Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GctGUw1naZxQ9w8DDUqYPehBYFi2wHt9jLbtGKFi4TZN/0/3137372e35332e37362e302f32322d3234203d3e20323632343630.roa
File:                     3137372e35332e37362e302f32322d3234203d3e20323632343630.roa (raw, json)
Hash identifier:          posc6BQki7y9VOmTlg1kZdRGRYxotEULGml9C7DO6s0=
Subject key identifier:   2A:0F:43:69:BC:8C:75:9A:9C:2F:6E:2A:1F:68:47:28:0E:A5:D5:4A
Certificate issuer:       /CN=3A3DF525158206E0B66C8FD23D86B1780F642002
Certificate serial:       77158C68EA3CB7751B2B4519AC792BF23B5C3327
Authority key identifier: 3A:3D:F5:25:15:82:06:E0:B6:6C:8F:D2:3D:86:B1:78:0F:64:20:02
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3A3DF525158206E0B66C8FD23D86B1780F642002.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GctGUw1naZxQ9w8DDUqYPehBYFi2wHt9jLbtGKFi4TZN/0/3137372e35332e37362e302f32322d3234203d3e20323632343630.roa
Signing time:             Tue 28 May 2024 13:51:47 +0000
ROA not before:           Tue 28 May 2024 13:46:47 +0000
ROA not after:            Tue 27 May 2025 13:51:47 +0000
asID:                     262460
IP address blocks:        177.53.76.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:15:8c:68:ea:3c:b7:75:1b:2b:45:19:ac:79:2b:f2:3b:5c:33:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3A3DF525158206E0B66C8FD23D86B1780F642002
        Validity
            Not Before: May 28 13:46:47 2024 GMT
            Not After : May 27 13:51:47 2025 GMT
        Subject: CN=2A0F4369BC8C759A9C2F6E2A1F6847280EA5D54A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:a4:45:61:18:3d:f2:d9:d6:45:9f:98:9f:73:
                    1a:71:4d:ac:ee:3d:7f:30:9c:07:1c:d8:19:1d:cd:
                    ae:dd:55:2c:ee:f3:5b:24:3a:8b:47:76:ab:c1:56:
                    10:f2:db:29:51:20:91:42:36:fa:e5:f1:f6:2f:ea:
                    be:98:e9:5e:9d:b9:0f:60:65:9c:b5:54:a6:d0:3a:
                    1a:20:30:9a:79:36:70:32:7c:14:08:20:e1:f6:22:
                    58:37:12:1a:28:ea:28:54:7a:e6:90:a2:90:12:19:
                    b8:28:a7:c9:ce:64:bd:4c:71:90:d2:8c:3c:a6:37:
                    0a:2b:9c:d6:b6:a9:90:19:8d:f9:14:a2:e1:fd:f6:
                    09:1f:a0:18:0c:db:c5:69:a9:3c:6b:b4:5c:0a:60:
                    09:70:b9:ec:e5:0f:8e:58:73:f0:bb:a6:c8:57:07:
                    4c:ca:23:1b:c1:cb:e5:7f:b9:ee:80:d2:35:e0:ac:
                    6d:cf:c8:79:86:97:30:aa:65:9a:f0:8f:8e:f3:7e:
                    40:b6:a0:21:fa:ec:b7:78:93:0d:e1:f8:00:f3:63:
                    2d:1e:e4:d0:e3:67:4c:85:04:4c:90:28:fe:e8:6c:
                    01:35:38:c8:39:d0:11:5e:9c:ea:ea:91:32:8e:72:
                    7b:e5:3b:86:59:9f:1f:05:aa:90:81:5f:c3:9b:75:
                    65:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:0F:43:69:BC:8C:75:9A:9C:2F:6E:2A:1F:68:47:28:0E:A5:D5:4A
            X509v3 Authority Key Identifier:
                keyid:3A:3D:F5:25:15:82:06:E0:B6:6C:8F:D2:3D:86:B1:78:0F:64:20:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GctGUw1naZxQ9w8DDUqYPehBYFi2wHt9jLbtGKFi4TZN/0/3A3DF525158206E0B66C8FD23D86B1780F642002.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3A3DF525158206E0B66C8FD23D86B1780F642002.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GctGUw1naZxQ9w8DDUqYPehBYFi2wHt9jLbtGKFi4TZN/0/3137372e35332e37362e302f32322d3234203d3e20323632343630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.53.76.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7e:be:4c:16:cf:cf:36:cd:8e:64:50:6d:ea:b4:29:8d:b6:92:
         3c:38:33:f5:04:6e:23:d8:69:14:cf:51:7a:3e:03:1b:bd:3f:
         e2:79:37:2d:61:9d:bc:f6:5a:31:ec:08:d3:82:55:a4:0b:93:
         81:6f:22:99:fd:cb:52:ee:1a:76:55:50:74:eb:96:db:6e:f4:
         d9:da:12:c7:9e:f4:8c:f4:39:64:67:b9:16:39:07:48:54:2b:
         9e:71:c1:3b:d0:d7:ef:6f:7a:09:2c:87:ff:9a:fa:37:20:29:
         a8:82:69:dc:d9:4d:4a:84:d5:91:a7:e5:2e:db:00:72:e4:1b:
         16:80:65:bd:1f:9a:c7:10:12:62:ba:d2:6b:e3:6e:7a:37:50:
         4a:56:41:da:79:d4:1f:c5:84:4d:c4:b8:9c:51:a7:2d:02:e5:
         2f:28:1c:da:53:e5:a7:02:00:9f:02:29:2a:bd:e1:6b:62:a9:
         17:6e:c9:5e:ed:f9:57:e7:94:99:67:74:94:ab:87:52:95:9a:
         dd:6d:cd:ca:ca:ff:ef:15:b1:99:3e:b6:b2:85:d3:b1:3f:98:
         97:f2:7a:b2:01:63:a4:42:ea:32:dc:b9:c9:6f:87:00:7e:e7:
         d2:06:59:6b:41:0f:90:2f:e8:f4:bf:09:1f:5f:dc:7b:65:42:
         c4:cf:63:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:37:04 2025 by rpki-client