Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/3137372e3135342e3231362e302f32322d3232203d3e20323632323933.roa
File:                     3137372e3135342e3231362e302f32322d3232203d3e20323632323933.roa (raw, json)
Hash identifier:          tu7bn9NbUMSev72hFl7re2hlyBpjdhgABmZNqhE3h7Q=
Subject key identifier:   46:72:6F:1E:DD:59:CD:62:98:7F:CF:60:3E:48:EE:F9:E4:DC:62:61
Certificate issuer:       /CN=1A01AD3383BFA38B76F1CA139958102A17AF0391
Certificate serial:       210BA010283B78E0E3E1124C8EC20A7310B5F883
Authority key identifier: 1A:01:AD:33:83:BF:A3:8B:76:F1:CA:13:99:58:10:2A:17:AF:03:91
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1A01AD3383BFA38B76F1CA139958102A17AF0391.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/3137372e3135342e3231362e302f32322d3232203d3e20323632323933.roa
Signing time:             Tue 02 Jan 2024 21:16:39 +0000
ROA not before:           Tue 02 Jan 2024 21:11:39 +0000
ROA not after:            Tue 31 Dec 2024 21:16:39 +0000
asID:                     262293
IP address blocks:        177.154.216.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:0b:a0:10:28:3b:78:e0:e3:e1:12:4c:8e:c2:0a:73:10:b5:f8:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1A01AD3383BFA38B76F1CA139958102A17AF0391
        Validity
            Not Before: Jan  2 21:11:39 2024 GMT
            Not After : Dec 31 21:16:39 2024 GMT
        Subject: CN=46726F1EDD59CD62987FCF603E48EEF9E4DC6261
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:21:23:d5:21:8a:e4:78:1d:70:44:a6:3f:35:
                    66:27:00:f2:b1:f9:c6:b2:50:f6:24:fa:73:6c:fb:
                    ac:9c:45:4b:a7:9f:e8:74:92:21:9f:cb:94:8f:5d:
                    0c:68:fb:83:e2:73:ac:d8:b3:0e:a3:09:97:c7:c7:
                    53:af:5a:cc:d7:e1:66:06:10:56:d2:46:48:4b:aa:
                    b7:4e:8e:6d:8b:60:ba:83:e8:4a:d4:0f:d8:7e:10:
                    db:dc:41:6d:d6:ab:a1:73:09:da:8b:f8:72:ae:e1:
                    28:86:fb:fd:ec:9d:00:87:8f:c1:c6:99:11:16:29:
                    8e:07:ad:a7:65:fe:8b:85:b9:23:45:6a:b9:37:2a:
                    9e:4a:9c:f3:a9:d8:a0:81:08:85:ad:39:e7:92:79:
                    18:72:50:37:75:e0:1e:d2:5b:91:bc:aa:0f:c6:2e:
                    ab:a5:05:46:d5:9f:14:00:11:d3:7b:24:54:d3:1a:
                    bf:23:8e:3c:7a:1a:93:e4:29:33:a5:15:42:f4:b9:
                    f4:ba:e3:42:0c:87:c1:6d:4c:1e:19:ad:99:0f:94:
                    2c:f3:59:6c:6d:9d:57:47:36:c3:d8:aa:95:1d:87:
                    99:66:ee:63:f3:f4:11:f0:d2:31:62:05:ae:3f:e2:
                    38:00:47:2c:e9:31:b1:a9:b6:33:d6:a4:6f:21:fe:
                    5a:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:72:6F:1E:DD:59:CD:62:98:7F:CF:60:3E:48:EE:F9:E4:DC:62:61
            X509v3 Authority Key Identifier:
                keyid:1A:01:AD:33:83:BF:A3:8B:76:F1:CA:13:99:58:10:2A:17:AF:03:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/1A01AD3383BFA38B76F1CA139958102A17AF0391.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1A01AD3383BFA38B76F1CA139958102A17AF0391.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/3137372e3135342e3231362e302f32322d3232203d3e20323632323933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.154.216.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4c:40:dc:9a:8c:ba:60:94:12:5d:7f:42:3a:e8:e5:95:74:7f:
         47:10:c1:4d:77:3f:78:b8:77:b4:e0:50:95:26:98:bd:14:66:
         af:be:0e:ae:2b:c2:22:36:21:5f:f0:e1:27:6c:c5:24:79:e8:
         46:7f:2b:f9:8c:9f:6c:7d:8a:c9:0f:1b:84:50:1a:dd:38:6d:
         8c:db:a2:0c:01:3c:72:5b:54:47:67:f3:3a:12:6f:ed:76:e6:
         c0:d7:52:e3:0a:c7:ec:47:5d:26:c9:47:3c:ba:84:6c:1e:69:
         5e:e5:57:8a:93:7d:4b:c6:dc:40:85:59:ca:11:48:05:47:2c:
         2f:d4:74:ef:2b:7d:3d:0b:e0:2e:06:46:ef:83:de:e3:19:bd:
         5d:40:26:95:b0:0a:94:f7:8d:ef:b1:92:e7:bd:7f:d3:f3:88:
         e2:81:ff:22:ed:e7:a8:55:40:f3:65:b6:42:c3:d9:e1:66:29:
         39:36:2d:ea:3e:5a:65:c3:e2:f6:35:be:cb:f8:21:18:df:de:
         2d:02:f3:76:bc:2f:e0:44:c2:cb:8f:96:69:c1:7d:10:9a:54:
         dd:0f:4e:d2:42:2a:fa:97:55:48:83:fe:0b:46:d1:d3:6d:ad:
         12:68:0f:d5:bd:6a:40:6c:60:e8:51:87:4d:ef:89:83:f8:d3:
         7a:fb:49:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:37:40 2025 by rpki-client