Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HXniMnv8y9EmJCjx2uu9BWC91L6TdynFHG8UgNZow7aZ/0/3137372e34362e38302e302f32322d3233203d3e203238313335.roa
File:                     3137372e34362e38302e302f32322d3233203d3e203238313335.roa (raw, json)
Hash identifier:          NNK15aBAK+N9MhdzpSZAy209m4PLedA+IQOQiSe0GHk=
Subject key identifier:   0B:D8:4E:FC:55:4D:56:26:3C:0D:0D:80:44:81:8C:33:B4:45:B4:85
Certificate issuer:       /CN=106C0018EAEC97B226036E9F42E3D4795FCBC714
Certificate serial:       373A11016AC1E1B98744B2DE28D1D4E73D70B8E7
Authority key identifier: 10:6C:00:18:EA:EC:97:B2:26:03:6E:9F:42:E3:D4:79:5F:CB:C7:14
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/106C0018EAEC97B226036E9F42E3D4795FCBC714.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HXniMnv8y9EmJCjx2uu9BWC91L6TdynFHG8UgNZow7aZ/0/3137372e34362e38302e302f32322d3233203d3e203238313335.roa
Signing time:             Wed 12 Apr 2023 11:09:45 +0000
ROA not before:           Wed 12 Apr 2023 11:04:45 +0000
ROA not after:            Wed 10 Apr 2024 11:09:45 +0000
asID:                     28135
IP address blocks:        177.46.80.0/22 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:3a:11:01:6a:c1:e1:b9:87:44:b2:de:28:d1:d4:e7:3d:70:b8:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=106C0018EAEC97B226036E9F42E3D4795FCBC714
        Validity
            Not Before: Apr 12 11:04:45 2023 GMT
            Not After : Apr 10 11:09:45 2024 GMT
        Subject: CN=0BD84EFC554D56263C0D0D8044818C33B445B485
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:1e:28:d2:f3:96:35:b2:11:7c:ba:f8:fd:bc:
                    2a:02:5a:3a:9a:75:30:ff:4c:21:94:af:d4:8c:63:
                    63:f3:2b:0c:5b:a4:cb:ef:fa:6c:f7:cd:64:c8:c8:
                    80:4c:3a:ae:d5:74:85:3a:35:3d:ae:ea:4d:e7:b6:
                    d3:44:69:60:cb:76:0d:75:58:46:3e:6d:a9:24:5c:
                    a7:38:83:cc:30:27:d2:1d:91:1a:8e:82:6e:51:ae:
                    cd:3e:ae:37:aa:32:49:c2:1d:a1:0e:02:15:71:fc:
                    d6:c8:a2:50:1c:36:20:2f:2c:66:3d:9c:53:f2:4c:
                    06:2f:de:07:57:4b:b5:3f:ec:1e:9b:36:52:bd:78:
                    e4:78:5b:e0:de:94:d1:d8:3e:ab:ca:39:ef:62:62:
                    c1:4a:1b:68:f0:c5:08:78:94:9e:bb:7a:46:65:3c:
                    a9:76:97:1e:44:1b:51:26:e2:20:2e:0b:e0:b0:73:
                    f1:61:0c:5d:ce:70:d5:d7:65:f3:7e:78:ea:a6:cc:
                    29:32:73:7a:aa:42:24:0b:6b:e1:6e:fd:b4:72:e8:
                    7c:f6:cc:7b:04:98:58:c7:80:5c:de:48:72:13:88:
                    ac:d5:05:3c:0c:14:59:2a:e7:d6:64:d8:bc:b2:75:
                    a9:52:dd:fc:a0:7a:de:ee:73:0c:1b:94:21:cf:70:
                    d9:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:D8:4E:FC:55:4D:56:26:3C:0D:0D:80:44:81:8C:33:B4:45:B4:85
            X509v3 Authority Key Identifier:
                keyid:10:6C:00:18:EA:EC:97:B2:26:03:6E:9F:42:E3:D4:79:5F:CB:C7:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HXniMnv8y9EmJCjx2uu9BWC91L6TdynFHG8UgNZow7aZ/0/106C0018EAEC97B226036E9F42E3D4795FCBC714.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/106C0018EAEC97B226036E9F42E3D4795FCBC714.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HXniMnv8y9EmJCjx2uu9BWC91L6TdynFHG8UgNZow7aZ/0/3137372e34362e38302e302f32322d3233203d3e203238313335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.46.80.0/22

    Signature Algorithm: sha256WithRSAEncryption
         09:bb:cc:50:0a:41:7b:18:10:74:14:33:a5:2b:f7:d2:8e:0e:
         5a:b9:02:18:ab:44:ce:60:df:88:07:4b:54:a4:14:67:f1:6f:
         81:00:62:2e:6a:f8:59:7c:41:ae:04:6e:d4:3e:6f:06:e3:00:
         0f:5d:9b:50:b2:dd:d0:66:cd:9a:c4:8e:47:bc:38:75:50:36:
         af:70:bc:50:41:31:35:ea:0e:c5:63:0b:4f:39:cd:75:f9:9f:
         5a:47:bb:28:f8:45:f4:ea:e7:c0:b4:42:a2:51:18:60:40:74:
         10:4a:18:e9:0a:5e:49:05:af:08:4e:1e:89:1e:52:f5:00:3d:
         84:39:b9:ec:35:83:e8:bb:fa:65:5c:60:9c:dc:c3:18:78:12:
         f7:2c:ee:b7:c1:11:23:64:4e:66:ea:22:39:90:51:0e:1f:b0:
         30:5f:bd:ea:e9:cc:22:f6:62:65:85:35:70:69:37:82:32:fc:
         19:90:92:7b:5a:fa:8a:0a:ed:56:da:9e:76:a4:38:13:e7:88:
         d8:9b:83:95:6f:c4:ee:35:7d:50:54:43:8f:d0:c2:3e:d5:fc:
         18:b0:48:bc:34:b7:0f:84:86:70:a0:27:ca:7a:31:5c:c0:aa:
         07:38:74:fe:b9:b3:26:e0:5c:78:33:6c:f1:5a:44:ab:c4:2b:
         e4:e6:3c:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:21:25 2025 by rpki-client