Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/0/3137372e36362e3137362e302f32322d3234203d3e203533303032.roa
File:                     3137372e36362e3137362e302f32322d3234203d3e203533303032.roa (raw, json)
Hash identifier:          ZG0oUomxzULoOZCUeuCtDgfBo5syn1hYYnmnw9jWHgg=
Subject key identifier:   A0:AA:29:5E:94:D5:53:19:74:E4:BA:6C:90:AD:42:9A:17:71:D7:15
Certificate issuer:       /CN=AE6C8AA9F6B213EFF110D7C0E1704A39EBE19B99
Certificate serial:       02F033F8A8A01C4211B929E66D5CC53CD326AF0C
Authority key identifier: AE:6C:8A:A9:F6:B2:13:EF:F1:10:D7:C0:E1:70:4A:39:EB:E1:9B:99
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AE6C8AA9F6B213EFF110D7C0E1704A39EBE19B99.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/0/3137372e36362e3137362e302f32322d3234203d3e203533303032.roa
Signing time:             Fri 24 Feb 2023 14:15:00 +0000
ROA not before:           Fri 24 Feb 2023 14:10:00 +0000
ROA not after:            Fri 23 Feb 2024 14:15:00 +0000
asID:                     53002
IP address blocks:        177.66.176.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:f0:33:f8:a8:a0:1c:42:11:b9:29:e6:6d:5c:c5:3c:d3:26:af:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AE6C8AA9F6B213EFF110D7C0E1704A39EBE19B99
        Validity
            Not Before: Feb 24 14:10:00 2023 GMT
            Not After : Feb 23 14:15:00 2024 GMT
        Subject: CN=A0AA295E94D5531974E4BA6C90AD429A1771D715
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:5d:30:fd:b9:de:45:25:74:85:f4:4c:cb:7d:
                    6f:60:f2:6e:e8:cb:29:b3:39:34:64:27:04:61:24:
                    33:f3:c7:6d:ec:b2:d3:a6:a0:80:ba:71:31:5f:bb:
                    69:91:5f:dd:32:a6:a4:f1:55:73:8b:4c:b8:d1:d0:
                    97:97:32:16:26:3b:29:78:4a:ce:c4:ac:6e:26:57:
                    40:6f:a9:9d:d5:64:3a:73:fd:f8:75:46:33:3d:69:
                    66:e9:b4:34:b9:b6:83:e1:99:db:62:92:d3:95:99:
                    f4:8e:07:9e:22:89:a8:bc:f4:2b:51:00:4c:b1:aa:
                    6b:19:82:09:3a:07:b2:5e:82:f0:f5:30:79:a7:ce:
                    18:e6:ef:d4:27:22:99:40:77:bd:ab:52:38:a0:a8:
                    84:e0:4d:8f:00:93:7c:a8:a7:98:7f:2b:20:2e:a2:
                    e5:f5:81:5d:eb:a4:24:44:49:77:ae:da:29:d6:7f:
                    5d:85:e6:29:05:e0:fd:15:ed:eb:66:8c:93:be:ed:
                    53:23:9c:c2:02:5b:f7:db:97:92:6e:d2:64:55:aa:
                    c0:07:23:59:5f:0e:a1:15:ce:99:db:32:fe:99:18:
                    23:57:b5:b5:a2:82:ad:33:8e:dd:ed:46:29:da:98:
                    46:9d:30:a0:86:9b:f0:8b:bb:20:af:84:c7:b0:e1:
                    0b:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:AA:29:5E:94:D5:53:19:74:E4:BA:6C:90:AD:42:9A:17:71:D7:15
            X509v3 Authority Key Identifier:
                keyid:AE:6C:8A:A9:F6:B2:13:EF:F1:10:D7:C0:E1:70:4A:39:EB:E1:9B:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/0/AE6C8AA9F6B213EFF110D7C0E1704A39EBE19B99.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AE6C8AA9F6B213EFF110D7C0E1704A39EBE19B99.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/0/3137372e36362e3137362e302f32322d3234203d3e203533303032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.66.176.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a3:45:45:e5:40:11:fd:fc:b3:a3:4b:80:92:7b:fc:a1:f1:2c:
         be:a0:27:64:fb:9a:40:0b:11:16:33:4a:8c:35:17:56:d8:fb:
         df:31:58:da:f0:05:dc:29:5e:c4:f9:70:ae:4b:7c:ed:c2:50:
         60:b5:8a:2d:c8:09:a4:06:15:d4:da:64:fb:1f:3b:6a:24:80:
         71:17:55:ae:28:ea:aa:cc:3a:6b:a2:48:4b:76:e0:7c:61:c1:
         18:ca:c9:de:11:2f:b2:b6:97:37:20:fc:97:43:4e:df:b1:91:
         dc:5d:ec:8c:25:4d:f9:71:fa:41:4f:31:4c:a8:7a:f9:6b:a1:
         52:1d:04:e2:68:15:4a:f8:24:6e:c4:f0:34:b3:7b:f8:28:0d:
         be:0c:6a:53:52:9c:38:11:1c:1b:bd:86:a0:f5:90:87:e6:0c:
         41:16:39:9d:69:54:d4:f9:b7:8e:99:91:46:34:9e:fe:c6:d2:
         a4:d4:3c:07:68:a9:1f:e8:0d:88:0e:9e:f9:65:0a:89:a1:46:
         00:93:cc:65:af:03:87:e2:4b:d0:61:05:f9:58:98:af:b2:62:
         30:4a:7f:24:9d:82:43:76:3e:95:ff:03:41:24:55:52:dd:f5:
         5f:77:5f:9d:44:49:7c:4c:9e:ab:1d:9a:dc:1d:85:5c:79:f4:
         c2:45:bd:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 19:43:37 2025 by rpki-client