Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HXniMnv8y9EmJCjx2uu9BWC91L6TdynFHG8UgNZow7aZ/0/3137372e34362e32332e302f32342d3234203d3e203238313335.roa
File:                     3137372e34362e32332e302f32342d3234203d3e203238313335.roa (raw, json)
Hash identifier:          HMI/NUMF9RxA9YY3ato8Q0elGJq5KHz9LuSRj9TIFyY=
Subject key identifier:   C7:E3:26:95:D7:D0:B4:19:80:C6:8D:05:EA:CD:79:A7:2A:22:20:3A
Certificate issuer:       /CN=106C0018EAEC97B226036E9F42E3D4795FCBC714
Certificate serial:       4022F2FE9F4C42790A2123F3B05905EB814C8123
Authority key identifier: 10:6C:00:18:EA:EC:97:B2:26:03:6E:9F:42:E3:D4:79:5F:CB:C7:14
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/106C0018EAEC97B226036E9F42E3D4795FCBC714.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HXniMnv8y9EmJCjx2uu9BWC91L6TdynFHG8UgNZow7aZ/0/3137372e34362e32332e302f32342d3234203d3e203238313335.roa
Signing time:             Wed 12 Apr 2023 11:07:22 +0000
ROA not before:           Wed 12 Apr 2023 11:02:22 +0000
ROA not after:            Wed 10 Apr 2024 11:07:22 +0000
asID:                     28135
IP address blocks:        177.46.23.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:22:f2:fe:9f:4c:42:79:0a:21:23:f3:b0:59:05:eb:81:4c:81:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=106C0018EAEC97B226036E9F42E3D4795FCBC714
        Validity
            Not Before: Apr 12 11:02:22 2023 GMT
            Not After : Apr 10 11:07:22 2024 GMT
        Subject: CN=C7E32695D7D0B41980C68D05EACD79A72A22203A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:ea:d7:24:86:04:2a:25:ce:58:a5:e1:e6:72:
                    7b:9c:7f:41:1c:00:69:45:03:a2:0b:24:05:69:8a:
                    29:33:5f:be:f9:0e:34:e2:ff:5b:0c:ea:f3:f2:29:
                    00:09:04:cb:ee:b3:32:e6:16:39:9c:45:d8:e2:c3:
                    7f:88:1c:d7:5f:31:4d:9a:20:cf:34:d0:e5:ea:d2:
                    f8:68:ef:aa:cc:0e:5a:9f:75:f8:5f:c2:08:a0:7a:
                    bc:de:67:e6:28:66:36:29:56:da:a1:6b:7f:a3:a9:
                    18:5a:59:56:90:2d:a2:fd:47:bb:63:15:c0:4b:06:
                    78:56:96:ef:4b:35:b4:7e:fc:92:8e:63:e3:bc:72:
                    b1:46:0f:e4:db:e2:63:45:f6:15:f8:c2:f1:df:a5:
                    38:d1:83:7f:7c:f6:22:41:3f:ae:de:6e:34:79:10:
                    d2:62:5f:c4:50:8a:0c:fc:4b:e8:2c:53:88:3a:16:
                    be:ab:62:95:17:e1:be:06:03:7e:c1:f4:81:2d:37:
                    70:23:a2:35:ce:fe:44:d6:9e:6b:55:31:18:97:02:
                    7a:96:0c:01:c6:4b:b2:70:2f:c7:ac:44:19:f3:ad:
                    28:21:3c:a1:4d:d6:d8:86:b3:75:cd:1b:d6:f0:73:
                    e4:1d:86:ad:01:df:3f:2d:a8:d2:ee:5f:fd:ae:dc:
                    e3:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:E3:26:95:D7:D0:B4:19:80:C6:8D:05:EA:CD:79:A7:2A:22:20:3A
            X509v3 Authority Key Identifier:
                keyid:10:6C:00:18:EA:EC:97:B2:26:03:6E:9F:42:E3:D4:79:5F:CB:C7:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HXniMnv8y9EmJCjx2uu9BWC91L6TdynFHG8UgNZow7aZ/0/106C0018EAEC97B226036E9F42E3D4795FCBC714.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/106C0018EAEC97B226036E9F42E3D4795FCBC714.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HXniMnv8y9EmJCjx2uu9BWC91L6TdynFHG8UgNZow7aZ/0/3137372e34362e32332e302f32342d3234203d3e203238313335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.46.23.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2b:b2:95:46:a5:cd:33:2e:1d:d9:a4:0c:36:97:43:93:cc:9d:
         77:3d:fd:fd:23:05:3c:99:b0:7d:d5:4e:1f:5f:87:26:81:a2:
         86:3d:2c:bb:68:e7:be:ce:b6:66:dd:74:a7:c6:b4:bf:08:43:
         5e:d1:71:6d:21:e0:af:7e:8e:97:55:bf:4a:6d:0a:92:49:a6:
         32:f1:e1:9f:ca:c7:74:3c:0f:7c:66:58:cc:31:8b:fa:aa:89:
         1e:15:ce:76:9e:af:7f:a9:b9:6d:98:1d:4b:fd:ad:f6:8b:72:
         92:32:89:c2:60:5b:09:90:ea:58:ca:38:5d:b9:01:d3:cc:27:
         9c:1d:74:eb:c1:0d:7d:9e:88:77:17:4b:37:a9:17:d6:b4:dd:
         12:ba:84:61:fc:10:7a:39:78:4b:7b:77:bb:31:64:8d:2b:d2:
         5e:8d:e1:34:b1:7c:5c:92:c5:e9:1c:3b:32:c7:8a:26:a5:bf:
         fc:24:03:aa:7c:7d:f8:d9:f7:a4:70:a6:35:8d:55:2d:e7:c6:
         3d:fb:1f:d7:58:81:b8:bc:10:13:b4:6f:27:9b:db:71:5a:b0:
         9d:36:a9:fc:f3:4d:1e:12:c5:14:fd:14:cf:f5:fc:73:b6:d6:
         4c:ec:24:b4:41:b9:74:31:ec:cc:52:04:7a:02:8b:00:d4:bf:
         19:57:df:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:25:00 2025 by rpki-client