Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/3137372e3135342e3139362e302f32332d3233203d3e20323632323933.roa
File:                     3137372e3135342e3139362e302f32332d3233203d3e20323632323933.roa (raw, json)
Hash identifier:          2tG+m58qVf6Sy8pZOVIKhItsfed0al5cU+8SRF7Hogc=
Subject key identifier:   4F:DA:51:DD:02:F4:85:EA:58:10:90:ED:26:B5:2F:99:7A:B2:8C:5F
Certificate issuer:       /CN=1A01AD3383BFA38B76F1CA139958102A17AF0391
Certificate serial:       0EAF7AC3673A74C67A8406EE700995B9DBAAEE40
Authority key identifier: 1A:01:AD:33:83:BF:A3:8B:76:F1:CA:13:99:58:10:2A:17:AF:03:91
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1A01AD3383BFA38B76F1CA139958102A17AF0391.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/3137372e3135342e3139362e302f32332d3233203d3e20323632323933.roa
Signing time:             Tue 02 Jan 2024 21:16:39 +0000
ROA not before:           Tue 02 Jan 2024 21:11:39 +0000
ROA not after:            Tue 31 Dec 2024 21:16:39 +0000
asID:                     262293
IP address blocks:        177.154.196.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:af:7a:c3:67:3a:74:c6:7a:84:06:ee:70:09:95:b9:db:aa:ee:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1A01AD3383BFA38B76F1CA139958102A17AF0391
        Validity
            Not Before: Jan  2 21:11:39 2024 GMT
            Not After : Dec 31 21:16:39 2024 GMT
        Subject: CN=4FDA51DD02F485EA581090ED26B52F997AB28C5F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:09:3d:80:71:be:04:ed:f5:c7:64:c6:57:b0:
                    e8:9e:d5:c4:62:1a:5f:ae:b9:af:0d:04:70:dc:80:
                    9b:c7:ce:c1:0c:85:82:90:f0:aa:be:13:d4:54:62:
                    ae:60:f2:90:95:4a:1a:93:13:cd:aa:de:b7:f1:4b:
                    d0:96:ba:24:26:d8:17:78:a7:0f:38:0d:e4:01:43:
                    0b:57:09:69:35:0f:ad:80:c4:2a:f8:10:be:ae:8b:
                    9c:41:6f:de:86:e0:a0:96:2a:34:f5:53:50:fb:87:
                    92:f4:2d:54:5a:cf:c3:6e:35:df:69:4c:db:85:c1:
                    3e:dd:91:a1:1e:c4:fc:68:74:21:12:9e:36:27:f0:
                    84:fc:3e:fc:43:74:94:79:67:66:bf:a1:4b:64:c6:
                    f2:ca:29:5e:cb:c2:dc:e9:2a:d8:50:96:4e:bb:5a:
                    84:87:ff:b0:78:54:3a:4f:b2:c1:6e:24:3f:2b:dd:
                    b6:4c:95:49:ce:12:0c:a6:65:89:7b:34:20:15:c0:
                    fa:7e:ae:32:ae:e8:5b:50:4f:44:f1:fe:ec:cb:5c:
                    42:0d:e6:4b:d3:bf:0b:36:2e:dc:9e:13:de:a7:22:
                    36:97:34:ae:01:da:2f:4f:a6:f4:0e:cd:33:c0:54:
                    15:75:f1:e4:64:4c:2e:92:a1:1b:b0:c2:f1:c3:4f:
                    55:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:DA:51:DD:02:F4:85:EA:58:10:90:ED:26:B5:2F:99:7A:B2:8C:5F
            X509v3 Authority Key Identifier:
                keyid:1A:01:AD:33:83:BF:A3:8B:76:F1:CA:13:99:58:10:2A:17:AF:03:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/1A01AD3383BFA38B76F1CA139958102A17AF0391.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1A01AD3383BFA38B76F1CA139958102A17AF0391.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/3137372e3135342e3139362e302f32332d3233203d3e20323632323933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.154.196.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4e:56:8c:a7:06:1e:e0:2d:70:3b:56:26:52:24:5f:a7:34:82:
         d6:bf:84:91:f4:8b:d0:14:27:da:63:ab:bf:16:b5:ab:e9:78:
         65:26:e1:a3:02:a5:8b:c6:b9:aa:bc:82:7c:64:99:9c:14:50:
         fd:e1:1f:e9:09:5e:25:72:04:3c:d5:36:b2:3e:aa:a8:11:03:
         0f:05:8d:6c:39:6f:21:14:f4:21:e0:9b:92:52:e7:a8:9c:ca:
         8c:ef:80:10:83:8f:9f:16:c3:cc:45:cd:5f:03:ac:09:b6:6a:
         0f:da:6d:02:5c:a0:0f:0e:16:b2:2b:81:3d:7d:b3:7d:c4:27:
         97:b2:26:57:d3:fc:34:8e:ad:49:51:b1:23:a9:3c:c4:9b:c7:
         d5:f8:78:ba:4e:5e:b2:81:b0:cd:46:ab:d2:fe:1f:9c:b7:0f:
         40:4e:3a:68:ba:c5:24:66:33:b3:45:a4:21:9f:ec:41:b1:6d:
         a3:3c:e3:ec:37:af:42:b2:2f:0b:cb:34:40:b6:56:d0:a6:ff:
         7d:22:e1:b1:b3:ab:9f:f1:17:59:c4:19:dd:8f:47:94:1e:f4:
         2e:a6:6f:0a:a6:62:cd:32:9b:d9:81:47:69:eb:ce:68:bb:bc:
         41:75:a7:f5:40:6e:31:fb:c4:74:ab:33:41:ae:02:97:99:57:
         21:71:8f:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 02:21:47 2025 by rpki-client