Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Gf2YAQA4eikNpDt8W6sUDD2UxxhUznX9jBdqvKrb2fd8/0/3137372e33362e31372e302f32342d3234203d3e20323731303432.roa
File:                     3137372e33362e31372e302f32342d3234203d3e20323731303432.roa (raw, json)
Hash identifier:          w+vaCSkIejmgRNlhrV0wnuCkGZDYhVlx3beLy6OKEMo=
Subject key identifier:   D3:10:21:89:D6:3B:24:95:CB:20:65:24:85:5E:2E:DB:40:99:41:DB
Certificate issuer:       /CN=615FAEA4CCDC7F702D4F5FA4C12583956179073A
Certificate serial:       3504C68E9844B5A35655A8BB730DA5FD8CCFC4CF
Authority key identifier: 61:5F:AE:A4:CC:DC:7F:70:2D:4F:5F:A4:C1:25:83:95:61:79:07:3A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/615FAEA4CCDC7F702D4F5FA4C12583956179073A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Gf2YAQA4eikNpDt8W6sUDD2UxxhUznX9jBdqvKrb2fd8/0/3137372e33362e31372e302f32342d3234203d3e20323731303432.roa
Signing time:             Tue 07 Nov 2023 16:19:19 +0000
ROA not before:           Tue 07 Nov 2023 16:14:19 +0000
ROA not after:            Tue 05 Nov 2024 16:19:19 +0000
asID:                     271042
IP address blocks:        177.36.17.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:04:c6:8e:98:44:b5:a3:56:55:a8:bb:73:0d:a5:fd:8c:cf:c4:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=615FAEA4CCDC7F702D4F5FA4C12583956179073A
        Validity
            Not Before: Nov  7 16:14:19 2023 GMT
            Not After : Nov  5 16:19:19 2024 GMT
        Subject: CN=D3102189D63B2495CB206524855E2EDB409941DB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:da:01:87:39:80:01:27:63:77:fd:74:67:d7:
                    da:01:81:dc:43:fb:69:21:49:84:61:12:c0:ef:f6:
                    11:8e:58:6e:94:70:4e:69:9c:aa:b3:fd:15:73:ce:
                    5a:9e:25:51:7b:d3:77:31:ac:80:8f:25:8b:52:6c:
                    2b:f9:3c:1b:dc:d0:0a:f3:b2:20:85:03:7e:5b:f4:
                    40:b2:ed:93:06:c9:47:05:93:dc:aa:46:dd:24:af:
                    f1:30:60:d1:e7:b1:79:a1:19:df:87:c0:14:84:77:
                    85:bd:b5:cf:de:da:c8:0d:fa:58:66:ec:b0:c2:c2:
                    10:8b:49:0a:95:3e:88:55:d3:5c:96:06:a6:87:dd:
                    d1:0f:e2:e3:4f:0f:42:09:b4:5b:39:5a:3d:98:01:
                    68:4d:a6:fb:27:d4:13:12:b1:54:95:24:fb:cf:db:
                    a4:47:dc:13:d9:61:c0:5b:73:3a:e2:4b:27:82:36:
                    c4:97:c6:89:91:80:f8:9e:90:9f:4a:af:75:84:2c:
                    63:75:8c:45:ba:78:73:b6:a3:fe:f1:17:8b:24:6f:
                    9c:8d:21:fe:23:0d:61:c7:11:14:f4:25:07:37:ef:
                    37:94:9d:85:a5:8b:61:a4:4c:85:49:c1:bf:ce:a0:
                    5b:fa:fc:2f:40:ec:c7:06:22:2d:35:ff:97:8a:24:
                    6e:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:10:21:89:D6:3B:24:95:CB:20:65:24:85:5E:2E:DB:40:99:41:DB
            X509v3 Authority Key Identifier:
                keyid:61:5F:AE:A4:CC:DC:7F:70:2D:4F:5F:A4:C1:25:83:95:61:79:07:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Gf2YAQA4eikNpDt8W6sUDD2UxxhUznX9jBdqvKrb2fd8/0/615FAEA4CCDC7F702D4F5FA4C12583956179073A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/615FAEA4CCDC7F702D4F5FA4C12583956179073A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gf2YAQA4eikNpDt8W6sUDD2UxxhUznX9jBdqvKrb2fd8/0/3137372e33362e31372e302f32342d3234203d3e20323731303432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.36.17.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7a:bd:a7:01:d4:01:3e:14:d9:80:33:11:b1:d1:00:44:0e:1b:
         fa:62:8f:e6:d8:e7:77:fa:04:46:a5:8e:d4:71:e9:50:53:5d:
         b8:bd:71:3a:fb:cb:7b:33:44:1c:99:01:e4:f1:38:96:58:06:
         7e:a8:fd:73:31:8b:dc:a5:51:46:a6:59:f0:32:e4:9f:14:e3:
         b8:a1:5c:df:93:f6:0c:29:45:84:60:6e:25:67:56:4b:96:c7:
         ce:4c:4f:1f:66:8b:cb:7d:3a:f4:ca:2a:59:df:f2:49:3f:d2:
         74:24:c4:ab:23:8d:e7:cc:b4:c8:74:91:39:35:2e:73:b1:40:
         41:83:c6:75:e9:a0:f7:c1:da:25:48:02:81:1f:31:a5:b7:ad:
         93:12:ed:06:9f:a2:9f:80:b7:75:88:8b:cd:68:3e:79:51:19:
         55:54:98:f5:36:3b:fe:44:5e:79:55:03:0f:b3:7d:e8:67:e3:
         f3:e4:b0:68:18:cc:3e:4b:c9:22:38:76:c6:bf:6f:bc:be:76:
         53:bf:b6:9e:f6:5a:51:1f:fe:94:4d:73:ac:03:15:57:b9:38:
         8f:9e:e5:78:7e:be:4d:4b:43:ee:d1:96:8b:76:48:4b:35:e7:
         f3:05:7b:f1:2f:b4:a2:d2:4a:0d:b8:fe:26:ea:71:10:81:b8:
         9c:d8:ad:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:30:31 2025 by rpki-client