Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HbEaPQmuZC5sV7pzWHLzG5eWdnDsykBCaYv8s3p8yb6W/0/3137372e33382e3231322e302f32322d3234203d3e20323632343131.roa
File:                     3137372e33382e3231322e302f32322d3234203d3e20323632343131.roa (raw, json)
Hash identifier:          bgzTCWvgYluGXnqDeeM2P4Pd0eY5pR37CmNZ/4TeQoQ=
Subject key identifier:   CF:83:65:BE:7A:7B:F2:FF:67:89:7C:A7:2E:73:53:37:4F:22:97:12
Certificate issuer:       /CN=0CC07DB35E383CF173A772290686C3CFD3D894C0
Certificate serial:       7A83DC4F8CDBA3685A82174548003F5A72698A4E
Authority key identifier: 0C:C0:7D:B3:5E:38:3C:F1:73:A7:72:29:06:86:C3:CF:D3:D8:94:C0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0CC07DB35E383CF173A772290686C3CFD3D894C0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HbEaPQmuZC5sV7pzWHLzG5eWdnDsykBCaYv8s3p8yb6W/0/3137372e33382e3231322e302f32322d3234203d3e20323632343131.roa
Signing time:             Mon 06 Feb 2023 12:24:42 +0000
ROA not before:           Mon 06 Feb 2023 12:19:42 +0000
ROA not after:            Mon 05 Feb 2024 12:24:42 +0000
asID:                     262411
IP address blocks:        177.38.212.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:83:dc:4f:8c:db:a3:68:5a:82:17:45:48:00:3f:5a:72:69:8a:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0CC07DB35E383CF173A772290686C3CFD3D894C0
        Validity
            Not Before: Feb  6 12:19:42 2023 GMT
            Not After : Feb  5 12:24:42 2024 GMT
        Subject: CN=CF8365BE7A7BF2FF67897CA72E7353374F229712
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:9f:08:2e:fb:c2:8f:ef:85:af:c1:e9:ca:41:
                    f3:04:07:09:f5:f6:31:88:c1:14:4e:b1:e3:30:24:
                    77:c6:b4:37:96:a4:56:e1:56:60:37:3c:96:45:d4:
                    54:cc:e9:e4:66:9a:13:4e:76:7a:cf:97:51:f4:90:
                    f4:2e:f2:98:01:6a:cb:c8:ac:6e:04:6c:c5:86:f8:
                    5b:84:b4:23:bd:b6:8b:81:8f:14:c3:52:a1:b2:2b:
                    c1:20:cc:00:01:f1:cf:e8:36:4f:7e:c9:a0:b0:43:
                    71:90:c5:bf:64:3a:b8:3c:a7:1e:14:04:4f:d3:7a:
                    87:6c:c1:47:ba:14:07:e4:4a:05:6f:b3:15:92:e3:
                    d4:40:cb:e8:01:64:f4:02:42:ad:58:ee:66:6a:3c:
                    55:f0:cd:50:14:76:3b:19:3f:9d:82:a5:30:98:43:
                    96:4c:16:32:66:c9:d6:ff:07:ec:ef:d9:7e:62:84:
                    e5:33:2b:e2:df:1c:c3:6a:b9:08:86:99:80:90:05:
                    04:08:e4:2b:d6:6e:b7:12:d6:87:cd:d7:13:69:c4:
                    17:9d:30:f9:bf:24:c9:c9:ae:78:25:b3:bc:e8:4b:
                    7b:e5:1d:9f:3f:27:b8:47:f1:cd:0c:12:2d:05:21:
                    f0:9c:3b:33:ec:d1:64:3f:4c:42:39:8d:03:ae:76:
                    f8:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:83:65:BE:7A:7B:F2:FF:67:89:7C:A7:2E:73:53:37:4F:22:97:12
            X509v3 Authority Key Identifier:
                keyid:0C:C0:7D:B3:5E:38:3C:F1:73:A7:72:29:06:86:C3:CF:D3:D8:94:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HbEaPQmuZC5sV7pzWHLzG5eWdnDsykBCaYv8s3p8yb6W/0/0CC07DB35E383CF173A772290686C3CFD3D894C0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0CC07DB35E383CF173A772290686C3CFD3D894C0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HbEaPQmuZC5sV7pzWHLzG5eWdnDsykBCaYv8s3p8yb6W/0/3137372e33382e3231322e302f32322d3234203d3e20323632343131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.38.212.0/22

    Signature Algorithm: sha256WithRSAEncryption
         40:fe:c5:9d:cf:5e:19:93:bf:12:80:b8:27:83:e4:c7:ca:16:
         de:78:51:73:96:a3:7a:eb:a5:4d:e9:c1:24:31:dd:18:79:d1:
         0b:58:5c:21:07:d6:03:78:9b:0b:28:99:10:ee:77:da:d4:cd:
         f2:a2:76:2b:72:c6:06:db:4f:09:c9:f0:e8:13:8b:02:4f:74:
         e5:2f:a1:7e:34:20:8b:02:ff:aa:6a:fd:1b:46:87:6f:32:f9:
         f6:ee:15:91:70:41:6f:27:20:50:c1:27:d8:bc:f5:5f:06:b5:
         c2:fc:b4:45:ad:9c:1f:74:40:85:2e:3c:5a:fb:35:52:ac:2b:
         b1:5d:be:fd:61:8e:f9:f6:99:fb:c0:62:6a:b7:b2:f8:1d:eb:
         e5:df:b7:1c:5b:5d:cb:23:3d:0d:98:9c:9e:eb:ec:a5:00:25:
         9e:3d:59:49:45:e0:fc:cf:3d:14:51:dc:c8:45:32:5e:81:3c:
         5a:d3:2a:97:de:7f:fa:f0:fb:a7:56:b2:30:d1:d3:40:ec:8c:
         82:48:b3:76:73:d9:81:c9:5f:75:33:35:ed:88:1f:70:43:ea:
         2f:c4:60:22:45:a6:17:9a:b6:4f:a3:2d:f9:75:0a:06:67:7c:
         1a:76:fd:15:60:1b:a5:85:73:50:dc:dc:a4:84:85:16:6a:ba:
         33:9e:b8:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 16:14:01 2025 by rpki-client