Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4A5d97posXL29CbuStvVv3XACfR2c7rXbdDTCXiCERqX/0/3137372e31312e3136382e302f32312d3234203d3e203532393033.roa
File:                     3137372e31312e3136382e302f32312d3234203d3e203532393033.roa (raw, json)
Hash identifier:          P7DhIelTh/V80pZmI8uPi2+EkvLz8TkR4q0NXkICVvI=
Subject key identifier:   28:2B:0A:33:04:3D:BA:43:E5:E9:4B:FD:64:9F:F6:E4:93:40:3C:A7
Certificate issuer:       /CN=663B04E84B40B6C39816F987E77ACDAD976C215F
Certificate serial:       1F0A3BDCEEC457F791E4CD9989A509A220866269
Authority key identifier: 66:3B:04:E8:4B:40:B6:C3:98:16:F9:87:E7:7A:CD:AD:97:6C:21:5F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/663B04E84B40B6C39816F987E77ACDAD976C215F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4A5d97posXL29CbuStvVv3XACfR2c7rXbdDTCXiCERqX/0/3137372e31312e3136382e302f32312d3234203d3e203532393033.roa
Signing time:             Tue 22 Aug 2023 15:25:37 +0000
ROA not before:           Tue 22 Aug 2023 15:20:37 +0000
ROA not after:            Tue 20 Aug 2024 15:25:37 +0000
asID:                     52903
IP address blocks:        177.11.168.0/21 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:0a:3b:dc:ee:c4:57:f7:91:e4:cd:99:89:a5:09:a2:20:86:62:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=663B04E84B40B6C39816F987E77ACDAD976C215F
        Validity
            Not Before: Aug 22 15:20:37 2023 GMT
            Not After : Aug 20 15:25:37 2024 GMT
        Subject: CN=282B0A33043DBA43E5E94BFD649FF6E493403CA7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:0c:e6:39:ab:18:1b:bb:3f:64:6e:13:2e:29:
                    78:bc:6e:3a:ca:e5:cf:be:89:a7:7f:cb:1b:be:93:
                    34:32:d6:db:31:8c:92:d3:a4:99:f4:64:fd:01:0a:
                    8a:c6:e4:51:db:d8:73:21:6f:27:e7:3f:37:b3:c4:
                    5a:b0:a2:33:f8:22:97:45:cc:ef:5b:e1:a3:85:15:
                    d7:02:12:f3:41:da:71:71:a7:2f:ca:74:15:01:13:
                    f7:d9:43:a5:ab:42:bd:9e:01:bf:d4:d4:37:33:36:
                    bc:8d:02:44:4d:20:80:e9:75:4d:db:79:49:b8:79:
                    f6:dd:f1:20:1f:bb:b0:5a:b8:fc:f6:80:be:d9:65:
                    1f:93:f4:2c:1d:05:67:dd:2b:40:f5:44:6a:e4:23:
                    8f:6d:8e:29:bd:52:1b:63:ec:24:cd:5b:42:04:7a:
                    32:e2:93:cf:e1:66:a0:a2:bd:1c:fc:3b:0d:4b:98:
                    74:0f:62:a4:65:dd:44:ed:48:8d:83:63:9f:ec:c7:
                    ae:3b:93:7e:ff:e6:83:b5:0a:70:00:27:8b:fd:5f:
                    16:4b:2b:a0:2f:98:5b:5d:79:07:8b:e3:b9:32:06:
                    cd:8e:3a:fe:ff:62:64:58:39:c9:36:5c:18:cd:6e:
                    9f:b0:7e:e8:9b:72:36:f6:d1:0f:c4:62:97:cc:c1:
                    1a:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:2B:0A:33:04:3D:BA:43:E5:E9:4B:FD:64:9F:F6:E4:93:40:3C:A7
            X509v3 Authority Key Identifier:
                keyid:66:3B:04:E8:4B:40:B6:C3:98:16:F9:87:E7:7A:CD:AD:97:6C:21:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4A5d97posXL29CbuStvVv3XACfR2c7rXbdDTCXiCERqX/0/663B04E84B40B6C39816F987E77ACDAD976C215F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/663B04E84B40B6C39816F987E77ACDAD976C215F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4A5d97posXL29CbuStvVv3XACfR2c7rXbdDTCXiCERqX/0/3137372e31312e3136382e302f32312d3234203d3e203532393033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.11.168.0/21

    Signature Algorithm: sha256WithRSAEncryption
         44:ec:32:4f:7a:e4:f1:59:1d:dc:82:a1:f0:59:ed:de:cb:6c:
         12:e4:f3:2d:64:0f:53:c2:8f:89:33:b8:9b:f1:ec:12:63:09:
         d2:a0:16:0b:15:62:fc:8d:5f:2f:d8:40:28:03:ea:e5:ca:94:
         1e:ce:10:08:50:83:80:25:38:95:59:6f:60:cf:53:2e:be:b7:
         3b:4d:2a:50:0b:1a:c9:83:7e:e4:92:05:c4:7e:9c:b6:a7:2e:
         05:3f:b8:d5:d5:e5:77:46:2e:59:c4:71:87:d1:a1:23:34:59:
         6b:af:58:81:a3:0d:3b:ac:92:ce:d2:20:2d:e3:81:87:ff:d8:
         3a:75:70:97:1f:ea:58:7f:43:7d:82:1e:a6:ee:33:38:f5:be:
         e9:ec:32:ce:bd:8f:08:81:b3:b0:04:58:a2:d0:9f:2a:98:7b:
         62:4a:f7:c4:82:7e:c4:12:80:13:49:fe:08:bc:1d:74:18:ea:
         34:2c:e4:86:a9:34:89:8f:97:06:c6:50:e5:7d:37:8d:d0:c5:
         ca:71:81:ee:da:6f:b8:c1:b9:cb:47:ab:3e:06:c1:b3:57:77:
         a7:ac:39:48:9a:8e:fe:1b:d1:2d:96:4c:c2:c7:5c:4d:ae:dc:
         b2:13:ba:b9:d0:54:2b:47:ba:5e:00:bb:5f:83:3a:b0:57:cb:
         84:c1:5e:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:04:36 2025 by rpki-client