Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8ynsbsbpRLC3BsP3GuCXATqZAR7jvDNnG71ZJShpjs4v/0/3137372e32332e32342e302f32342d3234203d3e20323730393936.roa
File:                     3137372e32332e32342e302f32342d3234203d3e20323730393936.roa (raw, json)
Hash identifier:          /SWhk43LxPjzVfh+Hwrt3X4n8xX1lz0aMJxnwpZWutI=
Subject key identifier:   84:EE:CB:B5:5C:DA:D5:B5:4B:2B:6F:74:83:81:83:83:BC:7C:66:BF
Certificate issuer:       /CN=CF4B7D9CBF770FDE8094E6B792E5178E1C4ACBC2
Certificate serial:       6335889C7569D645BA103D7EDF5D5C760DB350D8
Authority key identifier: CF:4B:7D:9C:BF:77:0F:DE:80:94:E6:B7:92:E5:17:8E:1C:4A:CB:C2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CF4B7D9CBF770FDE8094E6B792E5178E1C4ACBC2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8ynsbsbpRLC3BsP3GuCXATqZAR7jvDNnG71ZJShpjs4v/0/3137372e32332e32342e302f32342d3234203d3e20323730393936.roa
Signing time:             Mon 05 Dec 2022 15:37:54 +0000
ROA not before:           Mon 05 Dec 2022 15:32:54 +0000
ROA not after:            Mon 04 Dec 2023 15:37:54 +0000
asID:                     270996
IP address blocks:        177.23.24.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:35:88:9c:75:69:d6:45:ba:10:3d:7e:df:5d:5c:76:0d:b3:50:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CF4B7D9CBF770FDE8094E6B792E5178E1C4ACBC2
        Validity
            Not Before: Dec  5 15:32:54 2022 GMT
            Not After : Dec  4 15:37:54 2023 GMT
        Subject: CN=84EECBB55CDAD5B54B2B6F7483818383BC7C66BF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:58:7f:50:65:3c:1b:56:44:90:b1:90:bd:1a:
                    60:0e:11:69:11:61:01:b7:a5:a7:ee:84:95:0c:fb:
                    2f:5e:5b:0d:1d:fb:63:ae:a5:bf:5d:45:55:05:64:
                    ed:15:03:69:11:cd:4c:17:49:f7:e0:aa:33:04:51:
                    96:7f:07:0c:41:10:ac:ed:48:14:a1:63:eb:a5:be:
                    53:66:81:f6:41:94:ab:a5:e8:c5:be:0e:67:bc:a0:
                    6d:12:19:01:70:0b:3a:73:8b:8c:0a:1b:ed:ad:99:
                    03:d8:71:83:c6:ce:f6:e6:b9:36:82:63:70:90:26:
                    d3:b3:47:05:46:26:3f:ee:42:01:0f:b1:5c:6e:32:
                    d1:0a:10:20:82:d5:a2:20:26:85:c3:a2:7d:89:bc:
                    25:fd:18:86:b3:79:ac:8a:a1:df:74:9c:82:51:f7:
                    1a:33:c7:99:65:70:07:2d:f3:23:d5:05:1b:16:ae:
                    5a:7d:4d:27:93:fd:ea:69:39:cc:02:23:8d:55:71:
                    e8:4c:26:cb:64:cc:e6:e0:de:b4:3b:02:c7:c0:71:
                    e8:b0:c8:10:44:54:c8:e7:1f:97:00:90:75:96:b1:
                    bd:6c:dd:d7:01:69:20:d0:68:da:9c:67:21:6e:6f:
                    d9:6d:ac:79:28:c1:d6:7b:56:8d:8f:1d:62:66:94:
                    25:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:EE:CB:B5:5C:DA:D5:B5:4B:2B:6F:74:83:81:83:83:BC:7C:66:BF
            X509v3 Authority Key Identifier:
                keyid:CF:4B:7D:9C:BF:77:0F:DE:80:94:E6:B7:92:E5:17:8E:1C:4A:CB:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8ynsbsbpRLC3BsP3GuCXATqZAR7jvDNnG71ZJShpjs4v/0/CF4B7D9CBF770FDE8094E6B792E5178E1C4ACBC2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CF4B7D9CBF770FDE8094E6B792E5178E1C4ACBC2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8ynsbsbpRLC3BsP3GuCXATqZAR7jvDNnG71ZJShpjs4v/0/3137372e32332e32342e302f32342d3234203d3e20323730393936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.23.24.0/24

    Signature Algorithm: sha256WithRSAEncryption
         36:c3:8e:65:d0:09:ca:73:a2:ad:0b:10:50:7e:3e:96:1d:40:
         79:13:db:f2:7c:f6:69:71:ec:3e:3c:b5:77:6a:a3:84:04:a6:
         4e:26:e9:61:67:52:cc:f0:fe:29:6d:ae:5b:54:4c:33:bb:b4:
         14:94:db:05:92:d1:78:44:d3:26:fe:41:d1:55:16:b6:51:26:
         06:dc:91:69:0b:aa:48:34:0b:3a:8d:97:59:b9:36:94:d2:b8:
         c8:16:ba:f2:b3:db:3c:49:79:0c:27:5e:07:ce:ae:79:24:3c:
         5b:17:74:a4:62:30:16:73:79:7f:29:6e:b7:22:06:79:94:96:
         0c:b4:68:38:29:3b:0c:56:bd:ee:43:be:f8:df:af:9a:da:01:
         de:a7:9b:5f:be:6d:14:30:72:b6:33:12:a7:d6:06:51:7d:9b:
         93:6c:81:4c:35:15:08:24:dd:b7:40:93:e5:05:ee:0e:d8:4f:
         c4:7e:a8:12:dd:09:9e:b0:fa:04:f7:5b:68:df:d6:e9:33:1c:
         7f:3c:ec:81:8d:4e:57:26:81:cd:2e:5f:8a:de:c7:24:ab:84:
         32:b6:ac:7b:00:4c:f4:d5:12:9f:6e:e8:86:f1:e3:9d:bf:c7:
         e8:00:25:cb:59:29:ac:d1:5f:81:4f:b2:48:88:cb:7f:72:11:
         09:b5:c0:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 01:34:21 2025 by rpki-client