Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Hmi7PRGu5nBm5y4tSzdwsJnfsc6NkxrcGu6LtxeSXxo5/0/3137372e36372e3231392e302f32342d3234203d3e203532363739.roa
File:                     3137372e36372e3231392e302f32342d3234203d3e203532363739.roa (raw, json)
Hash identifier:          UhZyz+IgyySJDxnvAhWYGov5GumixhtwtYbL8hXo+Rg=
Subject key identifier:   DB:D8:0A:56:C8:1C:00:00:68:7B:0B:4E:9E:3C:74:91:9E:A3:35:59
Certificate issuer:       /CN=DADA4AC5F0531D7E76BB665AB3FC5A86BE15E341
Certificate serial:       04F018E041BD8FA6DC6DFEE0C8D7CF4EEC524EB0
Authority key identifier: DA:DA:4A:C5:F0:53:1D:7E:76:BB:66:5A:B3:FC:5A:86:BE:15:E3:41
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DADA4AC5F0531D7E76BB665AB3FC5A86BE15E341.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Hmi7PRGu5nBm5y4tSzdwsJnfsc6NkxrcGu6LtxeSXxo5/0/3137372e36372e3231392e302f32342d3234203d3e203532363739.roa
Signing time:             Tue 22 Aug 2023 15:32:58 +0000
ROA not before:           Tue 22 Aug 2023 15:27:58 +0000
ROA not after:            Tue 20 Aug 2024 15:32:58 +0000
asID:                     52679
IP address blocks:        177.67.219.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:f0:18:e0:41:bd:8f:a6:dc:6d:fe:e0:c8:d7:cf:4e:ec:52:4e:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DADA4AC5F0531D7E76BB665AB3FC5A86BE15E341
        Validity
            Not Before: Aug 22 15:27:58 2023 GMT
            Not After : Aug 20 15:32:58 2024 GMT
        Subject: CN=DBD80A56C81C0000687B0B4E9E3C74919EA33559
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:06:a6:7a:b3:30:e0:6b:b8:55:0c:5b:76:e1:
                    e0:c7:e5:b9:96:08:7e:d5:a6:94:b6:fd:ee:6d:aa:
                    75:cf:7d:d7:54:e4:62:bc:59:b2:a6:30:5f:f6:60:
                    3e:71:4c:fd:49:2c:c6:42:df:96:2f:12:b9:4f:1e:
                    f1:31:82:58:0d:65:d3:fb:8f:4f:fd:e8:af:2b:6a:
                    e5:00:69:1a:b2:0f:bd:46:9c:48:ff:58:1d:0b:1c:
                    4f:80:1d:1b:7a:2c:2f:f9:ef:b4:ad:85:3e:86:17:
                    7a:c3:c7:e8:88:30:6d:72:43:81:2e:fc:3b:1e:25:
                    e7:74:7a:bf:79:48:77:53:78:d9:1d:bb:0f:a0:9b:
                    43:62:ed:90:47:b6:7e:5f:52:5f:73:c8:ed:78:17:
                    a7:13:cc:d8:9c:01:e7:79:0a:08:ae:21:07:71:d1:
                    d5:3f:2c:60:a3:fd:46:ce:0b:11:90:9a:48:b6:4c:
                    4b:b2:ac:28:95:a5:60:43:34:32:61:b3:2d:fc:98:
                    4f:72:9e:c4:7c:34:8d:de:3f:4d:5f:75:31:f6:50:
                    3f:4d:55:51:6f:8d:82:b7:5a:7d:c5:8b:e6:ab:32:
                    1f:94:ef:b9:97:19:b1:34:4c:f1:05:a5:56:fb:22:
                    70:71:36:a1:85:dc:50:0f:2c:bd:67:04:2c:f9:da:
                    f4:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:D8:0A:56:C8:1C:00:00:68:7B:0B:4E:9E:3C:74:91:9E:A3:35:59
            X509v3 Authority Key Identifier:
                keyid:DA:DA:4A:C5:F0:53:1D:7E:76:BB:66:5A:B3:FC:5A:86:BE:15:E3:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Hmi7PRGu5nBm5y4tSzdwsJnfsc6NkxrcGu6LtxeSXxo5/0/DADA4AC5F0531D7E76BB665AB3FC5A86BE15E341.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DADA4AC5F0531D7E76BB665AB3FC5A86BE15E341.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Hmi7PRGu5nBm5y4tSzdwsJnfsc6NkxrcGu6LtxeSXxo5/0/3137372e36372e3231392e302f32342d3234203d3e203532363739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.67.219.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5c:b6:56:d6:41:60:78:e3:c7:54:7c:83:02:54:dd:f1:62:e3:
         62:42:45:54:d0:e4:a9:96:a1:aa:24:c1:1c:25:99:dd:f4:85:
         a6:f5:17:28:f2:de:6e:0a:b9:8e:a2:68:73:5d:e3:80:c9:a1:
         f3:54:0e:b6:02:4a:20:1b:3e:db:fc:34:b3:76:58:db:61:12:
         d3:86:ad:6c:dc:fa:4a:32:37:51:3f:a7:7f:d9:ec:bb:00:a7:
         6c:83:a7:60:06:f2:a3:35:d7:67:28:43:0b:e5:94:c4:e2:35:
         cd:4e:18:85:89:a9:e2:19:47:68:b8:c3:01:f8:13:24:2c:56:
         04:54:ec:fc:5c:d2:84:c8:b7:ec:0d:f3:1e:2a:e4:18:f5:8a:
         c4:46:4c:23:05:44:14:7c:64:21:58:6a:6e:db:51:99:3e:3c:
         b3:53:24:be:23:37:42:ca:9e:16:67:0d:65:cf:73:a0:27:e2:
         7f:b2:26:73:46:0a:73:3e:bf:e7:14:69:2a:5e:2c:a2:54:4d:
         1b:e4:34:76:97:f2:3e:c0:63:40:b1:34:8c:51:b2:37:17:7e:
         3e:95:51:c7:19:4b:7d:2d:82:73:27:9d:35:5a:0f:2c:43:ac:
         2a:77:14:3e:c9:85:ca:ab:5b:f9:41:f0:4a:82:99:be:55:d5:
         a3:e6:f0:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:29:25 2025 by rpki-client