Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A3T4ixYQ47sWEzJXijEAZaVUv7GCC1qa8b9zGTx6HVMh/0/3137372e33372e3132352e302f32342d3234203d3e20323632383038.roa
File:                     3137372e33372e3132352e302f32342d3234203d3e20323632383038.roa (raw, json)
Hash identifier:          4Gg6HzcwOW+9mlyuWkJbHizghkvXYM812gov1LNul9o=
Subject key identifier:   D2:5D:4D:1A:31:93:29:E9:DB:89:DB:AA:8C:39:B4:40:A1:32:8C:4A
Certificate issuer:       /CN=01EB0C4181F92B1230B0D1B98892311E2B70834A
Certificate serial:       48D0286B58820CD1EABC9B4B52B8ADA251D8EEAB
Authority key identifier: 01:EB:0C:41:81:F9:2B:12:30:B0:D1:B9:88:92:31:1E:2B:70:83:4A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/01EB0C4181F92B1230B0D1B98892311E2B70834A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A3T4ixYQ47sWEzJXijEAZaVUv7GCC1qa8b9zGTx6HVMh/0/3137372e33372e3132352e302f32342d3234203d3e20323632383038.roa
Signing time:             Tue 10 Oct 2023 13:57:28 +0000
ROA not before:           Tue 10 Oct 2023 13:52:28 +0000
ROA not after:            Tue 08 Oct 2024 13:57:28 +0000
asID:                     262808
IP address blocks:        177.37.125.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:d0:28:6b:58:82:0c:d1:ea:bc:9b:4b:52:b8:ad:a2:51:d8:ee:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01EB0C4181F92B1230B0D1B98892311E2B70834A
        Validity
            Not Before: Oct 10 13:52:28 2023 GMT
            Not After : Oct  8 13:57:28 2024 GMT
        Subject: CN=D25D4D1A319329E9DB89DBAA8C39B440A1328C4A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:b5:a6:b4:c5:e7:ff:62:f8:5e:9d:56:4f:df:
                    20:66:89:70:33:5c:6e:7b:c7:6e:55:d9:8a:41:4a:
                    12:1f:04:78:aa:52:bb:dc:01:f9:0e:49:42:4b:4d:
                    98:a8:54:b4:d3:66:53:73:64:c1:8e:ad:60:a9:a1:
                    e6:7d:87:d4:fd:67:e5:cb:d7:37:6f:bc:eb:16:66:
                    26:f3:20:2e:1c:ea:99:06:06:b9:cf:29:0f:2b:78:
                    28:21:b8:92:4b:52:cb:e1:87:62:da:93:ec:c6:07:
                    b7:93:48:38:dd:ae:28:62:9e:14:5c:dd:de:1a:20:
                    7f:53:7f:28:e1:84:1f:bf:71:12:89:06:66:72:80:
                    47:b0:bf:77:93:e7:fb:70:e2:b2:c8:5d:01:d9:51:
                    ea:e9:0f:0b:f6:6a:20:20:49:b0:5f:20:8b:e9:47:
                    cb:28:f4:bd:90:e4:bb:0d:c4:92:3f:83:9c:f9:55:
                    62:97:ba:2d:a5:f6:ca:e5:d6:07:35:53:9c:6c:04:
                    ff:c6:52:6e:e7:a1:e5:83:5a:12:ec:ed:0f:aa:df:
                    1b:c3:40:e0:8a:4e:0b:a2:d8:4b:20:10:7f:fa:d8:
                    a1:09:38:47:00:e7:03:f3:5e:6d:4d:f0:9a:77:3c:
                    73:f9:06:f3:de:dd:86:8a:80:dc:69:3e:80:d3:e3:
                    73:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:5D:4D:1A:31:93:29:E9:DB:89:DB:AA:8C:39:B4:40:A1:32:8C:4A
            X509v3 Authority Key Identifier:
                keyid:01:EB:0C:41:81:F9:2B:12:30:B0:D1:B9:88:92:31:1E:2B:70:83:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A3T4ixYQ47sWEzJXijEAZaVUv7GCC1qa8b9zGTx6HVMh/0/01EB0C4181F92B1230B0D1B98892311E2B70834A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/01EB0C4181F92B1230B0D1B98892311E2B70834A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A3T4ixYQ47sWEzJXijEAZaVUv7GCC1qa8b9zGTx6HVMh/0/3137372e33372e3132352e302f32342d3234203d3e20323632383038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.37.125.0/24

    Signature Algorithm: sha256WithRSAEncryption
         67:85:fe:24:4b:06:3b:e2:1b:b6:da:74:c6:03:6b:2d:f8:0a:
         d7:bf:eb:51:37:44:de:ed:47:0a:ba:9b:47:c6:a1:25:85:20:
         f1:23:1a:36:1c:eb:b8:0b:41:15:a9:96:9e:65:f2:e7:5c:a2:
         63:7b:c9:e2:bd:e7:c5:ee:38:97:61:8b:f1:7a:9d:d2:9c:63:
         a6:ad:14:74:3b:85:d8:0b:7b:b2:36:cb:b9:53:9d:19:fa:b2:
         41:de:08:7b:30:ad:d3:d5:b9:75:27:1b:72:65:10:fd:75:7b:
         60:98:64:cd:a2:ef:43:95:ef:88:d1:6f:99:5a:36:18:89:29:
         5e:3b:d7:0f:78:de:c3:a6:c1:47:5d:0f:45:aa:60:8f:8c:84:
         f2:ff:bc:96:62:7b:d5:73:77:90:49:64:a5:5a:21:dd:6c:83:
         fe:60:02:46:24:00:c1:cf:0a:f8:59:4d:05:52:87:99:12:d1:
         a3:de:e1:00:b1:5d:2d:fb:c5:d1:6c:15:e2:4f:2a:5c:fb:52:
         27:d8:ae:49:79:49:6d:d4:76:05:2a:3c:7d:19:cc:d2:72:e5:
         00:88:8a:c4:43:c3:6a:e0:15:91:7a:ac:cb:4e:2c:4b:d6:9a:
         03:a7:2f:23:bd:c3:37:0c:49:41:96:b4:80:2c:3f:fa:6f:57:
         cf:bd:af:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:38:12 2025 by rpki-client