Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Hiccr98oLKBWMoqqPjSntAyVpPBdZpmxKy6ip8iyemuU/2/3137372e3138352e33382e302f32332d3233203d3e203532393237.roa
File:                     3137372e3138352e33382e302f32332d3233203d3e203532393237.roa (raw, json)
Hash identifier:          PO1UqGF1ctR4rrgYCePl9Y1/odaYc8zfwDxS//YIn/8=
Subject key identifier:   B6:1E:4C:CB:69:3B:D8:99:F6:18:EF:0F:21:BC:FE:15:AD:98:46:BC
Certificate issuer:       /CN=5DCDD32616E8881974B74F53AFF3DA15BED5AE69
Certificate serial:       68A664809B2B08D233C78EC582BB106FF8901A34
Authority key identifier: 5D:CD:D3:26:16:E8:88:19:74:B7:4F:53:AF:F3:DA:15:BE:D5:AE:69
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5DCDD32616E8881974B74F53AFF3DA15BED5AE69.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Hiccr98oLKBWMoqqPjSntAyVpPBdZpmxKy6ip8iyemuU/2/3137372e3138352e33382e302f32332d3233203d3e203532393237.roa
Signing time:             Tue 23 May 2023 21:20:49 +0000
ROA not before:           Tue 23 May 2023 21:15:49 +0000
ROA not after:            Tue 21 May 2024 21:20:49 +0000
asID:                     52927
IP address blocks:        177.185.38.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:a6:64:80:9b:2b:08:d2:33:c7:8e:c5:82:bb:10:6f:f8:90:1a:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5DCDD32616E8881974B74F53AFF3DA15BED5AE69
        Validity
            Not Before: May 23 21:15:49 2023 GMT
            Not After : May 21 21:20:49 2024 GMT
        Subject: CN=B61E4CCB693BD899F618EF0F21BCFE15AD9846BC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:c2:c9:94:ba:a7:9c:0a:94:c3:86:a3:dc:9e:
                    d7:6f:83:aa:e6:04:df:d5:60:f5:60:e7:81:a4:d6:
                    f5:39:9b:a8:7a:95:c1:7c:e6:b0:0f:ea:f2:c5:03:
                    0a:e5:3f:d8:cd:44:14:f7:f2:e9:f4:fe:b4:19:d8:
                    3e:39:91:45:0e:ff:e3:50:6b:06:ea:54:d1:cf:94:
                    21:63:cc:e2:9c:67:59:d4:c1:a6:03:31:7d:6e:17:
                    9f:60:29:9b:d2:28:44:70:70:33:03:7b:94:4c:68:
                    18:c0:8a:18:68:30:b8:1f:3a:c7:ca:ff:7f:80:c9:
                    3b:09:36:46:d7:54:50:35:78:ae:3c:52:d5:3a:06:
                    69:63:09:f2:bd:68:33:57:df:59:b1:61:56:1d:84:
                    38:39:97:9c:e6:fc:49:83:69:40:03:2c:59:c1:2c:
                    fd:9c:e9:be:49:3f:d1:64:a2:b7:e7:53:63:17:6f:
                    28:f3:0f:d1:69:7a:8f:df:84:99:e3:a3:12:78:37:
                    6e:46:7f:c6:89:66:75:17:65:83:d0:46:05:02:74:
                    5b:0d:bd:68:c8:a0:f6:5e:15:db:1b:02:01:ed:34:
                    61:24:e6:72:8e:9d:09:fc:96:a1:ab:bb:03:e5:30:
                    03:77:4b:d5:64:46:e2:4a:e3:2d:62:bf:c0:65:d8:
                    26:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:1E:4C:CB:69:3B:D8:99:F6:18:EF:0F:21:BC:FE:15:AD:98:46:BC
            X509v3 Authority Key Identifier:
                keyid:5D:CD:D3:26:16:E8:88:19:74:B7:4F:53:AF:F3:DA:15:BE:D5:AE:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Hiccr98oLKBWMoqqPjSntAyVpPBdZpmxKy6ip8iyemuU/2/5DCDD32616E8881974B74F53AFF3DA15BED5AE69.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5DCDD32616E8881974B74F53AFF3DA15BED5AE69.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Hiccr98oLKBWMoqqPjSntAyVpPBdZpmxKy6ip8iyemuU/2/3137372e3138352e33382e302f32332d3233203d3e203532393237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.185.38.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1c:31:ae:b9:8a:48:49:3f:c1:ca:fc:81:e8:eb:c7:38:ec:2c:
         7c:69:62:8d:0e:37:1f:1a:93:61:ad:9b:c0:a3:e9:60:91:bf:
         90:c2:9a:08:82:54:39:1b:60:73:1d:38:c8:74:9e:10:d9:54:
         46:a6:f1:dc:35:24:be:4d:17:36:4e:ab:a0:80:b3:ff:b8:0f:
         61:42:9f:1a:bb:37:33:af:0c:4b:f3:5f:09:51:73:23:9f:c9:
         3b:f2:b1:dc:de:3b:d7:de:f2:9e:b0:4d:fa:2a:86:e5:d4:04:
         b8:62:aa:14:41:ca:20:7d:f6:ae:e6:19:07:e2:cb:37:70:7d:
         cc:1d:0a:fe:ec:6c:cd:e5:31:ec:78:9b:46:3a:9f:ba:d1:2e:
         ad:5f:e5:bc:23:5d:c5:c3:94:75:82:fe:74:2e:cb:29:29:83:
         a5:3e:9d:c0:f3:2f:df:69:51:7d:16:e2:71:73:ad:0f:ae:b6:
         50:a2:c1:91:8e:82:da:15:39:ed:58:20:5f:21:3d:77:18:29:
         09:1a:89:fe:5c:d4:74:80:8f:40:61:28:8e:68:aa:28:ec:0c:
         12:4e:10:58:db:ef:94:05:25:91:fd:b7:90:5a:53:a6:c2:67:
         0e:46:c0:29:b0:1f:0f:1d:90:81:18:1d:75:a5:41:14:d7:53:
         fd:96:63:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:45:41 2025 by rpki-client