Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Hmi7PRGu5nBm5y4tSzdwsJnfsc6NkxrcGu6LtxeSXxo5/0/3137372e36372e3232302e302f32332d3233203d3e203532363739.roa
File:                     3137372e36372e3232302e302f32332d3233203d3e203532363739.roa (raw, json)
Hash identifier:          UOQW/h4ST+oOMRJIGAgeVtnpBGnLxgrIIyaQdi/Ymx8=
Subject key identifier:   FA:54:9E:07:01:BC:4C:E6:16:E5:B2:A8:F4:97:6A:E2:75:D6:E1:42
Certificate issuer:       /CN=DADA4AC5F0531D7E76BB665AB3FC5A86BE15E341
Certificate serial:       6BDD29DB0906A663A886734879E9C319BC5AC8AB
Authority key identifier: DA:DA:4A:C5:F0:53:1D:7E:76:BB:66:5A:B3:FC:5A:86:BE:15:E3:41
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DADA4AC5F0531D7E76BB665AB3FC5A86BE15E341.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Hmi7PRGu5nBm5y4tSzdwsJnfsc6NkxrcGu6LtxeSXxo5/0/3137372e36372e3232302e302f32332d3233203d3e203532363739.roa
Signing time:             Tue 22 Aug 2023 15:32:36 +0000
ROA not before:           Tue 22 Aug 2023 15:27:36 +0000
ROA not after:            Tue 20 Aug 2024 15:32:36 +0000
asID:                     52679
IP address blocks:        177.67.220.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:dd:29:db:09:06:a6:63:a8:86:73:48:79:e9:c3:19:bc:5a:c8:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DADA4AC5F0531D7E76BB665AB3FC5A86BE15E341
        Validity
            Not Before: Aug 22 15:27:36 2023 GMT
            Not After : Aug 20 15:32:36 2024 GMT
        Subject: CN=FA549E0701BC4CE616E5B2A8F4976AE275D6E142
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:9c:94:70:d4:e2:04:f4:6b:a3:d0:6d:71:44:
                    fb:a7:4e:54:b6:d3:de:46:f0:c3:ed:f8:4b:1b:9a:
                    cf:d6:f0:a6:83:81:30:41:74:34:b3:9f:ec:91:b3:
                    cf:47:99:0b:df:2a:7b:ac:80:0d:0e:22:0a:c6:ad:
                    e6:e5:af:8e:42:04:05:b0:ff:96:12:33:20:03:a7:
                    4e:13:50:91:c7:79:a1:8d:a3:30:0c:13:23:3f:85:
                    dd:72:e0:f6:d8:c6:e8:a1:f1:58:69:1e:4d:de:b8:
                    4b:76:b9:cd:e4:c9:f3:64:b9:95:5c:fa:0a:4c:75:
                    a7:20:4b:65:6f:e2:f8:00:74:f9:05:f7:c2:18:94:
                    74:46:ae:af:bf:7e:3a:c9:c3:a4:03:01:41:93:98:
                    1f:b9:b6:52:7b:c3:3f:61:94:1a:5b:39:43:6c:32:
                    bd:55:56:d7:8c:a2:2f:02:1f:08:79:2b:55:1b:2a:
                    a3:16:0f:b6:d1:4f:2a:c3:eb:2d:a8:1b:20:a3:47:
                    57:fb:a8:48:59:e9:06:6a:62:ed:f9:b9:be:13:19:
                    0e:aa:72:31:96:37:a0:c3:04:13:3c:18:aa:90:e8:
                    60:b1:7e:57:e3:85:f1:50:da:ab:ec:9c:82:a9:9c:
                    54:3f:ab:21:8d:cb:fc:2d:2e:9e:df:14:9c:83:f9:
                    84:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:54:9E:07:01:BC:4C:E6:16:E5:B2:A8:F4:97:6A:E2:75:D6:E1:42
            X509v3 Authority Key Identifier:
                keyid:DA:DA:4A:C5:F0:53:1D:7E:76:BB:66:5A:B3:FC:5A:86:BE:15:E3:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Hmi7PRGu5nBm5y4tSzdwsJnfsc6NkxrcGu6LtxeSXxo5/0/DADA4AC5F0531D7E76BB665AB3FC5A86BE15E341.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DADA4AC5F0531D7E76BB665AB3FC5A86BE15E341.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Hmi7PRGu5nBm5y4tSzdwsJnfsc6NkxrcGu6LtxeSXxo5/0/3137372e36372e3232302e302f32332d3233203d3e203532363739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.67.220.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4d:d9:af:1d:d1:d8:d1:97:4e:db:f9:34:3e:79:9a:00:e8:71:
         15:da:a2:a3:a9:4c:1b:a7:8f:f4:1a:32:fb:2f:8b:ce:c1:aa:
         12:9c:b5:4b:80:a2:19:a6:58:fd:06:48:2e:0f:7f:95:1c:e4:
         26:e3:3b:26:f2:e6:9a:db:5c:7b:74:c0:67:9d:75:f7:34:03:
         f7:b3:b0:cb:1d:61:47:fe:0b:f1:c5:34:80:69:d8:bc:6c:77:
         26:f0:9d:e6:1a:de:8a:e0:88:6d:41:bd:d0:2d:12:7a:93:ea:
         00:7e:f2:5e:31:46:0d:20:c9:dc:e9:fb:51:ea:18:b2:22:48:
         76:3b:96:96:81:c0:0b:7b:12:20:b7:97:4d:3a:dd:a8:27:00:
         ad:4c:5c:7b:a3:d9:29:a2:14:a1:4c:07:36:1d:6e:c6:31:f9:
         b8:ab:b3:19:a5:9d:e5:64:cb:65:23:df:7a:51:ae:b2:89:ba:
         0d:bc:15:c3:ca:e7:69:36:5e:e7:bf:5c:83:0c:f5:d2:fd:04:
         64:50:30:0b:d2:1e:f9:f6:eb:47:fe:5c:30:ea:9c:2b:c8:91:
         76:b8:c3:0d:a3:0d:43:63:a3:cc:81:ed:5a:c4:a6:d5:43:0e:
         a6:3c:2d:89:f8:88:55:32:7b:1c:41:c6:67:06:7f:55:ec:4b:
         ab:89:3c:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:38:53 2025 by rpki-client