Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HXniMnv8y9EmJCjx2uu9BWC91L6TdynFHG8UgNZow7aZ/0/3137372e34362e37322e302f32312d3231203d3e203238313335.roa
File:                     3137372e34362e37322e302f32312d3231203d3e203238313335.roa (raw, json)
Hash identifier:          9SbwrkevpdexUDSiIXGAI0VRriuZo6AejpKzAapXzSs=
Subject key identifier:   23:B5:06:0E:AF:92:D4:4E:11:F5:CD:B8:10:D0:BD:A4:35:86:38:FC
Certificate issuer:       /CN=106C0018EAEC97B226036E9F42E3D4795FCBC714
Certificate serial:       28F5A7696DFBDB36F1C880B1879BC03F147F9D45
Authority key identifier: 10:6C:00:18:EA:EC:97:B2:26:03:6E:9F:42:E3:D4:79:5F:CB:C7:14
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/106C0018EAEC97B226036E9F42E3D4795FCBC714.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HXniMnv8y9EmJCjx2uu9BWC91L6TdynFHG8UgNZow7aZ/0/3137372e34362e37322e302f32312d3231203d3e203238313335.roa
Signing time:             Wed 12 Apr 2023 11:09:14 +0000
ROA not before:           Wed 12 Apr 2023 11:04:14 +0000
ROA not after:            Wed 10 Apr 2024 11:09:14 +0000
asID:                     28135
IP address blocks:        177.46.72.0/21 maxlen: 21
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:f5:a7:69:6d:fb:db:36:f1:c8:80:b1:87:9b:c0:3f:14:7f:9d:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=106C0018EAEC97B226036E9F42E3D4795FCBC714
        Validity
            Not Before: Apr 12 11:04:14 2023 GMT
            Not After : Apr 10 11:09:14 2024 GMT
        Subject: CN=23B5060EAF92D44E11F5CDB810D0BDA4358638FC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:a5:9a:ba:06:75:f9:0a:24:7f:12:7c:27:ae:
                    6a:4d:13:f1:f7:04:06:5d:a9:1d:50:13:f0:18:dd:
                    67:28:b5:f2:20:5e:89:ba:58:94:44:cd:de:94:f5:
                    92:e8:45:11:33:ee:b2:d3:f4:2e:e6:0a:2b:62:62:
                    d8:91:65:b6:52:28:1f:7c:cd:2b:3d:f4:a3:f5:03:
                    85:a7:9e:af:23:8d:f1:f9:d8:e9:57:92:65:f9:67:
                    7e:85:93:bc:ca:0a:4e:8d:61:f6:1a:39:15:57:a0:
                    7c:51:de:98:2a:f5:67:af:50:40:6c:8b:db:f8:7d:
                    a9:6f:65:ee:46:44:ef:62:5f:5a:c4:4f:77:f1:76:
                    c3:66:cd:38:df:bf:07:6b:f4:67:a4:71:62:ee:73:
                    9e:9e:17:3a:f4:a8:37:af:9f:fa:6d:e2:7b:cf:41:
                    67:f8:21:dc:fc:c2:5f:be:1e:9c:5e:70:e6:43:55:
                    99:15:a1:ee:03:41:8d:f3:d0:6e:39:26:2e:c4:0d:
                    76:a7:ce:1c:39:88:0c:b1:49:aa:5f:90:77:d0:78:
                    06:bc:e6:2f:9d:60:29:32:0c:3c:fb:9d:73:4b:ac:
                    cd:6a:aa:ed:52:3d:c6:b8:42:9b:19:94:45:50:b6:
                    d6:c8:7e:7f:eb:d0:1a:c2:10:4f:d1:94:57:26:8e:
                    f2:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:B5:06:0E:AF:92:D4:4E:11:F5:CD:B8:10:D0:BD:A4:35:86:38:FC
            X509v3 Authority Key Identifier:
                keyid:10:6C:00:18:EA:EC:97:B2:26:03:6E:9F:42:E3:D4:79:5F:CB:C7:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HXniMnv8y9EmJCjx2uu9BWC91L6TdynFHG8UgNZow7aZ/0/106C0018EAEC97B226036E9F42E3D4795FCBC714.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/106C0018EAEC97B226036E9F42E3D4795FCBC714.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HXniMnv8y9EmJCjx2uu9BWC91L6TdynFHG8UgNZow7aZ/0/3137372e34362e37322e302f32312d3231203d3e203238313335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.46.72.0/21

    Signature Algorithm: sha256WithRSAEncryption
         91:f9:85:9f:d2:48:e3:12:e5:e2:6b:b7:0a:6f:43:53:5d:d7:
         ec:9f:aa:b1:83:7c:8e:2d:33:ac:ae:b1:fb:e2:a4:96:74:f7:
         48:fb:f8:aa:68:64:a5:75:0a:d2:cf:53:36:3d:bf:7d:e4:c5:
         b6:31:f1:9e:bb:98:89:87:42:e6:11:fb:a5:42:2b:91:28:94:
         27:b4:6a:f0:ed:98:fa:c6:61:18:51:90:78:94:5e:5f:38:70:
         30:5e:28:d1:ce:69:64:90:0f:94:b4:44:e5:33:ca:17:85:c8:
         7c:40:04:4c:e8:d5:ba:b6:c9:72:d9:53:da:db:51:15:cd:e3:
         03:47:7c:ee:4e:25:59:6f:f0:3f:25:54:84:4d:82:76:92:32:
         ed:2d:59:30:56:86:e3:19:00:e4:cb:be:8e:be:8e:7a:3c:ed:
         f9:32:4c:63:45:31:75:79:4c:b5:5b:d4:bb:a9:2f:59:be:ad:
         fb:f6:14:db:e7:b8:e5:0e:ba:e3:1b:88:9b:61:2f:67:bf:1b:
         61:97:a1:ca:7f:e1:0c:ca:a4:eb:9b:88:58:8a:6f:6f:87:84:
         39:64:cc:d2:94:eb:89:e5:cb:b9:4c:bd:43:e4:ac:5b:60:af:
         f2:b5:a0:71:78:b3:a5:1e:72:d0:58:0e:64:55:70:5b:15:02:
         35:46:06:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:06:28 2025 by rpki-client