Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A3T4ixYQ47sWEzJXijEAZaVUv7GCC1qa8b9zGTx6HVMh/0/3137372e33372e3131372e302f32342d3234203d3e20323632383038.roa
File:                     3137372e33372e3131372e302f32342d3234203d3e20323632383038.roa (raw, json)
Hash identifier:          Sdk9fdUOFzDY5gZTwq2ue4Q7565umRiT9CdKXtEVrF4=
Subject key identifier:   06:AF:F3:1B:CC:57:60:29:24:88:83:56:83:C5:14:BE:2B:B3:E5:1E
Certificate issuer:       /CN=01EB0C4181F92B1230B0D1B98892311E2B70834A
Certificate serial:       7C588481FD7BA750CBA5D27112D573E9F62B722F
Authority key identifier: 01:EB:0C:41:81:F9:2B:12:30:B0:D1:B9:88:92:31:1E:2B:70:83:4A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/01EB0C4181F92B1230B0D1B98892311E2B70834A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A3T4ixYQ47sWEzJXijEAZaVUv7GCC1qa8b9zGTx6HVMh/0/3137372e33372e3131372e302f32342d3234203d3e20323632383038.roa
Signing time:             Tue 10 Oct 2023 13:57:27 +0000
ROA not before:           Tue 10 Oct 2023 13:52:27 +0000
ROA not after:            Tue 08 Oct 2024 13:57:27 +0000
asID:                     262808
IP address blocks:        177.37.117.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:58:84:81:fd:7b:a7:50:cb:a5:d2:71:12:d5:73:e9:f6:2b:72:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01EB0C4181F92B1230B0D1B98892311E2B70834A
        Validity
            Not Before: Oct 10 13:52:27 2023 GMT
            Not After : Oct  8 13:57:27 2024 GMT
        Subject: CN=06AFF31BCC5760292488835683C514BE2BB3E51E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:04:c9:9e:9d:d5:b9:3a:07:99:7b:f6:96:cc:
                    88:1d:48:38:43:fb:9b:ca:c9:33:0e:19:c7:c8:51:
                    c2:5c:57:e4:8f:ec:e1:3f:bd:5f:da:7c:e1:a2:0b:
                    48:bd:f3:88:a1:94:8a:39:7e:bd:89:cd:7f:4c:9f:
                    fd:c8:3a:56:a3:36:2b:94:da:fa:f4:51:2d:49:6a:
                    62:8b:a3:9e:45:23:78:f2:a7:89:50:a8:3e:46:68:
                    d1:4e:12:e4:9d:a8:0d:3b:a9:2c:68:58:fc:59:a8:
                    b3:49:a4:61:2e:64:74:9b:ad:0e:ab:77:06:13:a0:
                    98:29:81:1a:a4:6c:6a:55:55:99:da:05:bc:b5:78:
                    24:e1:7e:b9:4c:f5:94:54:31:25:88:1c:9a:d3:9c:
                    b4:a7:2d:44:a9:fd:10:39:70:b1:9e:e7:c9:21:fa:
                    70:de:d4:8f:c7:32:f0:9d:2d:47:64:15:a5:04:ca:
                    69:cf:a3:c7:33:49:d1:7c:ff:21:30:33:29:87:c5:
                    55:97:91:a8:1c:83:2c:31:28:4d:e8:1e:03:b0:1e:
                    35:38:bd:c2:2a:0c:e9:68:43:3b:f7:51:cd:5f:32:
                    b1:19:81:2a:a4:0f:bf:59:f8:69:ff:72:a1:09:17:
                    f3:bb:c0:20:6a:03:60:e1:bf:88:cb:ac:c2:c7:10:
                    fa:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:AF:F3:1B:CC:57:60:29:24:88:83:56:83:C5:14:BE:2B:B3:E5:1E
            X509v3 Authority Key Identifier:
                keyid:01:EB:0C:41:81:F9:2B:12:30:B0:D1:B9:88:92:31:1E:2B:70:83:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A3T4ixYQ47sWEzJXijEAZaVUv7GCC1qa8b9zGTx6HVMh/0/01EB0C4181F92B1230B0D1B98892311E2B70834A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/01EB0C4181F92B1230B0D1B98892311E2B70834A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A3T4ixYQ47sWEzJXijEAZaVUv7GCC1qa8b9zGTx6HVMh/0/3137372e33372e3131372e302f32342d3234203d3e20323632383038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.37.117.0/24

    Signature Algorithm: sha256WithRSAEncryption
         87:cf:ab:f0:cc:9a:ab:15:6d:6f:02:e9:c3:8b:f5:2d:7a:e5:
         c7:41:b6:02:e8:4c:51:1c:1a:b0:8a:49:37:9d:d9:85:ec:ab:
         5e:c9:23:64:f0:67:48:db:fb:87:96:53:a3:67:9b:36:f4:21:
         a7:d9:12:77:9a:fa:c9:f1:65:88:5f:f2:63:9a:a6:5d:84:ad:
         70:cc:7b:bf:1f:89:9b:64:76:d2:1d:9b:90:c0:a9:89:9a:9d:
         03:1a:1c:d2:bd:32:bc:60:9d:6f:90:d5:d4:5b:3d:e2:79:d5:
         85:d9:1f:76:ef:6a:92:9f:fe:29:29:84:03:7f:df:a6:ff:2c:
         61:93:a3:27:57:ac:c2:d1:de:1f:66:e9:23:8e:b0:cc:7b:50:
         c7:f8:bb:87:45:87:41:a5:c9:cb:c0:e6:00:c2:2e:dd:32:01:
         37:49:7b:dd:92:92:fa:f8:59:9c:eb:01:f4:5f:4e:19:99:ac:
         07:e0:d7:c9:9b:b6:2e:fa:28:87:64:a7:30:da:1a:c6:36:12:
         66:c6:25:0c:69:70:b1:01:82:fc:2d:4a:3f:24:07:dd:08:3d:
         40:b7:56:10:e5:bb:8f:76:4c:58:aa:4d:08:28:1b:50:4e:95:
         b6:b0:af:f4:0b:3a:83:25:8b:d0:0f:3a:54:2c:1b:c6:47:e5:
         c5:fc:99:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 02:22:30 2025 by rpki-client