Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GctGUw1naZxQ9w8DDUqYPehBYFi2wHt9jLbtGKFi4TZN/0/3137372e35332e37322e302f32322d3234203d3e20323632343630.roa
File:                     3137372e35332e37322e302f32322d3234203d3e20323632343630.roa (raw, json)
Hash identifier:          fE79PHnCvgb40/m7Gksk+WJpR/jG7wVzH0kMzkldQ1o=
Subject key identifier:   86:89:F6:DF:E9:D3:8C:54:42:E3:AD:F6:F3:7D:35:31:F5:31:C4:AB
Certificate issuer:       /CN=3A3DF525158206E0B66C8FD23D86B1780F642002
Certificate serial:       3813445264CDF9BB169DCD3D3B3C6295904DEB9D
Authority key identifier: 3A:3D:F5:25:15:82:06:E0:B6:6C:8F:D2:3D:86:B1:78:0F:64:20:02
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3A3DF525158206E0B66C8FD23D86B1780F642002.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GctGUw1naZxQ9w8DDUqYPehBYFi2wHt9jLbtGKFi4TZN/0/3137372e35332e37322e302f32322d3234203d3e20323632343630.roa
Signing time:             Tue 28 May 2024 13:50:47 +0000
ROA not before:           Tue 28 May 2024 13:45:47 +0000
ROA not after:            Tue 27 May 2025 13:50:47 +0000
asID:                     262460
IP address blocks:        177.53.72.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:13:44:52:64:cd:f9:bb:16:9d:cd:3d:3b:3c:62:95:90:4d:eb:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3A3DF525158206E0B66C8FD23D86B1780F642002
        Validity
            Not Before: May 28 13:45:47 2024 GMT
            Not After : May 27 13:50:47 2025 GMT
        Subject: CN=8689F6DFE9D38C5442E3ADF6F37D3531F531C4AB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:be:01:af:2a:31:7f:5a:36:4f:61:72:60:b6:
                    5a:be:51:ad:ca:a3:d3:8f:e8:27:8f:bf:d1:a8:20:
                    30:62:af:61:94:f7:ac:07:d1:a4:1f:9d:1a:81:23:
                    8b:6f:23:59:51:c6:c2:18:0f:fa:d0:32:25:a8:ac:
                    ec:81:bb:ac:d5:23:20:93:07:2d:b8:71:d6:21:7b:
                    3a:bc:41:f3:7f:85:ba:2d:1a:c9:b6:b6:5f:d9:5d:
                    6b:26:5b:97:d1:65:50:b1:69:10:cb:a8:0b:4d:cb:
                    cd:19:e5:5c:d2:03:e4:91:51:86:55:ca:81:98:e4:
                    b4:dc:cf:8a:57:b0:f3:6d:91:49:4e:b1:20:8b:ba:
                    66:c6:47:64:93:44:df:da:13:1c:c5:27:5f:d3:bf:
                    46:c5:75:72:35:3c:d0:6d:77:0b:9a:15:1a:6e:58:
                    7d:2f:60:7a:8a:0c:de:d7:9d:9e:9e:c7:c0:13:00:
                    2e:99:65:f2:2f:52:8b:78:ae:f0:cb:2b:5b:05:55:
                    aa:2d:72:88:a7:b9:ec:0e:62:1a:33:09:c5:7b:62:
                    71:78:98:55:6c:bb:40:1b:c4:72:f3:85:17:2d:a4:
                    26:33:d6:01:af:46:45:04:c4:08:5f:8d:5b:ef:34:
                    bd:47:da:05:a8:b3:06:49:3b:0f:2a:01:80:de:62:
                    99:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:89:F6:DF:E9:D3:8C:54:42:E3:AD:F6:F3:7D:35:31:F5:31:C4:AB
            X509v3 Authority Key Identifier:
                keyid:3A:3D:F5:25:15:82:06:E0:B6:6C:8F:D2:3D:86:B1:78:0F:64:20:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GctGUw1naZxQ9w8DDUqYPehBYFi2wHt9jLbtGKFi4TZN/0/3A3DF525158206E0B66C8FD23D86B1780F642002.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3A3DF525158206E0B66C8FD23D86B1780F642002.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GctGUw1naZxQ9w8DDUqYPehBYFi2wHt9jLbtGKFi4TZN/0/3137372e35332e37322e302f32322d3234203d3e20323632343630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.53.72.0/22

    Signature Algorithm: sha256WithRSAEncryption
         17:56:3e:9d:42:5b:81:d8:0b:b3:bf:8d:29:9b:6b:82:be:54:
         bd:a7:81:2d:e9:dd:b0:11:05:ed:b2:5c:64:ed:e2:07:b1:04:
         98:97:35:5a:5b:2a:63:3c:69:28:3b:cb:fc:4a:86:51:ce:3a:
         27:4b:4c:5b:03:cf:70:e1:7e:b9:bc:53:0e:a0:1c:dd:6e:7b:
         fc:18:64:b4:ed:5a:eb:6a:3b:28:76:c4:86:3e:3c:7f:46:00:
         47:24:6e:e3:ec:75:cd:a1:02:a6:01:c5:fe:7c:10:2f:00:78:
         00:5b:96:f2:68:b3:73:47:35:f7:63:85:00:11:6b:ad:26:f3:
         b6:2a:db:31:bb:17:58:df:85:8e:a0:81:30:8d:ab:4b:c2:d2:
         08:f8:9f:db:fe:23:8b:ee:0f:78:f9:e6:78:66:6f:9e:4a:09:
         09:91:46:c9:87:80:94:ba:3b:26:a6:c9:d9:73:3d:27:11:5f:
         cd:75:5d:74:48:bc:a3:81:66:bf:23:10:f8:14:d0:ca:64:8d:
         fb:f4:da:06:77:39:47:b8:5a:40:a4:f8:aa:16:46:1d:9c:7d:
         e2:dd:5e:27:3b:76:96:3d:0c:c6:b1:65:be:0a:18:61:ec:33:
         cb:bd:77:0c:ad:a3:02:3a:e9:87:56:02:71:1c:1b:36:79:a6:
         ab:77:0f:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 01:46:39 2025 by rpki-client