Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Gf2YAQA4eikNpDt8W6sUDD2UxxhUznX9jBdqvKrb2fd8/0/3137372e33362e31392e302f32342d3234203d3e20323731303432.roa
File:                     3137372e33362e31392e302f32342d3234203d3e20323731303432.roa (raw, json)
Hash identifier:          P42BKVA8cCCKJlAGnWbFcnN/s7rDG7YK15W7qyxuoWY=
Subject key identifier:   2F:F7:9A:F0:EB:7E:8D:C4:FB:B5:BD:A3:2A:30:C3:D9:66:46:63:5F
Certificate issuer:       /CN=615FAEA4CCDC7F702D4F5FA4C12583956179073A
Certificate serial:       3F351BB1C2D0C9991731CE6280B30FBC8B1F2E38
Authority key identifier: 61:5F:AE:A4:CC:DC:7F:70:2D:4F:5F:A4:C1:25:83:95:61:79:07:3A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/615FAEA4CCDC7F702D4F5FA4C12583956179073A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Gf2YAQA4eikNpDt8W6sUDD2UxxhUznX9jBdqvKrb2fd8/0/3137372e33362e31392e302f32342d3234203d3e20323731303432.roa
Signing time:             Fri 22 Dec 2023 17:10:27 +0000
ROA not before:           Fri 22 Dec 2023 17:05:27 +0000
ROA not after:            Fri 20 Dec 2024 17:10:27 +0000
asID:                     271042
IP address blocks:        177.36.19.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:35:1b:b1:c2:d0:c9:99:17:31:ce:62:80:b3:0f:bc:8b:1f:2e:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=615FAEA4CCDC7F702D4F5FA4C12583956179073A
        Validity
            Not Before: Dec 22 17:05:27 2023 GMT
            Not After : Dec 20 17:10:27 2024 GMT
        Subject: CN=2FF79AF0EB7E8DC4FBB5BDA32A30C3D96646635F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:ff:42:a7:81:23:95:39:0e:92:46:3c:63:15:
                    07:d3:28:3d:62:ff:f2:66:ca:0e:2f:70:58:41:59:
                    19:c4:28:4c:a9:0f:60:99:ae:75:68:ce:a1:8f:c3:
                    a8:66:09:0c:63:74:c8:3d:a9:4e:66:d4:8f:a7:19:
                    c3:cc:be:2a:79:ce:4c:d2:b2:db:ee:71:ec:4a:07:
                    88:1b:5c:e7:24:7d:7d:57:af:5b:7b:94:eb:02:57:
                    cc:0e:b4:5b:6d:20:76:23:5f:d6:8d:3b:40:a7:e4:
                    07:bc:7d:a6:66:48:fc:cc:fd:0d:d5:4d:84:50:36:
                    66:7d:15:1e:ef:ad:c6:96:8f:26:58:42:8c:7d:e3:
                    78:aa:5d:d5:db:17:61:ba:7e:7d:63:b9:92:18:cb:
                    a8:7c:bb:d5:8a:28:91:25:66:1d:82:7f:f1:22:de:
                    56:4a:c6:af:45:0f:59:aa:67:61:b9:ee:6e:15:34:
                    1d:60:b2:0c:49:16:ae:c2:d3:14:e6:ab:33:5c:2d:
                    6a:fa:3a:06:4b:be:8b:a7:36:3d:e8:9e:39:00:ee:
                    48:8e:a2:c4:70:4f:19:e5:9b:79:bf:17:15:a7:03:
                    2f:b2:cf:09:d6:5e:a2:61:59:92:76:5a:3c:44:6b:
                    fe:51:4a:bd:90:4e:b1:cc:c3:0a:b2:05:fe:f7:a6:
                    b2:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:F7:9A:F0:EB:7E:8D:C4:FB:B5:BD:A3:2A:30:C3:D9:66:46:63:5F
            X509v3 Authority Key Identifier:
                keyid:61:5F:AE:A4:CC:DC:7F:70:2D:4F:5F:A4:C1:25:83:95:61:79:07:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Gf2YAQA4eikNpDt8W6sUDD2UxxhUznX9jBdqvKrb2fd8/0/615FAEA4CCDC7F702D4F5FA4C12583956179073A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/615FAEA4CCDC7F702D4F5FA4C12583956179073A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gf2YAQA4eikNpDt8W6sUDD2UxxhUznX9jBdqvKrb2fd8/0/3137372e33362e31392e302f32342d3234203d3e20323731303432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.36.19.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b5:6e:0b:fc:aa:32:d3:1e:76:f7:c1:65:01:5f:49:60:b3:c0:
         b7:bd:88:70:8f:8d:ff:15:59:e5:57:f3:34:14:d7:79:40:b6:
         81:1d:a5:d1:a7:db:ce:b3:64:87:9a:d2:72:78:0f:82:c4:49:
         52:d5:2a:49:67:65:e7:d6:a7:a8:ec:3c:f2:23:93:31:35:2d:
         75:6b:64:e4:0b:81:06:71:51:04:0b:3c:4f:63:f5:c1:5d:2a:
         07:63:46:54:77:f2:b6:ed:b3:6e:90:7e:47:e5:d4:55:d6:eb:
         01:c9:fd:a3:10:c7:2d:f7:56:cd:7f:4d:c6:f9:08:f8:ea:08:
         98:5a:8b:94:d8:7e:83:8d:31:01:ca:f1:d1:74:34:d5:87:db:
         f4:4c:d6:95:33:06:ef:5f:e1:2b:fc:03:0e:af:8d:0c:22:38:
         b8:1f:b1:9f:cd:97:b5:97:78:a1:8c:88:3b:d1:a3:b5:cf:7c:
         fc:96:5e:bf:07:e9:e8:48:88:5d:8f:f3:04:ea:bf:de:7c:a6:
         89:09:72:86:08:24:04:69:a3:7e:32:57:40:32:9a:96:f5:d9:
         bd:16:6e:24:70:b0:63:7a:22:4c:96:35:05:50:81:f8:ba:38:
         7a:de:6b:3a:71:e7:38:76:ac:ac:74:f9:78:a5:ac:91:6c:1a:
         f6:8d:c8:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 04:39:43 2025 by rpki-client