Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6QeaQeYjuaACSAuMyxgbMW9E8i1CA9NWGBJw2srsn826/0/3137372e32332e32382e302f32322d3232203d3e203532373632.roa
File:                     3137372e32332e32382e302f32322d3232203d3e203532373632.roa (raw, json)
Hash identifier:          al+MrU9mISePbDqQed/q3/0W8O3jS0UbTFArCNPWGKg=
Subject key identifier:   81:1B:EB:A4:03:08:E2:DF:42:FC:AC:BB:9C:E7:F4:0F:AE:9B:2E:FB
Certificate issuer:       /CN=6F734850930AF3F6955B905DD1C2BD66727CD8D2
Certificate serial:       7BB9D7DCF37B0A281E37F8632A635128DC743B26
Authority key identifier: 6F:73:48:50:93:0A:F3:F6:95:5B:90:5D:D1:C2:BD:66:72:7C:D8:D2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6F734850930AF3F6955B905DD1C2BD66727CD8D2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6QeaQeYjuaACSAuMyxgbMW9E8i1CA9NWGBJw2srsn826/0/3137372e32332e32382e302f32322d3232203d3e203532373632.roa
Signing time:             Mon 06 Mar 2023 14:05:52 +0000
ROA not before:           Mon 06 Mar 2023 14:00:52 +0000
ROA not after:            Mon 04 Mar 2024 14:05:52 +0000
asID:                     52762
IP address blocks:        177.23.28.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:b9:d7:dc:f3:7b:0a:28:1e:37:f8:63:2a:63:51:28:dc:74:3b:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6F734850930AF3F6955B905DD1C2BD66727CD8D2
        Validity
            Not Before: Mar  6 14:00:52 2023 GMT
            Not After : Mar  4 14:05:52 2024 GMT
        Subject: CN=811BEBA40308E2DF42FCACBB9CE7F40FAE9B2EFB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:f9:be:e6:09:25:da:27:e5:4b:b9:7d:5a:fd:
                    ee:b4:12:41:83:57:a5:da:99:fb:2f:ff:80:19:36:
                    cb:3e:63:d0:fe:fa:3c:d8:a4:9c:05:88:cb:87:5e:
                    62:cf:a3:8c:b2:49:57:fb:09:aa:77:76:b0:5f:e2:
                    0f:f7:7a:7d:d3:a5:8b:10:94:51:74:d2:58:3a:37:
                    73:10:9a:94:ff:6d:14:00:d4:3c:a2:69:71:c5:e4:
                    f7:03:dd:cf:6f:11:15:33:8d:2d:d2:cf:86:a4:48:
                    ea:57:96:21:2b:59:71:27:21:64:5d:ad:4d:93:0c:
                    87:ba:d8:6a:6b:04:4b:95:63:68:7f:51:de:c6:d3:
                    f0:55:2c:a2:bc:ce:8a:8e:a0:a7:8b:83:64:c7:22:
                    2d:10:eb:56:1a:bc:76:57:23:29:a8:0b:6c:b9:a7:
                    59:9d:3b:65:8f:7d:98:9e:b7:98:c6:a1:4e:d1:97:
                    d7:1c:3f:22:a5:f3:ee:2e:df:8a:e5:1c:02:fd:83:
                    83:1b:c0:8b:33:fd:52:fd:a2:de:d9:74:40:95:c3:
                    b5:ac:f5:a9:30:f1:0e:bf:9f:cb:9c:b4:58:32:ef:
                    92:19:14:9b:09:f8:a3:e1:32:7c:c1:15:05:3d:02:
                    e9:b1:d4:bf:aa:54:19:1b:d9:ac:a2:2e:5e:84:24:
                    93:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:1B:EB:A4:03:08:E2:DF:42:FC:AC:BB:9C:E7:F4:0F:AE:9B:2E:FB
            X509v3 Authority Key Identifier:
                keyid:6F:73:48:50:93:0A:F3:F6:95:5B:90:5D:D1:C2:BD:66:72:7C:D8:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6QeaQeYjuaACSAuMyxgbMW9E8i1CA9NWGBJw2srsn826/0/6F734850930AF3F6955B905DD1C2BD66727CD8D2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6F734850930AF3F6955B905DD1C2BD66727CD8D2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6QeaQeYjuaACSAuMyxgbMW9E8i1CA9NWGBJw2srsn826/0/3137372e32332e32382e302f32322d3232203d3e203532373632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.23.28.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2b:e6:4d:73:10:1c:d1:16:85:74:e3:c7:fa:b1:70:c6:c3:17:
         a6:72:56:fd:7b:86:2a:34:61:70:01:39:fa:22:b1:76:e0:df:
         e6:bd:47:c6:7e:56:a0:df:34:fe:4a:bc:32:fa:30:67:34:22:
         2d:d0:fd:eb:9a:4b:53:ce:6d:85:37:9b:8b:f6:07:cd:8f:56:
         24:3e:b5:18:c7:18:51:81:45:46:bb:d2:76:b3:a1:c9:02:0c:
         28:e5:69:7f:3e:dd:e3:a1:6e:ac:ff:1b:e7:7f:d9:18:52:82:
         a9:4c:c9:87:f2:e6:54:8e:9a:65:6e:ce:c2:3f:9a:da:f3:6c:
         07:03:00:be:93:f5:dd:14:43:98:81:bb:96:3e:90:f7:bb:f3:
         ac:81:14:e3:36:91:35:2b:0d:19:72:1c:6b:40:d0:e5:d6:24:
         24:d9:71:3c:d6:a2:ca:9b:cc:81:b5:01:44:d4:6a:4f:9c:50:
         b1:a3:5f:c9:27:72:c1:9b:2c:50:c2:c5:ca:25:30:fe:6a:fc:
         f4:89:5d:17:55:61:59:f2:a4:c3:55:49:08:05:be:62:c7:ba:
         3d:81:02:87:69:a6:3b:83:79:33:d4:ee:28:92:0b:8a:67:c3:
         2f:92:7f:c3:8c:5d:ce:db:8e:e8:ca:b5:7e:a9:c9:00:5a:db:
         9a:ed:3f:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 00:47:23 2025 by rpki-client