Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GD2SX2r86MbQe2vcgTLs2jcLpKTPMTkSKsEKX4XFjEZM/0/3137302e38302e33362e302f32322d3234203d3e20323636323037.roa
File:                     3137302e38302e33362e302f32322d3234203d3e20323636323037.roa (raw, json)
Hash identifier:          VhZXv8Cq1TackHfo5aeoNEcbANbJONQmDkoekE1Eg50=
Subject key identifier:   4A:B2:48:01:46:A7:D1:F8:4F:3D:9F:7B:E8:FE:AB:C8:D4:FB:2B:D8
Certificate issuer:       /CN=77A4CB39D6601A8BDC2BD28E7CB9106511C5B968
Certificate serial:       3D64357C719109CE55C844E90F9D9340D5E2D9FD
Authority key identifier: 77:A4:CB:39:D6:60:1A:8B:DC:2B:D2:8E:7C:B9:10:65:11:C5:B9:68
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/77A4CB39D6601A8BDC2BD28E7CB9106511C5B968.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GD2SX2r86MbQe2vcgTLs2jcLpKTPMTkSKsEKX4XFjEZM/0/3137302e38302e33362e302f32322d3234203d3e20323636323037.roa
Signing time:             Tue 19 Sep 2023 13:59:04 +0000
ROA not before:           Tue 19 Sep 2023 13:54:04 +0000
ROA not after:            Tue 17 Sep 2024 13:59:04 +0000
asID:                     266207
IP address blocks:        170.80.36.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:64:35:7c:71:91:09:ce:55:c8:44:e9:0f:9d:93:40:d5:e2:d9:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77A4CB39D6601A8BDC2BD28E7CB9106511C5B968
        Validity
            Not Before: Sep 19 13:54:04 2023 GMT
            Not After : Sep 17 13:59:04 2024 GMT
        Subject: CN=4AB2480146A7D1F84F3D9F7BE8FEABC8D4FB2BD8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:70:7f:3b:38:4e:ca:ae:03:b0:96:f8:0a:38:
                    aa:29:5b:49:97:51:45:89:e5:34:52:41:d8:fb:88:
                    75:51:81:c2:7d:44:8d:26:7e:ee:f0:ee:8b:5e:26:
                    84:e5:b1:7a:99:1a:b5:e4:dc:bb:37:b1:ba:41:95:
                    3e:0b:77:7c:ab:fa:be:e2:5d:a4:fe:8c:14:cf:04:
                    c3:dc:27:6c:c9:e2:e1:1a:fb:75:bc:bd:7c:0a:dd:
                    ed:61:e6:61:19:b7:26:cb:e9:8b:da:c9:ed:c0:a8:
                    f3:3f:3d:7f:a4:3c:4b:aa:b9:eb:94:23:25:07:09:
                    df:52:05:c4:36:48:2f:6e:0e:fc:26:98:e1:26:79:
                    15:14:0f:e6:f8:e9:ee:b2:52:ca:37:72:01:13:3a:
                    d6:bb:18:b5:a2:ed:3d:28:a7:ea:dc:54:bf:35:ec:
                    d9:31:62:2a:2e:68:97:86:69:a4:b4:d6:59:fa:71:
                    3e:31:62:f2:09:f1:8e:83:fd:2e:12:2d:a0:a9:23:
                    51:df:e6:1d:01:50:24:0a:91:68:fa:38:46:e2:94:
                    b5:fa:d7:42:0b:04:e2:22:f4:02:7a:72:4e:1a:e4:
                    5c:0e:8e:48:87:1b:5a:20:34:03:e7:97:c2:56:cf:
                    ad:9f:c6:e9:88:03:77:18:30:ff:99:54:74:af:4d:
                    32:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:B2:48:01:46:A7:D1:F8:4F:3D:9F:7B:E8:FE:AB:C8:D4:FB:2B:D8
            X509v3 Authority Key Identifier:
                keyid:77:A4:CB:39:D6:60:1A:8B:DC:2B:D2:8E:7C:B9:10:65:11:C5:B9:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GD2SX2r86MbQe2vcgTLs2jcLpKTPMTkSKsEKX4XFjEZM/0/77A4CB39D6601A8BDC2BD28E7CB9106511C5B968.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/77A4CB39D6601A8BDC2BD28E7CB9106511C5B968.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GD2SX2r86MbQe2vcgTLs2jcLpKTPMTkSKsEKX4XFjEZM/0/3137302e38302e33362e302f32322d3234203d3e20323636323037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.80.36.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9b:5c:81:1e:b1:4a:6a:7e:a4:25:ce:2a:2f:8b:1c:b8:0a:a6:
         ed:0c:08:41:ec:ad:47:fe:b5:51:c7:bd:2d:e6:ac:36:ee:0f:
         1c:2a:49:aa:1f:99:b4:36:f1:c2:3f:74:fe:95:58:ae:ab:a7:
         4b:f1:a3:27:b1:e3:91:0c:ca:28:49:b3:e0:22:df:d9:17:1b:
         a3:f4:f1:c2:85:00:cb:48:92:3c:0f:fd:cb:cb:ef:60:02:19:
         1e:33:ff:4e:77:3a:a8:c7:1a:ee:5b:91:f3:1e:59:a6:20:e0:
         d2:47:3a:94:e8:f5:27:63:bb:02:a3:6c:26:a6:53:4a:8d:a5:
         98:7d:6f:82:bf:5a:b1:8c:95:34:64:c4:2e:ac:6b:b3:35:1b:
         b5:66:10:9f:f6:20:1d:77:51:4c:cb:af:89:87:0d:3e:b1:ce:
         f7:40:f6:28:c2:39:67:52:58:78:3c:bd:10:3a:d6:d2:e5:bf:
         70:b3:d4:c4:67:39:f4:73:8d:e6:ab:9d:f6:7c:10:66:f3:5e:
         cc:37:b5:2f:4b:15:a9:d5:01:42:86:8b:01:9d:5a:c3:d9:69:
         8d:b7:56:e9:af:58:5b:74:07:8a:49:e5:cd:33:32:95:3f:53:
         7d:7d:62:cd:11:ba:2b:f3:44:45:d5:37:f9:32:82:80:79:6e:
         87:46:da:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 23:02:29 2025 by rpki-client