Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4BbHUHUuKBN6ZfxGERJtCGtooGkfLKFBS1hQs29ZUWoH/0/3137372e36362e37372e302f32342d3234203d3e20323634313137.roa
File:                     3137372e36362e37372e302f32342d3234203d3e20323634313137.roa (raw, json)
Hash identifier:          z/hH63CMbM+LwV5VNQgTw/wR8czMYS8Wur2x4hAuajE=
Subject key identifier:   79:EF:CC:4B:D7:B0:8B:E5:66:2C:B3:28:31:59:46:8B:D2:37:42:88
Certificate issuer:       /CN=45CE16AA7939EB17050D2F7FB4EE87F4A355D81D
Certificate serial:       053EB78DD1E99ED0317575C12C50B8C5EC782614
Authority key identifier: 45:CE:16:AA:79:39:EB:17:05:0D:2F:7F:B4:EE:87:F4:A3:55:D8:1D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/45CE16AA7939EB17050D2F7FB4EE87F4A355D81D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4BbHUHUuKBN6ZfxGERJtCGtooGkfLKFBS1hQs29ZUWoH/0/3137372e36362e37372e302f32342d3234203d3e20323634313137.roa
Signing time:             Tue 23 Aug 2022 14:18:23 +0000
ROA not before:           Tue 23 Aug 2022 14:13:23 +0000
ROA not after:            Tue 22 Aug 2023 14:18:23 +0000
asID:                     264117
IP address blocks:        177.66.77.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:3e:b7:8d:d1:e9:9e:d0:31:75:75:c1:2c:50:b8:c5:ec:78:26:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45CE16AA7939EB17050D2F7FB4EE87F4A355D81D
        Validity
            Not Before: Aug 23 14:13:23 2022 GMT
            Not After : Aug 22 14:18:23 2023 GMT
        Subject: CN=3082010A0282010100AB52F4A52E7488CADE8022AB0CCA0FB13FD23CB22F271B9D8FADB545F6094D9DDD282437FD0665BC0493316A5D8D65AF9B28930C753545356A71E615FB1E941F73A407BC68E4300B99BB548FDD0B7939093A3849CFE5EA9070552EB245FBEB4BF963A67E9AF4457B4670356B08B960A8FC0264C07A21C4E6D6C8766FAA04CB7DB1622D37D99CE35022A89B3E5DF24D6CB5C758F1566FC40031B6C1C2AB841590EF7B51635A24075C3DE21D4074A5E69AFD03A5BB67ADCA212A4511FFFE914670BAF974BF98BDF8990AE8B4DC6AB954F1DCE05C54A95489A73ABD1D9E229590B0D32E3E5871B6A8E38209A49F2F6B2A209C3C817EECB9E7FB98038AAB479EAF0B0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:52:f4:a5:2e:74:88:ca:de:80:22:ab:0c:ca:
                    0f:b1:3f:d2:3c:b2:2f:27:1b:9d:8f:ad:b5:45:f6:
                    09:4d:9d:dd:28:24:37:fd:06:65:bc:04:93:31:6a:
                    5d:8d:65:af:9b:28:93:0c:75:35:45:35:6a:71:e6:
                    15:fb:1e:94:1f:73:a4:07:bc:68:e4:30:0b:99:bb:
                    54:8f:dd:0b:79:39:09:3a:38:49:cf:e5:ea:90:70:
                    55:2e:b2:45:fb:eb:4b:f9:63:a6:7e:9a:f4:45:7b:
                    46:70:35:6b:08:b9:60:a8:fc:02:64:c0:7a:21:c4:
                    e6:d6:c8:76:6f:aa:04:cb:7d:b1:62:2d:37:d9:9c:
                    e3:50:22:a8:9b:3e:5d:f2:4d:6c:b5:c7:58:f1:56:
                    6f:c4:00:31:b6:c1:c2:ab:84:15:90:ef:7b:51:63:
                    5a:24:07:5c:3d:e2:1d:40:74:a5:e6:9a:fd:03:a5:
                    bb:67:ad:ca:21:2a:45:11:ff:fe:91:46:70:ba:f9:
                    74:bf:98:bd:f8:99:0a:e8:b4:dc:6a:b9:54:f1:dc:
                    e0:5c:54:a9:54:89:a7:3a:bd:1d:9e:22:95:90:b0:
                    d3:2e:3e:58:71:b6:a8:e3:82:09:a4:9f:2f:6b:2a:
                    20:9c:3c:81:7e:ec:b9:e7:fb:98:03:8a:ab:47:9e:
                    af:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:EF:CC:4B:D7:B0:8B:E5:66:2C:B3:28:31:59:46:8B:D2:37:42:88
            X509v3 Authority Key Identifier:
                keyid:45:CE:16:AA:79:39:EB:17:05:0D:2F:7F:B4:EE:87:F4:A3:55:D8:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4BbHUHUuKBN6ZfxGERJtCGtooGkfLKFBS1hQs29ZUWoH/0/45CE16AA7939EB17050D2F7FB4EE87F4A355D81D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/45CE16AA7939EB17050D2F7FB4EE87F4A355D81D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4BbHUHUuKBN6ZfxGERJtCGtooGkfLKFBS1hQs29ZUWoH/0/3137372e36362e37372e302f32342d3234203d3e20323634313137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.66.77.0/24

    Signature Algorithm: sha256WithRSAEncryption
         47:24:8d:40:ee:e4:61:10:f4:4e:e6:df:15:96:4c:23:ef:1c:
         ce:5e:11:de:24:30:97:0b:ba:ba:52:33:cb:e5:b5:f9:24:90:
         e7:4f:20:73:3b:14:ba:6b:57:f7:18:6a:1b:78:5e:bb:3f:67:
         17:73:91:c1:98:9e:b6:b4:29:a8:b5:c0:92:ba:83:e7:44:fa:
         8e:40:53:0a:26:9f:48:57:36:32:2f:ea:7b:5e:f8:82:8b:f6:
         07:88:8d:36:1a:f8:09:21:1a:fd:02:f3:48:11:f2:80:56:b2:
         14:fa:35:9b:23:bd:c4:93:fd:50:c6:71:a0:64:bb:60:46:d5:
         11:b7:93:bf:bf:c4:b8:8e:5d:4c:5b:66:d4:a3:b9:86:f7:88:
         97:48:46:8c:0b:c1:35:6b:de:d7:a6:31:4c:92:b0:04:71:9f:
         6f:2a:85:dd:e2:c2:89:bb:41:a5:88:ad:7a:ef:c5:32:40:f7:
         fc:fc:ef:09:2c:a0:17:e3:81:6c:24:88:5d:59:2a:02:a4:b0:
         08:0d:d6:9d:4e:c2:01:18:f9:ae:7d:07:07:15:f9:0e:85:ed:
         a6:ec:8c:0e:f4:c7:eb:de:dc:d0:b7:54:96:42:b6:80:b3:c4:
         8b:aa:e0:cc:f5:49:55:d1:9e:9f:e3:5e:40:00:b5:a6:28:88:
         8e:4c:f8:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 20:17:13 2025 by rpki-client