Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/0/3137372e32332e3235322e302f32322d3232203d3e203631363231.roa
File:                     3137372e32332e3235322e302f32322d3232203d3e203631363231.roa (raw, json)
Hash identifier:          1uWsiNKVrBfF40/8L85JhvUUUG5d1KZXTqDqrqXU+Hc=
Subject key identifier:   B5:6F:D2:72:18:6F:D7:70:5E:E8:3E:61:65:D0:AA:A4:54:CE:49:3A
Certificate issuer:       /CN=3C7BA9294464BE01B4C2A500708DD55CA879584D
Certificate serial:       31E1AADA15B8651697ADE3FBA96B079E215AF60F
Authority key identifier: 3C:7B:A9:29:44:64:BE:01:B4:C2:A5:00:70:8D:D5:5C:A8:79:58:4D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3C7BA9294464BE01B4C2A500708DD55CA879584D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/0/3137372e32332e3235322e302f32322d3232203d3e203631363231.roa
Signing time:             Tue 19 Nov 2024 21:21:36 +0000
ROA not before:           Tue 19 Nov 2024 21:16:36 +0000
ROA not after:            Tue 18 Nov 2025 21:21:36 +0000
asID:                     61621
IP address blocks:        177.23.252.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:e1:aa:da:15:b8:65:16:97:ad:e3:fb:a9:6b:07:9e:21:5a:f6:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3C7BA9294464BE01B4C2A500708DD55CA879584D
        Validity
            Not Before: Nov 19 21:16:36 2024 GMT
            Not After : Nov 18 21:21:36 2025 GMT
        Subject: CN=B56FD272186FD7705EE83E6165D0AAA454CE493A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:ad:eb:9f:15:37:39:ad:33:18:47:c9:83:d6:
                    02:61:8e:d0:12:7c:fb:82:bb:14:77:bc:bc:85:17:
                    fd:ef:a0:96:ee:67:a0:78:5e:75:2e:1d:61:cb:7b:
                    a0:ab:de:09:f6:b6:a7:b0:56:78:c5:ee:e6:0c:5a:
                    46:63:fd:0c:f1:d8:f7:77:87:57:f1:28:84:82:a5:
                    f8:0c:9b:86:75:1b:e7:72:f8:16:79:c4:42:8e:9f:
                    73:42:b5:df:cb:0b:1d:6d:cc:05:4f:02:06:3c:86:
                    b8:0a:6c:d8:12:2b:7d:71:7a:c2:68:90:8b:7a:6d:
                    d9:0c:bc:c0:df:3c:ee:1a:f2:8d:2e:dc:c2:18:5d:
                    57:dc:74:41:31:61:18:2f:33:0e:23:ac:7e:48:4a:
                    79:96:de:44:2a:21:ae:61:64:8b:f8:4a:77:c3:58:
                    5a:b3:6a:56:6d:13:16:1d:be:8d:ea:cf:4a:03:6a:
                    7f:f6:fd:23:87:2b:58:62:4e:ed:a7:e8:73:5b:bf:
                    0e:94:fd:b7:5b:3d:eb:a1:c4:30:10:93:73:cc:87:
                    73:bf:1e:12:9d:c7:d5:ed:b4:5d:19:0a:04:80:45:
                    45:74:ed:32:06:00:31:43:58:a8:2a:30:5d:22:4d:
                    5a:3e:9a:40:68:a8:f0:8e:3f:a3:c1:f3:6b:9e:f2:
                    15:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:6F:D2:72:18:6F:D7:70:5E:E8:3E:61:65:D0:AA:A4:54:CE:49:3A
            X509v3 Authority Key Identifier:
                keyid:3C:7B:A9:29:44:64:BE:01:B4:C2:A5:00:70:8D:D5:5C:A8:79:58:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/0/3C7BA9294464BE01B4C2A500708DD55CA879584D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3C7BA9294464BE01B4C2A500708DD55CA879584D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/0/3137372e32332e3235322e302f32322d3232203d3e203631363231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.23.252.0/22

    Signature Algorithm: sha256WithRSAEncryption
         39:89:9f:61:76:3d:16:9a:c2:42:85:a6:38:57:cf:ff:b6:76:
         9f:57:19:b5:b0:02:f9:14:51:0d:db:eb:f9:b9:a6:ce:a6:03:
         c7:d1:55:a3:83:48:2d:cc:ef:6a:b1:0e:44:63:13:0d:72:c4:
         6f:d5:a5:c3:bd:e4:ae:ea:5c:02:dc:93:c2:75:00:0b:cf:e8:
         60:d5:62:a5:86:8a:c4:54:d3:29:ae:b7:10:7c:10:7f:fd:a7:
         17:17:48:c3:b6:13:d5:ab:09:28:a7:20:54:ad:0c:33:5c:96:
         d7:7b:df:e5:07:b0:32:f6:05:de:d6:94:1c:f3:02:5a:c4:b4:
         84:9c:63:4c:a4:ca:9e:57:24:8b:04:14:9a:0b:86:b5:19:a1:
         b3:f6:80:2f:d3:21:e2:82:74:23:fb:34:3c:c9:d4:ba:ea:7b:
         76:4e:c0:58:16:c2:49:6f:cf:ef:52:ed:bc:11:11:6e:23:b1:
         e1:a4:8b:ba:ed:04:b7:17:59:e6:85:75:ce:25:f1:48:7e:45:
         0e:fb:c3:c8:ce:f2:75:b3:ce:74:5c:18:18:c2:66:76:65:5b:
         41:bb:5a:25:24:c1:48:8e:5b:35:20:16:0e:74:b4:c2:a8:15:
         15:2f:74:48:69:b2:9a:bc:ea:6d:1e:14:97:79:5d:8d:db:fa:
         93:11:60:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:09:13 2025 by rpki-client