:68:26:b1:ce:c5:3a:76:76:7e:49:bc:c0:1a:f8:b0:bf:bb:
         1f:22:62:13:d9:d6:51:6d:85:e0:cf:eb:4a:55:af:87:7c:a8:
         5d:1e:77:6b:e5:67:56:44:1d:2e:6a:6e:75:83:ce:6c:b7:4a:
         ec:62:63:0b:83:9b:36:68:dd:ab:32:83:2d:01:7d:b1:cb:05:
         9f:59:99:e1:b4:12:54:f3:75:07:b3:24:fa:9f:c0:af:82:66:
         29:ec:aa:6e:e1:bf:bb:70:29:c2:e2:72:15:54:86:5b:4e:a4:
         cb:60:c5:9d:cf:df:78:00:13:56:57:e2:19:4d:1a:4b:bd:fb:
         c9:77:d3:e3:99:de:18:35:dc:2c:21:dc:52:9c:bf:c1:df:ca:
         a0:98:cc:36:25:18:d2:e6:43:86:ae:b3:8a:40:2c:06:ce:15:
         8c:46:2c:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 13:11:55 2025 by rpki-client