Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6BpkhkJmtUfYAuvbymTJP9Q3U4eKfEpEHJiCqwMTSdDC/0/3137372e3132352e3234382e302f32332d3234203d3e203532383538.roa
File:                     3137372e3132352e3234382e302f32332d3234203d3e203532383538.roa (raw, json)
Hash identifier:          8iJfUZf6PvreSAUOWU+wmyLUnaI2YjEHINIJcSHAbRE=
Subject key identifier:   B7:5E:49:5F:D1:7F:7A:CC:5F:1B:83:2C:85:2E:27:08:EB:9F:C6:D4
Certificate issuer:       /CN=3F89ED2DE6A8CF764FD3D048DA5C4C6AC483D757
Certificate serial:       2133227B2C9F35E17CCD4DE3AF5263A631F50297
Authority key identifier: 3F:89:ED:2D:E6:A8:CF:76:4F:D3:D0:48:DA:5C:4C:6A:C4:83:D7:57
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3F89ED2DE6A8CF764FD3D048DA5C4C6AC483D757.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6BpkhkJmtUfYAuvbymTJP9Q3U4eKfEpEHJiCqwMTSdDC/0/3137372e3132352e3234382e302f32332d3234203d3e203532383538.roa
Signing time:             Fri 08 Mar 2024 19:09:14 +0000
ROA not before:           Fri 08 Mar 2024 19:04:14 +0000
ROA not after:            Fri 07 Mar 2025 19:09:14 +0000
asID:                     52858
IP address blocks:        177.125.248.0/23 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:33:22:7b:2c:9f:35:e1:7c:cd:4d:e3:af:52:63:a6:31:f5:02:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3F89ED2DE6A8CF764FD3D048DA5C4C6AC483D757
        Validity
            Not Before: Mar  8 19:04:14 2024 GMT
            Not After : Mar  7 19:09:14 2025 GMT
        Subject: CN=B75E495FD17F7ACC5F1B832C852E2708EB9FC6D4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:c9:1d:aa:a7:ba:b8:83:32:b3:fb:a0:bb:f1:
                    57:ee:68:a9:71:82:17:f2:01:50:ae:46:53:54:2a:
                    bd:2d:95:41:f3:42:28:71:5f:5b:4a:a0:b4:6b:f3:
                    bd:1f:be:d2:93:f3:8b:f1:06:e8:e8:e0:9b:52:d1:
                    8f:5a:a3:d5:9f:9c:9a:6b:42:74:24:ec:6a:57:e5:
                    13:6a:6f:8e:11:be:a0:5b:c1:0e:b2:4f:c4:83:4d:
                    c2:f4:a9:ad:d0:0c:aa:a4:da:78:92:10:4b:03:37:
                    a9:d1:25:88:a2:9d:6f:5b:ad:d0:11:c4:72:73:ea:
                    11:9e:12:6f:49:e6:f1:1c:ed:cd:af:f7:6c:60:3d:
                    41:d2:12:6f:b2:05:52:f7:81:6a:9c:30:73:f3:db:
                    00:a7:9f:cc:a6:f2:5b:a9:11:cb:e4:98:7d:11:35:
                    fa:5f:ff:85:07:1e:7b:4c:3d:be:0c:5e:ed:18:a8:
                    55:58:3d:bc:46:87:2d:61:bf:15:e4:b3:a8:67:7e:
                    34:ce:3b:91:11:84:ae:ca:91:37:ad:37:99:4c:35:
                    3f:aa:08:fc:56:8e:14:5c:f0:f7:c7:ea:22:4d:1f:
                    57:7c:d5:0e:a4:69:b5:1a:6b:68:a8:0a:e4:f4:fa:
                    07:73:84:ca:d2:ad:e2:ba:48:ef:0d:73:37:d1:3d:
                    7d:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:5E:49:5F:D1:7F:7A:CC:5F:1B:83:2C:85:2E:27:08:EB:9F:C6:D4
            X509v3 Authority Key Identifier:
                keyid:3F:89:ED:2D:E6:A8:CF:76:4F:D3:D0:48:DA:5C:4C:6A:C4:83:D7:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6BpkhkJmtUfYAuvbymTJP9Q3U4eKfEpEHJiCqwMTSdDC/0/3F89ED2DE6A8CF764FD3D048DA5C4C6AC483D757.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3F89ED2DE6A8CF764FD3D048DA5C4C6AC483D757.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6BpkhkJmtUfYAuvbymTJP9Q3U4eKfEpEHJiCqwMTSdDC/0/3137372e3132352e3234382e302f32332d3234203d3e203532383538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.125.248.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b1:1a:73:3f:68:df:0c:78:6d:e2:78:e0:3a:48:b5:ad:f4:a0:
         54:f8:40:f4:72:b9:fd:be:2e:02:9c:f3:cd:9a:e8:96:da:98:
         47:47:24:3e:2a:b4:73:0e:f4:8e:f6:84:71:44:ce:eb:75:a6:
         2d:1c:5d:cc:73:0d:38:c8:1c:82:d4:8a:d3:ef:cc:69:f1:00:
         17:b5:ec:0d:b3:df:42:b5:b3:d3:c7:a1:b3:a4:c1:2b:e2:bb:
         b6:4b:1d:18:7f:9e:ff:ca:87:81:8e:2d:68:ad:b2:2a:81:04:
         a2:e9:af:65:65:95:ea:37:b4:28:ec:89:02:89:a0:c9:73:c6:
         61:cb:07:2f:a5:33:d7:25:9c:e0:82:2b:e7:19:ee:e1:df:6a:
         5f:e3:31:26:98:ff:de:85:6b:1f:22:3d:ff:6e:16:30:69:20:
         c2:6b:cd:45:1f:8e:7b:58:06:98:27:01:71:0f:27:61:25:e6:
         93:52:92:4c:ec:4f:de:96:6f:f5:af:73:e9:64:d3:5a:85:a1:
         be:2f:6a:6a:66:67:30:8c:be:37:37:5c:a0:74:f4:38:78:8e:
         6a:ae:ab:2b:9a:0e:6e:3f:99:f6:5e:a6:a4:31:8d:61:69:cf:
         a5:b2:62:5e:71:fa:79:75:df:a5:01:ed:b3:83:20:d4:40:a1:
         4a:e8:11:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 05:04:53 2025 by rpki-client