Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3tJGjvr6ueVqSSbFuvgSHnzNEyR2VkJHwMcu9TA9mamE/0/3137372e3132352e32332e302f32342d3234203d3e203532363335.roa
File:                     3137372e3132352e32332e302f32342d3234203d3e203532363335.roa (raw, json)
Hash identifier:          u0PLMYm+kxYDwc8rjVY6ot5NKV+QrHHM0ptUD20T9H8=
Subject key identifier:   C3:82:EF:7F:D2:30:34:9C:23:06:AD:E4:D0:87:66:59:4E:7C:04:4C
Certificate issuer:       /CN=63ED338701F5B4BCE8EF3D9881EE5EF1299FD237
Certificate serial:       697F2D7861EB58D632E4D302B1330F48C9B43A63
Authority key identifier: 63:ED:33:87:01:F5:B4:BC:E8:EF:3D:98:81:EE:5E:F1:29:9F:D2:37
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/63ED338701F5B4BCE8EF3D9881EE5EF1299FD237.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3tJGjvr6ueVqSSbFuvgSHnzNEyR2VkJHwMcu9TA9mamE/0/3137372e3132352e32332e302f32342d3234203d3e203532363335.roa
Signing time:             Fri 16 Dec 2022 19:00:00 +0000
ROA not before:           Fri 16 Dec 2022 18:55:00 +0000
ROA not after:            Fri 15 Dec 2023 19:00:00 +0000
asID:                     52635
IP address blocks:        177.125.23.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:7f:2d:78:61:eb:58:d6:32:e4:d3:02:b1:33:0f:48:c9:b4:3a:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63ED338701F5B4BCE8EF3D9881EE5EF1299FD237
        Validity
            Not Before: Dec 16 18:55:00 2022 GMT
            Not After : Dec 15 19:00:00 2023 GMT
        Subject: CN=C382EF7FD230349C2306ADE4D08766594E7C044C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:50:d5:fa:59:10:33:0e:06:1c:31:31:48:39:
                    e7:93:35:06:d5:0a:76:7d:5d:fb:37:81:d7:fb:63:
                    23:22:6e:64:50:ba:a5:24:f2:b6:49:73:9f:15:b8:
                    96:8a:ca:45:07:e2:c4:db:b3:19:cd:da:87:e4:7a:
                    4a:41:0d:f2:a5:f1:7f:f2:81:e6:80:52:ce:70:d4:
                    7c:af:4a:88:b4:6c:1e:57:b2:85:32:c1:c5:b4:5f:
                    d2:2a:5c:73:57:c6:9f:e8:39:5e:97:e8:cd:b8:d6:
                    a7:5c:ca:1e:fc:df:8f:14:84:d5:40:e6:9d:aa:a4:
                    5b:ed:82:d6:da:72:ee:07:b6:e9:ae:10:2b:5a:96:
                    19:b9:1f:cd:58:c2:a5:83:54:b7:a7:fc:f3:ce:87:
                    a4:99:61:5a:7d:29:d5:08:27:f6:3d:de:97:60:28:
                    fe:3c:6d:5c:bf:2d:10:4f:9b:45:db:14:0e:07:8b:
                    1b:23:74:ea:a2:bd:4a:9f:c5:f1:62:a9:d4:1b:ed:
                    99:14:14:26:9b:46:20:69:f6:ad:cb:50:ae:2f:75:
                    56:4e:f4:4a:bb:1d:a0:9a:cc:5b:ee:f3:17:7d:2d:
                    71:0e:28:f5:b3:b0:00:2c:a7:73:0e:af:17:cb:81:
                    43:07:51:a0:fd:47:1e:68:53:8b:08:76:22:08:43:
                    8c:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:82:EF:7F:D2:30:34:9C:23:06:AD:E4:D0:87:66:59:4E:7C:04:4C
            X509v3 Authority Key Identifier:
                keyid:63:ED:33:87:01:F5:B4:BC:E8:EF:3D:98:81:EE:5E:F1:29:9F:D2:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3tJGjvr6ueVqSSbFuvgSHnzNEyR2VkJHwMcu9TA9mamE/0/63ED338701F5B4BCE8EF3D9881EE5EF1299FD237.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/63ED338701F5B4BCE8EF3D9881EE5EF1299FD237.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3tJGjvr6ueVqSSbFuvgSHnzNEyR2VkJHwMcu9TA9mamE/0/3137372e3132352e32332e302f32342d3234203d3e203532363335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.125.23.0/24

    Signature Algorithm: sha256WithRSAEncryption
         08:6a:ac:6b:d3:4e:79:ef:55:03:fb:9c:23:81:e8:af:41:f9:
         8a:1e:1b:72:10:e7:d9:19:7c:f8:fe:ba:5b:4d:34:0f:91:f8:
         aa:0a:0d:cc:b4:46:1e:4c:aa:85:2b:b7:fe:a2:f7:c5:cd:5a:
         0c:80:a0:2c:d1:49:de:7a:98:0d:d6:af:17:1f:4e:66:a8:22:
         85:fd:2f:e6:03:44:ca:9f:25:8d:cd:e7:d7:5e:80:48:96:8a:
         f6:16:ad:c3:1d:11:88:3a:6e:1c:00:bf:b7:f5:d6:f5:a9:1a:
         b4:b3:92:99:80:23:c4:39:dc:9a:16:ab:e2:3f:3d:59:0e:b0:
         c5:6a:ca:78:6e:8c:82:d8:72:5f:0a:b2:ab:ef:52:a5:56:84:
         a1:db:4e:c2:bb:4e:1d:58:c2:34:0b:37:5a:93:4d:59:6a:23:
         00:18:4c:64:4c:cc:37:56:38:59:d3:d1:13:36:a3:0f:ef:4b:
         fe:44:ff:a1:de:d9:2d:ff:cb:ae:23:1b:13:e7:6e:1b:0e:21:
         2f:aa:90:c9:18:49:ca:5b:1a:35:f2:1d:5c:d7:03:29:11:fc:
         12:b7:9a:53:3c:b7:eb:d7:bd:f7:6b:2f:bf:f4:98:1f:f9:99:
         cc:8a:44:9e:4a:9e:ec:35:65:ea:8f:d8:61:e5:e7:2b:e5:43:
         ff:8a:2d:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 03:51:22 2025 by rpki-client