Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A3T4ixYQ47sWEzJXijEAZaVUv7GCC1qa8b9zGTx6HVMh/0/3137372e33372e3131342e302f32342d3234203d3e20323632383038.roa
File:                     3137372e33372e3131342e302f32342d3234203d3e20323632383038.roa (raw, json)
Hash identifier:          SD9h1ZPE9BpYpkLCXHwaZQ1n8JIYMEOj9el9zYj40iM=
Subject key identifier:   AD:DA:E8:69:76:FF:19:79:8C:1C:FB:CA:6C:C6:93:1E:C5:15:3D:78
Certificate issuer:       /CN=01EB0C4181F92B1230B0D1B98892311E2B70834A
Certificate serial:       689D170DA87885901B9530780FC11038CD851FF5
Authority key identifier: 01:EB:0C:41:81:F9:2B:12:30:B0:D1:B9:88:92:31:1E:2B:70:83:4A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/01EB0C4181F92B1230B0D1B98892311E2B70834A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A3T4ixYQ47sWEzJXijEAZaVUv7GCC1qa8b9zGTx6HVMh/0/3137372e33372e3131342e302f32342d3234203d3e20323632383038.roa
Signing time:             Tue 10 Oct 2023 13:57:27 +0000
ROA not before:           Tue 10 Oct 2023 13:52:27 +0000
ROA not after:            Tue 08 Oct 2024 13:57:27 +0000
asID:                     262808
IP address blocks:        177.37.114.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:9d:17:0d:a8:78:85:90:1b:95:30:78:0f:c1:10:38:cd:85:1f:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01EB0C4181F92B1230B0D1B98892311E2B70834A
        Validity
            Not Before: Oct 10 13:52:27 2023 GMT
            Not After : Oct  8 13:57:27 2024 GMT
        Subject: CN=ADDAE86976FF19798C1CFBCA6CC6931EC5153D78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:21:df:29:c4:a1:31:4f:72:45:8b:c7:3e:db:
                    fb:b6:5b:0a:13:95:bd:47:75:36:84:22:10:b8:d7:
                    ce:3d:b0:e8:6b:1f:cb:7e:30:d7:1d:5c:eb:47:27:
                    d9:56:c6:9d:47:f7:13:40:74:53:c7:dc:83:f8:20:
                    2f:c8:89:60:1b:ef:37:40:87:27:4a:81:40:b8:a8:
                    ac:64:ce:36:90:c4:f0:8f:d7:06:6c:ba:b4:fd:9e:
                    f9:58:06:da:4b:7b:53:ba:b0:e8:f3:4b:1b:19:10:
                    42:b1:4c:2d:80:98:1e:69:91:7c:de:74:24:96:c3:
                    d5:e8:61:3b:d8:11:c4:06:f8:16:42:9d:86:89:75:
                    cf:8e:73:7f:a3:16:a0:e8:8b:52:7a:79:98:5b:85:
                    d3:63:17:ab:4b:ef:d8:43:91:a9:fa:ef:7f:53:51:
                    37:66:0a:bb:42:d4:21:a9:39:a2:3f:0c:d5:60:dd:
                    09:8f:65:94:66:55:da:4e:23:39:9d:77:d4:25:a0:
                    84:b0:11:87:67:0e:30:4e:fc:d1:fb:61:8c:c3:63:
                    f6:c1:c6:8d:96:3b:7a:b3:05:79:1c:42:c0:44:a1:
                    f0:7c:e0:20:53:15:f9:6d:20:51:cc:a0:fc:ac:cd:
                    fe:f0:52:1f:bb:eb:68:eb:02:30:e6:ee:be:d3:32:
                    41:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:DA:E8:69:76:FF:19:79:8C:1C:FB:CA:6C:C6:93:1E:C5:15:3D:78
            X509v3 Authority Key Identifier:
                keyid:01:EB:0C:41:81:F9:2B:12:30:B0:D1:B9:88:92:31:1E:2B:70:83:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A3T4ixYQ47sWEzJXijEAZaVUv7GCC1qa8b9zGTx6HVMh/0/01EB0C4181F92B1230B0D1B98892311E2B70834A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/01EB0C4181F92B1230B0D1B98892311E2B70834A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A3T4ixYQ47sWEzJXijEAZaVUv7GCC1qa8b9zGTx6HVMh/0/3137372e33372e3131342e302f32342d3234203d3e20323632383038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.37.114.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b4:2d:74:d7:a7:3c:c1:40:85:df:1e:1c:20:c1:ee:d6:ba:b1:
         81:a9:43:ec:76:c6:6e:72:b9:29:87:f6:9e:49:d4:f3:c5:6f:
         f2:ab:08:cc:0f:02:3c:6a:08:5c:1c:05:37:e4:ca:77:b1:c7:
         05:c0:91:38:2f:90:98:fa:7c:66:59:bb:76:c1:8f:4e:f3:cc:
         70:b8:65:dc:7e:c7:d5:80:14:ee:bc:92:9e:e8:5c:af:66:9d:
         d9:df:e6:78:7c:43:1e:eb:33:85:10:d5:72:32:83:53:e0:9b:
         1f:e3:77:a1:12:4e:7c:f0:80:13:08:8f:cb:71:1c:d9:f4:8d:
         43:51:ac:a6:b1:47:9b:3b:65:a9:4b:1b:b1:d0:c6:fc:5d:3c:
         1b:7f:b0:bb:85:69:0b:55:f4:04:b1:6e:33:49:6b:3d:64:04:
         28:48:0f:3c:4f:c5:c3:18:48:df:aa:df:88:2b:64:2f:b1:13:
         69:70:05:70:55:4a:43:cf:6a:a1:3e:cb:0d:84:49:06:d4:a6:
         5b:5a:71:2b:a3:5d:82:15:8b:b7:07:30:22:30:75:05:5b:18:
         f7:4f:62:ed:ee:70:d0:ac:16:69:c7:1a:4f:4b:ab:99:64:cb:
         35:3c:b4:e8:59:a4:ae:89:03:c6:96:56:5f:fd:64:5d:04:f2:
         f2:61:55:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 02:50:26 2025 by rpki-client