Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/dzWiTAiUb9G52z73jHFc7eSGrHoyWbqzkivTEwrMn39/0/3137372e37322e362e302f32332d3233203d3e20323632353337.roa
File:                     3137372e37322e362e302f32332d3233203d3e20323632353337.roa (raw, json)
Hash identifier:          gFTBlCmqalofjHVvD39BDWB+IjgG5ehE688ARXwUMxE=
Subject key identifier:   8A:D1:A8:A9:BC:A4:72:FD:00:19:89:4C:1A:65:40:D8:00:3D:86:13
Certificate issuer:       /CN=2E8490418D7254F06B90EC2FC14B1102C4A069AD
Certificate serial:       49D0C9CBA643EC0404DEB39AE45F5A1E711AB251
Authority key identifier: 2E:84:90:41:8D:72:54:F0:6B:90:EC:2F:C1:4B:11:02:C4:A0:69:AD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2E8490418D7254F06B90EC2FC14B1102C4A069AD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/dzWiTAiUb9G52z73jHFc7eSGrHoyWbqzkivTEwrMn39/0/3137372e37322e362e302f32332d3233203d3e20323632353337.roa
Signing time:             Fri 06 Oct 2023 18:52:39 +0000
ROA not before:           Fri 06 Oct 2023 18:47:39 +0000
ROA not after:            Fri 04 Oct 2024 18:52:39 +0000
asID:                     262537
IP address blocks:        177.72.6.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:d0:c9:cb:a6:43:ec:04:04:de:b3:9a:e4:5f:5a:1e:71:1a:b2:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2E8490418D7254F06B90EC2FC14B1102C4A069AD
        Validity
            Not Before: Oct  6 18:47:39 2023 GMT
            Not After : Oct  4 18:52:39 2024 GMT
        Subject: CN=8AD1A8A9BCA472FD0019894C1A6540D8003D8613
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:25:01:f9:e0:9d:f6:c7:40:80:e2:c1:ed:59:
                    ae:a2:ba:75:a8:b5:6e:54:36:d8:d1:d6:76:4d:74:
                    0a:aa:02:62:aa:a7:bf:56:bb:d3:f6:86:dc:87:a4:
                    e2:e4:f4:1b:30:eb:4d:db:04:08:81:b4:68:0a:90:
                    c2:b9:32:3d:53:9c:30:35:7a:9b:4b:d2:13:d1:4e:
                    69:a6:bd:91:83:0f:db:14:f5:2f:f4:60:3c:88:17:
                    6b:44:e7:e9:45:66:72:3f:4b:7e:c2:96:4f:aa:dd:
                    c6:4f:77:1a:cd:84:15:95:8a:5f:86:f1:18:ff:83:
                    28:f2:b8:87:b6:ad:6b:66:b3:0b:67:84:30:cd:d5:
                    22:ae:a6:6b:25:a5:4d:25:9b:94:de:2a:9f:51:1f:
                    62:47:44:1f:6b:92:9e:c2:96:ca:f2:f2:4b:2f:1a:
                    b5:89:cb:46:cc:93:84:71:cc:a3:8e:18:a1:ae:d7:
                    8d:bb:08:81:0b:85:06:e1:d2:46:7c:64:84:5e:06:
                    eb:03:f1:a6:70:d5:7b:a7:be:1a:2e:7e:e3:f6:49:
                    d1:17:ee:b3:15:9a:03:0a:43:59:87:eb:54:c3:4d:
                    90:52:8f:f6:70:05:3a:94:43:e3:4e:1d:25:15:3f:
                    b4:00:6d:2f:bc:6f:be:c1:a8:6c:97:99:a1:28:88:
                    f8:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:D1:A8:A9:BC:A4:72:FD:00:19:89:4C:1A:65:40:D8:00:3D:86:13
            X509v3 Authority Key Identifier:
                keyid:2E:84:90:41:8D:72:54:F0:6B:90:EC:2F:C1:4B:11:02:C4:A0:69:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/dzWiTAiUb9G52z73jHFc7eSGrHoyWbqzkivTEwrMn39/0/2E8490418D7254F06B90EC2FC14B1102C4A069AD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2E8490418D7254F06B90EC2FC14B1102C4A069AD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/dzWiTAiUb9G52z73jHFc7eSGrHoyWbqzkivTEwrMn39/0/3137372e37322e362e302f32332d3233203d3e20323632353337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.72.6.0/23

    Signature Algorithm: sha256WithRSAEncryption
         58:6b:e3:f7:77:0d:7f:bf:52:12:d0:c2:2e:4e:88:dc:e7:53:
         80:8c:ad:c9:4c:99:d9:b0:9d:7e:60:76:a1:cf:f6:76:82:c3:
         d5:65:45:9e:01:c2:4c:5a:59:45:b7:3b:25:fe:8d:7d:2e:cd:
         9d:63:16:35:45:c6:f0:b2:91:52:f0:ba:ce:0b:a5:9b:bb:a1:
         2e:53:61:8c:57:92:60:f8:c1:c2:2f:62:9a:aa:a9:a0:b4:e3:
         48:f5:51:5a:a3:73:ed:2c:d3:f8:67:10:f7:d0:ce:a0:d7:67:
         ed:fd:3b:ce:42:95:a5:79:05:7f:6b:5b:84:d0:22:ed:c5:32:
         28:ee:32:ca:e3:c5:a1:6f:20:fc:ed:98:ce:bf:bd:5b:21:89:
         a2:b9:a4:36:51:fd:7a:fd:a8:32:74:97:0e:65:de:be:f9:ac:
         85:5f:d0:cd:bd:da:8c:97:8f:88:4e:4a:40:43:9b:cd:fe:0f:
         ae:a3:ea:d4:e5:a1:38:70:95:53:2a:16:a3:f7:a9:a6:9f:7f:
         da:cc:76:11:10:15:2d:ed:0d:c6:6a:ff:97:e1:5c:f5:26:ed:
         bb:48:78:53:d6:ae:e2:a8:54:e3:07:4f:1b:7d:a1:9b:67:85:
         b9:c3:83:32:e4:fe:ea:9a:91:1d:ba:f0:f1:08:88:ab:d8:d0:
         32:29:24:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:41:07 2025 by rpki-client