Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DKwiB3MHDU9912PxUYuALd8hGztfXib9WDAGACT5cnKT/0/3137372e33362e37362e302f32322d3232203d3e20323638323537.roa
File:                     3137372e33362e37362e302f32322d3232203d3e20323638323537.roa (raw, json)
Hash identifier:          sLGumCwED72H8HXoc6In8EFsNm+yZ+FZzvGObcsfDAk=
Subject key identifier:   2F:48:6E:BA:FD:14:4D:8F:BC:92:55:E1:6C:5B:F1:98:F2:5B:9C:B3
Certificate issuer:       /CN=84029737BBFBB5F2855C17B535364362CE7B148F
Certificate serial:       3915BC411CDD885CDB9344F53744145D71BA9B11
Authority key identifier: 84:02:97:37:BB:FB:B5:F2:85:5C:17:B5:35:36:43:62:CE:7B:14:8F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/84029737BBFBB5F2855C17B535364362CE7B148F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DKwiB3MHDU9912PxUYuALd8hGztfXib9WDAGACT5cnKT/0/3137372e33362e37362e302f32322d3232203d3e20323638323537.roa
Signing time:             Mon 30 Dec 2024 19:41:13 +0000
ROA not before:           Mon 30 Dec 2024 19:36:13 +0000
ROA not after:            Mon 29 Dec 2025 19:41:13 +0000
asID:                     268257
IP address blocks:        177.36.76.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:15:bc:41:1c:dd:88:5c:db:93:44:f5:37:44:14:5d:71:ba:9b:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84029737BBFBB5F2855C17B535364362CE7B148F
        Validity
            Not Before: Dec 30 19:36:13 2024 GMT
            Not After : Dec 29 19:41:13 2025 GMT
        Subject: CN=2F486EBAFD144D8FBC9255E16C5BF198F25B9CB3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:ca:94:ea:b7:a4:00:99:0b:be:de:29:fb:60:
                    4e:a2:14:09:a0:3d:bf:03:85:19:7c:f7:c9:b5:fd:
                    0a:2b:ab:7c:f9:ad:9a:8b:9b:48:6f:8c:a0:ec:e0:
                    e9:fb:b4:7a:da:6c:7c:8e:7a:79:d0:ba:40:4b:86:
                    5d:85:e0:c0:39:55:b4:5c:d5:fb:c9:9a:66:95:76:
                    b3:df:a4:85:6c:f5:b5:b0:91:fd:d4:b8:2b:87:43:
                    5e:c6:fa:98:62:2d:f8:80:c7:3c:39:f0:71:6a:43:
                    53:53:f3:51:e2:04:45:e3:c7:20:f7:c8:a1:dc:66:
                    31:f0:99:f8:7e:53:82:a9:2c:ee:2a:45:dd:10:f0:
                    d6:5d:34:64:26:06:90:01:88:b1:f4:59:0a:6e:06:
                    83:28:72:e2:1c:e8:ce:d6:99:06:0c:ea:59:d6:e6:
                    46:f3:ea:bf:b9:5f:73:ec:34:29:f2:30:5c:8d:a8:
                    67:6f:9b:1e:fc:65:f0:e4:9e:b0:8a:25:88:32:40:
                    45:f7:1b:0c:22:88:13:e1:bc:56:3b:82:c7:39:0e:
                    4c:2d:77:d5:9c:30:e5:0c:6c:f1:f1:e0:5c:9d:3d:
                    1f:e6:1b:be:4d:49:87:f5:7f:3a:46:d0:e4:40:1c:
                    c8:e4:9c:52:e4:15:b0:b2:30:38:66:bc:d8:64:9e:
                    f4:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:48:6E:BA:FD:14:4D:8F:BC:92:55:E1:6C:5B:F1:98:F2:5B:9C:B3
            X509v3 Authority Key Identifier:
                keyid:84:02:97:37:BB:FB:B5:F2:85:5C:17:B5:35:36:43:62:CE:7B:14:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DKwiB3MHDU9912PxUYuALd8hGztfXib9WDAGACT5cnKT/0/84029737BBFBB5F2855C17B535364362CE7B148F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/84029737BBFBB5F2855C17B535364362CE7B148F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DKwiB3MHDU9912PxUYuALd8hGztfXib9WDAGACT5cnKT/0/3137372e33362e37362e302f32322d3232203d3e20323638323537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.36.76.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1f:20:a3:c6:2c:d1:6f:c5:76:58:48:ea:c4:75:86:11:29:9d:
         b7:05:9d:92:1b:8d:ca:27:43:7b:9d:d4:7e:e7:f1:9a:46:92:
         34:73:fd:b6:4b:32:ff:b7:db:c7:28:10:7b:04:35:45:fd:45:
         0c:34:2b:36:8c:a9:ee:de:7a:ac:42:ba:7b:e2:73:62:a8:f3:
         77:60:e0:eb:e3:3b:17:90:91:fc:68:8d:3e:d0:47:df:5b:82:
         43:b2:26:65:f2:60:59:67:92:24:6a:88:e2:cb:03:51:54:7a:
         6b:32:07:5b:b2:ce:27:f2:32:06:c0:3d:82:3d:c0:c2:be:87:
         b6:1d:64:dd:32:21:de:3e:cb:76:bb:b5:7f:83:de:38:34:4a:
         7c:29:ca:b4:ce:38:4f:35:aa:9b:7f:a8:64:81:11:18:d3:f3:
         ee:03:80:23:fa:0f:90:30:c2:b1:95:c0:92:9c:9a:79:c8:95:
         5a:54:62:49:1b:3c:1e:82:b6:0a:50:2b:65:e4:a9:28:e3:2d:
         14:df:50:d9:e1:13:f3:66:e9:01:95:42:68:4c:ac:03:d1:9f:
         42:3f:e8:96:9b:1c:fe:4b:23:58:31:b0:06:e2:4e:f3:62:67:
         d4:ef:0a:59:ad:b8:25:75:81:5e:01:db:19:f6:b4:9e:2c:c4:
         ac:d0:35:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 14:50:07 2025 by rpki-client