Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Wqg2tCrNMSBPy7doFt1BnJ6U2kCtwDKMeyzM5KBLHwk/0/3137392e39372e32382e302f32332d3233203d3e20323633343131.roa
File:                     3137392e39372e32382e302f32332d3233203d3e20323633343131.roa (raw, json)
Hash identifier:          HxpZVL87oa/hJL0qRKsp6Aw4z8DJbRJeF6AHIgrWZLM=
Subject key identifier:   10:23:3F:C5:18:36:54:49:F0:D0:70:58:0D:87:1D:9C:EC:88:1D:CD
Certificate issuer:       /CN=F68C7F0BEF0DB5B575D96CE62D537007F901B942
Certificate serial:       376D7DB26FAF78BEC9D1B6229972843C20155994
Authority key identifier: F6:8C:7F:0B:EF:0D:B5:B5:75:D9:6C:E6:2D:53:70:07:F9:01:B9:42
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F68C7F0BEF0DB5B575D96CE62D537007F901B942.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Wqg2tCrNMSBPy7doFt1BnJ6U2kCtwDKMeyzM5KBLHwk/0/3137392e39372e32382e302f32332d3233203d3e20323633343131.roa
Signing time:             Wed 08 Feb 2023 21:23:33 +0000
ROA not before:           Wed 08 Feb 2023 21:18:33 +0000
ROA not after:            Wed 07 Feb 2024 21:23:33 +0000
asID:                     263411
IP address blocks:        179.97.28.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:6d:7d:b2:6f:af:78:be:c9:d1:b6:22:99:72:84:3c:20:15:59:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F68C7F0BEF0DB5B575D96CE62D537007F901B942
        Validity
            Not Before: Feb  8 21:18:33 2023 GMT
            Not After : Feb  7 21:23:33 2024 GMT
        Subject: CN=10233FC518365449F0D070580D871D9CEC881DCD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:77:64:af:66:12:a1:86:ed:92:dc:48:57:06:
                    dd:a7:ef:79:09:66:a9:c2:46:13:e7:59:69:5c:94:
                    43:d2:8d:61:ca:ac:97:05:f3:c3:02:b2:6f:d8:24:
                    24:3c:e6:75:0e:b1:27:be:3c:d0:13:61:0a:7b:e3:
                    d1:11:e6:2b:80:0d:4d:2c:1b:3c:4e:5a:0f:53:30:
                    19:92:64:5f:07:07:28:ba:18:dc:2c:db:b5:e9:30:
                    a6:7a:f3:95:92:53:27:1d:b6:a5:04:7d:43:b5:5a:
                    8e:f5:c3:91:4c:e8:2f:d7:52:41:d4:51:e8:d0:73:
                    cf:26:0d:1e:3f:21:56:2a:47:d5:68:2a:46:bd:87:
                    62:fd:a5:26:8b:fe:71:63:d3:6a:cf:09:be:f8:41:
                    75:41:12:fa:d2:4c:59:d0:f8:e0:fa:01:12:63:9c:
                    71:ca:a7:18:40:d9:a3:7b:2d:b6:fe:42:8a:7e:e2:
                    b9:51:16:ec:97:5c:b6:aa:16:01:51:f4:f9:2f:e7:
                    13:69:da:80:86:c9:6b:ce:86:8b:bd:95:26:d4:e0:
                    8f:b2:81:f8:e5:0b:ed:f8:b5:a6:bd:ac:62:91:5f:
                    92:2e:13:a3:d1:98:c3:51:97:c2:19:f9:ca:aa:be:
                    0b:de:33:76:67:07:bf:6d:c1:96:f2:99:33:d6:6b:
                    00:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:23:3F:C5:18:36:54:49:F0:D0:70:58:0D:87:1D:9C:EC:88:1D:CD
            X509v3 Authority Key Identifier:
                keyid:F6:8C:7F:0B:EF:0D:B5:B5:75:D9:6C:E6:2D:53:70:07:F9:01:B9:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Wqg2tCrNMSBPy7doFt1BnJ6U2kCtwDKMeyzM5KBLHwk/0/F68C7F0BEF0DB5B575D96CE62D537007F901B942.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F68C7F0BEF0DB5B575D96CE62D537007F901B942.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Wqg2tCrNMSBPy7doFt1BnJ6U2kCtwDKMeyzM5KBLHwk/0/3137392e39372e32382e302f32332d3233203d3e20323633343131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.97.28.0/23

    Signature Algorithm: sha256WithRSAEncryption
         c2:1c:eb:53:ec:01:39:dc:29:7f:4b:f6:ba:3b:14:d4:f2:2c:
         f1:6f:f0:f3:50:7d:3b:0d:ed:28:15:d8:12:f9:53:04:46:f8:
         65:31:d5:ce:0e:cc:48:09:d2:86:1d:9e:2f:87:b4:a7:d6:78:
         cc:7a:4c:68:73:7d:77:85:2b:ab:13:7c:66:e3:61:a3:bd:c9:
         d5:28:31:e1:fc:0d:85:06:b8:67:ec:a7:eb:af:11:aa:1b:eb:
         d4:66:44:f5:53:e8:b2:84:86:24:0e:46:bb:25:f8:c7:00:18:
         3a:2a:63:5b:ed:a4:71:3b:2a:af:b9:53:9a:2b:b8:7e:45:78:
         56:54:00:0a:51:c5:9d:bf:10:7c:88:49:f2:77:de:db:93:98:
         32:e2:9a:cf:8e:49:c1:8f:42:fa:83:57:28:8d:cb:11:f8:4a:
         af:de:93:1b:f4:5f:99:d2:95:50:9c:d3:1d:c6:b5:cc:d0:4e:
         3d:0b:c5:b6:ae:63:81:2c:e5:44:6a:59:ca:e6:15:ff:fe:5b:
         33:7c:48:2c:04:59:51:68:11:0b:a1:3c:e4:e0:fd:dd:e5:e2:
         de:39:26:14:b8:db:e0:f1:0e:c3:7e:4c:09:01:04:1a:05:ff:
         11:c4:46:89:5b:ec:78:96:d8:8a:53:f9:15:75:83:53:71:f5:
         6e:72:a8:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 02:55:27 2025 by rpki-client