Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/JZVbpYuY4fyvoz8BAcJtZn6bNmdm9tXeNaYhXJ8f2Vg/0/3137372e3132392e33362e302f32322d3234203d3e20323730353838.roa
File:                     3137372e3132392e33362e302f32322d3234203d3e20323730353838.roa (raw, json)
Hash identifier:          DDHt2Sy7S2VBFuHGm8FR/NuC5sQzjx5QlYq9sqH/gZU=
Subject key identifier:   54:5D:BA:8B:D9:51:49:E9:47:92:BF:60:9F:37:21:01:03:19:91:86
Certificate issuer:       /CN=98395AED1C5386EB667D2CD30DDAF80EC4EC4807
Certificate serial:       7223A922560EF80C5D0A2580D20256E9121B6475
Authority key identifier: 98:39:5A:ED:1C:53:86:EB:66:7D:2C:D3:0D:DA:F8:0E:C4:EC:48:07
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/98395AED1C5386EB667D2CD30DDAF80EC4EC4807.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/JZVbpYuY4fyvoz8BAcJtZn6bNmdm9tXeNaYhXJ8f2Vg/0/3137372e3132392e33362e302f32322d3234203d3e20323730353838.roa
Signing time:             Fri 25 Oct 2024 20:27:36 +0000
ROA not before:           Fri 25 Oct 2024 20:22:36 +0000
ROA not after:            Fri 24 Oct 2025 20:27:36 +0000
asID:                     270588
IP address blocks:        177.129.36.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:23:a9:22:56:0e:f8:0c:5d:0a:25:80:d2:02:56:e9:12:1b:64:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98395AED1C5386EB667D2CD30DDAF80EC4EC4807
        Validity
            Not Before: Oct 25 20:22:36 2024 GMT
            Not After : Oct 24 20:27:36 2025 GMT
        Subject: CN=545DBA8BD95149E94792BF609F37210103199186
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:0b:4e:54:61:62:f9:60:3c:3c:b9:a4:35:61:
                    53:ad:f7:46:c5:ac:08:04:0b:df:98:c6:dc:4c:83:
                    c9:2d:23:24:f6:c8:ef:9e:9d:bd:ca:33:53:6b:0e:
                    54:9d:cb:42:c1:4b:49:2f:20:78:7c:0a:86:8f:0f:
                    81:8c:82:ee:e2:20:56:06:b2:18:05:3c:fb:df:c9:
                    6b:79:6f:37:7f:cc:46:4f:ac:8b:d1:8f:aa:82:bc:
                    16:a9:e6:1a:48:f9:fa:86:7a:c0:ac:34:26:6a:cc:
                    71:40:73:90:b5:54:94:5a:8f:fc:5b:3a:e1:9c:b3:
                    aa:e2:12:30:2c:eb:1d:a8:bb:12:df:d1:5d:08:12:
                    60:8f:83:d5:7c:f5:6b:bc:c0:6c:7b:23:96:2d:c2:
                    5b:ca:04:36:ac:6e:f1:89:f7:21:04:b1:6f:82:52:
                    33:eb:1f:8b:64:f5:93:82:1c:4e:fc:82:83:c6:b7:
                    b8:62:cd:aa:c9:a4:d6:e6:aa:c7:fc:de:f4:f9:c8:
                    8d:f4:64:94:e2:ca:28:23:38:f6:e1:29:f0:3b:09:
                    e9:34:11:22:6f:e2:6e:c0:ed:cc:8f:ac:2f:92:01:
                    bb:e2:e1:08:f3:39:8f:6b:cf:42:4f:e1:04:9c:f4:
                    5a:49:1d:81:fe:31:5a:cb:ed:01:23:b4:f1:00:b4:
                    78:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:5D:BA:8B:D9:51:49:E9:47:92:BF:60:9F:37:21:01:03:19:91:86
            X509v3 Authority Key Identifier:
                keyid:98:39:5A:ED:1C:53:86:EB:66:7D:2C:D3:0D:DA:F8:0E:C4:EC:48:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/JZVbpYuY4fyvoz8BAcJtZn6bNmdm9tXeNaYhXJ8f2Vg/0/98395AED1C5386EB667D2CD30DDAF80EC4EC4807.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/98395AED1C5386EB667D2CD30DDAF80EC4EC4807.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/JZVbpYuY4fyvoz8BAcJtZn6bNmdm9tXeNaYhXJ8f2Vg/0/3137372e3132392e33362e302f32322d3234203d3e20323730353838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.129.36.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9b:ba:0c:32:ba:69:55:d8:4a:86:9a:e2:74:85:2b:de:c0:f3:
         b8:34:61:21:0c:a2:26:b6:59:07:f1:08:58:62:71:d5:aa:72:
         7d:b6:3a:51:9f:25:43:aa:f3:b1:2e:44:26:12:92:18:44:f4:
         08:91:3c:79:6f:39:2b:4f:53:7c:ac:15:2d:f7:6c:0e:1d:16:
         58:34:4e:6b:88:50:8a:49:1d:e6:d1:55:56:99:a5:0f:95:6f:
         91:37:f9:c9:68:03:ef:3f:4f:cb:a5:4d:7f:06:64:82:3e:45:
         20:06:a1:0a:db:38:fa:2c:c2:4a:0a:60:57:a4:c2:cb:a0:2e:
         c6:f1:1d:88:6e:bc:55:61:e9:39:32:70:f7:42:fc:a8:5b:92:
         af:ed:28:a1:57:2e:f1:88:70:d5:e6:32:15:66:71:b7:03:de:
         6e:25:21:c7:c3:66:5b:76:46:ea:99:d7:9d:71:89:c1:0f:27:
         2e:a5:41:ea:88:14:bb:b1:dc:41:1f:73:77:29:0c:0b:57:98:
         f9:f1:92:3d:e3:65:93:c4:ef:73:09:14:f8:0e:35:48:d9:02:
         4e:f3:21:98:d0:9f:d9:34:c8:04:ae:08:b7:c7:70:05:37:6c:
         42:5a:34:9d:b4:06:82:81:73:f0:9e:95:4f:ec:f1:ea:39:d7:
         d2:4e:4a:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:54:55 2025 by rpki-client