Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8fVSp1TdPasD8cqkns8b7rRhT4vk6ZyCuKcxFpvFVYvj/0/3137372e34342e3138382e302f32332d3233203d3e203533313733.roa
File:                     3137372e34342e3138382e302f32332d3233203d3e203533313733.roa (raw, json)
Hash identifier:          mYO4V2IRrN/drRJBlxMaXYjvvUjlf+xYHp5CtZitR1Y=
Subject key identifier:   97:03:03:72:DA:72:D1:1B:51:9F:E1:19:E6:0B:01:63:55:A9:4F:50
Certificate issuer:       /CN=6DA84A308BB4C2843AD410FF80B4472A4A8E3463
Certificate serial:       474D6E481060B6920C059CFC0DEDADE564497F0A
Authority key identifier: 6D:A8:4A:30:8B:B4:C2:84:3A:D4:10:FF:80:B4:47:2A:4A:8E:34:63
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6DA84A308BB4C2843AD410FF80B4472A4A8E3463.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8fVSp1TdPasD8cqkns8b7rRhT4vk6ZyCuKcxFpvFVYvj/0/3137372e34342e3138382e302f32332d3233203d3e203533313733.roa
Signing time:             Mon 21 Nov 2022 12:47:39 +0000
ROA not before:           Mon 21 Nov 2022 12:42:39 +0000
ROA not after:            Mon 20 Nov 2023 12:47:39 +0000
asID:                     53173
IP address blocks:        177.44.188.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:4d:6e:48:10:60:b6:92:0c:05:9c:fc:0d:ed:ad:e5:64:49:7f:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6DA84A308BB4C2843AD410FF80B4472A4A8E3463
        Validity
            Not Before: Nov 21 12:42:39 2022 GMT
            Not After : Nov 20 12:47:39 2023 GMT
        Subject: CN=97030372DA72D11B519FE119E60B016355A94F50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:bd:8c:d9:8f:5e:48:2b:50:57:cd:4e:44:e1:
                    2f:a0:a1:1a:9e:13:64:c6:1e:e9:6e:f1:27:c6:54:
                    6e:ab:4b:42:8c:85:2c:d5:9d:8c:ac:db:d9:93:cf:
                    a6:7a:a4:ba:c2:c8:74:a0:0f:49:72:02:41:69:f8:
                    76:c7:69:ac:6e:a5:07:0a:c0:fc:97:c8:90:ac:0b:
                    d1:29:51:dd:59:b1:75:dc:23:77:da:2d:e1:f0:3e:
                    33:e6:37:e8:7a:d4:fd:3a:dc:23:cc:42:a3:50:4c:
                    d9:8c:34:3a:42:12:0e:5d:82:6a:d0:3c:cc:31:c3:
                    68:6f:52:03:75:80:bf:40:e7:6e:02:89:ce:cc:f8:
                    99:6d:7a:63:ec:da:c9:78:c1:fe:63:9d:d6:73:49:
                    e0:3b:c2:4a:9c:4d:21:8c:9e:3a:a2:e8:2b:0c:7a:
                    f3:77:66:4e:f6:18:8e:2c:c2:a5:0a:23:e8:7d:33:
                    7f:65:cc:57:ce:17:39:b1:df:c1:6d:55:10:6e:b1:
                    71:a0:f6:49:4f:77:c8:2f:7e:24:5a:a4:22:65:7f:
                    f0:07:eb:01:e3:c4:45:f3:81:bd:b8:17:0f:9a:94:
                    95:b0:70:0e:90:48:ed:b3:ab:79:40:7f:c0:28:90:
                    95:08:f1:1a:20:0a:48:b9:23:26:63:f2:47:a1:20:
                    61:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:03:03:72:DA:72:D1:1B:51:9F:E1:19:E6:0B:01:63:55:A9:4F:50
            X509v3 Authority Key Identifier:
                keyid:6D:A8:4A:30:8B:B4:C2:84:3A:D4:10:FF:80:B4:47:2A:4A:8E:34:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8fVSp1TdPasD8cqkns8b7rRhT4vk6ZyCuKcxFpvFVYvj/0/6DA84A308BB4C2843AD410FF80B4472A4A8E3463.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6DA84A308BB4C2843AD410FF80B4472A4A8E3463.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8fVSp1TdPasD8cqkns8b7rRhT4vk6ZyCuKcxFpvFVYvj/0/3137372e34342e3138382e302f32332d3233203d3e203533313733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.44.188.0/23

    Signature Algorithm: sha256WithRSAEncryption
         af:67:bb:21:19:0f:64:e6:a9:e0:d3:72:df:65:67:4c:25:45:
         aa:bc:4d:a5:80:9b:15:3b:0e:71:95:3b:41:ce:59:fa:4b:8e:
         ba:e2:a9:08:16:dd:e9:c4:98:6a:27:7f:d5:e6:69:2d:b1:02:
         69:70:96:63:1a:e5:f7:a7:6f:4c:97:bd:c0:93:3b:66:ef:47:
         15:ef:d0:b0:f8:e3:bb:06:f5:6f:56:d9:b1:8d:77:de:ed:d9:
         0f:98:8e:3d:de:c6:3c:b8:13:60:fa:23:c9:00:f1:db:e3:b9:
         59:f3:9c:46:35:38:c2:8d:dd:5e:37:00:02:25:56:f9:ed:86:
         3c:07:5e:1d:63:0b:e7:03:7e:eb:5a:ba:3d:1f:f7:8e:6a:2e:
         93:f3:85:09:75:59:22:49:88:2d:2d:53:09:3b:fb:a2:d2:5b:
         91:73:6c:a6:3a:27:c0:68:8c:fb:3a:5d:19:18:79:a8:87:59:
         f7:9c:92:e6:59:63:f7:bb:b0:67:d7:17:3d:05:07:6f:8d:3d:
         6a:e6:70:f6:e4:e2:c0:21:93:5d:8a:fd:c6:66:e8:4f:34:d1:
         60:8e:7b:c0:39:1c:7f:53:1a:85:dd:0a:3c:e5:5f:e2:dc:b7:
         ae:7d:11:4c:98:08:88:e8:fb:40:7f:f2:e0:db:d6:8f:57:7d:
         8b:33:73:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:23:04 2025 by rpki-client