Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8vx3cWgs1YKd49j1yUTJN1rJiQvEzuFDEW1KgWWW7QQt/0/3137372e31302e3131382e302f32342d3234203d3e20323638303132.roa
File:                     3137372e31302e3131382e302f32342d3234203d3e20323638303132.roa (raw, json)
Hash identifier:          ohQlj+Mg9jFKR7TsAXaEcExDF1uLMf8SdzGBTNKANkQ=
Subject key identifier:   9C:48:6B:C8:E6:48:D3:F7:63:57:A0:8A:7F:3C:27:B4:E0:CB:17:74
Certificate issuer:       /CN=B7A705195705FFE3E5D81D77F8400BE2AF3809EE
Certificate serial:       5D97083512A8EDF90C855A83FC7E130DA14ABAFC
Authority key identifier: B7:A7:05:19:57:05:FF:E3:E5:D8:1D:77:F8:40:0B:E2:AF:38:09:EE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B7A705195705FFE3E5D81D77F8400BE2AF3809EE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8vx3cWgs1YKd49j1yUTJN1rJiQvEzuFDEW1KgWWW7QQt/0/3137372e31302e3131382e302f32342d3234203d3e20323638303132.roa
Signing time:             Fri 10 Nov 2023 19:16:16 +0000
ROA not before:           Fri 10 Nov 2023 19:11:16 +0000
ROA not after:            Fri 08 Nov 2024 19:16:16 +0000
asID:                     268012
IP address blocks:        177.10.118.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:97:08:35:12:a8:ed:f9:0c:85:5a:83:fc:7e:13:0d:a1:4a:ba:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B7A705195705FFE3E5D81D77F8400BE2AF3809EE
        Validity
            Not Before: Nov 10 19:11:16 2023 GMT
            Not After : Nov  8 19:16:16 2024 GMT
        Subject: CN=9C486BC8E648D3F76357A08A7F3C27B4E0CB1774
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:68:a3:0f:c2:4e:13:81:60:ff:ea:d3:b0:5f:
                    02:0f:9d:b1:a9:d2:a8:4b:7d:0d:f4:2e:81:6c:8c:
                    23:35:01:b5:74:7b:6a:96:42:94:94:83:26:98:b1:
                    a5:5e:b3:02:02:47:b1:69:99:29:2a:43:7c:b3:fb:
                    43:9f:ba:0e:87:95:8f:e6:a2:a9:0b:20:d1:1f:3f:
                    f8:c3:a5:ff:04:94:6a:c8:2a:ab:1c:5f:82:9a:17:
                    d3:44:e4:0c:bf:dd:33:6b:87:f6:29:26:d1:aa:47:
                    94:5a:2a:ee:06:3a:7e:0c:50:95:90:68:4b:6c:74:
                    3d:7c:8d:ba:c6:67:3f:50:65:db:5b:89:b7:50:33:
                    ec:f9:8a:5c:7d:80:e2:11:12:7f:01:dc:d5:e5:4b:
                    cd:47:7c:f3:51:ba:75:88:f1:3b:e9:39:f9:9a:51:
                    c0:fc:5f:69:29:7e:6f:ce:bd:61:e9:7d:16:99:f2:
                    ef:d6:bd:49:1a:f4:09:d4:bf:01:39:be:87:a8:ee:
                    43:19:4a:36:6d:92:f4:ef:18:35:83:d8:9a:5d:d8:
                    4a:1b:76:e9:ee:33:c2:b7:0e:d6:90:8b:77:48:90:
                    a7:b5:d4:f0:a6:9b:c6:6d:7b:43:cc:f1:f6:04:04:
                    93:b5:0e:27:bc:11:9c:2b:b7:d2:2b:4f:37:9b:f1:
                    14:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:48:6B:C8:E6:48:D3:F7:63:57:A0:8A:7F:3C:27:B4:E0:CB:17:74
            X509v3 Authority Key Identifier:
                keyid:B7:A7:05:19:57:05:FF:E3:E5:D8:1D:77:F8:40:0B:E2:AF:38:09:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8vx3cWgs1YKd49j1yUTJN1rJiQvEzuFDEW1KgWWW7QQt/0/B7A705195705FFE3E5D81D77F8400BE2AF3809EE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B7A705195705FFE3E5D81D77F8400BE2AF3809EE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8vx3cWgs1YKd49j1yUTJN1rJiQvEzuFDEW1KgWWW7QQt/0/3137372e31302e3131382e302f32342d3234203d3e20323638303132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.10.118.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1f:4f:a1:d9:65:ec:e6:ac:0c:79:1f:9e:c9:59:34:9f:a4:96:
         dc:69:9b:80:63:cb:16:b4:41:ed:2d:7a:7e:a9:e1:15:4d:09:
         28:ef:c5:6a:9c:17:65:dc:eb:20:4f:6a:3b:8d:77:0f:5c:db:
         d7:44:bd:90:e2:af:81:d4:ec:ed:28:2d:37:ff:66:4e:46:5c:
         a0:5a:97:ad:cd:49:58:89:ee:ef:cd:9c:ac:cb:71:61:cd:33:
         fe:86:99:80:d7:8d:04:7d:9b:1b:01:55:0f:c3:97:48:00:23:
         72:89:d1:b4:dc:36:65:02:5b:4e:ec:18:e8:ee:89:51:d3:28:
         fc:2c:64:27:ef:a3:3e:78:ee:63:20:8e:35:0e:bb:c7:14:6a:
         9a:a7:a4:d2:5e:14:2d:0f:5b:4e:e7:aa:cf:69:9b:00:46:a0:
         d8:28:f0:f1:89:8a:db:ff:d7:2d:e5:0c:e8:cc:99:26:7f:22:
         16:7b:78:6c:37:71:7a:92:f9:79:54:23:07:f3:b4:99:eb:20:
         c5:32:a1:8c:42:a1:ca:6e:d2:fb:d8:a7:5e:ae:a5:32:48:8e:
         1f:0a:a4:06:e7:75:1a:81:57:67:49:5c:dd:32:da:f5:08:7f:
         09:31:e9:8d:2c:4b:76:f8:1d:d3:af:ac:85:ba:fa:19:59:51:
         aa:30:38:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:41:16 2025 by rpki-client