Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Hmi7PRGu5nBm5y4tSzdwsJnfsc6NkxrcGu6LtxeSXxo5/0/3137372e36372e3231362e302f32322d3232203d3e203532363739.roa
File:                     3137372e36372e3231362e302f32322d3232203d3e203532363739.roa (raw, json)
Hash identifier:          4OaUpvDsO1vWYup8V2wo76fau/ahYB0fKmoY2YiRiTw=
Subject key identifier:   1F:C9:7A:37:38:C1:37:D2:71:EA:D4:3E:F0:19:E5:8E:0C:7A:96:4C
Certificate issuer:       /CN=DADA4AC5F0531D7E76BB665AB3FC5A86BE15E341
Certificate serial:       05666C1AF4AE1E2CA82C29BD6F3E33E4D3CD1218
Authority key identifier: DA:DA:4A:C5:F0:53:1D:7E:76:BB:66:5A:B3:FC:5A:86:BE:15:E3:41
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DADA4AC5F0531D7E76BB665AB3FC5A86BE15E341.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Hmi7PRGu5nBm5y4tSzdwsJnfsc6NkxrcGu6LtxeSXxo5/0/3137372e36372e3231362e302f32322d3232203d3e203532363739.roa
Signing time:             Tue 22 Aug 2023 15:32:14 +0000
ROA not before:           Tue 22 Aug 2023 15:27:14 +0000
ROA not after:            Tue 20 Aug 2024 15:32:14 +0000
asID:                     52679
IP address blocks:        177.67.216.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:66:6c:1a:f4:ae:1e:2c:a8:2c:29:bd:6f:3e:33:e4:d3:cd:12:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DADA4AC5F0531D7E76BB665AB3FC5A86BE15E341
        Validity
            Not Before: Aug 22 15:27:14 2023 GMT
            Not After : Aug 20 15:32:14 2024 GMT
        Subject: CN=1FC97A3738C137D271EAD43EF019E58E0C7A964C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:6d:38:1d:78:87:cc:66:6d:d3:82:34:c0:58:
                    36:5a:75:9f:d4:9f:71:99:c5:a3:6c:a2:46:a1:ae:
                    cd:c3:05:1c:d2:99:72:6a:0e:00:74:59:dd:2f:ae:
                    77:e4:bf:d0:66:22:36:65:c8:4c:01:e0:31:af:68:
                    d8:a5:41:dd:3c:84:db:60:52:f4:6e:c4:00:0a:4b:
                    0e:e1:f7:76:7a:06:7a:66:fa:3f:2d:cf:bb:1b:e0:
                    af:ff:12:cb:1c:b4:f5:0d:da:88:9f:92:f6:a3:9e:
                    e3:0a:27:03:24:f9:dd:dd:04:19:ac:0e:17:2e:2d:
                    a2:ff:04:30:d0:de:f8:f6:76:37:97:70:e2:2d:a7:
                    65:82:69:1f:e3:a9:4b:bd:ca:eb:30:88:88:9f:05:
                    99:5c:b2:39:ae:fe:84:44:98:45:f5:4f:08:5f:00:
                    4a:d8:17:02:e5:c0:f9:8c:69:47:ef:a8:e0:d9:1e:
                    69:b4:ff:a3:02:90:3a:a6:57:8f:db:3e:75:7c:6b:
                    a4:4c:43:7d:c5:8c:a3:b0:b9:dc:4d:15:c8:8b:2c:
                    4f:22:25:2a:84:7f:1a:c0:ca:25:6f:6f:f3:40:cc:
                    2a:8f:73:e1:ae:b3:81:a0:9e:00:06:c9:c9:15:b0:
                    44:b5:34:d7:cc:b7:b0:b0:7f:ab:e6:c1:71:6f:1d:
                    59:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:C9:7A:37:38:C1:37:D2:71:EA:D4:3E:F0:19:E5:8E:0C:7A:96:4C
            X509v3 Authority Key Identifier:
                keyid:DA:DA:4A:C5:F0:53:1D:7E:76:BB:66:5A:B3:FC:5A:86:BE:15:E3:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Hmi7PRGu5nBm5y4tSzdwsJnfsc6NkxrcGu6LtxeSXxo5/0/DADA4AC5F0531D7E76BB665AB3FC5A86BE15E341.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DADA4AC5F0531D7E76BB665AB3FC5A86BE15E341.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Hmi7PRGu5nBm5y4tSzdwsJnfsc6NkxrcGu6LtxeSXxo5/0/3137372e36372e3231362e302f32322d3232203d3e203532363739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.67.216.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2b:fb:07:2a:b3:6e:f1:a0:6f:2b:24:55:9a:15:86:f2:fb:17:
         46:92:94:6b:9e:7c:95:4c:2c:05:5f:5d:bb:7e:97:92:25:0b:
         95:72:19:17:53:88:75:4e:cc:1e:71:e7:62:bf:16:98:b2:95:
         f5:8f:ce:5b:11:1c:17:ee:d7:e0:d3:75:2f:6a:b5:4c:06:5a:
         3f:48:84:32:6f:a8:4c:60:9b:5d:f0:72:a9:7d:80:f9:26:1e:
         ad:90:04:67:80:da:7b:6b:87:2e:79:69:54:2c:2e:8f:c1:06:
         80:4d:68:8c:31:82:a7:50:94:99:0b:1f:4b:7f:c5:64:91:d0:
         52:49:e2:92:69:6f:ee:17:c6:4e:62:ac:5c:fe:b9:43:42:60:
         45:47:c9:0d:1d:05:f4:99:10:d3:49:48:e0:bb:72:2d:00:65:
         3e:84:bd:8a:68:4c:92:90:24:06:3f:c5:5a:bd:8d:72:c7:de:
         de:3f:2d:d0:ea:ac:41:af:8f:cb:0c:27:4d:8f:64:fa:da:35:
         5c:b3:02:c4:e6:cf:ed:62:5d:78:5a:a0:31:58:26:09:02:d0:
         4e:88:50:11:ee:c5:ea:61:96:50:8e:b5:2c:06:d6:5d:72:82:
         0a:78:db:ff:8b:84:5d:91:bc:ce:ce:b0:b4:c4:04:88:1c:24:
         8c:15:76:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 15:16:20 2025 by rpki-client