Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HXniMnv8y9EmJCjx2uu9BWC91L6TdynFHG8UgNZow7aZ/0/3137372e34362e31372e302f32342d3234203d3e203238313335.roa
File:                     3137372e34362e31372e302f32342d3234203d3e203238313335.roa (raw, json)
Hash identifier:          N5+tb6Fa0z7iuvOKW5Go4KCRZVhzXSbr7e+6BR+41Ms=
Subject key identifier:   C1:41:1E:EE:91:ED:96:68:12:A1:E7:B2:7C:72:68:81:0D:ED:CD:19
Certificate issuer:       /CN=106C0018EAEC97B226036E9F42E3D4795FCBC714
Certificate serial:       630F39BA1E64FC64233176056FB2616D008F8670
Authority key identifier: 10:6C:00:18:EA:EC:97:B2:26:03:6E:9F:42:E3:D4:79:5F:CB:C7:14
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/106C0018EAEC97B226036E9F42E3D4795FCBC714.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HXniMnv8y9EmJCjx2uu9BWC91L6TdynFHG8UgNZow7aZ/0/3137372e34362e31372e302f32342d3234203d3e203238313335.roa
Signing time:             Wed 12 Apr 2023 11:06:52 +0000
ROA not before:           Wed 12 Apr 2023 11:01:52 +0000
ROA not after:            Wed 10 Apr 2024 11:06:52 +0000
asID:                     28135
IP address blocks:        177.46.17.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:0f:39:ba:1e:64:fc:64:23:31:76:05:6f:b2:61:6d:00:8f:86:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=106C0018EAEC97B226036E9F42E3D4795FCBC714
        Validity
            Not Before: Apr 12 11:01:52 2023 GMT
            Not After : Apr 10 11:06:52 2024 GMT
        Subject: CN=C1411EEE91ED966812A1E7B27C7268810DEDCD19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:30:e1:ea:3b:d3:7e:a2:76:b9:80:c8:73:8e:
                    79:0e:d7:9d:1c:cb:50:11:66:dc:4d:bb:fc:76:60:
                    e0:2e:9d:27:1a:bc:c5:0e:d1:50:56:c4:48:57:5e:
                    08:7b:b4:59:65:d8:46:3c:78:3b:bc:03:54:8e:a9:
                    14:96:f9:30:68:95:5f:64:6a:35:f4:11:4b:c2:fc:
                    0b:cd:7e:7f:11:7f:5a:2f:9f:db:1c:b6:a9:40:b7:
                    02:24:4d:c5:5c:c9:5b:42:0a:ef:d4:bc:7f:57:8f:
                    09:68:10:90:81:69:3e:0e:af:9e:56:03:ce:1a:73:
                    59:ec:70:36:f9:e0:1f:6c:b3:a1:5f:86:96:3e:f5:
                    60:5d:9b:05:c9:9b:64:e0:2a:97:d1:05:78:a9:e0:
                    1d:d6:af:93:62:60:e9:62:cd:6f:e1:72:f6:e6:dd:
                    05:fe:e8:4a:ba:54:3e:bb:c9:00:6e:a4:ef:09:f7:
                    a7:0c:cc:5b:b5:36:97:9e:79:c5:d0:6e:11:9e:3c:
                    14:61:d4:b3:24:6e:78:06:68:47:ce:c0:76:94:df:
                    7c:7e:82:0d:a9:7b:aa:e0:77:b3:46:5a:2b:00:41:
                    0a:7b:5b:cd:72:32:09:a0:be:40:03:ab:25:a1:2d:
                    42:74:4c:5c:60:93:13:e7:8f:b9:00:91:63:de:e1:
                    4d:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:41:1E:EE:91:ED:96:68:12:A1:E7:B2:7C:72:68:81:0D:ED:CD:19
            X509v3 Authority Key Identifier:
                keyid:10:6C:00:18:EA:EC:97:B2:26:03:6E:9F:42:E3:D4:79:5F:CB:C7:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HXniMnv8y9EmJCjx2uu9BWC91L6TdynFHG8UgNZow7aZ/0/106C0018EAEC97B226036E9F42E3D4795FCBC714.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/106C0018EAEC97B226036E9F42E3D4795FCBC714.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HXniMnv8y9EmJCjx2uu9BWC91L6TdynFHG8UgNZow7aZ/0/3137372e34362e31372e302f32342d3234203d3e203238313335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.46.17.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b7:a0:88:dc:5e:7e:5c:db:00:4d:93:28:bc:7a:81:af:63:44:
         90:d2:c8:a5:c2:1b:54:62:c5:b1:92:2e:c8:2c:c9:e1:9f:fa:
         67:b4:73:dc:91:31:d3:47:3a:1d:5f:b9:9f:ba:07:b5:9a:c6:
         57:03:6d:9b:84:10:08:f7:8b:e2:87:9e:45:29:94:38:b0:ab:
         07:75:ad:51:21:e3:55:c1:8d:58:86:c3:ef:d2:62:3d:66:84:
         ff:f8:a6:a4:71:27:61:36:d6:bf:f5:87:a1:57:45:8e:86:a1:
         6d:a7:de:df:a5:ca:21:06:c3:61:91:05:da:87:c4:69:bd:d1:
         9a:7b:80:a9:91:73:37:67:93:e7:2e:fa:d8:92:fc:06:4a:ee:
         e7:4a:43:fd:f7:00:57:99:1b:42:b5:97:74:d5:b4:fd:bb:94:
         64:85:56:35:4d:65:4e:78:54:6e:56:dd:18:19:30:94:a3:cb:
         2a:6e:c6:fe:ac:59:90:d4:e2:d6:09:e8:b3:70:fc:a2:18:59:
         fe:51:15:5d:74:d2:22:33:e5:ea:d4:93:6b:0e:1c:ed:06:bf:
         98:04:92:a1:69:12:66:3d:be:f0:2d:19:d9:50:b0:fa:a9:a5:
         c0:1d:c0:7d:33:40:f4:c6:be:5c:c5:5b:b7:0c:df:99:0c:c5:
         17:8d:a5:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:16:43 2025 by rpki-client