Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2EhnvAwQBxyPbkhUphMQnxCuTEDgv7kSB1aTD418ThSX/0/3137372e3232322e3233322e302f32312d3234203d3e20323633343030.roa
File:                     3137372e3232322e3233322e302f32312d3234203d3e20323633343030.roa (raw, json)
Hash identifier:          NWoZu6FMYmjKzUAi0tu5RZXTZgH7KlEz2GOpP81Trso=
Subject key identifier:   AC:5C:B3:CE:19:98:E3:CD:83:B0:32:A5:C7:CE:F6:E8:0E:2D:A2:DF
Certificate issuer:       /CN=66BB468AD419CCD0B6DF4265467F9C63C74D974E
Certificate serial:       2C81C7B9F3A566382515C15D8BFD66D7A3AE5FCE
Authority key identifier: 66:BB:46:8A:D4:19:CC:D0:B6:DF:42:65:46:7F:9C:63:C7:4D:97:4E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/66BB468AD419CCD0B6DF4265467F9C63C74D974E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2EhnvAwQBxyPbkhUphMQnxCuTEDgv7kSB1aTD418ThSX/0/3137372e3232322e3233322e302f32312d3234203d3e20323633343030.roa
Signing time:             Mon 03 Jul 2023 17:34:55 +0000
ROA not before:           Mon 03 Jul 2023 17:29:55 +0000
ROA not after:            Mon 01 Jul 2024 17:34:55 +0000
asID:                     263400
IP address blocks:        177.222.232.0/21 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:81:c7:b9:f3:a5:66:38:25:15:c1:5d:8b:fd:66:d7:a3:ae:5f:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66BB468AD419CCD0B6DF4265467F9C63C74D974E
        Validity
            Not Before: Jul  3 17:29:55 2023 GMT
            Not After : Jul  1 17:34:55 2024 GMT
        Subject: CN=AC5CB3CE1998E3CD83B032A5C7CEF6E80E2DA2DF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:88:ce:2c:a5:ce:6f:45:db:1b:97:37:78:67:
                    fd:45:d7:0a:2a:e0:e6:1c:cd:a7:b1:6d:6d:fb:f0:
                    c6:03:f7:95:8b:d3:bc:65:03:c9:6a:e2:7c:f2:34:
                    9f:a3:02:bc:61:85:03:02:4f:9e:04:0f:e0:80:6b:
                    22:bb:21:e8:ba:62:b3:fb:d3:3d:64:e8:fc:f6:2f:
                    53:73:b3:99:af:40:36:5c:0f:11:dc:fb:b2:39:d8:
                    8a:bd:d2:7e:6e:ea:b0:a2:89:b6:03:84:61:49:5d:
                    58:58:e1:84:69:78:55:1c:39:bf:9e:ba:e3:69:40:
                    61:1d:a0:58:be:d7:95:49:e9:9a:1e:21:b5:6d:10:
                    2d:f7:35:a1:dd:20:90:66:c8:77:23:e9:47:f0:d1:
                    d4:af:6a:66:2d:ce:76:22:0a:8a:84:6b:d2:4e:b2:
                    cf:0a:52:05:e0:78:3b:b8:65:68:d4:ca:b6:63:55:
                    49:a3:a2:10:fa:35:d1:27:73:01:e9:b0:8b:7d:75:
                    46:d9:30:cb:2b:d8:f4:56:6a:cd:ea:5a:e6:2c:de:
                    28:3e:70:ee:18:5e:96:a2:f0:08:29:2b:47:35:b5:
                    9b:04:9e:09:c7:51:82:8a:17:fa:36:b9:a5:6a:a6:
                    21:d9:c6:33:e7:8f:38:6a:81:c6:25:80:14:ab:cb:
                    7a:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:5C:B3:CE:19:98:E3:CD:83:B0:32:A5:C7:CE:F6:E8:0E:2D:A2:DF
            X509v3 Authority Key Identifier:
                keyid:66:BB:46:8A:D4:19:CC:D0:B6:DF:42:65:46:7F:9C:63:C7:4D:97:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2EhnvAwQBxyPbkhUphMQnxCuTEDgv7kSB1aTD418ThSX/0/66BB468AD419CCD0B6DF4265467F9C63C74D974E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/66BB468AD419CCD0B6DF4265467F9C63C74D974E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2EhnvAwQBxyPbkhUphMQnxCuTEDgv7kSB1aTD418ThSX/0/3137372e3232322e3233322e302f32312d3234203d3e20323633343030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.222.232.0/21

    Signature Algorithm: sha256WithRSAEncryption
         34:ef:98:39:d1:4d:f0:95:33:82:9a:e5:9a:f6:bf:d8:c2:8b:
         a7:88:48:cb:6e:7f:07:91:79:2b:80:5b:05:6b:c5:6f:da:c0:
         ed:ac:1d:aa:8c:90:f8:91:91:db:4c:6f:6a:26:e2:f4:cd:0e:
         e9:31:15:b2:7d:9d:c8:ed:91:e3:63:87:a5:4c:a5:83:60:ba:
         8e:d0:04:f8:ae:1c:ac:bd:9e:cf:75:5e:14:a5:bb:f2:3c:e9:
         3b:f6:ce:01:61:72:f6:6e:05:be:00:2f:47:b0:e0:98:30:5a:
         c8:96:27:fd:8b:e0:83:ac:29:35:04:82:5d:27:cb:81:24:35:
         ba:9e:ae:a4:e8:8d:e7:ca:03:49:d1:d8:76:6a:ce:a3:f0:2c:
         63:72:fc:c4:a8:7d:ff:8c:79:ed:2e:0c:71:58:d8:39:95:73:
         21:ce:ef:a5:49:70:15:e7:54:0d:9a:db:59:2a:04:0f:f8:18:
         82:d0:b9:80:44:17:b4:80:1b:fd:c3:4c:a0:61:ea:90:4c:d0:
         1d:5d:b2:3f:52:2b:97:5c:a3:b3:33:f3:4c:74:19:f3:b7:85:
         66:6a:00:77:72:0b:e4:6b:2b:1b:af:78:d6:8d:bb:78:b6:ca:
         3a:37:c3:ed:bb:b8:45:03:30:82:d8:7a:16:49:86:2c:2e:44:
         d3:b2:7b:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:29:13 2025 by rpki-client