Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A3T4ixYQ47sWEzJXijEAZaVUv7GCC1qa8b9zGTx6HVMh/0/3137372e33372e3131382e302f32342d3234203d3e20323632383038.roa
File:                     3137372e33372e3131382e302f32342d3234203d3e20323632383038.roa (raw, json)
Hash identifier:          RHOf70rhnKcCryyPg02kgI4su+euhnUuOAHAA+sGNIU=
Subject key identifier:   FB:CF:7E:88:CA:36:13:31:8E:79:D5:F8:EE:53:32:9B:90:A2:E7:22
Certificate issuer:       /CN=01EB0C4181F92B1230B0D1B98892311E2B70834A
Certificate serial:       7DD7E59386B576912D0392C7D63E1C651B901F7B
Authority key identifier: 01:EB:0C:41:81:F9:2B:12:30:B0:D1:B9:88:92:31:1E:2B:70:83:4A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/01EB0C4181F92B1230B0D1B98892311E2B70834A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A3T4ixYQ47sWEzJXijEAZaVUv7GCC1qa8b9zGTx6HVMh/0/3137372e33372e3131382e302f32342d3234203d3e20323632383038.roa
Signing time:             Tue 10 Oct 2023 13:57:29 +0000
ROA not before:           Tue 10 Oct 2023 13:52:29 +0000
ROA not after:            Tue 08 Oct 2024 13:57:29 +0000
asID:                     262808
IP address blocks:        177.37.118.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:d7:e5:93:86:b5:76:91:2d:03:92:c7:d6:3e:1c:65:1b:90:1f:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01EB0C4181F92B1230B0D1B98892311E2B70834A
        Validity
            Not Before: Oct 10 13:52:29 2023 GMT
            Not After : Oct  8 13:57:29 2024 GMT
        Subject: CN=FBCF7E88CA3613318E79D5F8EE53329B90A2E722
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:3e:fe:8b:09:d6:15:ca:50:8f:ae:3d:7b:ca:
                    e1:c9:8c:73:3a:be:fe:63:5e:f0:83:04:2b:f1:3d:
                    97:56:b3:ba:f2:d9:f0:9b:03:72:c3:8e:f4:d5:c0:
                    f7:f8:56:9f:e5:e8:e7:63:5b:02:ea:98:f4:a7:96:
                    94:e6:56:25:a3:7a:ed:f7:35:f8:3c:0f:e7:b5:e2:
                    c9:40:ff:6e:b8:0c:8b:f1:60:64:48:2e:6e:cd:b9:
                    51:6e:c7:d6:cc:46:9a:65:be:73:5b:4b:59:d6:f7:
                    1b:92:88:99:4b:58:8b:12:49:93:3d:a1:e3:ef:25:
                    04:3b:99:82:27:2f:04:4e:5c:00:54:6b:a5:f1:c6:
                    9f:c3:04:5b:94:00:a9:90:61:6c:6e:60:63:7c:db:
                    c8:18:b6:34:e2:f0:69:02:ef:40:b1:97:61:9c:4c:
                    8c:20:d3:b1:54:4c:f1:0e:74:c0:20:e2:fd:b9:1f:
                    36:29:6f:09:90:c8:b7:29:8c:14:e9:b8:f5:da:3e:
                    5e:39:7e:8e:09:99:1c:c9:8e:cb:e9:f9:f8:ce:0a:
                    07:17:7b:2c:28:78:d7:7b:ac:1c:5b:f3:8c:4e:66:
                    43:61:e9:a8:6d:dd:0a:40:40:a4:d7:2c:a1:3c:ce:
                    bf:54:9b:a2:a2:e4:78:24:9f:22:13:00:09:5e:50:
                    0e:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:CF:7E:88:CA:36:13:31:8E:79:D5:F8:EE:53:32:9B:90:A2:E7:22
            X509v3 Authority Key Identifier:
                keyid:01:EB:0C:41:81:F9:2B:12:30:B0:D1:B9:88:92:31:1E:2B:70:83:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A3T4ixYQ47sWEzJXijEAZaVUv7GCC1qa8b9zGTx6HVMh/0/01EB0C4181F92B1230B0D1B98892311E2B70834A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/01EB0C4181F92B1230B0D1B98892311E2B70834A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A3T4ixYQ47sWEzJXijEAZaVUv7GCC1qa8b9zGTx6HVMh/0/3137372e33372e3131382e302f32342d3234203d3e20323632383038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.37.118.0/24

    Signature Algorithm: sha256WithRSAEncryption
         62:a8:fe:28:72:01:2c:9e:1d:64:87:95:a4:25:d2:3a:06:e8:
         9d:16:4c:3a:59:01:e4:11:d1:f3:ad:19:f5:b9:c0:e4:7c:d9:
         5b:eb:07:58:92:18:d3:60:3d:3f:a5:05:b4:a1:4b:40:0a:66:
         fe:b8:86:94:6c:96:47:a3:5b:50:c9:32:37:87:4d:52:32:32:
         fc:c5:d1:52:c4:fd:c1:da:e9:a2:3d:ff:81:0d:59:33:f8:31:
         1f:06:e3:c1:71:8f:2b:04:13:ef:ce:75:15:20:82:18:2c:ae:
         fa:34:27:56:bb:bf:e2:bf:9a:80:08:cb:fb:d1:41:89:72:39:
         71:15:97:5a:27:db:68:1c:b1:4e:19:10:4d:e6:94:15:ef:80:
         33:8f:9d:82:65:dd:0f:8b:72:fc:60:4e:6a:55:e1:2a:07:d3:
         d5:e0:9f:ac:f0:39:88:46:2e:8c:6a:16:4c:c2:37:cc:79:d2:
         ae:9b:7f:28:23:26:81:7a:e4:41:04:05:e4:1d:e7:96:5a:7f:
         59:98:32:7d:16:d6:69:26:d4:0c:5a:02:78:58:2f:d4:f1:75:
         b2:e7:8d:47:87:b8:f9:b3:e7:06:f3:72:73:c2:1c:be:bd:fe:
         e2:0e:f1:06:a3:c3:f9:98:54:80:7c:ab:3f:a0:6e:26:3c:9a:
         14:83:89:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 02:16:35 2025 by rpki-client