Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Gn28sxmPtgEfqpaJ6EtwD4q4KwYMdWh41zb1uZE9aBCX/1/3137372e37322e3231322e302f32332d3234203d3e203532393635.roa
File:                     3137372e37322e3231322e302f32332d3234203d3e203532393635.roa (raw, json)
Hash identifier:          Q4VI17bAihmQ/rSrbFxLa63e7X+esAzp5lu3zknT6gg=
Subject key identifier:   0D:98:85:D4:4C:DE:B4:9A:B6:19:17:C7:EC:68:1B:D5:CF:33:86:D2
Certificate issuer:       /CN=3235A266D447CA3B72A35513BA9761F5805F23E2
Certificate serial:       1F56595BCCE34C44A9F1A4FAF6673D39B7F389D2
Authority key identifier: 32:35:A2:66:D4:47:CA:3B:72:A3:55:13:BA:97:61:F5:80:5F:23:E2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3235A266D447CA3B72A35513BA9761F5805F23E2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Gn28sxmPtgEfqpaJ6EtwD4q4KwYMdWh41zb1uZE9aBCX/1/3137372e37322e3231322e302f32332d3234203d3e203532393635.roa
Signing time:             Fri 10 Mar 2023 11:07:10 +0000
ROA not before:           Fri 10 Mar 2023 11:02:10 +0000
ROA not after:            Fri 08 Mar 2024 11:07:10 +0000
asID:                     52965
IP address blocks:        177.72.212.0/23 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:56:59:5b:cc:e3:4c:44:a9:f1:a4:fa:f6:67:3d:39:b7:f3:89:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3235A266D447CA3B72A35513BA9761F5805F23E2
        Validity
            Not Before: Mar 10 11:02:10 2023 GMT
            Not After : Mar  8 11:07:10 2024 GMT
        Subject: CN=0D9885D44CDEB49AB61917C7EC681BD5CF3386D2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:57:26:02:31:dc:26:12:01:e5:7a:01:93:8e:
                    b4:e8:c2:8e:6e:2d:30:c9:81:91:b1:f2:4a:03:2d:
                    58:bb:33:77:bf:7b:34:03:ec:6d:92:5b:d9:74:fe:
                    57:26:9b:5e:66:23:2b:32:2e:c6:71:b2:e3:cc:3d:
                    71:e7:f1:76:87:f5:fd:33:72:cf:b3:51:33:75:e3:
                    ae:2c:59:d5:29:d6:ff:93:09:9b:eb:19:ba:7c:03:
                    27:5f:8e:29:50:6f:d5:8f:2b:aa:71:77:6b:b1:86:
                    57:4b:20:41:ec:b0:e7:f3:e1:76:a8:12:5b:da:30:
                    14:dc:83:66:d1:27:22:cb:e7:32:d4:9d:21:99:5f:
                    b1:3c:cc:ef:84:e4:27:8f:a5:78:80:a5:25:2d:62:
                    ae:bc:9d:23:7a:bf:9a:a8:7d:d6:a7:18:c2:d0:89:
                    8f:82:58:28:ce:58:94:57:a8:bc:71:f8:16:01:3e:
                    8d:1e:de:d0:e0:02:4e:b9:c4:a0:c6:ef:1b:7d:b6:
                    d9:1a:b4:ef:e0:cd:f7:c7:12:ab:58:02:b7:e2:53:
                    ef:64:69:b7:88:0b:d9:be:a1:2f:bd:8d:8a:35:79:
                    85:5c:82:3d:30:1d:74:8f:9d:9f:00:15:41:d9:23:
                    9f:4b:bb:06:e7:ea:6c:9d:2c:a4:f8:e5:2d:68:58:
                    cf:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:98:85:D4:4C:DE:B4:9A:B6:19:17:C7:EC:68:1B:D5:CF:33:86:D2
            X509v3 Authority Key Identifier:
                keyid:32:35:A2:66:D4:47:CA:3B:72:A3:55:13:BA:97:61:F5:80:5F:23:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Gn28sxmPtgEfqpaJ6EtwD4q4KwYMdWh41zb1uZE9aBCX/1/3235A266D447CA3B72A35513BA9761F5805F23E2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3235A266D447CA3B72A35513BA9761F5805F23E2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gn28sxmPtgEfqpaJ6EtwD4q4KwYMdWh41zb1uZE9aBCX/1/3137372e37322e3231322e302f32332d3234203d3e203532393635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.72.212.0/23

    Signature Algorithm: sha256WithRSAEncryption
         63:07:c1:68:45:9f:25:b6:00:15:a5:38:15:17:ad:64:00:74:
         e1:3b:ed:fa:f8:18:01:7b:83:9c:65:a2:9f:d3:3f:4d:67:45:
         ae:a4:4f:fb:a2:8a:48:5a:88:cb:b7:4b:16:b5:e2:40:93:9e:
         4e:21:66:e6:44:1e:2f:95:c1:89:a1:9f:de:69:e2:4f:d4:82:
         5c:d9:76:3e:be:87:6c:90:e0:c6:99:05:95:d0:bf:fe:70:cc:
         a4:e4:0e:7a:54:58:e6:6b:e9:b1:02:8a:b9:2e:5a:8d:0c:1f:
         02:55:09:a7:84:ae:29:7f:9d:93:73:60:9a:8a:b7:3e:04:cb:
         2b:1c:58:46:60:3b:73:8c:37:9b:e3:3f:9e:96:aa:84:41:59:
         65:78:29:4d:d1:92:c6:e0:1e:32:a2:09:44:20:d4:a7:d8:95:
         ed:fc:d9:e1:26:bf:49:cc:4c:83:98:5f:3f:d6:79:8a:fe:f8:
         0e:e2:cc:96:45:e6:9a:1e:d1:23:95:af:8b:9a:08:69:aa:6f:
         11:af:43:ac:56:62:89:9a:d1:04:dd:d0:62:71:48:0d:0f:a7:
         13:fd:1e:5a:39:d3:bc:01:2f:87:fd:6b:aa:2f:d5:3f:1d:9d:
         d4:f4:a0:83:fc:ab:7c:34:cb:b9:c0:c9:12:b7:dd:80:f8:ec:
         81:89:47:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 01:38:35 2025 by rpki-client