Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FdDQb6eph9TWtgKwWDgkMW1xXYFCGsMWwxibztGzqmF8/0/3137372e36392e302e302f31362d3234203d3e203533303036.roa
File:                     3137372e36392e302e302f31362d3234203d3e203533303036.roa (raw, json)
Hash identifier:          +6eLiOXo4FL1+LoCSRe4MydivcXlr+tfvUXIKbC4H8I=
Subject key identifier:   BC:64:43:42:F7:99:C2:3E:15:AE:09:AA:FD:AA:D3:D6:AB:0E:5F:1D
Certificate issuer:       /CN=B47D107EFD0532BC4E23E667ABA118817A663654
Certificate serial:       0B7E67B07CAF07DAC185675A84A346F791B27D64
Authority key identifier: B4:7D:10:7E:FD:05:32:BC:4E:23:E6:67:AB:A1:18:81:7A:66:36:54
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B47D107EFD0532BC4E23E667ABA118817A663654.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FdDQb6eph9TWtgKwWDgkMW1xXYFCGsMWwxibztGzqmF8/0/3137372e36392e302e302f31362d3234203d3e203533303036.roa
Signing time:             Sat 11 Dec 2021 18:20:48 +0000
ROA not before:           Sat 11 Dec 2021 18:15:48 +0000
ROA not after:            Sat 10 Dec 2022 18:20:48 +0000
asID:                     53006
IP address blocks:        177.69.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:7e:67:b0:7c:af:07:da:c1:85:67:5a:84:a3:46:f7:91:b2:7d:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B47D107EFD0532BC4E23E667ABA118817A663654
        Validity
            Not Before: Dec 11 18:15:48 2021 GMT
            Not After : Dec 10 18:20:48 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:c6:4a:6b:e1:f2:c1:20:fc:ca:ec:07:e1:f7:
                    e6:01:4c:19:94:5d:38:50:58:00:70:1b:f7:e7:b4:
                    da:62:33:db:3e:f3:cd:0a:f4:ae:a9:fa:b2:44:e6:
                    91:94:9a:f7:ef:ce:d3:00:bb:5c:75:2e:e2:a4:13:
                    c1:ad:58:9b:c7:f7:f7:62:61:e0:21:51:eb:87:5b:
                    2c:0c:36:2c:bb:bd:8c:12:cd:13:2b:88:e4:2b:01:
                    94:37:82:9b:c9:de:02:4e:1d:42:9f:92:49:6c:ba:
                    8e:6e:9b:9b:84:60:de:05:aa:02:b8:64:ca:40:0e:
                    80:43:44:e9:d0:94:e4:e4:7a:b4:a1:12:b6:90:ed:
                    6c:6b:77:13:90:00:fb:b2:5b:50:d0:bd:29:59:49:
                    66:4a:b1:b1:df:75:bd:9d:a6:30:9b:81:a9:05:b0:
                    5a:e0:76:82:3c:29:5e:02:da:8f:16:ce:b7:dd:e9:
                    0c:e8:f6:18:71:25:1c:ec:84:a2:80:21:eb:41:37:
                    3b:94:a0:64:fc:c5:03:5f:24:1d:4c:4d:33:3c:92:
                    44:13:9b:b2:69:ec:1f:83:a9:7f:6d:0e:6d:e7:c5:
                    83:13:21:87:5d:b7:e8:39:03:17:44:f4:15:c6:64:
                    76:33:5d:41:ad:d1:06:fa:52:56:70:5e:b5:31:52:
                    6a:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:64:43:42:F7:99:C2:3E:15:AE:09:AA:FD:AA:D3:D6:AB:0E:5F:1D
            X509v3 Authority Key Identifier:
                keyid:B4:7D:10:7E:FD:05:32:BC:4E:23:E6:67:AB:A1:18:81:7A:66:36:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FdDQb6eph9TWtgKwWDgkMW1xXYFCGsMWwxibztGzqmF8/0/B47D107EFD0532BC4E23E667ABA118817A663654.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B47D107EFD0532BC4E23E667ABA118817A663654.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FdDQb6eph9TWtgKwWDgkMW1xXYFCGsMWwxibztGzqmF8/0/3137372e36392e302e302f31362d3234203d3e203533303036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.69.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         ab:f3:f9:02:2d:b8:fc:d4:6f:01:93:47:68:11:ce:10:93:06:
         99:5c:2b:a8:9a:fb:e7:c5:2d:9c:2a:39:51:fe:7e:7c:28:85:
         53:33:11:65:a7:04:1d:1e:a6:34:48:93:8a:85:8a:74:b8:33:
         bb:21:83:d5:8b:c2:f1:a3:a6:4e:e1:d6:a3:d6:83:d4:a5:0c:
         6e:46:db:62:85:67:d3:fc:c5:29:52:d2:0f:e2:df:53:33:80:
         dc:b5:b5:b1:4a:b0:f6:92:9a:32:0f:4a:b2:dd:32:ad:60:83:
         64:d8:ba:a8:82:05:cf:47:7a:2c:ac:a4:df:98:3d:3c:d3:94:
         fa:7d:aa:04:68:ab:98:cf:f0:b3:48:0a:b5:b9:fd:6d:7c:75:
         c7:0c:5c:6f:e8:25:bb:33:a8:30:8c:26:7a:7f:18:a2:c7:3b:
         5d:c4:4c:dc:06:41:a1:98:02:a0:3a:cd:25:3b:5e:e6:98:3d:
         26:79:8a:5b:b5:fd:4e:e4:78:ce:d9:43:3f:01:0f:32:4c:bc:
         4c:8e:b8:95:41:85:9b:3d:87:fa:01:57:97:a2:21:35:f9:22:
         36:c8:d7:a2:a2:6e:fb:07:cf:30:7d:9e:68:8c:13:a3:3d:34:
         dc:25:f8:be:c1:5d:ff:45:26:75:a1:cf:09:9b:2d:3f:e2:d2:
         fe:cb:e3:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:44:25 2025 by rpki-client