Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GbLHQw3VAXfBrqfeVGBSBbwr7qDVThq7W1FuSP2rJB2K/0/3137372e33322e3232342e302f31392d3139203d3e203238353733.roa
File:                     3137372e33322e3232342e302f31392d3139203d3e203238353733.roa (raw, json)
Hash identifier:          bzt3Jrx7P7unzzlc4U66Wc576Cq/Y45AiEjPW8ocheg=
Subject key identifier:   76:C3:9E:03:CF:2E:62:FE:03:44:CF:0D:12:FC:49:55:78:C5:5C:06
Certificate issuer:       /CN=2910A07ED49C655EB579592A3880C336E6AB83C0
Certificate serial:       54CBE7C36E015927F4080E87D38A6C574CD146A0
Authority key identifier: 29:10:A0:7E:D4:9C:65:5E:B5:79:59:2A:38:80:C3:36:E6:AB:83:C0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2910A07ED49C655EB579592A3880C336E6AB83C0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GbLHQw3VAXfBrqfeVGBSBbwr7qDVThq7W1FuSP2rJB2K/0/3137372e33322e3232342e302f31392d3139203d3e203238353733.roa
Signing time:             Wed 18 May 2022 18:58:48 +0000
ROA not before:           Wed 18 May 2022 18:53:48 +0000
ROA not after:            Wed 17 May 2023 18:58:48 +0000
asID:                     28573
IP address blocks:        177.32.224.0/19 maxlen: 19
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:cb:e7:c3:6e:01:59:27:f4:08:0e:87:d3:8a:6c:57:4c:d1:46:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2910A07ED49C655EB579592A3880C336E6AB83C0
        Validity
            Not Before: May 18 18:53:48 2022 GMT
            Not After : May 17 18:58:48 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:3e:f1:5c:ec:bd:96:f7:88:00:bb:7e:5c:25:
                    e0:84:9d:2e:a8:81:f3:d7:6f:70:41:8b:2d:25:f7:
                    47:13:57:b5:d2:b0:36:c4:6a:14:58:5a:05:b7:a2:
                    34:24:60:c8:46:f5:0e:c7:72:6a:a6:36:96:83:6f:
                    7e:b8:8a:34:12:a7:f7:5e:2d:f0:ff:3e:3f:b2:dd:
                    9b:64:31:63:57:9a:f2:b2:cb:af:b1:95:79:5e:7e:
                    18:f9:ab:87:c2:85:4a:11:b1:da:34:40:bf:ca:c9:
                    35:4b:92:f2:d1:85:1e:75:fc:1b:04:f7:cd:73:e3:
                    ac:e8:ee:74:7c:1e:59:d9:15:fe:a3:58:f1:fe:b1:
                    b1:07:8f:06:a8:f7:cd:79:a4:1c:6e:c1:f4:dd:f4:
                    24:38:b4:ff:5f:32:90:19:12:73:f1:96:f7:bc:03:
                    e9:f2:74:68:8e:93:8f:38:8d:eb:19:94:96:6d:39:
                    10:e7:37:e4:0c:bb:22:1d:cd:82:7d:01:fc:62:04:
                    cf:83:73:a6:36:08:34:09:57:ea:99:2e:c0:06:c0:
                    ee:a7:b1:e8:7a:cd:f4:ec:31:6a:9f:87:6a:38:db:
                    ee:a9:3c:23:48:16:57:25:54:09:1d:ec:5f:95:e7:
                    90:f6:ad:41:f7:d1:b3:eb:87:ce:f3:f7:42:71:03:
                    01:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:C3:9E:03:CF:2E:62:FE:03:44:CF:0D:12:FC:49:55:78:C5:5C:06
            X509v3 Authority Key Identifier:
                keyid:29:10:A0:7E:D4:9C:65:5E:B5:79:59:2A:38:80:C3:36:E6:AB:83:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GbLHQw3VAXfBrqfeVGBSBbwr7qDVThq7W1FuSP2rJB2K/0/2910A07ED49C655EB579592A3880C336E6AB83C0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2910A07ED49C655EB579592A3880C336E6AB83C0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GbLHQw3VAXfBrqfeVGBSBbwr7qDVThq7W1FuSP2rJB2K/0/3137372e33322e3232342e302f31392d3139203d3e203238353733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.32.224.0/19

    Signature Algorithm: sha256WithRSAEncryption
         53:9f:29:62:15:4d:da:2f:3f:16:3a:b9:ed:ed:81:df:45:20:
         38:d7:6e:dd:a4:69:19:7b:ab:93:9a:02:c3:7b:88:f9:62:4d:
         e1:7a:84:39:3b:d6:35:43:53:a4:54:72:22:11:09:de:60:98:
         f2:34:6d:5d:94:82:ce:bc:bd:1b:e3:c7:2f:b8:a8:4f:72:21:
         bf:62:d4:8f:6c:7b:9f:ad:72:dd:cb:51:cd:90:aa:d6:24:c3:
         63:9b:b1:a6:8c:3e:5e:ff:fd:17:2d:8c:c4:56:e6:49:4d:b5:
         c5:ad:74:fb:3f:71:ac:76:ce:04:5d:7b:37:3e:d2:bc:d1:e2:
         83:b6:08:dd:7e:b6:e6:3c:90:a5:ed:e6:5d:c4:c3:0c:9e:96:
         eb:e7:2a:3b:9d:0b:f0:fc:88:5a:bd:96:7c:ca:88:96:01:83:
         a4:00:13:21:98:dc:9b:30:a3:84:02:76:5d:6b:4b:82:60:23:
         35:6f:13:d5:f2:d6:9a:6f:1d:ad:0e:73:73:ba:22:97:53:d7:
         9b:9d:3b:55:3d:51:4b:1e:20:2e:e1:a4:15:a0:b6:88:5f:42:
         89:09:16:a6:9c:12:58:f3:50:30:8b:a8:74:94:3d:4f:18:99:
         1c:fe:ba:26:8c:5f:15:29:1a:54:d9:3e:b0:02:a7:b0:7d:16:
         e2:6f:68:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 18:17:39 2025 by rpki-client