Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6BpkhkJmtUfYAuvbymTJP9Q3U4eKfEpEHJiCqwMTSdDC/0/3137372e3132352e3234382e302f32322d3236203d3e203532383538.roa
File:                     3137372e3132352e3234382e302f32322d3236203d3e203532383538.roa (raw, json)
Hash identifier:          ruPnNn7JtwTa2FmAMwByHy1QD0ucjhOlMuboh1Bjges=
Subject key identifier:   70:FE:57:1C:64:D0:E2:2B:A5:03:EB:99:3F:B1:CB:8F:D9:E4:71:30
Certificate issuer:       /CN=5B263F0F259C154495BFEADDE220CF73F0E6D7D0
Certificate serial:       5ECAA6A96396A642EA9DC3263ED3A36218B0625C
Authority key identifier: 5B:26:3F:0F:25:9C:15:44:95:BF:EA:DD:E2:20:CF:73:F0:E6:D7:D0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5B263F0F259C154495BFEADDE220CF73F0E6D7D0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6BpkhkJmtUfYAuvbymTJP9Q3U4eKfEpEHJiCqwMTSdDC/0/3137372e3132352e3234382e302f32322d3236203d3e203532383538.roa
Signing time:             Tue 05 Dec 2023 15:44:38 +0000
ROA not before:           Tue 05 Dec 2023 15:39:38 +0000
ROA not after:            Tue 03 Dec 2024 15:44:38 +0000
asID:                     52858
IP address blocks:        177.125.248.0/22 maxlen: 26
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:ca:a6:a9:63:96:a6:42:ea:9d:c3:26:3e:d3:a3:62:18:b0:62:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5B263F0F259C154495BFEADDE220CF73F0E6D7D0
        Validity
            Not Before: Dec  5 15:39:38 2023 GMT
            Not After : Dec  3 15:44:38 2024 GMT
        Subject: CN=70FE571C64D0E22BA503EB993FB1CB8FD9E47130
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:ff:6e:6f:4d:23:e5:76:57:98:70:8a:cf:92:
                    6c:c0:86:42:0f:2a:4e:6d:2a:67:3c:f9:29:ef:a7:
                    5a:3e:da:84:c5:3a:60:93:c5:03:42:19:b8:6f:bc:
                    99:43:09:61:76:2b:a2:e5:99:18:d4:d5:cc:5e:ef:
                    0e:b8:71:d0:dc:c9:d2:7e:50:86:b0:c0:3f:8c:01:
                    6b:e1:8a:ec:6d:80:6f:46:d4:aa:54:29:ce:1e:66:
                    c4:9e:9f:af:f4:ca:8c:19:04:3e:d4:57:48:f3:8f:
                    1b:93:f4:8c:8f:e4:7d:ec:3d:cb:ce:83:7f:87:8c:
                    8d:62:1b:2e:bd:a9:7b:0c:3f:89:a8:fb:45:67:58:
                    12:d2:69:64:e9:1b:fd:bc:89:bc:3f:e2:13:bb:95:
                    45:92:ea:6c:e6:94:9d:24:97:5e:38:4f:21:15:ef:
                    ac:ab:e3:2a:de:d7:ae:5a:f3:ae:2e:a7:c1:ee:fe:
                    d2:a8:f5:82:a4:0f:7c:ce:04:96:b3:b6:7e:67:22:
                    d6:80:f3:84:6f:bd:55:f4:09:20:72:2c:d1:35:ce:
                    09:78:7e:80:7c:9b:bd:40:dd:24:b7:d0:80:4f:77:
                    b1:b8:c2:bc:12:95:2a:13:75:bb:01:e4:af:8b:65:
                    f4:88:fc:e5:ef:56:9c:cb:1c:11:a3:32:fd:75:e9:
                    ab:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:FE:57:1C:64:D0:E2:2B:A5:03:EB:99:3F:B1:CB:8F:D9:E4:71:30
            X509v3 Authority Key Identifier:
                keyid:5B:26:3F:0F:25:9C:15:44:95:BF:EA:DD:E2:20:CF:73:F0:E6:D7:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6BpkhkJmtUfYAuvbymTJP9Q3U4eKfEpEHJiCqwMTSdDC/0/5B263F0F259C154495BFEADDE220CF73F0E6D7D0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5B263F0F259C154495BFEADDE220CF73F0E6D7D0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6BpkhkJmtUfYAuvbymTJP9Q3U4eKfEpEHJiCqwMTSdDC/0/3137372e3132352e3234382e302f32322d3236203d3e203532383538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.125.248.0/22

    Signature Algorithm: sha256WithRSAEncryption
         15:71:10:9d:ea:8e:0a:53:be:ca:1f:eb:c2:31:0f:87:5b:26:
         80:14:9a:c8:85:04:0c:80:2c:64:cc:6c:a1:99:25:eb:55:74:
         94:0c:0a:97:a6:f2:83:0b:42:c3:32:e1:7d:bd:11:96:79:d3:
         b2:9e:7e:7d:43:d8:6d:24:df:31:b5:11:d5:14:d3:57:a7:83:
         7f:50:68:e1:a4:13:37:85:95:78:9a:a7:75:29:50:55:f2:96:
         72:5f:34:fc:7c:67:b6:f0:55:2e:6c:fc:69:b6:70:92:a2:be:
         8d:83:4a:d1:95:27:8d:db:03:61:59:18:47:9a:65:6f:7d:8d:
         17:40:cd:bf:ca:ed:7c:31:42:07:ca:fd:5f:0e:af:2b:ca:ee:
         66:39:57:0e:a8:ac:3b:4a:c2:5f:71:2c:24:e7:36:c5:c3:6a:
         ff:34:45:18:51:e2:21:cf:91:ab:7f:ff:df:cd:27:1e:8f:af:
         89:ec:59:49:1d:a9:9e:6d:51:5d:2f:47:35:3e:ac:bd:f4:33:
         37:92:19:95:58:5a:03:9f:26:0d:17:33:f6:f4:61:ef:96:ee:
         e2:79:5c:76:d9:1d:b1:1b:31:c5:52:ee:da:9c:cc:23:8a:be:
         22:3f:9b:dd:39:ff:9b:1e:04:a8:b4:02:fe:64:43:08:20:ee:
         31:c1:89:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:30:37 2025 by rpki-client