Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Hmi7PRGu5nBm5y4tSzdwsJnfsc6NkxrcGu6LtxeSXxo5/0/3137372e36372e3232322e302f32342d3234203d3e203532363739.roa
File:                     3137372e36372e3232322e302f32342d3234203d3e203532363739.roa (raw, json)
Hash identifier:          bDWWQOuJD8AN/nJheOWLz+guQhnL3XutoXAYeXBcH+I=
Subject key identifier:   FD:CE:79:F6:C7:F4:18:DA:F4:60:BC:A8:48:75:C5:1E:9B:67:64:9C
Certificate issuer:       /CN=DADA4AC5F0531D7E76BB665AB3FC5A86BE15E341
Certificate serial:       544D8BE4BAEE332F1E13A1CE1D53717AC04E13CD
Authority key identifier: DA:DA:4A:C5:F0:53:1D:7E:76:BB:66:5A:B3:FC:5A:86:BE:15:E3:41
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DADA4AC5F0531D7E76BB665AB3FC5A86BE15E341.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Hmi7PRGu5nBm5y4tSzdwsJnfsc6NkxrcGu6LtxeSXxo5/0/3137372e36372e3232322e302f32342d3234203d3e203532363739.roa
Signing time:             Tue 22 Aug 2023 15:33:10 +0000
ROA not before:           Tue 22 Aug 2023 15:28:10 +0000
ROA not after:            Tue 20 Aug 2024 15:33:10 +0000
asID:                     52679
IP address blocks:        177.67.222.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:4d:8b:e4:ba:ee:33:2f:1e:13:a1:ce:1d:53:71:7a:c0:4e:13:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DADA4AC5F0531D7E76BB665AB3FC5A86BE15E341
        Validity
            Not Before: Aug 22 15:28:10 2023 GMT
            Not After : Aug 20 15:33:10 2024 GMT
        Subject: CN=FDCE79F6C7F418DAF460BCA84875C51E9B67649C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:be:42:8b:51:dc:b8:64:25:19:05:89:74:c0:
                    d8:c2:9c:d0:db:50:a7:e2:7a:2c:4b:27:34:1c:52:
                    f3:8e:e2:8f:ff:17:5e:db:21:d2:de:53:18:63:25:
                    77:66:f8:4a:78:c9:ad:09:e1:69:fc:97:8e:b4:13:
                    c6:9b:1b:94:93:2f:53:86:28:e6:d2:a3:ea:42:13:
                    a7:4f:3b:f5:63:c9:49:76:fe:20:30:d1:1b:b7:52:
                    9d:92:96:84:bb:bc:d0:6b:d6:76:3f:ca:93:4a:41:
                    d1:62:33:dc:3a:00:63:f3:9d:15:61:26:0b:1a:5e:
                    dc:6b:de:db:64:9a:93:40:bd:b6:bc:37:68:da:50:
                    66:41:3a:09:c4:ec:cb:ef:41:97:bf:37:47:1d:19:
                    0f:9b:b3:b1:b3:6c:ca:51:df:2a:04:6b:3e:d1:b7:
                    7c:64:ad:ce:67:52:e0:f3:03:b0:c4:6c:61:fd:72:
                    fa:5b:0f:ac:05:74:5b:02:01:42:b8:15:49:d8:8f:
                    70:d2:2f:4a:da:17:1c:80:0b:df:08:4d:b0:6e:48:
                    88:e2:25:d2:bd:96:ca:0d:2f:b8:89:fb:79:69:56:
                    7d:9a:2a:2e:91:d0:38:6e:c2:3d:b6:58:e8:c1:84:
                    48:19:ed:8d:9f:f6:74:eb:f8:1b:bd:c8:f4:41:83:
                    43:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:CE:79:F6:C7:F4:18:DA:F4:60:BC:A8:48:75:C5:1E:9B:67:64:9C
            X509v3 Authority Key Identifier:
                keyid:DA:DA:4A:C5:F0:53:1D:7E:76:BB:66:5A:B3:FC:5A:86:BE:15:E3:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Hmi7PRGu5nBm5y4tSzdwsJnfsc6NkxrcGu6LtxeSXxo5/0/DADA4AC5F0531D7E76BB665AB3FC5A86BE15E341.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DADA4AC5F0531D7E76BB665AB3FC5A86BE15E341.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Hmi7PRGu5nBm5y4tSzdwsJnfsc6NkxrcGu6LtxeSXxo5/0/3137372e36372e3232322e302f32342d3234203d3e203532363739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.67.222.0/24

    Signature Algorithm: sha256WithRSAEncryption
         af:eb:ca:68:66:33:4e:1a:a0:f6:fd:06:90:e6:73:e3:c9:13:
         a6:16:9a:f3:a7:9d:51:30:ef:ea:ed:8d:6d:a3:6c:ec:8e:17:
         48:e8:a5:97:a4:59:bc:db:c1:65:81:b3:8a:a9:fb:46:f3:cc:
         bd:3a:45:0d:43:53:fe:e1:23:b0:63:82:1f:3e:a5:5c:16:17:
         2a:0d:d6:a6:3c:2b:50:4e:47:7e:f6:9b:97:7b:39:0f:66:fb:
         e8:b8:a6:fd:a9:cc:7e:b4:f0:27:7c:62:3a:6e:18:b7:98:64:
         92:c9:1d:15:a2:d6:0c:b1:3f:48:7b:41:b9:c8:44:04:c6:57:
         23:36:6b:d0:62:b4:bd:aa:81:36:92:01:dd:26:a4:60:ff:96:
         e7:b6:c8:fe:7d:fa:93:49:e6:1d:99:24:20:40:aa:e3:8f:d7:
         8c:e6:ac:60:d1:df:29:7e:2f:ef:97:82:bd:b7:02:32:2e:62:
         66:26:3d:1a:f9:35:34:ed:10:26:99:25:e3:f8:15:b4:aa:25:
         c9:4a:99:7b:85:fc:0a:8b:26:03:ff:5d:09:3a:40:ca:a1:6b:
         62:e0:b8:64:3a:92:0f:ad:03:ba:35:f6:5c:ac:d8:ed:ce:9a:
         56:81:85:e3:07:17:b4:a3:58:f0:14:4d:63:9d:0e:19:c6:65:
         a5:cb:5f:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 01:21:32 2025 by rpki-client