Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HXniMnv8y9EmJCjx2uu9BWC91L6TdynFHG8UgNZow7aZ/0/3137372e34362e302e302f31372d3138203d3e203238313335.roa
File:                     3137372e34362e302e302f31372d3138203d3e203238313335.roa (raw, json)
Hash identifier:          VqgsdRDF9pqVrgZSHa79rh04ndSnbPPxEwU/4PLYcqo=
Subject key identifier:   58:97:51:F4:6C:5D:3F:78:C1:51:0C:61:23:E1:1D:81:81:99:A9:55
Certificate issuer:       /CN=106C0018EAEC97B226036E9F42E3D4795FCBC714
Certificate serial:       1DF2D7E2D0A9D0DA3A0ED992C010D60507A5A650
Authority key identifier: 10:6C:00:18:EA:EC:97:B2:26:03:6E:9F:42:E3:D4:79:5F:CB:C7:14
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/106C0018EAEC97B226036E9F42E3D4795FCBC714.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HXniMnv8y9EmJCjx2uu9BWC91L6TdynFHG8UgNZow7aZ/0/3137372e34362e302e302f31372d3138203d3e203238313335.roa
Signing time:             Wed 12 Apr 2023 11:06:19 +0000
ROA not before:           Wed 12 Apr 2023 11:01:19 +0000
ROA not after:            Wed 10 Apr 2024 11:06:19 +0000
asID:                     28135
IP address blocks:        177.46.0.0/17 maxlen: 18
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:f2:d7:e2:d0:a9:d0:da:3a:0e:d9:92:c0:10:d6:05:07:a5:a6:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=106C0018EAEC97B226036E9F42E3D4795FCBC714
        Validity
            Not Before: Apr 12 11:01:19 2023 GMT
            Not After : Apr 10 11:06:19 2024 GMT
        Subject: CN=589751F46C5D3F78C1510C6123E11D818199A955
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:ca:39:6e:3f:40:c8:83:cf:30:54:ed:15:9a:
                    21:08:4c:ce:a2:98:8c:65:53:34:31:c4:88:b1:9d:
                    a9:66:a7:aa:fe:72:19:03:83:af:1c:38:9a:8c:26:
                    07:aa:39:92:7c:57:44:74:44:22:58:11:0c:89:8f:
                    55:60:1f:8c:ec:b4:d7:ce:3b:17:b5:87:3b:23:0f:
                    b3:dd:69:9c:89:3e:af:9e:10:b9:08:a1:15:d0:c4:
                    09:58:31:4b:c5:31:00:4a:22:b9:0e:ac:ae:8b:18:
                    48:3b:d3:63:88:fd:b0:02:f0:1e:f0:0b:3e:07:46:
                    e8:a0:4f:aa:53:39:30:d5:12:c0:c8:c4:d5:60:4c:
                    4c:7b:a2:ea:dd:7d:d7:30:5b:94:20:01:b1:1c:b4:
                    94:32:8b:a2:56:06:c1:79:ee:e4:02:df:f0:02:59:
                    3c:1e:f3:c7:66:ee:46:4d:0d:af:42:a9:56:3f:55:
                    e7:81:84:ac:e9:dc:df:b6:91:60:aa:02:96:88:4f:
                    58:f8:e9:05:ff:40:7d:d3:fa:6e:09:ad:f9:9a:93:
                    37:e5:1f:40:9b:38:e2:72:3e:ad:2a:a0:8d:3d:2e:
                    ac:92:ae:21:08:c0:6c:73:31:4b:23:71:78:d2:70:
                    11:f0:54:47:2c:4a:f0:76:47:c2:7e:ce:fe:20:4a:
                    72:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:97:51:F4:6C:5D:3F:78:C1:51:0C:61:23:E1:1D:81:81:99:A9:55
            X509v3 Authority Key Identifier:
                keyid:10:6C:00:18:EA:EC:97:B2:26:03:6E:9F:42:E3:D4:79:5F:CB:C7:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HXniMnv8y9EmJCjx2uu9BWC91L6TdynFHG8UgNZow7aZ/0/106C0018EAEC97B226036E9F42E3D4795FCBC714.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/106C0018EAEC97B226036E9F42E3D4795FCBC714.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HXniMnv8y9EmJCjx2uu9BWC91L6TdynFHG8UgNZow7aZ/0/3137372e34362e302e302f31372d3138203d3e203238313335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.46.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         79:43:70:0f:9e:69:8a:bc:d0:67:b3:40:19:42:f5:19:75:54:
         6b:b3:7d:17:e4:f1:e1:2f:5d:ea:5a:11:76:57:e9:83:36:99:
         9d:20:fa:4d:c1:31:7e:15:15:6e:9f:11:70:a2:9e:05:99:16:
         3b:68:40:45:60:59:77:14:1c:9f:1a:f6:6d:20:b7:65:d6:7a:
         b8:a8:8a:bc:3c:fb:45:6a:18:09:ac:c7:ed:57:15:f2:7f:c2:
         13:69:65:f7:d3:5a:9c:a8:f8:69:ec:fd:20:88:85:0c:88:be:
         b5:f1:b3:41:a1:63:2a:72:a7:07:1b:51:bf:3a:48:0d:ae:66:
         3f:8b:5e:71:5c:bc:1a:ae:de:54:ae:ee:38:25:6a:b5:f5:7c:
         bb:d1:2d:36:60:28:74:95:93:c7:e2:d6:d1:96:7c:99:59:9c:
         ec:81:71:a6:4b:b7:c2:e3:67:06:d7:40:35:f0:88:22:f6:a9:
         52:74:66:a3:fe:a5:ed:b7:71:ad:ac:11:2e:52:01:db:bf:1c:
         ec:3d:45:17:2e:25:25:34:0c:5f:86:65:2a:7e:48:3c:75:1a:
         24:55:0c:14:a2:54:85:9a:38:99:74:88:08:22:d5:d1:1f:b5:
         da:35:16:0d:d7:79:4a:6d:82:c9:d7:36:28:1f:2b:7a:60:49:
         59:9d:cd:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 22 08:46:17 2025 by rpki-client