Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Gf2YAQA4eikNpDt8W6sUDD2UxxhUznX9jBdqvKrb2fd8/0/3137372e33362e31362e302f32322d3232203d3e20323731303432.roa
File:                     3137372e33362e31362e302f32322d3232203d3e20323731303432.roa (raw, json)
Hash identifier:          GHrB8VGdghPYcgX9NVpJKv9qaLpRuh9f4kltrTHz1mw=
Subject key identifier:   0F:5F:87:2C:A4:8F:03:38:92:31:D8:12:69:66:68:62:AE:A2:33:14
Certificate issuer:       /CN=615FAEA4CCDC7F702D4F5FA4C12583956179073A
Certificate serial:       0394C2691FA186F0F379737D7E31B6C8B99BF246
Authority key identifier: 61:5F:AE:A4:CC:DC:7F:70:2D:4F:5F:A4:C1:25:83:95:61:79:07:3A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/615FAEA4CCDC7F702D4F5FA4C12583956179073A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Gf2YAQA4eikNpDt8W6sUDD2UxxhUznX9jBdqvKrb2fd8/0/3137372e33362e31362e302f32322d3232203d3e20323731303432.roa
Signing time:             Tue 07 Nov 2023 16:19:16 +0000
ROA not before:           Tue 07 Nov 2023 16:14:16 +0000
ROA not after:            Tue 05 Nov 2024 16:19:16 +0000
asID:                     271042
IP address blocks:        177.36.16.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:94:c2:69:1f:a1:86:f0:f3:79:73:7d:7e:31:b6:c8:b9:9b:f2:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=615FAEA4CCDC7F702D4F5FA4C12583956179073A
        Validity
            Not Before: Nov  7 16:14:16 2023 GMT
            Not After : Nov  5 16:19:16 2024 GMT
        Subject: CN=0F5F872CA48F03389231D81269666862AEA23314
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:f2:62:41:80:2c:e0:23:aa:a1:ef:a0:ac:f9:
                    e3:4a:41:53:7d:78:19:1a:36:11:50:32:4f:ca:00:
                    00:92:43:5f:93:b0:5e:ee:4f:6d:c2:2a:a5:a9:bb:
                    97:59:a6:c9:8c:63:42:fe:55:01:72:fc:11:99:8d:
                    a6:f0:a5:2f:09:21:75:11:3d:3e:16:9c:c0:4e:c9:
                    57:dd:dc:fe:9f:36:fa:c8:95:f3:28:eb:93:27:4c:
                    59:ed:d4:7f:d5:f9:51:3d:72:78:dd:1a:24:ca:72:
                    13:55:a7:e8:67:78:03:6b:34:5c:d5:f5:f7:53:ec:
                    f0:52:6a:3e:b5:c9:27:1e:78:31:06:a5:0a:13:aa:
                    3a:24:ab:8b:cf:52:17:4f:43:95:07:8f:b7:d0:1a:
                    de:66:ac:08:aa:66:75:90:8c:97:14:92:b6:b0:8c:
                    04:3f:87:fa:7c:f3:ad:37:fd:81:8f:27:8e:b9:dc:
                    9d:8e:e0:39:9c:8e:09:52:cf:dd:79:d7:8c:44:ac:
                    08:b5:3c:2d:e0:9e:33:32:a3:b2:ac:88:b9:e2:3b:
                    6d:e4:21:82:e3:54:b0:68:95:73:2d:77:93:2a:59:
                    62:ef:3e:0e:44:ea:2c:f5:35:f8:4b:bd:46:b7:d8:
                    6d:cb:82:58:5a:d0:8c:14:d7:35:13:ed:0f:2b:fa:
                    c6:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:5F:87:2C:A4:8F:03:38:92:31:D8:12:69:66:68:62:AE:A2:33:14
            X509v3 Authority Key Identifier:
                keyid:61:5F:AE:A4:CC:DC:7F:70:2D:4F:5F:A4:C1:25:83:95:61:79:07:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Gf2YAQA4eikNpDt8W6sUDD2UxxhUznX9jBdqvKrb2fd8/0/615FAEA4CCDC7F702D4F5FA4C12583956179073A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/615FAEA4CCDC7F702D4F5FA4C12583956179073A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gf2YAQA4eikNpDt8W6sUDD2UxxhUznX9jBdqvKrb2fd8/0/3137372e33362e31362e302f32322d3232203d3e20323731303432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.36.16.0/22

    Signature Algorithm: sha256WithRSAEncryption
         48:f6:81:92:bc:96:f6:d1:10:55:99:64:1c:29:17:81:b3:9a:
         c1:ef:47:72:b2:31:92:20:98:79:3e:65:34:5a:90:44:74:8b:
         0f:a9:83:db:22:d7:b3:0a:b5:be:f4:2e:e6:bf:94:9b:e6:5b:
         24:a6:09:d5:92:3e:18:d8:9d:c5:42:56:62:ad:82:78:17:8e:
         c7:8c:1c:5b:e9:da:ce:e7:d2:64:95:7d:a1:55:6e:1b:5b:50:
         fe:ab:3a:be:d8:9f:b8:8f:49:8e:46:83:cb:d7:8a:e7:28:24:
         8f:2a:dc:0f:ec:29:20:69:97:b2:cd:1d:4b:40:22:75:73:fc:
         b8:06:bb:35:59:e7:95:88:54:34:2e:88:88:89:7d:76:af:09:
         96:a6:37:d9:49:75:12:6a:00:d5:d4:e8:cf:43:30:18:1c:71:
         4a:97:1b:8c:db:b5:e9:7b:9e:4e:c7:b7:3a:53:c3:e1:f4:b8:
         18:2f:61:56:79:5f:89:98:a3:65:9f:d5:66:0b:00:dd:0f:65:
         f0:c9:ae:c4:58:aa:89:cc:9f:f5:29:1d:c3:ab:b5:a4:1b:90:
         37:ee:47:f1:ee:45:64:ad:27:32:47:00:69:03:7e:74:a2:ac:
         f5:16:27:b6:79:7c:b0:fa:fa:3e:de:a6:c5:70:55:ca:4a:67:
         a3:bb:f4:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 13:19:43 2025 by rpki-client