Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GctGUw1naZxQ9w8DDUqYPehBYFi2wHt9jLbtGKFi4TZN/0/3137372e35332e37342e302f32342d3234203d3e20323632343630.roa
File:                     3137372e35332e37342e302f32342d3234203d3e20323632343630.roa (raw, json)
Hash identifier:          9/AHG8m6t7c+c9TEF6ygJfg58AKRs1+cHdZc20jNGpc=
Subject key identifier:   AA:4E:91:3C:01:2E:55:2E:DC:C2:1A:D2:32:1F:07:5E:D3:57:00:93
Certificate issuer:       /CN=3A3DF525158206E0B66C8FD23D86B1780F642002
Certificate serial:       7F696E6F5CD0EBE6AB503F7B21B0C95D07E56CA5
Authority key identifier: 3A:3D:F5:25:15:82:06:E0:B6:6C:8F:D2:3D:86:B1:78:0F:64:20:02
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3A3DF525158206E0B66C8FD23D86B1780F642002.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GctGUw1naZxQ9w8DDUqYPehBYFi2wHt9jLbtGKFi4TZN/0/3137372e35332e37342e302f32342d3234203d3e20323632343630.roa
Signing time:             Fri 19 Apr 2024 12:36:59 +0000
ROA not before:           Fri 19 Apr 2024 12:31:59 +0000
ROA not after:            Fri 18 Apr 2025 12:36:59 +0000
asID:                     262460
IP address blocks:        177.53.74.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:69:6e:6f:5c:d0:eb:e6:ab:50:3f:7b:21:b0:c9:5d:07:e5:6c:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3A3DF525158206E0B66C8FD23D86B1780F642002
        Validity
            Not Before: Apr 19 12:31:59 2024 GMT
            Not After : Apr 18 12:36:59 2025 GMT
        Subject: CN=AA4E913C012E552EDCC21AD2321F075ED3570093
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:1f:f3:5a:63:a6:6e:d4:79:d7:c9:5a:f1:b8:
                    0b:2c:51:10:e1:a1:a8:40:f2:88:b8:74:d4:4c:27:
                    01:c5:89:2a:bf:55:6c:07:b6:8a:66:21:37:61:d0:
                    0b:49:67:41:77:a1:1f:83:21:8a:8f:7e:00:1f:91:
                    ca:17:39:23:d9:78:99:55:4b:30:ba:e5:cd:7a:c9:
                    0d:06:68:b3:57:60:fa:75:e7:6c:09:41:2b:50:ff:
                    cd:1e:1f:1a:cf:2b:40:5f:56:ca:b7:0c:24:3e:91:
                    ab:8d:40:e3:82:fc:14:9a:6b:21:be:db:eb:69:fc:
                    5e:28:d1:04:06:d5:3c:11:26:41:de:fa:55:4e:05:
                    49:e3:7b:f3:1f:66:88:1e:02:3d:47:ef:fb:e2:87:
                    91:95:5a:86:7b:c3:8b:81:81:ef:d2:58:d7:bd:3d:
                    1a:6c:d1:dc:91:a0:d1:e8:28:71:99:40:de:0b:73:
                    25:1b:19:39:ed:89:7d:51:2a:94:ca:5e:1f:27:b6:
                    47:4b:30:e3:96:d3:73:32:f1:99:74:56:7e:2a:3f:
                    a7:0d:39:1d:d2:28:0b:a4:10:75:64:4c:b7:be:5c:
                    0d:b1:9a:41:96:db:58:da:a5:ed:fa:e2:d0:6f:0a:
                    72:4d:2e:08:1b:eb:2f:5c:96:c9:1b:04:02:04:d7:
                    6a:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:4E:91:3C:01:2E:55:2E:DC:C2:1A:D2:32:1F:07:5E:D3:57:00:93
            X509v3 Authority Key Identifier:
                keyid:3A:3D:F5:25:15:82:06:E0:B6:6C:8F:D2:3D:86:B1:78:0F:64:20:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GctGUw1naZxQ9w8DDUqYPehBYFi2wHt9jLbtGKFi4TZN/0/3A3DF525158206E0B66C8FD23D86B1780F642002.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3A3DF525158206E0B66C8FD23D86B1780F642002.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GctGUw1naZxQ9w8DDUqYPehBYFi2wHt9jLbtGKFi4TZN/0/3137372e35332e37342e302f32342d3234203d3e20323632343630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.53.74.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7f:02:05:69:ed:a1:4f:22:4b:2b:40:36:43:a6:5a:21:b3:db:
         52:10:1d:96:c8:1f:29:5b:f6:fd:0c:1c:fe:c5:98:3c:83:52:
         69:e8:0b:27:2d:ed:ae:94:53:e2:5a:d3:3f:e8:34:63:ef:2d:
         3d:ac:53:75:cb:0e:0e:3d:7b:e3:e4:56:dd:41:f8:05:b8:05:
         ee:b9:cc:13:d1:19:4c:f1:05:ca:2b:b5:c1:48:f0:94:58:f4:
         f7:b5:8b:72:ce:ae:ca:08:d0:30:80:56:a8:0d:8a:9b:3f:60:
         bd:1b:db:21:63:af:e2:0b:8a:47:ef:4d:e3:dc:22:a6:8c:f3:
         cb:d2:9e:a9:04:e2:ac:cd:4b:3b:b1:00:92:75:26:97:fc:ed:
         58:8b:d7:7b:71:f6:6b:71:5b:df:ff:c1:f0:fd:4b:2e:00:0b:
         9b:5f:e9:db:08:38:85:10:47:44:99:5b:ce:5b:96:31:bb:a7:
         18:6e:c4:b4:c8:4c:4a:4c:b9:59:e7:d5:d1:cd:0e:99:68:11:
         12:5a:2e:33:8f:12:af:c0:fc:4b:02:cc:01:bc:55:82:a2:43:
         01:e5:56:23:f7:44:35:91:0e:fa:05:ea:1d:98:56:59:49:89:
         32:36:82:95:82:c0:e6:0f:2b:f4:f4:94:38:0d:14:d5:05:61:
         5f:b2:20:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:30:26 2025 by rpki-client