Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HXniMnv8y9EmJCjx2uu9BWC91L6TdynFHG8UgNZow7aZ/0/3137372e34362e39322e302f32322d3232203d3e203238313335.roa
File:                     3137372e34362e39322e302f32322d3232203d3e203238313335.roa (raw, json)
Hash identifier:          Kc0VlSls/HH3EFjd2UjmBqOffNGyRGJmu/D46EBMiis=
Subject key identifier:   60:4D:D3:52:ED:B4:D5:E3:0F:53:D6:D3:05:D8:D7:73:C9:FE:AD:32
Certificate issuer:       /CN=106C0018EAEC97B226036E9F42E3D4795FCBC714
Certificate serial:       60B86DEA0E67106960096118B98A417830123F96
Authority key identifier: 10:6C:00:18:EA:EC:97:B2:26:03:6E:9F:42:E3:D4:79:5F:CB:C7:14
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/106C0018EAEC97B226036E9F42E3D4795FCBC714.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HXniMnv8y9EmJCjx2uu9BWC91L6TdynFHG8UgNZow7aZ/0/3137372e34362e39322e302f32322d3232203d3e203238313335.roa
Signing time:             Mon 15 May 2023 22:51:07 +0000
ROA not before:           Mon 15 May 2023 22:46:07 +0000
ROA not after:            Mon 13 May 2024 22:51:07 +0000
asID:                     28135
IP address blocks:        177.46.92.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:b8:6d:ea:0e:67:10:69:60:09:61:18:b9:8a:41:78:30:12:3f:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=106C0018EAEC97B226036E9F42E3D4795FCBC714
        Validity
            Not Before: May 15 22:46:07 2023 GMT
            Not After : May 13 22:51:07 2024 GMT
        Subject: CN=604DD352EDB4D5E30F53D6D305D8D773C9FEAD32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:ca:97:0b:b9:d6:c3:60:3f:bb:5d:4e:27:83:
                    c2:95:fc:b1:e3:18:15:92:27:bb:30:3c:c0:cc:58:
                    42:42:7d:47:f3:51:1d:63:76:be:3b:5a:a7:34:93:
                    22:14:73:f7:45:32:8c:9e:d6:bd:34:01:45:b6:5c:
                    1b:95:34:cf:64:e7:a3:de:50:92:f7:34:da:31:e3:
                    ed:30:8c:bb:44:25:5a:d5:0b:0a:94:ed:4f:19:b4:
                    28:f1:98:da:88:dc:33:9f:ae:69:c6:3c:38:ca:12:
                    15:25:53:a9:75:06:ed:f7:a7:4b:ea:3f:cc:2d:2c:
                    cb:c8:b0:63:fe:64:4a:da:83:57:52:9c:32:33:66:
                    c6:0e:db:d9:00:aa:09:49:9c:61:bc:51:51:3e:b7:
                    03:7d:cf:a0:a1:59:d8:61:a3:b1:36:84:75:d2:67:
                    06:a0:ac:19:98:fa:72:88:15:1a:6e:bd:1c:3b:64:
                    9b:03:4f:44:9c:89:6b:53:e6:1d:7d:cc:8d:3b:3c:
                    b9:7e:8e:b9:64:aa:7b:7c:3d:ee:32:a7:6e:b2:10:
                    a7:80:84:3e:83:58:82:cb:e8:f3:a4:b4:2e:3e:28:
                    89:8d:ed:da:40:a9:f0:3c:ae:64:b3:d0:34:02:8a:
                    e3:81:eb:34:e6:ec:e0:93:a6:75:43:1b:da:cc:47:
                    6a:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:4D:D3:52:ED:B4:D5:E3:0F:53:D6:D3:05:D8:D7:73:C9:FE:AD:32
            X509v3 Authority Key Identifier:
                keyid:10:6C:00:18:EA:EC:97:B2:26:03:6E:9F:42:E3:D4:79:5F:CB:C7:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HXniMnv8y9EmJCjx2uu9BWC91L6TdynFHG8UgNZow7aZ/0/106C0018EAEC97B226036E9F42E3D4795FCBC714.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/106C0018EAEC97B226036E9F42E3D4795FCBC714.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HXniMnv8y9EmJCjx2uu9BWC91L6TdynFHG8UgNZow7aZ/0/3137372e34362e39322e302f32322d3232203d3e203238313335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.46.92.0/22

    Signature Algorithm: sha256WithRSAEncryption
         bc:48:77:34:82:c2:c6:78:1a:2a:1f:c5:73:ff:74:d4:dd:dd:
         9a:14:d7:bc:fd:b0:d7:b4:92:0b:e7:7c:35:d5:e8:83:5f:ca:
         5b:86:36:5e:3b:f9:4b:82:47:fc:50:14:66:6a:8c:5a:75:a4:
         92:8a:c6:d1:96:a0:97:a7:d1:6f:86:32:66:a3:3d:c8:6e:b5:
         7c:83:c4:c1:53:fa:0a:78:d5:78:2b:97:3f:0f:72:73:cc:58:
         fa:13:f2:91:d1:bc:d0:84:9f:c1:9e:4e:df:c7:05:43:0d:5f:
         4d:2c:fe:cc:3d:3f:4d:01:85:09:10:43:40:4f:29:d3:9c:1c:
         f6:fe:64:e9:4f:b4:c6:26:a3:c4:9d:7f:3c:e1:ad:e5:46:55:
         70:1b:76:6b:14:7f:96:00:b2:1f:47:0e:d9:20:49:57:0b:fd:
         9e:ac:74:82:1b:1b:e8:fc:ef:2d:ce:a1:f7:d8:62:fa:3a:f3:
         5c:40:c9:09:c1:2a:52:b8:42:26:5c:1a:a6:06:2b:54:34:b2:
         f9:2d:22:77:04:6a:45:f1:a2:a1:a6:25:e7:4e:b5:7a:ec:a0:
         bc:fd:8b:20:29:e5:3d:b7:bb:0d:b0:de:66:0a:9d:d0:b8:c9:
         93:51:f3:cd:1f:82:c3:99:27:37:a0:5e:f8:84:3b:5f:48:79:
         10:a3:6f:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:28:50 2025 by rpki-client