Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GctGUw1naZxQ9w8DDUqYPehBYFi2wHt9jLbtGKFi4TZN/0/3137372e35332e37362e302f32322d3232203d3e20323632343630.roa
File:                     3137372e35332e37362e302f32322d3232203d3e20323632343630.roa (raw, json)
Hash identifier:          PTnHlVK0cI5DV6TLybnAaFPE9+n4ba0QpFr/DLBuXnc=
Subject key identifier:   57:C4:A8:A0:F7:64:8E:A9:09:49:6F:CB:6E:89:DE:2D:95:30:04:E1
Certificate issuer:       /CN=3A3DF525158206E0B66C8FD23D86B1780F642002
Certificate serial:       56A98BA443741BFB658E42AD69CA56BD57FA8DCB
Authority key identifier: 3A:3D:F5:25:15:82:06:E0:B6:6C:8F:D2:3D:86:B1:78:0F:64:20:02
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3A3DF525158206E0B66C8FD23D86B1780F642002.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GctGUw1naZxQ9w8DDUqYPehBYFi2wHt9jLbtGKFi4TZN/0/3137372e35332e37362e302f32322d3232203d3e20323632343630.roa
Signing time:             Fri 19 Apr 2024 12:36:59 +0000
ROA not before:           Fri 19 Apr 2024 12:31:59 +0000
ROA not after:            Fri 18 Apr 2025 12:36:59 +0000
asID:                     262460
IP address blocks:        177.53.76.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:a9:8b:a4:43:74:1b:fb:65:8e:42:ad:69:ca:56:bd:57:fa:8d:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3A3DF525158206E0B66C8FD23D86B1780F642002
        Validity
            Not Before: Apr 19 12:31:59 2024 GMT
            Not After : Apr 18 12:36:59 2025 GMT
        Subject: CN=57C4A8A0F7648EA909496FCB6E89DE2D953004E1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:36:5d:aa:fb:f3:51:2f:5b:a3:24:89:7e:8f:
                    87:73:37:df:e2:9b:d0:a6:b8:cc:5a:b0:ac:ea:c9:
                    95:16:ef:6d:a7:4f:46:a2:1d:4b:d9:69:14:10:f0:
                    2f:46:6a:bc:ec:20:d2:03:6f:51:86:8c:ef:0c:24:
                    77:1b:d8:3d:20:f1:07:b0:63:c8:02:26:d0:fa:39:
                    a7:f4:41:23:a5:b2:a6:85:4b:51:db:d9:5d:f6:95:
                    d8:be:9e:85:41:f5:a6:59:ad:2d:99:f1:73:99:b8:
                    be:7f:ab:1e:af:c0:b5:cf:37:53:02:7e:e5:fa:5e:
                    4c:da:79:d6:c9:1a:d2:d9:a2:b4:11:df:4b:ac:7f:
                    fe:64:f7:a6:61:87:49:e9:5a:38:e6:65:46:d7:4b:
                    81:62:50:e4:e9:a0:11:b8:45:f6:1b:7b:0d:4b:0c:
                    c8:bf:ae:37:d9:cc:2c:b4:46:66:1a:76:b3:6f:af:
                    da:f8:34:bb:dc:9f:fd:f4:8b:e1:bf:2c:88:30:9d:
                    c2:b7:23:2d:3c:b2:23:5e:2d:4f:fd:5d:f3:7e:37:
                    cd:94:39:db:b3:44:8a:8e:f5:c3:33:0f:13:8a:62:
                    eb:b1:f4:9b:d4:4a:7e:16:99:b6:fc:1b:c4:58:2e:
                    b0:4d:c3:af:fb:3a:7e:00:4b:6d:22:69:91:25:ae:
                    35:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:C4:A8:A0:F7:64:8E:A9:09:49:6F:CB:6E:89:DE:2D:95:30:04:E1
            X509v3 Authority Key Identifier:
                keyid:3A:3D:F5:25:15:82:06:E0:B6:6C:8F:D2:3D:86:B1:78:0F:64:20:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GctGUw1naZxQ9w8DDUqYPehBYFi2wHt9jLbtGKFi4TZN/0/3A3DF525158206E0B66C8FD23D86B1780F642002.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3A3DF525158206E0B66C8FD23D86B1780F642002.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GctGUw1naZxQ9w8DDUqYPehBYFi2wHt9jLbtGKFi4TZN/0/3137372e35332e37362e302f32322d3232203d3e20323632343630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.53.76.0/22

    Signature Algorithm: sha256WithRSAEncryption
         21:89:3f:7b:40:7d:9a:a0:45:f5:84:7b:be:a1:31:91:f2:91:
         1b:bc:a7:0f:ac:f3:5f:c5:dc:e1:56:6d:79:72:61:fb:a7:e9:
         37:c6:9e:23:7f:4f:3a:45:41:ca:c2:de:d0:8b:f1:1a:6a:df:
         e9:28:fd:ce:59:12:9e:2d:69:39:9a:52:68:83:8d:2c:3a:e8:
         e0:77:0c:cf:9f:49:ac:aa:e3:0d:e3:4e:5b:5b:b2:63:78:44:
         de:29:40:c6:ca:7d:7d:6d:50:52:75:09:e3:e2:43:15:e7:11:
         b9:18:23:c1:9c:c4:65:d2:4e:de:0a:28:12:e6:7d:00:68:cc:
         0b:e9:47:f4:d4:6a:5e:4e:98:ae:a9:2b:e2:65:93:a8:72:02:
         03:93:94:5d:13:fd:38:bf:12:1f:2d:be:81:b4:70:99:bc:56:
         67:93:60:da:99:42:cc:b3:a2:a9:8d:c2:6b:ae:78:74:b9:47:
         57:65:59:78:87:5f:4a:62:9c:7e:17:9b:86:12:cb:fb:82:a7:
         e4:16:94:db:28:66:de:c5:52:41:ba:90:3c:2f:f1:ee:cb:42:
         48:84:13:87:4d:73:85:17:07:f7:eb:c6:9d:68:16:c7:29:c5:
         d0:12:97:7d:a8:38:19:01:02:e2:b3:a9:f3:a2:ae:c6:d8:40:
         7c:3b:55:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 14:32:12 2025 by rpki-client