Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GbLHQw3VAXfBrqfeVGBSBbwr7qDVThq7W1FuSP2rJB2K/0/3137372e33322e39362e302f31392d3139203d3e203238353733.roa
File:                     3137372e33322e39362e302f31392d3139203d3e203238353733.roa (raw, json)
Hash identifier:          b+U3zP0vzxofqhHLmBPd5ZBdEsmY7Go0hJ6LIgt7mwU=
Subject key identifier:   B9:4A:9B:2C:4B:35:DD:26:61:68:56:EA:DC:7E:45:89:5F:BB:2E:BD
Certificate issuer:       /CN=2910A07ED49C655EB579592A3880C336E6AB83C0
Certificate serial:       4865202E44CD23CFC19277F741184CAC06846494
Authority key identifier: 29:10:A0:7E:D4:9C:65:5E:B5:79:59:2A:38:80:C3:36:E6:AB:83:C0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2910A07ED49C655EB579592A3880C336E6AB83C0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GbLHQw3VAXfBrqfeVGBSBbwr7qDVThq7W1FuSP2rJB2K/0/3137372e33322e39362e302f31392d3139203d3e203238353733.roa
Signing time:             Wed 18 May 2022 18:58:30 +0000
ROA not before:           Wed 18 May 2022 18:53:30 +0000
ROA not after:            Wed 17 May 2023 18:58:30 +0000
asID:                     28573
IP address blocks:        177.32.96.0/19 maxlen: 19
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:65:20:2e:44:cd:23:cf:c1:92:77:f7:41:18:4c:ac:06:84:64:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2910A07ED49C655EB579592A3880C336E6AB83C0
        Validity
            Not Before: May 18 18:53:30 2022 GMT
            Not After : May 17 18:58:30 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:34:34:3d:14:bf:e4:67:1c:d5:33:e7:c9:e2:
                    98:72:a4:c5:fd:58:8c:d5:c7:8c:69:ff:21:68:87:
                    6a:9c:87:94:4f:1c:d9:1a:9e:3a:7c:42:b1:5a:e0:
                    34:e5:ff:c3:85:6a:e1:c8:fb:cf:85:4e:8c:a2:68:
                    d4:5e:80:8b:c2:ea:37:24:39:b1:03:48:e7:52:70:
                    78:af:78:f6:7d:f5:b7:4e:9e:ab:2f:a1:e5:5a:ab:
                    c9:b0:05:16:de:ab:df:b7:4b:0c:00:14:6e:91:53:
                    53:4d:2a:e7:11:2a:3d:a0:c0:ae:b7:72:1f:75:ae:
                    da:39:70:f6:c1:21:ea:65:ad:06:17:29:9c:a8:46:
                    af:ce:ca:e1:2e:c7:43:6d:d7:bd:9d:bd:00:d8:04:
                    0a:01:eb:fd:13:de:f9:5f:80:fe:d9:70:02:2b:51:
                    5e:82:a3:4b:4e:68:bc:9d:36:9a:64:f1:f3:8d:61:
                    a6:9e:ad:4c:cc:5e:c2:0c:a3:5f:35:00:fe:fe:35:
                    da:45:a2:aa:9c:0f:89:8a:2d:bd:d3:32:46:76:27:
                    3b:fa:bc:30:ee:4d:69:0c:e7:b1:d2:2c:02:c2:d2:
                    11:4f:ba:2d:ab:f8:db:03:d9:1f:5c:aa:12:ce:40:
                    5d:d2:b0:92:16:8f:9b:6e:9d:3a:d9:9a:d7:67:77:
                    1c:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:4A:9B:2C:4B:35:DD:26:61:68:56:EA:DC:7E:45:89:5F:BB:2E:BD
            X509v3 Authority Key Identifier:
                keyid:29:10:A0:7E:D4:9C:65:5E:B5:79:59:2A:38:80:C3:36:E6:AB:83:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GbLHQw3VAXfBrqfeVGBSBbwr7qDVThq7W1FuSP2rJB2K/0/2910A07ED49C655EB579592A3880C336E6AB83C0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2910A07ED49C655EB579592A3880C336E6AB83C0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GbLHQw3VAXfBrqfeVGBSBbwr7qDVThq7W1FuSP2rJB2K/0/3137372e33322e39362e302f31392d3139203d3e203238353733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.32.96.0/19

    Signature Algorithm: sha256WithRSAEncryption
         91:ff:6d:71:2d:da:70:cd:ee:3d:37:90:de:66:8d:35:6f:7b:
         0f:5b:d8:ae:95:dd:c7:7e:a7:37:ac:7d:15:f6:67:df:1a:07:
         f0:40:c9:72:1b:25:96:7b:3b:4a:d3:4e:98:c0:d2:7a:3d:47:
         97:8a:ff:5b:42:dc:c6:32:ca:f6:0b:16:a2:1c:c7:a0:8d:3d:
         46:1b:d2:26:28:77:f1:a5:b4:a8:85:6e:d0:af:8e:fc:77:56:
         3f:c7:d8:ac:90:cc:de:37:b1:3d:8f:ff:13:5a:59:8a:f5:01:
         57:44:0e:8e:e7:d5:b0:dc:2a:67:25:3f:f7:3a:ab:c9:ef:30:
         88:52:d8:bb:e1:66:fb:4e:e6:38:31:43:01:f4:9f:49:4b:4b:
         f8:c2:49:f2:0a:73:bc:5a:f9:3f:24:7d:02:a1:a1:50:12:56:
         d1:f6:70:9b:f4:ab:36:47:91:0e:0a:6f:06:2a:64:10:d0:e3:
         43:ad:1a:66:92:e1:be:8d:39:02:f6:9e:72:6e:8d:f5:d7:51:
         7d:d8:5a:7c:8f:67:04:60:3b:00:af:a3:8c:22:bf:22:4f:27:
         22:9a:38:a2:bf:cc:b5:59:52:be:aa:0a:13:6e:22:57:f5:5d:
         f2:e5:0a:f6:3d:70:7c:ae:d9:e0:69:25:73:fe:2f:bc:f3:dd:
         8d:8b:90:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:22:20 2025 by rpki-client