Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/3137372e382e33312e302f32342d3234203d3e203238333630.roa
File:                     3137372e382e33312e302f32342d3234203d3e203238333630.roa (raw, json)
Hash identifier:          roX/c83BxKhB03KhMASS+qKfwdYGtjbL98HSki+c220=
Subject key identifier:   F0:F1:52:4F:87:46:D7:D1:F5:39:93:14:84:65:11:1C:20:22:A8:A4
Certificate issuer:       /CN=167B7DC84B098DDC2B9CE4E175A003955D57A017
Certificate serial:       4CCE052BEB423C82F588ECC5A9D58873B56DFDEF
Authority key identifier: 16:7B:7D:C8:4B:09:8D:DC:2B:9C:E4:E1:75:A0:03:95:5D:57:A0:17
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/167B7DC84B098DDC2B9CE4E175A003955D57A017.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/3137372e382e33312e302f32342d3234203d3e203238333630.roa
Signing time:             Thu 17 Nov 2022 18:03:35 +0000
ROA not before:           Thu 17 Nov 2022 17:58:35 +0000
ROA not after:            Thu 16 Nov 2023 18:03:35 +0000
asID:                     28360
IP address blocks:        177.8.31.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:ce:05:2b:eb:42:3c:82:f5:88:ec:c5:a9:d5:88:73:b5:6d:fd:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=167B7DC84B098DDC2B9CE4E175A003955D57A017
        Validity
            Not Before: Nov 17 17:58:35 2022 GMT
            Not After : Nov 16 18:03:35 2023 GMT
        Subject: CN=F0F1524F8746D7D1F53993148465111C2022A8A4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:b4:d8:b2:0c:ec:7a:f5:f2:6e:24:85:d3:82:
                    5c:31:b5:86:de:3c:66:1a:74:b7:01:57:e4:c5:61:
                    be:9e:68:d6:f6:9b:d7:b5:c5:f5:2b:26:ec:cb:14:
                    c8:c0:e2:55:50:65:bf:e2:a0:dd:b7:88:40:e6:34:
                    20:9b:c3:54:ec:ad:cb:1e:1d:0f:b1:39:46:7e:8b:
                    f1:ec:3f:56:cb:10:da:59:89:4e:a9:66:79:cb:e0:
                    41:34:35:a4:32:88:c7:a7:47:e2:0f:a3:27:99:cf:
                    37:13:b9:a7:0a:2d:08:7b:7d:68:13:25:51:07:8b:
                    3a:40:6d:ab:d7:58:a7:db:4c:cf:f7:73:9e:a1:bb:
                    2b:12:2d:6b:46:5b:82:e2:b3:7b:79:04:16:4f:93:
                    c2:6d:d3:74:80:34:c0:9b:e8:23:0f:20:51:b8:95:
                    cf:d7:75:54:e7:2f:e3:9c:9e:9d:8e:e0:42:3d:0a:
                    f3:87:b5:46:ef:cc:76:39:a3:5a:27:88:b8:31:1f:
                    2d:e2:fa:9a:55:77:71:d7:d2:d8:35:8b:d0:33:f4:
                    59:3e:a4:8d:25:fa:da:b7:4b:c7:48:76:9a:0c:5c:
                    31:74:bc:d6:6c:07:0e:ee:29:e6:fa:d1:d8:d1:c7:
                    c1:0e:8f:ea:90:fc:a6:c9:38:c4:18:57:40:ea:00:
                    27:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:F1:52:4F:87:46:D7:D1:F5:39:93:14:84:65:11:1C:20:22:A8:A4
            X509v3 Authority Key Identifier:
                keyid:16:7B:7D:C8:4B:09:8D:DC:2B:9C:E4:E1:75:A0:03:95:5D:57:A0:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/167B7DC84B098DDC2B9CE4E175A003955D57A017.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/167B7DC84B098DDC2B9CE4E175A003955D57A017.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/3137372e382e33312e302f32342d3234203d3e203238333630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.8.31.0/24

    Signature Algorithm: sha256WithRSAEncryption
         78:0e:1d:09:99:03:c0:95:87:20:3d:02:fd:ef:68:92:c0:c4:
         a1:49:19:80:b7:ca:55:63:ce:34:1f:8f:2f:79:12:1d:e1:d3:
         f5:4a:d1:8d:0b:6d:7d:5a:7e:5e:9f:fc:3c:86:f0:e2:69:f9:
         21:08:d8:41:8f:f2:af:07:e7:ff:99:fd:7c:2d:51:c6:fe:e4:
         83:9c:b0:1c:cd:20:c6:60:9f:74:3d:d6:0b:8a:37:6b:cd:fe:
         3b:f8:d3:9b:c8:fb:76:31:8d:ec:89:68:e8:1a:75:48:4f:49:
         f4:1c:e6:d3:f9:2a:88:7d:a9:c8:93:4a:9c:dd:26:32:95:20:
         fe:a9:45:52:61:21:1a:cf:04:fa:e4:da:a3:c7:c6:9c:87:42:
         c5:44:aa:8e:33:8d:a4:f5:37:f1:34:4c:08:3b:f5:3b:b5:63:
         b8:d7:2a:47:27:70:30:ed:b3:64:bb:ca:76:77:9c:2c:94:12:
         87:a1:e8:6a:f8:5c:6b:55:d9:3c:62:22:35:99:a3:8e:30:f6:
         32:d6:14:ab:27:18:95:f7:52:4b:3b:a6:b2:68:b6:e8:2a:aa:
         08:ca:08:6f:75:6d:b9:b4:f6:95:da:96:8a:b6:d3:1d:2e:44:
         7d:cc:04:e7:34:9d:ad:4b:53:5a:a3:ad:f1:a0:18:b1:bd:b1:
         bb:c2:7a:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:54:07 2025 by rpki-client