Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BaBZKaj3KUWNE1p8fhoyCLspn2X9pwMU7PkS2ciAonPv/1/3137372e36372e342e302f32322d3232203d3e20323632353039.roa
File:                     3137372e36372e342e302f32322d3232203d3e20323632353039.roa (raw, json)
Hash identifier:          g84lwQAKv3T3iGt+t5qCY6S9pMx/Rcg0frcdX56Kamw=
Subject key identifier:   A9:D8:1C:E6:B8:7D:BE:69:16:F1:25:39:96:C2:B7:50:21:79:13:E2
Certificate issuer:       /CN=34CE853537D20533D457CD0EA7BD47D01344C870
Certificate serial:       274CAFC7EA00F4F6DCFB4EE4EFF6899D9B281FA0
Authority key identifier: 34:CE:85:35:37:D2:05:33:D4:57:CD:0E:A7:BD:47:D0:13:44:C8:70
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/34CE853537D20533D457CD0EA7BD47D01344C870.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BaBZKaj3KUWNE1p8fhoyCLspn2X9pwMU7PkS2ciAonPv/1/3137372e36372e342e302f32322d3232203d3e20323632353039.roa
Signing time:             Mon 23 Jan 2023 22:16:18 +0000
ROA not before:           Mon 23 Jan 2023 22:11:18 +0000
ROA not after:            Mon 22 Jan 2024 22:16:18 +0000
asID:                     262509
IP address blocks:        177.67.4.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:4c:af:c7:ea:00:f4:f6:dc:fb:4e:e4:ef:f6:89:9d:9b:28:1f:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34CE853537D20533D457CD0EA7BD47D01344C870
        Validity
            Not Before: Jan 23 22:11:18 2023 GMT
            Not After : Jan 22 22:16:18 2024 GMT
        Subject: CN=A9D81CE6B87DBE6916F1253996C2B750217913E2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:5d:bc:02:c6:66:5f:6a:e3:4f:05:57:31:fc:
                    3d:93:e6:7e:85:a8:e7:70:7d:91:85:92:e9:db:0e:
                    7d:32:92:fa:fe:8c:5c:de:e3:88:92:0b:77:dc:0f:
                    65:ca:93:84:d0:9a:3e:3c:64:80:ec:51:26:48:f5:
                    9a:d6:c6:6e:83:26:43:56:45:40:53:ff:bf:a4:35:
                    00:3b:48:ff:f2:81:c9:60:25:6f:a2:91:18:66:af:
                    69:c2:24:c9:0a:ff:38:14:cc:1c:91:cc:3c:48:07:
                    31:42:19:59:99:ac:99:2e:7c:e0:55:6c:36:ff:e3:
                    6b:80:e5:1f:a0:e1:15:38:84:8d:c9:ef:bb:ea:6a:
                    5d:4e:8d:df:2d:5a:94:38:ff:5b:3a:35:25:72:95:
                    50:1b:d3:1a:64:d0:2b:5f:bc:f7:96:ff:c5:88:6c:
                    4c:b4:d7:d9:91:79:ad:1c:38:cd:4d:61:f9:e7:e6:
                    55:81:e7:96:36:19:39:63:81:fb:46:77:71:57:c1:
                    fd:47:92:fe:1b:0a:e8:5d:d9:78:b8:4f:c8:75:12:
                    ab:02:ea:8b:00:e8:22:43:cb:4b:41:d7:01:28:f0:
                    21:9d:db:ec:b7:09:78:44:af:3c:e2:ac:5c:7c:a5:
                    28:19:7b:21:58:53:4d:4d:6e:02:2c:a5:76:72:9e:
                    2c:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:D8:1C:E6:B8:7D:BE:69:16:F1:25:39:96:C2:B7:50:21:79:13:E2
            X509v3 Authority Key Identifier:
                keyid:34:CE:85:35:37:D2:05:33:D4:57:CD:0E:A7:BD:47:D0:13:44:C8:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BaBZKaj3KUWNE1p8fhoyCLspn2X9pwMU7PkS2ciAonPv/1/34CE853537D20533D457CD0EA7BD47D01344C870.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/34CE853537D20533D457CD0EA7BD47D01344C870.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BaBZKaj3KUWNE1p8fhoyCLspn2X9pwMU7PkS2ciAonPv/1/3137372e36372e342e302f32322d3232203d3e20323632353039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.67.4.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2a:08:64:86:11:20:a5:cc:b5:c1:ee:b1:b5:85:34:0d:32:8f:
         09:fd:21:1a:5a:89:46:d0:b9:38:e4:ed:b2:a1:79:05:38:04:
         42:e7:9b:57:41:5f:80:44:a2:c0:f3:f9:df:27:e8:91:e8:98:
         a8:e9:c4:2a:88:fb:9e:76:14:91:6c:ab:b7:44:7f:00:58:f9:
         bf:58:82:2f:e2:28:2f:b1:b2:6a:f2:07:7e:c4:f8:a8:7b:78:
         9a:a6:89:f5:15:1b:e3:35:1f:e4:60:89:f8:c9:9f:d0:22:16:
         34:0a:56:95:4a:60:39:ba:1a:ac:99:a6:3d:15:c0:34:95:c2:
         52:db:d1:f5:07:cc:3c:8b:3b:1b:85:1e:18:04:58:4f:8b:73:
         88:5f:1e:f4:a9:63:f4:c7:98:6f:dd:33:31:a1:73:e9:60:45:
         3a:93:ca:93:ca:78:67:d1:d1:43:a3:9d:4a:1b:99:ad:73:69:
         0c:42:ce:a8:3e:73:1e:b3:c8:bf:8f:9a:ac:0b:c9:44:0e:06:
         68:d8:7e:c2:7b:7a:20:5e:a2:d3:97:aa:53:ab:3a:54:68:8d:
         3d:dc:41:20:91:5c:45:57:fb:e7:05:7f:04:be:c0:83:ec:34:
         42:0c:64:27:8b:ed:72:09:69:dd:69:a3:e5:03:27:0b:76:e8:
         93:91:0c:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 21:12:25 2025 by rpki-client