Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3v2t2iJUXQcBGxWQrd99CK1n5Ef1ETFgvgdEQ1bhrZFh/0/3137372e36372e3135322e302f32322d3332203d3e203533303134.roa
File:                     3137372e36372e3135322e302f32322d3332203d3e203533303134.roa (raw, json)
Hash identifier:          bstHlsBRU+gPVZFPg1Jgek+m3ci+HZ/H7Fo1DdLZmis=
Subject key identifier:   F2:48:8F:9A:E4:8A:40:95:1F:A0:80:5D:F4:DA:8F:75:BA:11:5D:21
Certificate issuer:       /CN=DD7C07AB5D45C142684E530246EC0DF22CA535A2
Certificate serial:       4C3245A9E8F254E8E1AEE10029E21C92AA0FECAD
Authority key identifier: DD:7C:07:AB:5D:45:C1:42:68:4E:53:02:46:EC:0D:F2:2C:A5:35:A2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DD7C07AB5D45C142684E530246EC0DF22CA535A2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3v2t2iJUXQcBGxWQrd99CK1n5Ef1ETFgvgdEQ1bhrZFh/0/3137372e36372e3135322e302f32322d3332203d3e203533303134.roa
Signing time:             Wed 06 Sep 2023 00:17:37 +0000
ROA not before:           Wed 06 Sep 2023 00:12:37 +0000
ROA not after:            Wed 04 Sep 2024 00:17:37 +0000
asID:                     53014
IP address blocks:        177.67.152.0/22 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:32:45:a9:e8:f2:54:e8:e1:ae:e1:00:29:e2:1c:92:aa:0f:ec:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DD7C07AB5D45C142684E530246EC0DF22CA535A2
        Validity
            Not Before: Sep  6 00:12:37 2023 GMT
            Not After : Sep  4 00:17:37 2024 GMT
        Subject: CN=F2488F9AE48A40951FA0805DF4DA8F75BA115D21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:cc:81:84:84:94:1a:0d:9b:73:24:f0:f1:51:
                    30:64:ca:ba:fd:df:4e:99:55:2f:b3:8b:c7:79:f2:
                    e0:fd:d3:d1:5e:b4:01:e2:e3:14:08:47:e8:08:e6:
                    94:43:9f:6a:9d:b2:c5:b1:54:5c:6a:c7:bc:06:e2:
                    14:77:d7:ce:67:0e:15:25:cd:c1:a5:5a:2e:8b:25:
                    a9:ee:3f:3d:1e:8e:22:5a:f8:34:90:39:6d:33:3e:
                    be:28:77:13:21:96:9e:8a:d3:f1:6f:18:e1:58:b1:
                    ea:85:c5:ae:cb:04:04:9c:d7:69:39:9a:7f:ff:19:
                    12:bf:86:00:ad:87:ba:59:e5:a0:0d:5e:c3:be:77:
                    67:86:db:38:92:21:ba:aa:9f:ec:56:c5:42:d9:93:
                    ae:f8:6f:4f:56:b5:c5:d5:41:22:c8:9b:b6:63:70:
                    82:1e:31:d8:55:74:70:c3:f9:dd:0a:eb:0c:81:72:
                    28:51:fe:0f:de:09:ca:b2:18:97:2a:c7:92:ac:bc:
                    17:bf:d8:56:98:fd:a5:1b:e1:c6:a4:cb:56:7a:fd:
                    52:1a:69:a0:81:03:41:3e:e9:cd:d6:d8:84:63:23:
                    52:df:f2:4b:81:b2:3c:d6:46:59:30:ae:e8:ca:ae:
                    2e:a5:13:6a:69:f8:3e:aa:7f:66:68:10:33:fd:cc:
                    b0:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:48:8F:9A:E4:8A:40:95:1F:A0:80:5D:F4:DA:8F:75:BA:11:5D:21
            X509v3 Authority Key Identifier:
                keyid:DD:7C:07:AB:5D:45:C1:42:68:4E:53:02:46:EC:0D:F2:2C:A5:35:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3v2t2iJUXQcBGxWQrd99CK1n5Ef1ETFgvgdEQ1bhrZFh/0/DD7C07AB5D45C142684E530246EC0DF22CA535A2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DD7C07AB5D45C142684E530246EC0DF22CA535A2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3v2t2iJUXQcBGxWQrd99CK1n5Ef1ETFgvgdEQ1bhrZFh/0/3137372e36372e3135322e302f32322d3332203d3e203533303134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.67.152.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a5:b5:fe:e8:13:c6:33:bc:8c:22:bf:f7:82:fe:34:72:26:80:
         6b:4e:df:31:27:a1:a0:0f:cf:00:ca:9a:2f:fe:9d:8c:ed:27:
         c6:ce:5e:9c:45:dd:07:8e:3c:8b:b3:ab:59:7c:09:76:9a:21:
         66:73:80:7b:d2:ae:a7:ae:70:a7:05:6a:7f:d2:84:8f:dd:25:
         f8:2c:93:99:88:d1:31:e3:41:b8:50:25:e8:9c:2e:f1:42:a7:
         38:87:87:70:c1:20:7b:5f:ff:d3:fe:19:70:b2:0d:5c:a1:ac:
         67:57:df:fb:63:be:67:18:60:5a:20:3a:f0:17:4f:bb:3c:c1:
         3f:38:9b:2e:15:94:1f:e8:3c:6d:17:91:a2:ad:81:4e:5b:de:
         98:fa:57:5e:f1:fd:e0:65:67:d7:b0:8f:1d:89:6d:0f:23:4d:
         eb:15:21:10:5e:90:9a:9c:67:b9:24:12:e3:ac:47:07:9a:52:
         db:63:f2:20:4d:ee:22:dc:12:60:b0:81:f9:36:c2:2d:f0:05:
         16:df:29:20:cc:95:da:31:c5:c3:fd:9a:32:1a:73:0e:1f:90:
         e6:37:f3:89:4a:90:71:94:7f:c1:3a:57:48:1d:99:e6:11:0a:
         65:d4:01:8d:4e:d7:79:92:c8:e8:59:ac:6f:05:86:0b:c5:08:
         da:b3:c4:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:36:38 2025 by rpki-client