Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HXniMnv8y9EmJCjx2uu9BWC91L6TdynFHG8UgNZow7aZ/0/3137372e34362e37382e302f32342d3234203d3e203238313335.roa
File:                     3137372e34362e37382e302f32342d3234203d3e203238313335.roa (raw, json)
Hash identifier:          J+4w10V/yfIKq+eIdVGL/owspOi76Wz3KcOknVQzwTE=
Subject key identifier:   CA:9B:50:24:37:8A:17:C8:87:99:49:86:D5:86:90:9D:8C:3C:8B:13
Certificate issuer:       /CN=106C0018EAEC97B226036E9F42E3D4795FCBC714
Certificate serial:       274A3704BB5DA7F46C763D18F7EE526A71717A60
Authority key identifier: 10:6C:00:18:EA:EC:97:B2:26:03:6E:9F:42:E3:D4:79:5F:CB:C7:14
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/106C0018EAEC97B226036E9F42E3D4795FCBC714.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HXniMnv8y9EmJCjx2uu9BWC91L6TdynFHG8UgNZow7aZ/0/3137372e34362e37382e302f32342d3234203d3e203238313335.roa
Signing time:             Wed 12 Apr 2023 11:09:32 +0000
ROA not before:           Wed 12 Apr 2023 11:04:32 +0000
ROA not after:            Wed 10 Apr 2024 11:09:32 +0000
asID:                     28135
IP address blocks:        177.46.78.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:4a:37:04:bb:5d:a7:f4:6c:76:3d:18:f7:ee:52:6a:71:71:7a:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=106C0018EAEC97B226036E9F42E3D4795FCBC714
        Validity
            Not Before: Apr 12 11:04:32 2023 GMT
            Not After : Apr 10 11:09:32 2024 GMT
        Subject: CN=CA9B5024378A17C887994986D586909D8C3C8B13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:25:92:10:eb:6b:31:ba:45:6b:82:5a:c4:01:
                    83:06:97:0d:6c:f3:40:c0:9d:b4:b5:7a:75:03:47:
                    95:71:ba:cb:fc:ac:20:0e:29:a0:ea:5d:77:ec:29:
                    e5:97:2b:99:6f:82:d0:2f:d0:dd:62:9c:9d:28:9b:
                    e6:ce:e7:93:17:9a:52:ef:27:d2:d6:fe:56:68:f6:
                    eb:dd:f1:7b:36:5a:d3:b5:1d:c0:21:85:94:e1:56:
                    18:b1:fe:af:9c:d7:35:02:88:7d:90:ae:80:a6:fc:
                    f0:ec:ca:94:9c:98:07:63:65:23:4f:9e:d0:ec:af:
                    fd:d6:39:3c:33:2f:7f:97:cd:4d:59:fe:b1:b6:f9:
                    48:e4:a8:fe:02:b1:ab:8c:21:91:99:b9:50:d0:7a:
                    0b:6d:a9:c5:89:26:ac:d6:40:85:30:29:9b:e1:97:
                    7b:29:80:e1:ce:6a:51:5a:8c:f6:eb:c1:94:be:10:
                    aa:e7:b2:ec:6f:f2:a0:ce:15:17:00:cb:3b:d5:a8:
                    76:8d:c3:55:22:f5:64:01:1e:b6:e2:90:fe:f9:c3:
                    e0:70:c1:8e:d0:8b:f7:7c:42:d7:b2:e6:bc:a8:c5:
                    c9:ec:82:3b:65:5d:f5:b6:37:17:5b:01:e1:de:9e:
                    0f:ed:49:8b:1b:87:5a:83:b6:c7:06:9f:82:67:28:
                    78:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:9B:50:24:37:8A:17:C8:87:99:49:86:D5:86:90:9D:8C:3C:8B:13
            X509v3 Authority Key Identifier:
                keyid:10:6C:00:18:EA:EC:97:B2:26:03:6E:9F:42:E3:D4:79:5F:CB:C7:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HXniMnv8y9EmJCjx2uu9BWC91L6TdynFHG8UgNZow7aZ/0/106C0018EAEC97B226036E9F42E3D4795FCBC714.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/106C0018EAEC97B226036E9F42E3D4795FCBC714.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HXniMnv8y9EmJCjx2uu9BWC91L6TdynFHG8UgNZow7aZ/0/3137372e34362e37382e302f32342d3234203d3e203238313335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.46.78.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1f:6e:de:87:33:31:a5:05:86:05:64:ca:de:18:75:ef:0f:2d:
         7f:e2:88:b1:f3:ea:4b:d3:a9:89:c0:63:3b:2f:6d:de:a7:c0:
         a4:0b:d2:c1:57:36:4d:78:20:2d:a9:18:ac:9b:a9:f1:64:b3:
         aa:55:10:00:4c:0e:54:c8:94:96:d1:0a:01:62:12:02:73:9b:
         12:a2:1a:78:4b:17:bf:b8:49:bb:66:3d:00:fb:16:22:60:a3:
         4f:58:a9:cb:c8:d2:fa:b6:35:ae:20:d9:7e:2e:c2:1d:c8:83:
         6d:eb:64:d7:a5:4f:7f:fe:45:74:a9:49:5b:8b:18:d7:31:69:
         87:54:54:79:98:50:7e:39:79:e2:a2:c7:0b:cd:4b:a7:36:c9:
         1d:f7:be:ac:d3:1f:49:b9:ca:eb:79:4e:db:d0:32:5d:71:a5:
         4b:4c:c7:fa:be:ea:66:b0:84:16:54:4c:ac:78:10:97:e2:30:
         64:18:e9:2e:be:33:0f:d4:45:9d:25:a8:fd:bb:b1:97:cd:50:
         bf:df:1c:24:0b:62:53:15:1a:44:79:9f:40:8a:78:26:f2:b4:
         19:06:82:ee:9e:69:84:dc:e6:50:68:39:23:0b:a0:fc:17:d5:
         08:2e:a7:02:40:1c:a6:47:d5:6a:3c:db:fc:51:ad:42:ed:c2:
         ef:0f:f2:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 02:08:48 2025 by rpki-client