Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7knsJmsfLogKFUgkMnkByXknqqfs7jABmWEdCn25vZ1v/0/3137372e38352e3131322e302f32342d3234203d3e20323632363037.roa
File:                     3137372e38352e3131322e302f32342d3234203d3e20323632363037.roa (raw, json)
Hash identifier:          3SuqIxX2Ts8wF7uftOWdqril9RzVVgoY3S1d9/vvgB4=
Subject key identifier:   0E:B4:92:32:01:86:C4:55:21:A0:57:C7:88:F0:06:D3:4E:4F:5C:A1
Certificate issuer:       /CN=56D9A1201889650DCAB74085B3A0433357A372C2
Certificate serial:       2EBF42DDD05A2E87E4A1CA709E85A659E7913E2B
Authority key identifier: 56:D9:A1:20:18:89:65:0D:CA:B7:40:85:B3:A0:43:33:57:A3:72:C2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/56D9A1201889650DCAB74085B3A0433357A372C2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7knsJmsfLogKFUgkMnkByXknqqfs7jABmWEdCn25vZ1v/0/3137372e38352e3131322e302f32342d3234203d3e20323632363037.roa
Signing time:             Thu 06 Oct 2022 15:17:00 +0000
ROA not before:           Thu 06 Oct 2022 15:12:00 +0000
ROA not after:            Thu 05 Oct 2023 15:17:00 +0000
asID:                     262607
IP address blocks:        177.85.112.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:bf:42:dd:d0:5a:2e:87:e4:a1:ca:70:9e:85:a6:59:e7:91:3e:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56D9A1201889650DCAB74085B3A0433357A372C2
        Validity
            Not Before: Oct  6 15:12:00 2022 GMT
            Not After : Oct  5 15:17:00 2023 GMT
        Subject: CN=0EB492320186C45521A057C788F006D34E4F5CA1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:eb:67:29:ed:d9:62:5e:c5:90:f7:56:08:ef:
                    7e:07:5a:d1:44:c2:b9:a0:85:93:46:57:68:bf:c9:
                    fa:b5:4c:c6:7f:bf:af:e3:de:a9:45:ad:c3:4a:c9:
                    99:d3:22:d1:67:bf:e7:48:0b:e6:ab:45:26:7d:ff:
                    85:dc:97:58:1d:08:bc:96:a3:aa:e9:21:25:4f:5d:
                    d0:9e:69:7c:b0:fe:c7:57:a6:f8:13:68:01:6e:b2:
                    ec:3e:47:fe:cf:7a:24:33:67:d2:ba:db:9a:34:cd:
                    fd:9e:5a:ac:91:d5:f7:b5:54:fe:9a:2c:3c:1c:06:
                    de:11:2c:29:46:f3:4a:87:22:40:03:63:1f:9f:38:
                    e6:a3:81:59:20:ec:92:fb:ea:66:08:c1:15:72:70:
                    4a:56:1a:14:53:76:4f:48:f7:aa:36:fd:71:47:96:
                    00:93:88:80:10:11:ec:81:93:64:05:1f:88:05:e2:
                    17:23:be:3c:5b:1d:3e:a8:43:e2:a7:63:57:44:f2:
                    0e:96:0d:05:d6:f1:af:4e:12:79:2a:37:fb:45:4b:
                    69:87:5d:a1:90:24:29:48:f1:0c:90:cc:b6:43:ff:
                    4a:0b:c9:0b:0c:6c:a8:75:f7:3c:44:59:76:dd:b3:
                    8f:57:9f:65:02:58:50:17:27:09:71:1d:86:5e:22:
                    83:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:B4:92:32:01:86:C4:55:21:A0:57:C7:88:F0:06:D3:4E:4F:5C:A1
            X509v3 Authority Key Identifier:
                keyid:56:D9:A1:20:18:89:65:0D:CA:B7:40:85:B3:A0:43:33:57:A3:72:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7knsJmsfLogKFUgkMnkByXknqqfs7jABmWEdCn25vZ1v/0/56D9A1201889650DCAB74085B3A0433357A372C2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/56D9A1201889650DCAB74085B3A0433357A372C2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7knsJmsfLogKFUgkMnkByXknqqfs7jABmWEdCn25vZ1v/0/3137372e38352e3131322e302f32342d3234203d3e20323632363037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.85.112.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6c:1f:bc:78:b8:e9:6c:f3:04:1b:5b:e4:a5:bd:89:05:5a:4e:
         d4:47:7e:58:ee:c9:99:1c:e7:a7:ae:37:1c:f3:5f:48:52:ee:
         06:70:0e:6e:93:cf:b0:fe:4f:fd:0d:8b:88:fa:23:db:41:b3:
         be:93:30:61:63:ff:0b:47:f6:af:37:ba:07:97:f7:49:5f:14:
         3f:1c:a6:8c:bb:37:1f:cf:23:d2:4a:a8:e6:89:e9:6f:97:70:
         4c:c2:3d:03:b0:dd:29:d2:c0:e3:ec:65:17:93:70:0a:6a:12:
         c6:77:15:a0:b0:14:89:07:b0:3f:c4:da:7e:af:3b:00:2d:be:
         94:47:b1:84:d9:78:9f:58:a8:75:6f:f1:0f:30:24:99:1f:b1:
         ed:9d:bd:82:e9:c7:15:50:c4:4d:79:03:13:65:bc:db:8f:b7:
         eb:12:d9:93:0b:e0:b8:9e:31:3a:7e:e2:46:e4:78:dc:b0:e0:
         22:9a:5d:8c:29:57:00:49:35:3c:9e:38:67:de:06:d9:76:02:
         55:9d:52:6b:7d:19:e4:2f:05:55:2f:92:b5:bc:29:df:b9:eb:
         ba:10:6b:8b:c5:0e:ad:f2:f6:56:dd:69:a0:67:e8:4e:97:37:
         30:fd:4f:c5:61:f6:42:cf:b0:c7:61:62:02:df:5f:79:14:21:
         29:7e:f4:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 02:12:59 2025 by rpki-client