Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/3137372e32332e3130302e302f32332d3233203d3e20323633333437.roa
File:                     3137372e32332e3130302e302f32332d3233203d3e20323633333437.roa (raw, json)
Hash identifier:          JggfgHqz4z3tb2Oq7TG3aZE9QR6ZZBENKFRUW+LpB2Y=
Subject key identifier:   BC:E3:F6:86:44:E2:D2:1E:48:B3:D9:3A:9F:E1:A8:4A:01:4C:1D:EC
Certificate issuer:       /CN=030916697CC77A1A876E4865BE02F55A8EFF9BF2
Certificate serial:       0972F1809D170AE0200E8B50DE57A07919503F0E
Authority key identifier: 03:09:16:69:7C:C7:7A:1A:87:6E:48:65:BE:02:F5:5A:8E:FF:9B:F2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/3137372e32332e3130302e302f32332d3233203d3e20323633333437.roa
Signing time:             Thu 06 Mar 2025 18:28:50 +0000
ROA not before:           Thu 06 Mar 2025 18:23:50 +0000
ROA not after:            Thu 05 Mar 2026 18:28:50 +0000
asID:                     263347
IP address blocks:        177.23.100.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:72:f1:80:9d:17:0a:e0:20:0e:8b:50:de:57:a0:79:19:50:3f:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=030916697CC77A1A876E4865BE02F55A8EFF9BF2
        Validity
            Not Before: Mar  6 18:23:50 2025 GMT
            Not After : Mar  5 18:28:50 2026 GMT
        Subject: CN=BCE3F68644E2D21E48B3D93A9FE1A84A014C1DEC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:70:e4:cb:72:a6:46:38:dc:52:92:b3:ff:31:
                    bc:e8:f8:c1:23:cf:16:21:47:76:7c:5c:82:de:e0:
                    8c:25:b1:26:cb:2c:36:c9:50:92:bd:17:dd:96:7f:
                    2a:76:4f:39:7b:79:59:5d:06:20:ff:8a:e0:ad:73:
                    2a:25:89:14:76:28:29:51:2e:bc:f7:0d:14:0f:cc:
                    5c:29:3e:2c:a0:c9:c6:32:67:60:f2:44:59:40:1b:
                    40:8c:2e:65:74:b8:d4:d3:ae:3c:92:c0:35:dd:5a:
                    10:14:88:50:eb:18:d6:b9:ac:b1:40:8e:23:d0:fd:
                    34:66:c7:f2:5f:e8:b3:05:8b:90:a4:7a:06:65:4c:
                    74:39:44:64:41:38:b5:f8:c4:3e:e6:05:c4:ba:d0:
                    c4:db:1f:24:59:59:16:5d:b3:fe:2e:20:51:f9:95:
                    0e:0f:fe:ce:cf:bf:94:0c:f3:a5:c7:09:ac:b3:61:
                    4d:02:52:ab:5d:07:2f:f4:23:5a:a4:00:51:b5:bf:
                    fa:a3:35:c3:31:2c:62:50:1f:ba:eb:f3:37:52:54:
                    e0:00:db:83:3c:c0:87:bc:fc:b1:ad:a9:d2:e7:cd:
                    bd:00:2f:7f:51:06:23:42:11:18:47:fb:26:36:37:
                    be:66:c0:23:51:be:66:b4:00:c7:28:59:fd:d4:a7:
                    b6:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:E3:F6:86:44:E2:D2:1E:48:B3:D9:3A:9F:E1:A8:4A:01:4C:1D:EC
            X509v3 Authority Key Identifier:
                keyid:03:09:16:69:7C:C7:7A:1A:87:6E:48:65:BE:02:F5:5A:8E:FF:9B:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/3137372e32332e3130302e302f32332d3233203d3e20323633333437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.23.100.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8f:82:14:68:59:6e:eb:44:95:71:ff:de:26:d1:54:e2:08:20:
         c8:73:af:36:50:31:1a:24:b1:1c:fc:70:d7:c4:f0:b3:03:50:
         f7:e7:27:72:fc:bc:ae:cc:ac:99:8a:e5:c6:f9:27:cb:86:49:
         4a:2b:e2:c5:b3:66:a2:03:b9:7d:80:1d:5b:0d:cd:25:13:3d:
         3d:b5:47:b5:9f:2e:d5:78:cb:03:f5:05:7c:2e:f9:51:46:46:
         fd:63:fc:d6:51:52:f4:ad:1b:32:39:7a:59:da:54:21:74:d4:
         a8:f5:67:a9:6f:c6:a4:35:ee:7a:e9:d3:e3:dd:a1:32:0c:15:
         de:bb:2a:d1:0e:a8:4b:e9:63:4d:a9:4b:fb:84:f7:79:47:4c:
         16:94:f3:fd:71:5a:3b:11:a8:35:64:5f:aa:f4:aa:87:4b:32:
         76:54:19:d6:32:3b:a6:eb:c5:b8:97:e3:12:ac:02:7b:29:77:
         71:d2:2e:3d:91:f4:bf:00:4e:91:8a:2e:30:40:c1:cf:c6:90:
         eb:1e:67:40:c8:5b:d6:73:55:01:37:46:d4:24:9e:25:f2:d6:
         69:4e:c2:44:63:c4:ea:03:24:ab:ca:ab:66:06:83:8c:b1:03:
         70:82:6d:a8:3d:ea:2a:c5:78:45:ba:bb:1b:24:25:3f:ed:a5:
         ec:ac:35:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 11:31:59 2025 by rpki-client