Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3tJGjvr6ueVqSSbFuvgSHnzNEyR2VkJHwMcu9TA9mamE/0/3137372e3132352e32322e302f32342d3234203d3e203532363335.roa
File:                     3137372e3132352e32322e302f32342d3234203d3e203532363335.roa (raw, json)
Hash identifier:          P5u9v5HiQWlwWoGeHaiEDsMpOghbmEEIeKALQr1JCpg=
Subject key identifier:   83:23:A7:08:FE:FF:35:50:E1:87:8F:A0:2D:ED:2E:9E:AB:CB:30:8C
Certificate issuer:       /CN=63ED338701F5B4BCE8EF3D9881EE5EF1299FD237
Certificate serial:       3C99D826DF7A67FF5F0D7D1C7085262DF70EA160
Authority key identifier: 63:ED:33:87:01:F5:B4:BC:E8:EF:3D:98:81:EE:5E:F1:29:9F:D2:37
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/63ED338701F5B4BCE8EF3D9881EE5EF1299FD237.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3tJGjvr6ueVqSSbFuvgSHnzNEyR2VkJHwMcu9TA9mamE/0/3137372e3132352e32322e302f32342d3234203d3e203532363335.roa
Signing time:             Fri 16 Dec 2022 19:00:00 +0000
ROA not before:           Fri 16 Dec 2022 18:55:00 +0000
ROA not after:            Fri 15 Dec 2023 19:00:00 +0000
asID:                     52635
IP address blocks:        177.125.22.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:99:d8:26:df:7a:67:ff:5f:0d:7d:1c:70:85:26:2d:f7:0e:a1:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63ED338701F5B4BCE8EF3D9881EE5EF1299FD237
        Validity
            Not Before: Dec 16 18:55:00 2022 GMT
            Not After : Dec 15 19:00:00 2023 GMT
        Subject: CN=8323A708FEFF3550E1878FA02DED2E9EABCB308C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:71:b5:b8:10:ba:68:f1:b1:35:b1:6e:98:6c:
                    90:3e:6e:81:39:e1:e2:2e:5b:01:f3:5b:30:37:61:
                    22:88:6f:fe:51:e3:49:7f:82:36:51:12:eb:b6:2a:
                    8c:23:bb:cb:8a:5f:8d:2d:48:b6:a8:14:49:67:8e:
                    54:af:e7:c1:4e:3b:0c:d1:24:53:d6:2a:b7:22:b0:
                    87:4d:74:11:93:c2:c9:4e:f9:19:64:aa:c0:0f:61:
                    13:7d:f6:a5:32:38:a5:39:ef:64:c0:71:3b:a0:7a:
                    cf:12:a7:c0:ed:6a:a5:d7:dc:75:fd:4f:9f:83:b5:
                    2f:07:2f:e5:d9:f7:5e:7a:7d:62:63:4e:7c:e9:22:
                    84:fc:c2:8b:08:ad:e3:25:04:57:2c:2c:81:1a:06:
                    42:f1:ed:be:56:c5:c2:87:67:1e:3c:0f:20:73:d1:
                    92:76:21:94:a8:f6:67:a6:03:c8:1b:67:7f:3b:31:
                    98:85:fb:52:cc:7e:99:26:a0:63:74:81:d4:c1:d9:
                    9a:cd:25:d8:17:b5:05:07:12:2d:eb:04:0d:f7:06:
                    ed:7c:43:f2:0a:50:2e:0f:f0:16:77:4c:78:28:cf:
                    f3:0e:cc:c7:0f:97:87:de:68:6f:6b:de:cd:12:79:
                    f2:a5:d6:ec:fb:ce:2c:ca:5e:a1:f7:29:5c:9b:a6:
                    29:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:23:A7:08:FE:FF:35:50:E1:87:8F:A0:2D:ED:2E:9E:AB:CB:30:8C
            X509v3 Authority Key Identifier:
                keyid:63:ED:33:87:01:F5:B4:BC:E8:EF:3D:98:81:EE:5E:F1:29:9F:D2:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3tJGjvr6ueVqSSbFuvgSHnzNEyR2VkJHwMcu9TA9mamE/0/63ED338701F5B4BCE8EF3D9881EE5EF1299FD237.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/63ED338701F5B4BCE8EF3D9881EE5EF1299FD237.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3tJGjvr6ueVqSSbFuvgSHnzNEyR2VkJHwMcu9TA9mamE/0/3137372e3132352e32322e302f32342d3234203d3e203532363335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.125.22.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9d:a5:cc:57:e9:bd:55:f4:d0:8d:c2:4c:d4:d9:11:98:9e:b4:
         24:c5:ba:0c:d4:19:c7:32:75:ff:7e:c6:46:35:b4:31:a4:c2:
         3e:9e:69:3c:b9:07:6e:c8:9a:bb:f9:74:c1:f1:5b:e8:9e:01:
         9a:10:61:f3:dd:22:3e:a1:1d:60:3e:bf:96:c8:2a:50:92:0c:
         23:51:88:d6:1e:fe:56:50:9e:90:35:12:1a:ff:24:59:42:b3:
         90:36:c0:4e:70:b5:96:11:70:3d:25:5e:dc:b0:79:4e:3f:7a:
         9e:ea:63:90:6c:b6:58:e9:7a:6f:f4:4c:d8:cd:78:ca:07:8a:
         61:2f:06:e3:e2:8f:58:21:39:07:92:9a:eb:b9:df:5b:fb:ac:
         85:3d:b3:3b:1b:ce:cd:6a:2a:91:b5:ac:34:60:a3:51:de:68:
         a1:86:32:23:0b:bb:05:1e:8d:99:39:c6:3a:a3:50:d2:3b:2a:
         f4:f2:5c:06:af:23:73:3d:db:d2:27:a4:d6:a7:aa:2f:4b:d8:
         34:e5:62:46:0b:37:a3:54:a2:4d:83:ab:90:da:2d:a9:63:2c:
         26:30:75:d3:22:3e:94:30:29:e3:b1:74:d2:9c:d6:08:32:73:
         b5:ef:59:67:1c:46:41:3d:db:a7:46:9c:97:aa:10:89:61:89:
         85:48:2b:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:06:59 2025 by rpki-client