Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8vx3cWgs1YKd49j1yUTJN1rJiQvEzuFDEW1KgWWW7QQt/0/3137372e31302e3131362e302f32342d3234203d3e203532393137.roa
File:                     3137372e31302e3131362e302f32342d3234203d3e203532393137.roa (raw, json)
Hash identifier:          tXxj1dBPKmPz25v8sxhpKa7AuDBJhNDurg6/LLXxt1Y=
Subject key identifier:   D4:94:79:CB:39:5F:D9:92:E2:F5:DB:CA:97:81:D3:43:EC:81:AE:C5
Certificate issuer:       /CN=B7A705195705FFE3E5D81D77F8400BE2AF3809EE
Certificate serial:       24B227B807E6C9D5C4432CDC9604A0A5773B6A67
Authority key identifier: B7:A7:05:19:57:05:FF:E3:E5:D8:1D:77:F8:40:0B:E2:AF:38:09:EE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B7A705195705FFE3E5D81D77F8400BE2AF3809EE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8vx3cWgs1YKd49j1yUTJN1rJiQvEzuFDEW1KgWWW7QQt/0/3137372e31302e3131362e302f32342d3234203d3e203532393137.roa
Signing time:             Fri 10 Mar 2023 13:20:27 +0000
ROA not before:           Fri 10 Mar 2023 13:15:27 +0000
ROA not after:            Fri 08 Mar 2024 13:20:27 +0000
asID:                     52917
IP address blocks:        177.10.116.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:b2:27:b8:07:e6:c9:d5:c4:43:2c:dc:96:04:a0:a5:77:3b:6a:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B7A705195705FFE3E5D81D77F8400BE2AF3809EE
        Validity
            Not Before: Mar 10 13:15:27 2023 GMT
            Not After : Mar  8 13:20:27 2024 GMT
        Subject: CN=D49479CB395FD992E2F5DBCA9781D343EC81AEC5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:42:1b:27:aa:6c:77:cb:a5:5f:c6:20:b1:5c:
                    f2:4c:c0:dc:fd:b9:63:f8:22:b2:a4:b8:53:08:3a:
                    e5:8e:54:c4:11:ef:81:8b:5b:91:63:bc:92:10:2e:
                    61:1c:42:b0:22:0b:4e:37:c5:0d:af:ac:ba:6f:5e:
                    4d:ef:f7:1e:55:77:ff:c9:6c:e0:76:f9:08:2a:7d:
                    ab:b3:d0:f7:50:4c:61:9b:35:68:c2:88:b0:5f:54:
                    0b:c0:94:2f:5b:8e:d3:4d:ae:e3:4b:e6:82:91:ad:
                    04:66:7e:3b:ea:03:a0:e6:df:42:a7:0c:c9:4c:08:
                    80:76:d2:62:92:f4:5c:f7:85:ca:58:db:f2:bd:93:
                    35:75:c4:2f:79:a0:16:25:82:db:d9:7c:c2:6e:01:
                    a2:c1:11:21:7a:83:b6:b4:b7:7b:db:e7:22:d8:a8:
                    07:c9:7e:e1:da:cf:73:aa:3a:8a:c3:6b:cf:9d:06:
                    6d:d5:45:ff:6a:63:16:06:2c:c2:5c:28:0e:04:6a:
                    60:99:48:1b:cf:35:2f:df:12:a7:ec:cc:c9:68:47:
                    8f:32:00:a3:6f:17:d7:d8:86:59:00:a8:25:44:2c:
                    75:10:88:e6:1d:ba:71:3b:6d:a4:64:f8:49:89:b0:
                    45:0b:20:a6:f1:a5:4c:b1:59:89:57:57:97:27:22:
                    7e:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:94:79:CB:39:5F:D9:92:E2:F5:DB:CA:97:81:D3:43:EC:81:AE:C5
            X509v3 Authority Key Identifier:
                keyid:B7:A7:05:19:57:05:FF:E3:E5:D8:1D:77:F8:40:0B:E2:AF:38:09:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8vx3cWgs1YKd49j1yUTJN1rJiQvEzuFDEW1KgWWW7QQt/0/B7A705195705FFE3E5D81D77F8400BE2AF3809EE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B7A705195705FFE3E5D81D77F8400BE2AF3809EE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8vx3cWgs1YKd49j1yUTJN1rJiQvEzuFDEW1KgWWW7QQt/0/3137372e31302e3131362e302f32342d3234203d3e203532393137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.10.116.0/24

    Signature Algorithm: sha256WithRSAEncryption
         22:37:41:a3:9a:5b:5f:9a:89:10:ba:d9:60:fc:35:60:58:64:
         15:60:4a:e6:aa:86:e3:24:55:d1:a6:53:0f:98:68:67:63:94:
         56:7e:20:4c:e6:b4:c0:34:2e:41:cc:25:ba:d5:cc:54:cd:47:
         b0:51:78:6a:0a:6d:47:fa:07:a6:5e:8f:16:01:bc:f8:12:a9:
         10:21:bd:4f:4c:82:9d:1f:f7:8f:0e:9d:10:bf:f8:4b:19:a6:
         95:fc:23:0e:55:c4:82:74:b2:03:1b:ba:e9:13:bd:15:96:b7:
         df:07:36:9f:d2:26:af:cb:1d:84:8e:d7:8d:5b:8d:a0:d3:0b:
         c6:a1:7e:34:2f:90:c4:ac:83:7e:dc:21:c4:e7:00:84:56:32:
         d9:9a:7d:a0:26:14:02:89:d4:fb:c7:c2:a2:60:12:e5:e0:bf:
         6d:55:84:8a:13:59:bc:c3:f6:14:36:5e:71:e8:f1:60:52:f7:
         36:c0:ce:30:9a:69:b7:57:2a:59:f9:7f:25:93:34:b3:c2:55:
         e7:06:18:39:6c:f0:07:79:b3:26:54:08:2d:08:61:03:21:dd:
         4d:c6:16:88:c1:ae:1b:fa:d2:53:16:f4:f2:4a:61:42:9a:e0:
         f8:09:fa:8b:e9:19:97:8e:42:5c:34:fb:64:41:a0:ca:5d:e0:
         a1:39:39:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 10:54:45 2025 by rpki-client