Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HXniMnv8y9EmJCjx2uu9BWC91L6TdynFHG8UgNZow7aZ/0/3137372e34362e31362e302f32342d3234203d3e203238313335.roa
File:                     3137372e34362e31362e302f32342d3234203d3e203238313335.roa (raw, json)
Hash identifier:          H4NDADXj8S5ZK0BkM7y4VQegdTbr7E50IFfasaz4TeQ=
Subject key identifier:   2A:EC:9E:A1:C8:E1:6E:94:07:DE:E1:DD:F2:48:CD:41:5B:5A:F4:3D
Certificate issuer:       /CN=106C0018EAEC97B226036E9F42E3D4795FCBC714
Certificate serial:       0A9688D35B8F3C6CD7DC24C0658378391C4ED25B
Authority key identifier: 10:6C:00:18:EA:EC:97:B2:26:03:6E:9F:42:E3:D4:79:5F:CB:C7:14
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/106C0018EAEC97B226036E9F42E3D4795FCBC714.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HXniMnv8y9EmJCjx2uu9BWC91L6TdynFHG8UgNZow7aZ/0/3137372e34362e31362e302f32342d3234203d3e203238313335.roa
Signing time:             Wed 12 Apr 2023 11:06:48 +0000
ROA not before:           Wed 12 Apr 2023 11:01:48 +0000
ROA not after:            Wed 10 Apr 2024 11:06:48 +0000
asID:                     28135
IP address blocks:        177.46.16.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:96:88:d3:5b:8f:3c:6c:d7:dc:24:c0:65:83:78:39:1c:4e:d2:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=106C0018EAEC97B226036E9F42E3D4795FCBC714
        Validity
            Not Before: Apr 12 11:01:48 2023 GMT
            Not After : Apr 10 11:06:48 2024 GMT
        Subject: CN=2AEC9EA1C8E16E9407DEE1DDF248CD415B5AF43D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:1b:76:4e:8e:9e:ed:04:f9:67:e8:29:fe:3a:
                    cb:5c:ab:9a:eb:0c:d3:0e:59:e3:ec:77:2f:ea:a4:
                    5b:4f:68:bf:94:e6:3f:b5:3d:a0:fc:60:7e:53:2c:
                    26:3e:29:a8:45:54:45:ee:b7:6b:e9:00:a8:c9:85:
                    3a:d2:2a:23:59:1a:c5:4d:24:cf:35:78:6b:2a:7a:
                    6d:41:b9:ee:ed:0e:30:4f:e9:b3:0e:95:9e:5c:7d:
                    a8:c8:3a:83:0e:7b:6b:ef:63:0a:7b:7b:64:e3:ba:
                    cb:8f:d6:a7:0d:4d:f3:99:5a:db:14:74:22:cb:5f:
                    31:85:22:2e:95:d5:44:10:10:db:14:18:c1:ae:53:
                    20:7d:6b:9b:12:2d:84:25:cd:9e:4c:4d:67:c9:af:
                    93:94:54:78:a0:70:6d:44:09:43:5d:09:ee:5e:e5:
                    f5:26:c6:50:0c:15:b7:f1:87:30:9e:a4:fd:dd:ac:
                    b9:3e:a2:1e:76:ec:44:10:73:12:b1:bd:df:ec:0e:
                    44:d0:db:20:e4:f8:85:21:1c:27:a0:86:a7:a8:5f:
                    03:66:ae:b7:5b:b8:7f:7e:0c:d2:b6:c3:e3:36:6d:
                    d1:16:cd:13:64:31:dc:ff:80:62:09:2b:61:a0:d0:
                    d1:4e:12:29:16:4e:56:94:2b:7e:28:65:88:d3:6d:
                    68:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:EC:9E:A1:C8:E1:6E:94:07:DE:E1:DD:F2:48:CD:41:5B:5A:F4:3D
            X509v3 Authority Key Identifier:
                keyid:10:6C:00:18:EA:EC:97:B2:26:03:6E:9F:42:E3:D4:79:5F:CB:C7:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HXniMnv8y9EmJCjx2uu9BWC91L6TdynFHG8UgNZow7aZ/0/106C0018EAEC97B226036E9F42E3D4795FCBC714.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/106C0018EAEC97B226036E9F42E3D4795FCBC714.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HXniMnv8y9EmJCjx2uu9BWC91L6TdynFHG8UgNZow7aZ/0/3137372e34362e31362e302f32342d3234203d3e203238313335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.46.16.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b2:f7:fe:b9:57:d2:17:f9:e9:fc:e1:f2:a1:eb:20:d9:08:ce:
         b6:7e:c7:19:c7:ea:29:5e:2c:a0:48:08:5d:b3:4e:bd:6a:e5:
         db:44:42:5a:26:20:7b:5d:7f:aa:a8:b3:e6:83:b1:4c:dc:d0:
         42:33:64:2e:ff:df:f0:9b:6a:24:4c:31:a2:88:c1:d0:5a:f3:
         ef:0d:7a:d2:8a:38:46:28:a9:60:ee:35:12:52:07:c3:7b:b6:
         3c:11:d3:d1:81:12:ac:cd:40:35:79:5b:8c:2c:6c:a7:ee:d8:
         70:a4:9b:8b:20:38:5c:59:dd:a4:f3:46:77:51:37:af:c5:62:
         63:55:0c:7e:f9:7e:da:f4:8c:e6:84:aa:dd:d2:97:45:f5:4f:
         dd:05:d0:51:53:24:e7:16:fd:d3:09:13:7f:7c:b5:81:da:2b:
         f0:f0:33:af:01:26:94:43:d3:35:22:69:3d:74:fb:2b:1b:b4:
         e5:ee:c9:d6:71:b2:c3:8d:1f:a9:d9:8b:db:e0:a0:a5:35:cf:
         37:75:2e:15:eb:f4:5f:6d:13:af:89:b1:cd:b6:14:87:36:96:
         36:ba:e1:27:eb:d1:5f:61:91:46:95:05:e5:2e:d0:14:b9:5d:
         19:8e:02:42:93:43:c9:ce:9d:61:dd:94:e6:f2:0a:7b:05:ca:
         b1:e5:61:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 02:11:18 2025 by rpki-client