Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6BpkhkJmtUfYAuvbymTJP9Q3U4eKfEpEHJiCqwMTSdDC/1/3137372e3132352e3234382e302f32332d3234203d3e203532383538.roa
File:                     3137372e3132352e3234382e302f32332d3234203d3e203532383538.roa (raw, json)
Hash identifier:          bPPYTiXr6e7Pvz0ovvAy8u+dkwDFrafTL7ljdNq1eD8=
Subject key identifier:   DE:F6:F6:ED:70:81:11:3F:45:EB:30:B7:BE:CE:7C:D9:1B:FB:E8:E4
Certificate issuer:       /CN=4765DF83369720EE1AF514C7CA6660A475D18592
Certificate serial:       36296CD6353901622DAF070E0EAF67D9C6129EF8
Authority key identifier: 47:65:DF:83:36:97:20:EE:1A:F5:14:C7:CA:66:60:A4:75:D1:85:92
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4765DF83369720EE1AF514C7CA6660A475D18592.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6BpkhkJmtUfYAuvbymTJP9Q3U4eKfEpEHJiCqwMTSdDC/1/3137372e3132352e3234382e302f32332d3234203d3e203532383538.roa
Signing time:             Thu 06 Mar 2025 04:33:08 +0000
ROA not before:           Thu 06 Mar 2025 04:28:08 +0000
ROA not after:            Thu 05 Mar 2026 04:33:08 +0000
asID:                     52858
IP address blocks:        177.125.248.0/23 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:29:6c:d6:35:39:01:62:2d:af:07:0e:0e:af:67:d9:c6:12:9e:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4765DF83369720EE1AF514C7CA6660A475D18592
        Validity
            Not Before: Mar  6 04:28:08 2025 GMT
            Not After : Mar  5 04:33:08 2026 GMT
        Subject: CN=DEF6F6ED7081113F45EB30B7BECE7CD91BFBE8E4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:c4:68:aa:47:96:ba:bb:48:6b:4e:72:8f:77:
                    3d:2d:8f:18:c1:4a:22:80:93:b3:db:85:af:84:11:
                    f3:7a:81:28:dd:79:7a:52:b9:b5:5f:0c:02:45:28:
                    0f:a1:69:aa:bf:64:a2:d1:e2:07:32:20:4f:21:a7:
                    93:f6:02:69:07:db:7f:41:07:b0:35:b2:5b:43:fa:
                    81:b5:0c:b0:bd:ea:63:13:a5:f9:d5:f6:b3:5c:0a:
                    43:21:c2:f4:be:88:05:2b:89:dd:24:86:c3:0e:38:
                    42:1b:56:79:a6:58:36:57:fc:e6:23:9b:b9:87:c0:
                    45:84:18:69:0b:8f:20:c1:1f:0d:bf:36:5b:c8:bb:
                    ee:dc:8f:ef:f2:b8:16:a9:f2:71:73:3c:33:23:b0:
                    2a:3a:50:dc:0d:ee:a2:c9:65:a3:5c:fd:83:e0:e4:
                    ad:00:f6:db:e9:4b:ef:f4:f4:d7:ac:37:d4:bd:01:
                    00:aa:d5:8f:4d:bb:d1:66:ae:71:35:1d:e9:1f:e0:
                    8e:06:c5:67:63:c1:42:12:f8:73:bd:49:04:57:b3:
                    99:02:a4:87:78:c0:99:cd:c0:4b:d7:b4:6e:95:b9:
                    f8:34:fc:25:f8:72:69:02:26:c3:25:fa:ee:e3:6b:
                    bc:ce:2d:00:7e:ee:bd:e9:95:9e:74:cc:a2:78:95:
                    ee:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:F6:F6:ED:70:81:11:3F:45:EB:30:B7:BE:CE:7C:D9:1B:FB:E8:E4
            X509v3 Authority Key Identifier:
                keyid:47:65:DF:83:36:97:20:EE:1A:F5:14:C7:CA:66:60:A4:75:D1:85:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6BpkhkJmtUfYAuvbymTJP9Q3U4eKfEpEHJiCqwMTSdDC/1/4765DF83369720EE1AF514C7CA6660A475D18592.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4765DF83369720EE1AF514C7CA6660A475D18592.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6BpkhkJmtUfYAuvbymTJP9Q3U4eKfEpEHJiCqwMTSdDC/1/3137372e3132352e3234382e302f32332d3234203d3e203532383538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.125.248.0/23

    Signature Algorithm: sha256WithRSAEncryption
         71:5d:a2:2a:d2:63:7d:89:b4:44:d6:01:e3:18:1e:15:6e:e1:
         72:88:48:d4:fa:61:c7:fe:d3:06:5a:26:f2:fe:cb:10:5c:02:
         f1:22:1b:d2:c1:ce:11:0a:0b:3e:eb:cb:58:35:d8:17:16:96:
         a0:97:2e:b4:4f:48:f3:08:62:99:50:02:0f:55:fb:10:40:ec:
         59:10:e9:75:88:1b:d1:fe:fa:5f:24:8d:36:91:61:df:ea:79:
         9c:f7:3b:f5:90:31:b4:4a:ff:02:09:a5:9c:86:b0:ca:16:74:
         42:8d:21:57:33:7f:30:67:80:5e:e6:1c:90:1e:4e:35:52:54:
         c0:94:7e:b1:b8:d0:d1:21:78:e5:ba:52:a3:59:14:d8:d6:a7:
         28:32:65:90:81:00:11:b3:cd:46:48:e0:4c:f9:ac:fe:e8:5b:
         bc:db:ba:af:83:0d:3e:e6:15:a8:50:ee:7e:c1:c8:96:f4:6c:
         38:d8:ad:76:55:32:18:1d:f1:ef:af:d8:3f:4f:18:31:e6:9c:
         a2:9c:4d:59:a5:53:4b:2e:e0:5c:42:ec:2d:eb:4d:05:98:80:
         0d:18:b8:a2:a8:fc:bb:b4:69:87:7e:5b:59:bf:b0:08:5e:47:
         cc:47:1d:8e:61:0b:65:46:b0:9a:0f:33:9d:95:20:bf:e9:51:
         07:c6:f8:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 08:01:57 2025 by rpki-client