Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A3T4ixYQ47sWEzJXijEAZaVUv7GCC1qa8b9zGTx6HVMh/0/3137372e37352e33342e302f32342d3234203d3e20323632383038.roa
File:                     3137372e37352e33342e302f32342d3234203d3e20323632383038.roa (raw, json)
Hash identifier:          Qmff/XD0XOPTPw6FpEDIrbgG9WPNsHoLGgLy3LBKpXA=
Subject key identifier:   ED:B0:1E:3A:7A:30:27:E0:66:D7:82:B8:85:D3:C1:D0:73:15:FF:4B
Certificate issuer:       /CN=01EB0C4181F92B1230B0D1B98892311E2B70834A
Certificate serial:       173EE00F146BF96AD0353F64320794108526EE4A
Authority key identifier: 01:EB:0C:41:81:F9:2B:12:30:B0:D1:B9:88:92:31:1E:2B:70:83:4A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/01EB0C4181F92B1230B0D1B98892311E2B70834A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A3T4ixYQ47sWEzJXijEAZaVUv7GCC1qa8b9zGTx6HVMh/0/3137372e37352e33342e302f32342d3234203d3e20323632383038.roa
Signing time:             Tue 10 Oct 2023 13:57:31 +0000
ROA not before:           Tue 10 Oct 2023 13:52:31 +0000
ROA not after:            Tue 08 Oct 2024 13:57:31 +0000
asID:                     262808
IP address blocks:        177.75.34.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:3e:e0:0f:14:6b:f9:6a:d0:35:3f:64:32:07:94:10:85:26:ee:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01EB0C4181F92B1230B0D1B98892311E2B70834A
        Validity
            Not Before: Oct 10 13:52:31 2023 GMT
            Not After : Oct  8 13:57:31 2024 GMT
        Subject: CN=EDB01E3A7A3027E066D782B885D3C1D07315FF4B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:be:c7:3a:97:ce:2e:4d:d3:a7:f6:fc:7e:ed:
                    17:a7:6a:8b:1e:58:a0:4c:0d:0f:49:2f:12:d6:b9:
                    c5:39:4c:d2:36:f2:e9:6d:92:45:1d:a6:4f:5b:05:
                    f5:63:88:9e:0a:e6:ca:30:08:57:18:01:7e:fe:53:
                    3d:2c:7a:d7:7a:ff:05:d6:b8:ac:0f:84:85:58:b5:
                    f5:6f:73:e7:86:cd:62:b2:ea:7d:64:34:ae:30:97:
                    2d:62:79:1a:85:84:e0:37:45:d7:f3:f6:d1:c4:e7:
                    60:3b:c2:03:37:cc:5e:4b:fb:51:82:cd:09:bb:a2:
                    6b:5f:b7:28:e6:8e:93:1d:17:5d:14:fd:2d:2d:0c:
                    7b:7a:a9:ca:44:f0:86:90:f8:bf:df:31:a3:38:13:
                    52:24:7e:d9:ca:a7:1a:e3:3f:8b:56:99:34:2f:74:
                    ff:ac:b1:36:07:f3:ae:28:59:27:87:f6:05:ac:28:
                    b6:74:37:32:f0:ce:8f:c7:44:aa:c1:20:a1:7e:99:
                    84:25:7a:0d:60:0c:2f:0c:15:69:87:a1:49:1d:bf:
                    51:48:eb:f1:73:8a:5a:eb:c2:89:33:13:91:f4:b0:
                    1c:17:18:de:27:da:d4:34:35:cd:cf:6f:2b:07:5a:
                    01:90:73:08:1f:97:17:19:b0:b0:59:d8:3a:84:d0:
                    b2:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:B0:1E:3A:7A:30:27:E0:66:D7:82:B8:85:D3:C1:D0:73:15:FF:4B
            X509v3 Authority Key Identifier:
                keyid:01:EB:0C:41:81:F9:2B:12:30:B0:D1:B9:88:92:31:1E:2B:70:83:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A3T4ixYQ47sWEzJXijEAZaVUv7GCC1qa8b9zGTx6HVMh/0/01EB0C4181F92B1230B0D1B98892311E2B70834A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/01EB0C4181F92B1230B0D1B98892311E2B70834A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A3T4ixYQ47sWEzJXijEAZaVUv7GCC1qa8b9zGTx6HVMh/0/3137372e37352e33342e302f32342d3234203d3e20323632383038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.75.34.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9a:22:a4:b3:44:26:a2:d5:29:eb:b1:28:b2:ce:29:f9:6f:a0:
         a6:0c:ea:6d:86:90:96:dc:3a:7a:f6:df:5a:7f:7b:b7:07:85:
         8d:69:2c:b0:a3:f5:8b:fa:f4:ac:ac:bc:e4:77:81:c5:09:9b:
         70:82:e4:67:f3:e4:4d:f8:16:fd:2c:73:f1:70:29:ae:78:14:
         db:d3:f9:e7:d0:82:0a:51:16:f9:69:cf:fa:cb:04:33:b0:f6:
         23:81:d4:d0:02:82:86:c8:a2:dd:4d:5c:31:fe:ba:e2:9c:ab:
         ef:e7:f2:7c:a2:1b:2f:77:f3:e8:56:c0:4a:13:d9:77:20:06:
         b5:fe:43:64:21:89:32:e3:c9:d5:c6:18:35:e3:78:34:f0:87:
         56:a6:66:8f:e8:90:eb:2c:87:d8:ed:e6:e4:df:d5:b2:74:02:
         8c:4f:ae:a1:a8:bc:d2:ad:b8:4e:76:00:18:33:b2:0c:5b:71:
         c6:f2:d3:eb:f7:79:0d:6b:24:7b:2d:4b:2c:b6:27:57:55:de:
         97:5f:3f:be:30:54:bc:17:48:3e:44:99:c1:8c:8e:62:7c:db:
         0d:89:7b:02:a4:22:c3:88:78:9d:8e:36:ae:96:f2:02:86:b0:
         93:bb:a8:86:0c:21:e4:73:00:dd:fa:44:dd:84:11:b6:43:c0:
         64:e9:3d:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:36:52 2025 by rpki-client