Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GbLHQw3VAXfBrqfeVGBSBbwr7qDVThq7W1FuSP2rJB2K/0/3137372e33322e3132382e302f31392d3139203d3e203238353733.roa
File:                     3137372e33322e3132382e302f31392d3139203d3e203238353733.roa (raw, json)
Hash identifier:          k1TekOHcXPPfnPtsvBCSpaQXC2zEcxcW2FMTQnt2X1w=
Subject key identifier:   CB:7F:68:39:39:4B:B3:C9:D8:F5:C6:49:ED:A1:D7:53:22:F9:EF:EF
Certificate issuer:       /CN=2910A07ED49C655EB579592A3880C336E6AB83C0
Certificate serial:       41976C898CCF99017ACCF7ADDDFDC4CE6ABF9A20
Authority key identifier: 29:10:A0:7E:D4:9C:65:5E:B5:79:59:2A:38:80:C3:36:E6:AB:83:C0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2910A07ED49C655EB579592A3880C336E6AB83C0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GbLHQw3VAXfBrqfeVGBSBbwr7qDVThq7W1FuSP2rJB2K/0/3137372e33322e3132382e302f31392d3139203d3e203238353733.roa
Signing time:             Wed 18 May 2022 18:58:35 +0000
ROA not before:           Wed 18 May 2022 18:53:35 +0000
ROA not after:            Wed 17 May 2023 18:58:35 +0000
asID:                     28573
IP address blocks:        177.32.128.0/19 maxlen: 19
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:97:6c:89:8c:cf:99:01:7a:cc:f7:ad:dd:fd:c4:ce:6a:bf:9a:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2910A07ED49C655EB579592A3880C336E6AB83C0
        Validity
            Not Before: May 18 18:53:35 2022 GMT
            Not After : May 17 18:58:35 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:93:88:3f:39:b9:95:db:bb:10:d6:c9:45:2a:
                    ed:4b:36:61:0c:59:5d:0b:8c:20:1a:52:9f:34:e5:
                    7b:59:ef:d9:e4:b0:6d:28:c4:74:33:48:05:68:0c:
                    aa:d8:c6:a9:a9:a8:da:d7:94:95:7b:f4:71:14:37:
                    ad:67:c9:0e:dc:65:57:29:f2:f8:2b:dc:86:82:03:
                    5e:05:91:cf:89:a4:ba:d1:9e:41:6e:8a:e3:76:86:
                    66:dc:cd:16:70:b9:63:e1:5c:ca:d7:6d:51:7e:fa:
                    4f:cc:7b:ef:33:da:f4:01:b0:57:6d:92:ed:3f:59:
                    52:85:a7:65:ee:9d:46:7a:08:f9:5a:9c:18:94:50:
                    7d:6f:73:2f:20:81:a9:e7:a7:98:83:22:66:b3:83:
                    87:58:a6:6b:a0:92:59:64:c6:d5:13:f2:ec:a4:3c:
                    d8:e8:7b:37:72:d7:93:0a:ad:1f:47:a2:44:5e:3f:
                    05:6f:b0:a5:36:f3:ce:c8:33:65:a8:e9:a7:2b:45:
                    19:00:9c:7c:bf:7e:81:af:f0:e7:c2:c0:76:f2:de:
                    27:21:6a:88:29:8b:25:80:52:26:e3:00:fd:f6:6f:
                    96:af:cc:01:a1:96:d3:01:be:88:6a:9d:64:3d:a7:
                    f1:9f:c9:ae:9a:02:68:c5:83:30:b4:8b:db:06:60:
                    46:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:7F:68:39:39:4B:B3:C9:D8:F5:C6:49:ED:A1:D7:53:22:F9:EF:EF
            X509v3 Authority Key Identifier:
                keyid:29:10:A0:7E:D4:9C:65:5E:B5:79:59:2A:38:80:C3:36:E6:AB:83:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GbLHQw3VAXfBrqfeVGBSBbwr7qDVThq7W1FuSP2rJB2K/0/2910A07ED49C655EB579592A3880C336E6AB83C0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2910A07ED49C655EB579592A3880C336E6AB83C0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GbLHQw3VAXfBrqfeVGBSBbwr7qDVThq7W1FuSP2rJB2K/0/3137372e33322e3132382e302f31392d3139203d3e203238353733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.32.128.0/19

    Signature Algorithm: sha256WithRSAEncryption
         81:8a:fa:a0:2a:84:e9:26:b9:12:c6:0f:f2:30:95:77:da:50:
         3c:d6:ae:85:3d:c2:1b:11:b0:10:85:65:26:09:7b:e5:1e:cb:
         f1:d9:39:9e:e2:2b:4a:c4:a9:64:38:4b:d4:54:86:b2:69:a4:
         f0:55:a1:2a:70:9f:74:37:a0:c1:13:db:73:23:5b:f3:ef:a9:
         03:43:78:05:6f:42:e0:6b:8a:6c:58:d1:96:90:c6:84:3a:ac:
         71:6d:25:dd:4e:c7:91:0b:76:f0:be:a0:89:16:5f:20:02:9a:
         82:cb:7e:cd:2e:3f:a7:58:00:1a:c0:8d:22:e1:87:9d:d5:4f:
         22:73:b0:3a:8b:9d:6d:37:63:68:44:0e:0e:06:db:19:5f:14:
         43:0c:8b:c4:8c:a6:30:81:b9:6a:b1:e9:57:b4:2a:1a:b5:85:
         cf:b7:d7:7d:cb:b2:e9:69:b0:8d:07:96:26:00:c1:a5:f3:ca:
         19:7d:27:26:9c:6c:d6:6f:33:b8:91:6a:93:cf:a5:2b:5a:08:
         ef:fd:39:ad:44:c7:8d:33:10:77:7b:36:87:fd:9e:95:cc:e9:
         0f:0d:99:7f:8c:2e:f0:f7:53:8e:42:8f:a6:79:39:9e:05:a3:
         dc:df:9b:d2:c8:32:e8:32:c5:79:c9:c1:41:06:be:c2:50:50:
         1c:4e:31:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 01:54:23 2025 by rpki-client