Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7knsJmsfLogKFUgkMnkByXknqqfs7jABmWEdCn25vZ1v/0/3137372e38352e3131322e302f32332d3233203d3e20323632363037.roa
File:                     3137372e38352e3131322e302f32332d3233203d3e20323632363037.roa (raw, json)
Hash identifier:          5AIzfdRE9NmxyjsAXdbbdMytbLS+P+rCNb70I57dp2A=
Subject key identifier:   9E:03:46:F4:F2:32:FA:32:83:D0:DF:29:13:39:77:30:27:22:8C:0D
Certificate issuer:       /CN=56D9A1201889650DCAB74085B3A0433357A372C2
Certificate serial:       1FA763157768E12EA55FE986F2E379FE00764159
Authority key identifier: 56:D9:A1:20:18:89:65:0D:CA:B7:40:85:B3:A0:43:33:57:A3:72:C2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/56D9A1201889650DCAB74085B3A0433357A372C2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7knsJmsfLogKFUgkMnkByXknqqfs7jABmWEdCn25vZ1v/0/3137372e38352e3131322e302f32332d3233203d3e20323632363037.roa
Signing time:             Thu 06 Oct 2022 15:16:56 +0000
ROA not before:           Thu 06 Oct 2022 15:11:56 +0000
ROA not after:            Thu 05 Oct 2023 15:16:56 +0000
asID:                     262607
IP address blocks:        177.85.112.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:a7:63:15:77:68:e1:2e:a5:5f:e9:86:f2:e3:79:fe:00:76:41:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56D9A1201889650DCAB74085B3A0433357A372C2
        Validity
            Not Before: Oct  6 15:11:56 2022 GMT
            Not After : Oct  5 15:16:56 2023 GMT
        Subject: CN=9E0346F4F232FA3283D0DF291339773027228C0D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:3e:00:78:5f:17:6b:51:a4:77:98:80:1e:0d:
                    5e:51:69:45:0d:1c:5b:31:78:6f:0f:66:9b:b4:2c:
                    5c:a4:70:42:96:b5:50:bb:06:3a:0f:26:44:01:06:
                    25:21:0c:7a:6c:92:1a:9a:df:10:8c:71:87:c5:32:
                    f8:b3:69:74:a6:dd:23:b4:5e:41:74:76:f8:b0:e2:
                    64:4a:14:09:50:69:26:f7:4e:ba:78:a4:75:6c:65:
                    d2:1f:5b:55:c4:28:e2:54:c9:6a:ef:18:f5:f4:b6:
                    6a:d5:8b:d6:99:1d:1c:51:e6:3d:13:cb:1a:49:06:
                    77:ed:01:48:65:ed:6b:86:75:8f:96:ab:18:5c:8f:
                    77:59:ae:9c:83:00:26:bf:9b:c6:32:19:ad:fb:a8:
                    be:c4:c1:32:86:79:58:0d:2e:e8:08:15:b9:ed:4b:
                    56:0e:38:b3:0d:5d:3a:97:df:6c:c1:03:6d:51:aa:
                    e8:cf:29:1c:08:10:3a:cb:f3:40:e1:e1:69:0f:10:
                    9b:47:c3:ae:a4:af:7f:44:fb:28:d7:cf:8b:f6:4d:
                    6f:fc:29:29:52:ba:0d:93:a5:95:ff:94:a5:70:db:
                    0a:ec:1f:5e:27:63:eb:90:8b:7e:97:9d:ed:c3:37:
                    9a:19:ad:3b:3d:72:6f:70:95:90:70:b4:02:f2:47:
                    b1:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:03:46:F4:F2:32:FA:32:83:D0:DF:29:13:39:77:30:27:22:8C:0D
            X509v3 Authority Key Identifier:
                keyid:56:D9:A1:20:18:89:65:0D:CA:B7:40:85:B3:A0:43:33:57:A3:72:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7knsJmsfLogKFUgkMnkByXknqqfs7jABmWEdCn25vZ1v/0/56D9A1201889650DCAB74085B3A0433357A372C2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/56D9A1201889650DCAB74085B3A0433357A372C2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7knsJmsfLogKFUgkMnkByXknqqfs7jABmWEdCn25vZ1v/0/3137372e38352e3131322e302f32332d3233203d3e20323632363037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.85.112.0/23

    Signature Algorithm: sha256WithRSAEncryption
         11:5b:d3:12:f7:4c:d7:a5:48:f5:91:3f:0d:ad:53:86:49:63:
         55:50:1c:d0:ca:9b:56:c9:42:2e:40:d2:46:af:9e:69:58:da:
         db:4e:8d:75:7d:b9:0a:a6:6a:1b:22:24:9f:f2:85:fb:3b:4f:
         43:ef:86:84:33:e7:85:1d:be:9a:37:44:c9:db:cb:78:2d:a8:
         dd:80:d9:e1:0e:5f:3c:42:cc:d2:39:81:c6:9a:c7:11:08:50:
         51:5e:02:6c:44:3b:8d:c1:0a:25:fd:4b:e0:96:f7:be:23:18:
         7d:26:d6:ef:ed:e9:d3:92:25:0e:79:63:f5:c7:43:54:e7:d2:
         29:3b:7f:a6:3c:72:42:04:2a:63:50:2a:26:6b:b0:0c:9e:c9:
         c9:1f:7c:24:3b:13:b2:a5:74:ac:88:b8:23:85:ab:8f:c4:db:
         da:dc:59:20:56:38:de:f8:49:17:7d:ca:f1:f8:b5:75:66:db:
         45:d2:72:21:e8:07:d9:58:e8:f4:1e:ad:3c:65:0c:6d:6b:2e:
         7a:0e:dc:a4:f1:7a:18:45:51:7f:2a:f0:21:2e:f1:49:8b:5d:
         6e:8e:14:43:3f:02:43:af:8b:31:1c:9a:fd:d7:b9:68:ed:ca:
         91:27:e6:36:5c:46:0b:2e:02:45:9c:3e:67:ac:0e:21:01:2b:
         b5:61:d9:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 02:13:52 2025 by rpki-client