Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3tJGjvr6ueVqSSbFuvgSHnzNEyR2VkJHwMcu9TA9mamE/0/3137372e3132352e32302e302f32322d3232203d3e203532363335.roa
File:                     3137372e3132352e32302e302f32322d3232203d3e203532363335.roa (raw, json)
Hash identifier:          XJFJOnPS+gjuUOjOXWkz/Z8/txxDFhWOEYKBwkI9cVk=
Subject key identifier:   AC:37:EF:E1:A6:B9:80:BB:66:23:C0:9E:E9:C3:0D:4D:BB:26:2A:FE
Certificate issuer:       /CN=63ED338701F5B4BCE8EF3D9881EE5EF1299FD237
Certificate serial:       311221AFC37634B1CFD8286B96F3FDA7D023A0E4
Authority key identifier: 63:ED:33:87:01:F5:B4:BC:E8:EF:3D:98:81:EE:5E:F1:29:9F:D2:37
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/63ED338701F5B4BCE8EF3D9881EE5EF1299FD237.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3tJGjvr6ueVqSSbFuvgSHnzNEyR2VkJHwMcu9TA9mamE/0/3137372e3132352e32302e302f32322d3232203d3e203532363335.roa
Signing time:             Fri 16 Dec 2022 19:00:00 +0000
ROA not before:           Fri 16 Dec 2022 18:55:00 +0000
ROA not after:            Fri 15 Dec 2023 19:00:00 +0000
asID:                     52635
IP address blocks:        177.125.20.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:12:21:af:c3:76:34:b1:cf:d8:28:6b:96:f3:fd:a7:d0:23:a0:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63ED338701F5B4BCE8EF3D9881EE5EF1299FD237
        Validity
            Not Before: Dec 16 18:55:00 2022 GMT
            Not After : Dec 15 19:00:00 2023 GMT
        Subject: CN=AC37EFE1A6B980BB6623C09EE9C30D4DBB262AFE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:ba:c9:82:b8:fa:6e:ff:68:2f:71:07:9f:48:
                    e9:d0:e4:05:f6:9f:a3:da:f2:30:af:8c:c7:95:2b:
                    bb:21:f6:9d:3c:5a:50:8b:c1:15:6b:d4:80:8c:5a:
                    c2:96:86:cd:eb:8a:d4:b7:01:e5:76:c0:a8:a0:87:
                    cc:d7:7a:52:36:74:46:6b:e9:ba:cf:0d:69:f4:97:
                    0b:22:78:4e:30:83:6f:3b:b0:f2:0b:8a:07:46:fa:
                    2f:df:eb:cc:89:af:1d:f3:2c:c2:54:e8:bd:7a:e6:
                    86:a4:93:60:e5:40:db:ae:2b:70:a4:02:b4:20:55:
                    ee:3e:47:59:ff:90:8c:b5:14:41:e3:6d:cf:66:d9:
                    ca:1b:c5:9a:c8:31:2a:3c:5e:ed:59:9b:d1:5c:8c:
                    1d:aa:15:17:7a:38:bb:bd:08:b3:3c:41:c3:49:39:
                    c9:39:13:68:a1:f8:67:6e:40:1e:2f:c0:18:26:bf:
                    42:37:6d:18:c2:84:7e:78:e0:ff:59:c4:b7:4e:08:
                    d3:7b:ae:38:93:c4:35:f6:89:92:98:8c:70:52:46:
                    a6:f5:61:6b:ba:12:26:4f:05:a9:5c:05:9b:c2:16:
                    0b:a3:b6:d1:72:92:8d:33:26:cd:b9:61:b8:ba:28:
                    42:da:4e:2e:73:90:2a:a4:f8:75:4a:13:7a:af:1c:
                    ad:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:37:EF:E1:A6:B9:80:BB:66:23:C0:9E:E9:C3:0D:4D:BB:26:2A:FE
            X509v3 Authority Key Identifier:
                keyid:63:ED:33:87:01:F5:B4:BC:E8:EF:3D:98:81:EE:5E:F1:29:9F:D2:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3tJGjvr6ueVqSSbFuvgSHnzNEyR2VkJHwMcu9TA9mamE/0/63ED338701F5B4BCE8EF3D9881EE5EF1299FD237.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/63ED338701F5B4BCE8EF3D9881EE5EF1299FD237.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3tJGjvr6ueVqSSbFuvgSHnzNEyR2VkJHwMcu9TA9mamE/0/3137372e3132352e32302e302f32322d3232203d3e203532363335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.125.20.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4d:90:1c:f8:f9:e5:27:0c:d8:20:9d:4f:8c:36:6e:6b:6c:23:
         be:13:3e:af:9b:95:90:bc:ef:8f:58:68:92:57:2e:a2:4c:16:
         37:7c:67:e5:97:bb:b3:98:74:db:59:cc:9a:d3:4b:97:08:6c:
         5e:0c:44:11:2e:e6:f7:5f:e4:6c:6e:18:1e:92:88:00:05:93:
         32:63:60:f3:21:9a:06:1e:3a:7d:0c:27:c7:fc:8c:ec:b9:94:
         9c:d1:70:f1:46:fe:8a:fe:ab:21:c2:1a:ed:ba:aa:85:ab:5a:
         b1:74:08:89:91:47:c1:a9:76:56:1e:bd:ed:86:62:f7:26:f9:
         02:85:9a:b6:24:3e:b6:30:65:5e:98:ee:97:21:08:57:78:ec:
         4d:76:51:5f:4a:e4:0b:0d:61:63:43:65:77:68:63:58:de:96:
         c0:4f:67:44:c0:0b:f0:22:7f:08:f0:18:ad:87:20:c2:53:9c:
         ef:9d:3f:5b:dc:4e:1c:1b:fe:d4:e0:01:73:7e:74:c1:da:41:
         cf:c3:4b:d1:64:98:0c:35:8a:72:7e:7c:86:8b:1a:e0:98:0b:
         c0:9b:28:2e:5e:29:12:93:7b:21:93:d6:43:c4:8d:93:8f:6e:
         cc:9a:95:71:0b:89:d0:af:a4:5c:94:9b:e1:9a:b5:6b:0d:3c:
         35:0c:4e:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:17:59 2025 by rpki-client