Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/3137372e3135342e3139342e302f32332d3233203d3e20323632323933.roa
File:                     3137372e3135342e3139342e302f32332d3233203d3e20323632323933.roa (raw, json)
Hash identifier:          4L5t8sdFM0JqCmjfymmoEB9DNSxsEtjBsZZkoEFOz64=
Subject key identifier:   4C:30:3A:BE:D1:12:B5:B0:4C:C8:2F:EA:8C:18:97:C9:3A:1F:EE:D9
Certificate issuer:       /CN=1A01AD3383BFA38B76F1CA139958102A17AF0391
Certificate serial:       08B10570BB16F8661754073D8593C8893D53321B
Authority key identifier: 1A:01:AD:33:83:BF:A3:8B:76:F1:CA:13:99:58:10:2A:17:AF:03:91
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1A01AD3383BFA38B76F1CA139958102A17AF0391.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/3137372e3135342e3139342e302f32332d3233203d3e20323632323933.roa
Signing time:             Tue 02 Jan 2024 21:16:37 +0000
ROA not before:           Tue 02 Jan 2024 21:11:37 +0000
ROA not after:            Tue 31 Dec 2024 21:16:37 +0000
asID:                     262293
IP address blocks:        177.154.194.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:b1:05:70:bb:16:f8:66:17:54:07:3d:85:93:c8:89:3d:53:32:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1A01AD3383BFA38B76F1CA139958102A17AF0391
        Validity
            Not Before: Jan  2 21:11:37 2024 GMT
            Not After : Dec 31 21:16:37 2024 GMT
        Subject: CN=4C303ABED112B5B04CC82FEA8C1897C93A1FEED9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:73:2a:7b:b1:f6:2a:97:b0:6f:cf:09:65:b8:
                    1f:3e:25:67:8e:7f:94:8e:6a:7b:4b:99:32:28:e6:
                    0a:c3:4a:f7:77:f8:b9:73:01:8d:57:f7:dc:94:ee:
                    64:80:5e:bb:c9:81:ac:60:e8:d0:fb:35:e7:72:d2:
                    bb:17:19:e6:41:b8:fc:6f:55:2f:ec:35:18:26:cd:
                    71:60:b7:71:6f:b4:71:c1:12:e9:14:02:9d:5c:e9:
                    e9:e5:7a:c2:be:c7:3d:b4:23:9a:e2:82:d8:a4:b9:
                    4a:8c:9d:1e:75:a1:4c:d7:05:a9:b2:b3:82:e5:30:
                    fd:8a:5e:5b:83:2d:1d:cb:47:b1:70:45:99:6d:1a:
                    4f:ee:e4:6d:dc:7c:5b:6c:16:60:5f:d3:c0:a9:b0:
                    86:e0:3c:7d:0e:f1:8e:40:b7:46:f7:a9:da:8e:90:
                    ad:8b:0d:77:01:cb:5e:65:86:1c:17:0e:7b:dc:a6:
                    32:27:6a:ce:9c:7c:6d:a7:eb:2f:96:65:4c:c9:8d:
                    a3:3d:86:38:ba:53:c9:a8:e2:3d:2f:08:1c:a7:70:
                    51:ff:ad:f2:3d:58:e0:13:aa:a1:15:58:8d:fb:3f:
                    a4:f7:58:d4:fa:c5:0b:e9:7b:c0:cd:b9:e6:46:83:
                    de:2b:0d:3a:74:78:d3:3a:a5:9b:db:10:45:23:ed:
                    39:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:30:3A:BE:D1:12:B5:B0:4C:C8:2F:EA:8C:18:97:C9:3A:1F:EE:D9
            X509v3 Authority Key Identifier:
                keyid:1A:01:AD:33:83:BF:A3:8B:76:F1:CA:13:99:58:10:2A:17:AF:03:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/1A01AD3383BFA38B76F1CA139958102A17AF0391.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1A01AD3383BFA38B76F1CA139958102A17AF0391.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/3137372e3135342e3139342e302f32332d3233203d3e20323632323933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.154.194.0/23

    Signature Algorithm: sha256WithRSAEncryption
         60:94:9c:68:2a:9f:0c:7f:9f:d2:4d:6b:9c:6e:14:1b:ee:2e:
         e2:8f:a9:6f:62:68:f2:dd:32:0c:17:5c:20:58:80:08:71:f9:
         38:69:40:c6:a9:5d:54:51:4d:ef:72:ce:38:f2:3c:1d:43:b5:
         73:c9:b4:cb:4c:b2:e3:14:59:23:a3:93:e0:90:1a:bc:e7:2d:
         04:c3:db:6b:21:8a:56:9f:0e:cc:5f:dd:92:96:5a:09:38:fc:
         49:b4:e1:a3:75:4c:93:a6:67:80:fa:10:00:d6:60:f1:f9:dc:
         3c:b7:d6:e3:86:19:44:96:0c:7d:02:1f:01:e6:95:a8:ce:c7:
         66:89:a4:8c:07:90:a8:c3:09:e8:68:9c:d9:17:e5:a2:17:5b:
         5d:7d:bf:13:66:d4:5b:45:d1:15:bf:b6:b8:36:3d:96:ab:44:
         1d:a5:d9:3d:66:58:a5:9e:63:03:5a:c2:ff:1b:24:2e:f9:b4:
         9b:53:d0:63:0f:e9:e8:4e:e7:f4:53:ce:e6:ab:3d:db:20:42:
         d7:57:dd:e0:59:65:92:0a:9b:b1:fa:20:a9:0c:41:61:fa:99:
         75:53:10:9a:fc:1b:e9:a5:d0:d7:84:71:39:f6:0c:5e:73:1b:
         02:37:37:b2:f0:28:43:d5:d1:aa:02:f1:8d:8f:36:56:e3:37:
         cc:b5:de:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 07:14:38 2025 by rpki-client