Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/dzWiTAiUb9G52z73jHFc7eSGrHoyWbqzkivTEwrMn39/0/3137372e37322e322e302f32332d3233203d3e20323632353337.roa
File:                     3137372e37322e322e302f32332d3233203d3e20323632353337.roa (raw, json)
Hash identifier:          AhkZtIVla4bKlYAKxh2KvD5N6lhhsGbS7HK46Ev7WOc=
Subject key identifier:   18:9C:72:79:B1:1A:E8:7B:18:AC:26:C7:7A:3E:E7:D5:F3:87:B9:7E
Certificate issuer:       /CN=2E8490418D7254F06B90EC2FC14B1102C4A069AD
Certificate serial:       7A21D72A4B4784C2B90EDE5853C17374594C4B54
Authority key identifier: 2E:84:90:41:8D:72:54:F0:6B:90:EC:2F:C1:4B:11:02:C4:A0:69:AD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2E8490418D7254F06B90EC2FC14B1102C4A069AD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/dzWiTAiUb9G52z73jHFc7eSGrHoyWbqzkivTEwrMn39/0/3137372e37322e322e302f32332d3233203d3e20323632353337.roa
Signing time:             Fri 06 Oct 2023 18:52:38 +0000
ROA not before:           Fri 06 Oct 2023 18:47:38 +0000
ROA not after:            Fri 04 Oct 2024 18:52:38 +0000
asID:                     262537
IP address blocks:        177.72.2.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:21:d7:2a:4b:47:84:c2:b9:0e:de:58:53:c1:73:74:59:4c:4b:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2E8490418D7254F06B90EC2FC14B1102C4A069AD
        Validity
            Not Before: Oct  6 18:47:38 2023 GMT
            Not After : Oct  4 18:52:38 2024 GMT
        Subject: CN=189C7279B11AE87B18AC26C77A3EE7D5F387B97E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:34:b7:f8:26:44:fe:84:14:a1:d1:16:ec:5b:
                    ad:4d:a5:3e:72:e7:f5:24:f6:8f:be:fa:af:78:ae:
                    58:4d:be:85:9b:71:5a:2f:86:22:4b:0f:44:29:86:
                    12:90:ee:45:90:1e:84:1d:de:1c:9a:c4:4b:d7:0c:
                    1e:b1:0c:ce:cc:01:7b:4b:b4:a0:c0:2c:50:4c:27:
                    d6:27:d9:e1:1c:ab:a9:60:0a:eb:e8:fb:f7:2d:d4:
                    5b:7c:43:90:1a:20:4b:e3:6e:80:3d:af:d6:b3:54:
                    a4:6e:5a:5d:3c:73:df:0a:2d:72:7a:40:88:cd:be:
                    42:6c:62:00:ee:4c:92:ed:20:06:dd:17:63:63:02:
                    8e:ae:8b:fc:3b:01:96:f9:a5:10:02:7d:21:c0:91:
                    66:5b:33:3d:6b:d8:9a:c9:2a:a2:24:8e:d5:52:f1:
                    c2:40:97:24:25:07:40:f0:a2:d7:38:80:ca:52:78:
                    a7:a5:19:21:d0:9b:99:52:19:d1:47:ae:f2:08:f7:
                    61:a8:16:35:61:46:74:78:d1:35:9c:b5:bd:00:74:
                    1e:8f:80:9c:f1:8f:5c:a5:46:61:30:99:c6:ec:46:
                    c2:18:46:ed:e6:b9:58:8f:3b:b2:02:12:3c:39:33:
                    9b:e3:fc:f9:78:43:37:90:49:db:fb:38:03:fa:bd:
                    cf:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:9C:72:79:B1:1A:E8:7B:18:AC:26:C7:7A:3E:E7:D5:F3:87:B9:7E
            X509v3 Authority Key Identifier:
                keyid:2E:84:90:41:8D:72:54:F0:6B:90:EC:2F:C1:4B:11:02:C4:A0:69:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/dzWiTAiUb9G52z73jHFc7eSGrHoyWbqzkivTEwrMn39/0/2E8490418D7254F06B90EC2FC14B1102C4A069AD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2E8490418D7254F06B90EC2FC14B1102C4A069AD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/dzWiTAiUb9G52z73jHFc7eSGrHoyWbqzkivTEwrMn39/0/3137372e37322e322e302f32332d3233203d3e20323632353337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.72.2.0/23

    Signature Algorithm: sha256WithRSAEncryption
         60:a1:be:65:54:91:87:8c:a5:59:0c:58:96:e8:78:bd:1c:4a:
         70:89:93:ef:09:26:c2:62:53:1d:00:a3:c2:3a:fb:0d:d8:2b:
         e8:10:6b:cd:c3:36:90:75:93:fa:eb:4d:b9:cc:82:f9:fc:d9:
         4b:57:9c:a6:fb:67:f2:fa:af:f2:d1:88:98:e9:a3:6d:8f:68:
         a5:20:ec:de:f1:90:dd:29:8b:18:c6:64:2b:b7:d2:10:f1:e0:
         a3:68:72:45:b5:45:39:6f:f5:c8:e3:b7:bb:86:ef:14:9b:62:
         27:4f:30:2c:29:67:0b:59:e5:23:dd:02:98:89:69:3b:92:09:
         2a:c2:6c:c0:a8:8c:46:e2:8d:7f:4a:fc:4c:4d:55:12:45:7a:
         bc:85:d1:04:6c:ce:09:da:db:e6:eb:09:e1:42:5c:4c:a7:34:
         47:42:da:bc:22:e3:03:ae:82:ea:b4:18:3c:77:1c:ff:26:dd:
         6c:0a:98:5c:2e:96:56:60:a4:4a:9d:29:8e:18:37:46:bd:20:
         0c:f6:cd:8e:b5:1f:ac:75:fa:eb:99:d1:df:5b:f9:7d:67:0c:
         35:b3:a6:d2:e4:22:22:08:f7:fb:ae:f3:fa:9a:e6:a6:45:ab:
         6c:e3:2f:88:32:fc:f4:ca:53:17:37:89:56:26:5b:49:8e:c5:
         9f:86:ba:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:38:17 2025 by rpki-client