Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Dh7mwJLJBB4Az4fjzW2tWQkwvXk5sNp4jwDyNTYrH3Sr/0/3137372e36372e3131322e302f32342d3234203d3e203237373135.roa
File:                     3137372e36372e3131322e302f32342d3234203d3e203237373135.roa (raw, json)
Hash identifier:          Mfgl/9fz/tN1tB5Pi2j7+e4cmHu6vnK0I+Ix++U+Zew=
Subject key identifier:   0B:CD:A6:F5:03:F8:B0:0A:F6:D4:C6:36:AE:28:48:8C:86:E8:52:B8
Certificate issuer:       /CN=A1BE25BAAE90F7908EE577C3C3752FE08AF3EC46
Certificate serial:       2D6C6896492454FCC910811B429A8958BD4177F5
Authority key identifier: A1:BE:25:BA:AE:90:F7:90:8E:E5:77:C3:C3:75:2F:E0:8A:F3:EC:46
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A1BE25BAAE90F7908EE577C3C3752FE08AF3EC46.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Dh7mwJLJBB4Az4fjzW2tWQkwvXk5sNp4jwDyNTYrH3Sr/0/3137372e36372e3131322e302f32342d3234203d3e203237373135.roa
Signing time:             Wed 08 Nov 2023 17:21:12 +0000
ROA not before:           Wed 08 Nov 2023 17:16:12 +0000
ROA not after:            Wed 06 Nov 2024 17:21:12 +0000
asID:                     27715
IP address blocks:        177.67.112.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:6c:68:96:49:24:54:fc:c9:10:81:1b:42:9a:89:58:bd:41:77:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A1BE25BAAE90F7908EE577C3C3752FE08AF3EC46
        Validity
            Not Before: Nov  8 17:16:12 2023 GMT
            Not After : Nov  6 17:21:12 2024 GMT
        Subject: CN=0BCDA6F503F8B00AF6D4C636AE28488C86E852B8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:8c:35:e6:1c:87:c0:06:2b:cd:ec:78:05:1e:
                    46:32:9d:d8:e3:12:29:d7:d0:7f:89:7c:74:b7:fc:
                    73:3a:ea:b3:b7:38:94:66:b6:96:1d:a1:45:d0:54:
                    4d:40:23:4e:86:e4:f8:eb:8c:33:b7:46:fb:6b:5f:
                    7a:6e:a3:59:cd:85:c5:af:42:6a:9e:6d:b4:73:f7:
                    48:1c:4a:15:a8:f2:72:17:96:fb:a6:af:1f:9a:85:
                    68:26:c9:68:42:09:54:13:2d:e4:c1:24:f7:d7:f8:
                    c5:a2:e3:fc:7d:bc:4f:72:a3:53:e8:a9:82:0f:bf:
                    99:ed:17:78:13:94:45:88:f3:ec:57:64:fe:37:ec:
                    68:5b:9b:cb:36:da:d7:d7:4a:b2:ce:70:3f:d7:04:
                    53:b7:00:8f:3e:3b:04:7c:cb:28:e1:78:39:14:d2:
                    0b:f2:9c:5e:e4:44:cd:55:bb:db:fd:8f:af:f6:03:
                    5c:50:a3:e2:28:c7:35:df:37:60:4a:20:86:fe:96:
                    5d:38:61:26:01:b1:09:4c:c7:bc:9d:bc:0e:0c:94:
                    61:87:aa:4f:63:0f:15:f7:bd:3c:e1:f6:70:3e:7a:
                    83:ec:fc:f5:4b:24:d8:3d:04:fc:15:cb:7a:a0:12:
                    56:26:c4:13:4c:1f:d2:07:d5:6f:05:38:b1:b4:ce:
                    7e:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:CD:A6:F5:03:F8:B0:0A:F6:D4:C6:36:AE:28:48:8C:86:E8:52:B8
            X509v3 Authority Key Identifier:
                keyid:A1:BE:25:BA:AE:90:F7:90:8E:E5:77:C3:C3:75:2F:E0:8A:F3:EC:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Dh7mwJLJBB4Az4fjzW2tWQkwvXk5sNp4jwDyNTYrH3Sr/0/A1BE25BAAE90F7908EE577C3C3752FE08AF3EC46.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A1BE25BAAE90F7908EE577C3C3752FE08AF3EC46.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Dh7mwJLJBB4Az4fjzW2tWQkwvXk5sNp4jwDyNTYrH3Sr/0/3137372e36372e3131322e302f32342d3234203d3e203237373135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.67.112.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3f:07:f7:37:f3:d9:95:d1:fb:40:76:a5:7e:0f:1e:9e:de:b6:
         2c:98:b8:71:aa:01:4f:de:6f:5b:9b:34:d6:ad:01:87:9c:cf:
         c1:84:24:dd:1c:e7:65:e9:09:e4:97:43:f4:38:3e:9b:2e:be:
         97:cb:8b:24:6d:71:7f:cd:b7:e6:67:de:05:4d:12:93:a0:b4:
         03:6f:52:27:c0:35:dc:7a:2b:14:cb:45:e0:e8:d4:b3:05:2c:
         2c:7d:80:5f:5d:83:4e:a2:14:22:37:af:c2:48:e2:81:3d:b1:
         67:f2:a2:c5:12:8a:b4:22:2d:97:00:51:3c:f8:05:af:52:fb:
         86:a4:f2:01:0e:cd:98:c2:b3:5d:71:20:e0:b8:64:7f:7e:6b:
         db:a1:70:93:5e:a2:4f:0b:0e:b2:03:b0:74:ee:5d:c7:95:7c:
         b6:3f:9c:15:74:e7:89:58:9c:a3:ab:9a:1f:e0:f4:14:55:c0:
         29:ea:71:64:a7:8c:63:59:10:e8:51:20:43:16:c2:20:b4:05:
         9d:a1:94:9a:ed:86:36:c6:7a:09:ee:a3:bd:57:51:16:c6:87:
         3a:20:7a:d4:35:1e:63:0b:84:65:7d:a4:1e:b5:94:6b:19:1f:
         48:fd:6f:9d:50:9a:d5:3b:d6:fc:f4:42:78:15:14:21:bd:4f:
         b7:2b:5d:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 15:07:14 2025 by rpki-client