Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/B1uUWiUknRDSWP33fSH5nK7LfwM9MP1cgevKV59xhAKX/0/3137372e39332e3134362e302f32332d3233203d3e203532383631.roa
File:                     3137372e39332e3134362e302f32332d3233203d3e203532383631.roa (raw, json)
Hash identifier:          HnhDatDnMsxxrQhS8g93ZMSsO5f+ACiSMtYWeTZgJSU=
Subject key identifier:   3D:1C:0A:24:DA:D3:4B:56:28:73:59:43:F3:A3:50:12:EE:46:24:91
Certificate issuer:       /CN=088FBECC3D734875CDC23B55B9E5092EA27DF270
Certificate serial:       1605AD1DF352BA38BD980103E9CE57E5006A095C
Authority key identifier: 08:8F:BE:CC:3D:73:48:75:CD:C2:3B:55:B9:E5:09:2E:A2:7D:F2:70
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/088FBECC3D734875CDC23B55B9E5092EA27DF270.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/B1uUWiUknRDSWP33fSH5nK7LfwM9MP1cgevKV59xhAKX/0/3137372e39332e3134362e302f32332d3233203d3e203532383631.roa
Signing time:             Tue 24 Dec 2024 13:51:08 +0000
ROA not before:           Tue 24 Dec 2024 13:46:08 +0000
ROA not after:            Tue 23 Dec 2025 13:51:08 +0000
asID:                     52861
IP address blocks:        177.93.146.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:05:ad:1d:f3:52:ba:38:bd:98:01:03:e9:ce:57:e5:00:6a:09:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=088FBECC3D734875CDC23B55B9E5092EA27DF270
        Validity
            Not Before: Dec 24 13:46:08 2024 GMT
            Not After : Dec 23 13:51:08 2025 GMT
        Subject: CN=3D1C0A24DAD34B5628735943F3A35012EE462491
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:a9:34:a8:73:6e:de:ea:76:82:df:b5:e5:11:
                    bb:8f:68:f0:33:a0:34:3e:aa:3c:8b:75:41:c5:78:
                    11:6a:bc:9e:40:9f:02:15:d6:8b:87:a9:33:0c:2e:
                    24:cc:24:37:cc:cf:9f:b7:d1:e9:0e:11:e4:84:99:
                    3a:93:1b:49:33:9e:9a:83:61:d0:ec:a4:ac:ad:5f:
                    92:81:35:0d:c6:49:85:e4:f0:e2:1f:84:5b:bd:66:
                    1a:56:79:f3:b6:8d:be:16:07:27:ef:ab:69:6a:12:
                    be:f6:3a:17:3b:85:a1:44:ff:48:14:7f:39:76:e5:
                    3c:b9:88:58:e5:f0:12:05:2e:d9:a7:06:bc:2b:af:
                    23:7d:b5:6a:93:a8:c6:fd:81:fc:eb:4b:64:ae:95:
                    d3:16:f9:74:63:30:fc:16:b5:ed:18:ae:b2:6a:f3:
                    26:ef:66:80:5c:e3:63:f5:89:6a:a7:56:e8:da:b5:
                    7b:c8:67:e0:bc:62:f3:4a:05:f6:e6:4b:80:3b:e1:
                    00:5b:16:8a:07:c4:d5:6c:f9:07:45:6f:56:32:90:
                    6f:d9:d4:be:63:b8:70:53:58:33:d7:12:4c:f8:ab:
                    ae:60:fd:e6:23:c0:ed:ce:46:2e:15:df:82:04:10:
                    7c:cc:9c:33:ee:d9:d6:45:7a:f7:2f:35:14:46:64:
                    be:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:1C:0A:24:DA:D3:4B:56:28:73:59:43:F3:A3:50:12:EE:46:24:91
            X509v3 Authority Key Identifier:
                keyid:08:8F:BE:CC:3D:73:48:75:CD:C2:3B:55:B9:E5:09:2E:A2:7D:F2:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/B1uUWiUknRDSWP33fSH5nK7LfwM9MP1cgevKV59xhAKX/0/088FBECC3D734875CDC23B55B9E5092EA27DF270.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/088FBECC3D734875CDC23B55B9E5092EA27DF270.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/B1uUWiUknRDSWP33fSH5nK7LfwM9MP1cgevKV59xhAKX/0/3137372e39332e3134362e302f32332d3233203d3e203532383631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.93.146.0/23

    Signature Algorithm: sha256WithRSAEncryption
         63:48:d8:74:38:48:ac:51:86:60:1c:60:c3:e1:f8:f3:43:b0:
         47:e6:02:3b:77:8a:1f:a2:73:80:a2:dd:f5:a9:5b:f1:a3:0a:
         15:b8:a4:99:e2:0b:7b:f0:45:51:91:df:8a:46:89:90:fd:2e:
         48:f7:ad:a8:9c:21:c2:b2:9c:74:09:3b:23:1a:cf:27:99:0a:
         61:ed:25:63:7c:15:da:1d:ab:37:3c:dd:56:7f:2b:e4:90:d6:
         06:47:0c:e1:5d:51:b4:db:96:10:1f:70:97:7e:a3:06:18:ac:
         db:d3:13:06:2d:27:8f:2f:e7:4c:65:9e:2a:d8:70:98:bd:48:
         19:24:fa:20:e7:86:17:ed:64:62:18:6a:0e:de:15:f9:42:15:
         42:df:f6:f7:c6:fa:26:5d:cf:62:ab:0f:1e:8e:f4:c7:1e:14:
         80:41:28:9a:69:9d:8c:bc:7d:b6:85:62:5d:be:40:57:1b:bb:
         ac:b8:a3:cf:99:c1:90:7e:ce:1d:9e:53:b1:d4:47:e3:17:9c:
         af:d2:ab:73:ca:09:00:d6:3c:95:fb:8f:b5:33:44:1c:87:69:
         17:dd:09:06:f5:2a:23:47:c2:b5:52:f9:97:ee:52:2f:42:1b:
         1a:d5:c2:bd:65:91:5e:1c:e2:df:8d:b0:9e:f7:c0:21:12:b8:
         7c:17:5b:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 20:44:22 2025 by rpki-client