Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/3137372e3135342e3139322e302f32342d3234203d3e20323632323933.roa
File:                     3137372e3135342e3139322e302f32342d3234203d3e20323632323933.roa (raw, json)
Hash identifier:          tXOYysWPaoBLy8D0pKD8hc4LDtZRdKoXtrYtv0BLPK8=
Subject key identifier:   BF:38:48:41:4A:5D:82:3E:7E:90:47:CA:DB:F5:7A:DE:C0:5B:B5:A8
Certificate issuer:       /CN=1A01AD3383BFA38B76F1CA139958102A17AF0391
Certificate serial:       6044AA22B8DCB12A4707C84319D5D82D33EF3C97
Authority key identifier: 1A:01:AD:33:83:BF:A3:8B:76:F1:CA:13:99:58:10:2A:17:AF:03:91
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1A01AD3383BFA38B76F1CA139958102A17AF0391.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/3137372e3135342e3139322e302f32342d3234203d3e20323632323933.roa
Signing time:             Tue 02 Jan 2024 21:16:40 +0000
ROA not before:           Tue 02 Jan 2024 21:11:40 +0000
ROA not after:            Tue 31 Dec 2024 21:16:40 +0000
asID:                     262293
IP address blocks:        177.154.192.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:44:aa:22:b8:dc:b1:2a:47:07:c8:43:19:d5:d8:2d:33:ef:3c:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1A01AD3383BFA38B76F1CA139958102A17AF0391
        Validity
            Not Before: Jan  2 21:11:40 2024 GMT
            Not After : Dec 31 21:16:40 2024 GMT
        Subject: CN=BF3848414A5D823E7E9047CADBF57ADEC05BB5A8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:b4:a1:0b:c8:11:0c:29:45:58:a3:a5:d9:1a:
                    5e:84:75:1e:be:54:19:f8:2a:21:64:e4:4f:e9:e6:
                    b6:de:bc:2b:53:e3:3d:f5:c0:4f:c3:8c:8c:b4:96:
                    17:8b:7a:c1:65:cd:b7:a2:a8:23:0c:e1:a1:40:ce:
                    38:1f:16:64:7f:7b:c2:29:78:db:63:1a:fb:9a:bc:
                    95:89:9e:26:3b:9a:1f:3a:51:59:15:15:48:b1:93:
                    44:2e:d8:b3:05:18:19:5e:47:17:93:06:27:6f:e3:
                    81:eb:b1:1e:b4:86:fd:80:02:0e:e0:ac:12:3b:d0:
                    8b:07:0f:00:81:76:af:35:73:b2:6c:56:f8:d9:58:
                    e7:d9:ed:50:f5:9c:73:af:85:1e:e3:9d:69:74:f0:
                    7f:b2:fc:f6:ad:e8:85:47:08:4c:38:75:89:d3:fa:
                    c5:56:21:c4:b7:65:fe:0b:7c:0a:53:03:5c:e7:e0:
                    a0:22:2a:7a:95:09:27:88:8d:95:1d:92:e8:85:5b:
                    e8:70:36:7d:2e:11:a7:5f:41:7c:d3:53:c1:94:b5:
                    4b:b7:76:93:dc:91:13:f8:2c:c9:0d:83:ff:0e:cf:
                    f4:81:3f:af:25:87:ea:1c:60:6b:82:f9:e2:76:fc:
                    dd:bf:e3:1a:9d:f2:39:ee:d5:d2:6f:8b:93:51:c3:
                    6b:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:38:48:41:4A:5D:82:3E:7E:90:47:CA:DB:F5:7A:DE:C0:5B:B5:A8
            X509v3 Authority Key Identifier:
                keyid:1A:01:AD:33:83:BF:A3:8B:76:F1:CA:13:99:58:10:2A:17:AF:03:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/1A01AD3383BFA38B76F1CA139958102A17AF0391.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1A01AD3383BFA38B76F1CA139958102A17AF0391.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/3137372e3135342e3139322e302f32342d3234203d3e20323632323933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.154.192.0/24

    Signature Algorithm: sha256WithRSAEncryption
         14:55:95:47:bd:f3:1c:f8:87:75:42:c9:5e:46:fb:3f:70:4f:
         f9:81:89:91:38:4a:47:66:14:03:24:ce:26:88:ee:d8:5c:3c:
         4e:37:e8:79:35:17:4b:41:d9:76:c6:0a:38:e3:dd:5a:97:f9:
         fe:1c:b2:83:e9:3e:d1:53:8d:f0:fd:be:c9:34:53:f1:d2:0f:
         ea:ed:2a:5d:28:fc:8c:c4:91:2c:ad:db:e3:16:aa:9a:b0:35:
         48:5b:01:4b:3d:3c:e3:8d:1c:92:b6:67:34:02:5a:4e:9c:db:
         a9:24:42:24:b6:ae:ab:3a:2c:0e:30:a0:2b:42:0b:68:c2:25:
         b8:70:08:3e:d5:5e:90:49:3f:90:28:69:c9:0e:fd:6a:31:0b:
         21:69:d5:63:d2:5c:7f:fc:45:a9:72:f1:ad:cc:b4:77:01:73:
         4d:4a:f8:54:3e:8b:b0:1c:90:d8:56:82:a0:f6:d1:8d:f7:d5:
         ad:44:b8:6f:f4:84:a5:91:54:91:ca:d0:f3:f2:74:ab:68:05:
         d5:c7:cb:be:cc:56:64:28:e4:09:28:5f:e9:15:95:b0:03:9c:
         b1:80:80:1b:3a:ff:11:f9:a3:78:df:bf:fa:ae:b3:13:1d:80:
         dc:bd:c1:58:09:5b:d2:b2:6f:e6:60:e2:a4:3f:4b:c2:81:d8:
         50:72:d0:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 04:15:19 2025 by rpki-client