Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GvfhAciEXy2cQjTUjcXgMzoVpnf3AdscpYYhxuh2rwfT/0/3137372e3132392e3234302e302f32332d3332203d3e20323730383838.roa
File:                     3137372e3132392e3234302e302f32332d3332203d3e20323730383838.roa (raw, json)
Hash identifier:          ARTJNwhmh+jsr/wg42+Fh5NXvD8l4EsveOUQx8prEhg=
Subject key identifier:   A7:44:55:1F:04:B4:D7:26:87:3B:D2:E3:2B:8C:04:7E:83:0E:ED:8A
Certificate issuer:       /CN=82F104AF0446BD6AA6137DBEB898D516D0B92989
Certificate serial:       273A1DB4D3134C4487A071F263DFFD6CAF6BC4EF
Authority key identifier: 82:F1:04:AF:04:46:BD:6A:A6:13:7D:BE:B8:98:D5:16:D0:B9:29:89
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/82F104AF0446BD6AA6137DBEB898D516D0B92989.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GvfhAciEXy2cQjTUjcXgMzoVpnf3AdscpYYhxuh2rwfT/0/3137372e3132392e3234302e302f32332d3332203d3e20323730383838.roa
Signing time:             Mon 07 Nov 2022 19:25:13 +0000
ROA not before:           Mon 07 Nov 2022 19:20:13 +0000
ROA not after:            Mon 06 Nov 2023 19:25:13 +0000
asID:                     270888
IP address blocks:        177.129.240.0/23 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:3a:1d:b4:d3:13:4c:44:87:a0:71:f2:63:df:fd:6c:af:6b:c4:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82F104AF0446BD6AA6137DBEB898D516D0B92989
        Validity
            Not Before: Nov  7 19:20:13 2022 GMT
            Not After : Nov  6 19:25:13 2023 GMT
        Subject: CN=A744551F04B4D726873BD2E32B8C047E830EED8A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:16:d8:68:1c:e4:94:34:ba:7a:3c:b9:d3:78:
                    27:a2:df:17:0a:3c:f0:45:f8:7c:e4:f2:82:61:d0:
                    cb:dd:db:62:1e:67:83:44:a6:2b:ab:e8:fe:d9:0f:
                    6f:f2:26:14:76:14:a7:77:33:3f:7b:80:96:9f:37:
                    66:0f:53:79:2b:ab:16:45:9e:46:b8:53:dd:06:26:
                    ec:8c:96:21:6e:ff:4b:78:26:06:b0:89:e2:c8:4a:
                    63:99:b5:dc:04:78:4c:e7:3b:3f:a2:24:3a:87:29:
                    93:30:ad:5a:01:5b:23:ed:fd:bd:29:ba:dd:92:84:
                    bb:a7:c6:bf:d8:b4:50:53:90:19:64:d6:04:c2:76:
                    76:47:67:ca:5b:35:ce:74:18:1a:0e:f7:dc:92:5f:
                    6a:ff:d0:6a:2b:fa:f4:3e:05:e0:1e:d5:fc:6c:c4:
                    91:90:b9:ca:04:85:4f:ba:d8:e3:ec:29:72:32:6a:
                    91:e6:2b:53:e1:bb:40:94:a7:e8:f7:07:1c:3a:a9:
                    9a:f2:39:86:de:e3:ba:8b:fb:8c:1a:2e:b0:65:97:
                    32:7e:6f:45:12:01:98:a0:b3:fe:d9:01:12:9a:51:
                    c4:49:4e:f8:ac:f5:e2:e6:ef:a4:77:f3:f4:c6:e1:
                    0c:f7:0e:97:96:cb:35:36:43:48:19:97:2e:d0:5b:
                    b8:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:44:55:1F:04:B4:D7:26:87:3B:D2:E3:2B:8C:04:7E:83:0E:ED:8A
            X509v3 Authority Key Identifier:
                keyid:82:F1:04:AF:04:46:BD:6A:A6:13:7D:BE:B8:98:D5:16:D0:B9:29:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GvfhAciEXy2cQjTUjcXgMzoVpnf3AdscpYYhxuh2rwfT/0/82F104AF0446BD6AA6137DBEB898D516D0B92989.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/82F104AF0446BD6AA6137DBEB898D516D0B92989.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GvfhAciEXy2cQjTUjcXgMzoVpnf3AdscpYYhxuh2rwfT/0/3137372e3132392e3234302e302f32332d3332203d3e20323730383838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.129.240.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a6:bf:69:5d:d4:72:7a:ad:e0:56:cc:e2:ff:59:c6:d4:05:32:
         7c:83:52:70:a5:72:f6:29:9c:47:e9:c9:50:49:54:49:58:a0:
         bd:03:e2:c5:46:34:52:f5:bb:a5:72:0b:c2:96:a3:b0:85:13:
         fb:64:d4:52:40:d8:88:e7:ce:58:74:30:65:e0:6d:4c:14:89:
         e5:36:81:f4:28:5a:e2:35:d2:ca:af:88:33:85:e2:26:53:8f:
         8a:a1:fc:fd:34:45:82:9b:18:1d:e4:5e:c3:5e:9f:04:bc:d2:
         23:ee:5d:63:66:d5:4d:9a:d7:52:dd:23:9e:1a:35:ef:f2:70:
         ec:be:33:39:58:67:aa:95:14:d6:aa:1c:fe:94:ee:ae:f7:63:
         80:7c:8b:0a:c8:3c:7b:5f:6d:86:13:13:08:3f:51:78:d1:11:
         80:ee:16:1b:33:83:ea:bf:37:60:56:d4:d5:e7:d4:85:66:5c:
         01:b1:a9:e4:96:2f:07:b0:b2:fe:d8:8d:9e:f6:aa:df:5e:64:
         dc:59:d8:8e:5f:64:5b:b7:dc:ac:2d:6e:e0:f1:34:43:8b:9d:
         8e:93:ed:0b:22:1c:8e:19:67:78:2a:c0:97:9d:9f:5f:5c:d5:
         cf:e9:b7:09:19:1a:4f:4a:27:7a:40:34:0d:f5:9c:98:63:34:
         c6:bb:e9:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 05:47:16 2025 by rpki-client