Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EkNUcjoZ4k8dpGPP61dGAFLBoRd9uiWpCPveJgcPuuK6/0/3137372e3132382e3231362e302f32322d3234203d3e20323632363631.roa
File:                     3137372e3132382e3231362e302f32322d3234203d3e20323632363631.roa (raw, json)
Hash identifier:          txJMHMI9FSzqU1HsXlU8TSUdHGNMuTSMlC0/yReJKcY=
Subject key identifier:   96:3B:28:17:2C:97:2B:95:06:80:E1:CA:89:F1:78:A0:46:6C:74:43
Certificate issuer:       /CN=BA6505BD1E1E44E5EC576C323E8F5620F15DBAFD
Certificate serial:       02D8CF3EBAB6A11D4C5C8EC5583E7E2B73F43BA2
Authority key identifier: BA:65:05:BD:1E:1E:44:E5:EC:57:6C:32:3E:8F:56:20:F1:5D:BA:FD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BA6505BD1E1E44E5EC576C323E8F5620F15DBAFD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EkNUcjoZ4k8dpGPP61dGAFLBoRd9uiWpCPveJgcPuuK6/0/3137372e3132382e3231362e302f32322d3234203d3e20323632363631.roa
Signing time:             Tue 10 Oct 2023 14:23:45 +0000
ROA not before:           Tue 10 Oct 2023 14:18:45 +0000
ROA not after:            Tue 08 Oct 2024 14:23:45 +0000
asID:                     262661
IP address blocks:        177.128.216.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:d8:cf:3e:ba:b6:a1:1d:4c:5c:8e:c5:58:3e:7e:2b:73:f4:3b:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BA6505BD1E1E44E5EC576C323E8F5620F15DBAFD
        Validity
            Not Before: Oct 10 14:18:45 2023 GMT
            Not After : Oct  8 14:23:45 2024 GMT
        Subject: CN=963B28172C972B950680E1CA89F178A0466C7443
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:4d:e5:77:ad:32:71:5f:cc:6c:98:01:80:28:
                    79:26:58:ed:b7:9e:50:99:d6:0d:4c:cd:07:8e:42:
                    a7:6a:31:b4:8a:28:4a:04:cb:6e:9e:88:36:a4:19:
                    a2:bd:cf:b9:94:fb:7c:0f:1f:ee:10:35:56:5b:92:
                    3f:58:7d:e5:6e:69:74:18:f1:3d:3b:d8:ac:d3:fe:
                    0c:fc:4c:ff:1d:bb:cd:19:5e:60:c1:55:6d:f2:f4:
                    c6:9d:b3:8a:d6:8c:c8:b4:5d:61:f0:2d:39:aa:f7:
                    01:35:e5:dd:95:06:9a:e4:58:8e:27:4f:fc:6a:e6:
                    aa:d9:2d:7f:ff:6b:e7:56:4b:00:10:1c:1a:9e:db:
                    64:46:ce:2c:7c:1f:13:49:ae:be:7f:7c:72:b8:06:
                    72:c7:92:28:21:80:70:86:58:3a:dc:a5:38:d0:e8:
                    e4:83:ff:f6:28:0b:0c:91:48:b4:3e:30:bc:cd:aa:
                    31:7c:24:21:30:7d:7e:ec:7f:30:bb:7a:6a:1c:14:
                    6c:63:90:1f:87:2f:c3:a0:ee:c2:ea:37:f9:66:1e:
                    d4:f3:ed:43:1e:ac:0b:78:1a:0c:96:e7:12:b9:6a:
                    f5:02:63:93:f0:ea:88:de:41:f1:2b:b6:cb:fb:60:
                    07:39:15:21:13:83:f1:1e:25:d0:1b:24:5c:4a:55:
                    62:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:3B:28:17:2C:97:2B:95:06:80:E1:CA:89:F1:78:A0:46:6C:74:43
            X509v3 Authority Key Identifier:
                keyid:BA:65:05:BD:1E:1E:44:E5:EC:57:6C:32:3E:8F:56:20:F1:5D:BA:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EkNUcjoZ4k8dpGPP61dGAFLBoRd9uiWpCPveJgcPuuK6/0/BA6505BD1E1E44E5EC576C323E8F5620F15DBAFD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BA6505BD1E1E44E5EC576C323E8F5620F15DBAFD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EkNUcjoZ4k8dpGPP61dGAFLBoRd9uiWpCPveJgcPuuK6/0/3137372e3132382e3231362e302f32322d3234203d3e20323632363631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.128.216.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1a:3f:2a:d3:62:d9:47:f0:e4:21:1d:f6:42:7d:8c:c9:bd:ea:
         11:35:50:4f:f4:30:7c:14:69:17:c5:68:60:1f:a3:3e:6f:45:
         d6:00:b2:dd:50:63:f1:d3:be:c3:f6:59:bc:d2:e7:6a:ff:cd:
         83:02:86:8d:77:36:a2:53:59:9f:de:26:f8:21:5b:9d:1b:8d:
         2f:13:ad:90:1e:85:0d:b5:64:2d:38:05:81:3b:da:8e:04:15:
         04:ab:b0:0a:77:a5:16:8e:8e:8c:5e:a5:1a:7c:1e:d6:09:80:
         9b:80:b3:5f:53:b5:a0:9e:9e:cd:d8:05:22:85:59:eb:92:ed:
         01:bc:bb:a1:dd:8c:0f:d1:ec:17:55:0a:00:93:29:af:75:53:
         ec:d8:0b:36:4d:2e:16:1b:5e:fb:87:e4:41:f4:24:02:55:dd:
         03:b1:ed:38:c5:b4:55:1b:fc:6f:30:57:f5:28:35:ea:31:bf:
         aa:d8:04:9b:e6:47:cc:bc:8f:8a:af:2f:87:b1:a6:e7:59:e1:
         aa:c8:ae:e7:bf:93:25:69:8b:79:13:15:2d:5f:a9:bf:48:42:
         fd:1b:f7:d0:62:50:e2:3e:c2:03:e6:60:49:56:0f:66:1d:36:
         43:85:a3:45:fc:98:11:29:cb:42:72:39:7c:5c:81:3d:cb:0e:
         1c:e9:ea:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:31:46 2025 by rpki-client