Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6bQjfCPwLofcPu5Vbx7KEdEsp1t5QJEurPcyPaiXgcuN/0/3137372e33392e31322e302f32322d3232203d3e203532373930.roa
File:                     3137372e33392e31322e302f32322d3232203d3e203532373930.roa (raw, json)
Hash identifier:          kEPpz9TfmbNxooTvziJddw37JC4MshD7Ed61s72FAKw=
Subject key identifier:   6B:A5:97:41:35:23:34:E2:E5:24:E6:50:4A:29:02:8A:71:19:19:A4
Certificate issuer:       /CN=A55E93D565F6F77E37BF561CEEE467048A013F7C
Certificate serial:       6B02C75BD4BCD5E3C9239EC4543FB43FF49F9D5D
Authority key identifier: A5:5E:93:D5:65:F6:F7:7E:37:BF:56:1C:EE:E4:67:04:8A:01:3F:7C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A55E93D565F6F77E37BF561CEEE467048A013F7C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6bQjfCPwLofcPu5Vbx7KEdEsp1t5QJEurPcyPaiXgcuN/0/3137372e33392e31322e302f32322d3232203d3e203532373930.roa
Signing time:             Thu 13 Mar 2025 19:26:22 +0000
ROA not before:           Thu 13 Mar 2025 19:21:22 +0000
ROA not after:            Thu 12 Mar 2026 19:26:22 +0000
asID:                     52790
IP address blocks:        177.39.12.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:02:c7:5b:d4:bc:d5:e3:c9:23:9e:c4:54:3f:b4:3f:f4:9f:9d:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A55E93D565F6F77E37BF561CEEE467048A013F7C
        Validity
            Not Before: Mar 13 19:21:22 2025 GMT
            Not After : Mar 12 19:26:22 2026 GMT
        Subject: CN=6BA59741352334E2E524E6504A29028A711919A4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:68:c9:f1:0a:4a:40:47:bc:1b:43:21:06:89:
                    8a:a7:da:0d:52:0c:ec:c4:0c:7a:d9:db:31:80:52:
                    f3:86:e9:c4:0d:0f:74:8b:95:1e:48:d2:89:ce:fc:
                    62:d1:cb:ca:9d:0c:1a:45:bb:da:1a:2b:7f:77:f4:
                    78:cc:cf:3c:58:b8:dc:71:36:89:db:56:64:dc:db:
                    70:b1:e5:b1:11:f0:30:95:a9:33:85:19:93:0a:6c:
                    4c:7f:7f:5c:6a:22:50:20:b9:87:70:7d:62:4d:b9:
                    8f:9a:83:20:70:09:af:f4:3c:bb:d9:0a:67:d1:29:
                    3a:7a:1f:cf:a7:05:2f:08:7c:b0:c2:d6:85:56:7f:
                    9a:8a:43:b8:05:3e:bc:ac:2f:b4:5c:0a:c2:a6:08:
                    ed:04:10:b4:9a:6e:47:df:c5:ea:e0:85:21:3f:56:
                    df:e1:ae:b2:65:27:e8:5f:fc:50:74:a9:c1:f7:35:
                    53:4d:fa:42:00:04:a6:21:ec:73:2c:9b:50:77:50:
                    56:ce:1c:4f:49:82:2b:45:96:e4:ba:cd:4e:5e:52:
                    0f:24:60:fb:b9:05:83:b8:c7:73:83:e1:2a:6d:85:
                    3e:87:45:a7:9b:32:10:31:71:65:aa:65:a4:0e:0b:
                    62:7f:96:14:d5:e6:28:e0:07:6a:2f:9c:5e:61:14:
                    af:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:A5:97:41:35:23:34:E2:E5:24:E6:50:4A:29:02:8A:71:19:19:A4
            X509v3 Authority Key Identifier:
                keyid:A5:5E:93:D5:65:F6:F7:7E:37:BF:56:1C:EE:E4:67:04:8A:01:3F:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6bQjfCPwLofcPu5Vbx7KEdEsp1t5QJEurPcyPaiXgcuN/0/A55E93D565F6F77E37BF561CEEE467048A013F7C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A55E93D565F6F77E37BF561CEEE467048A013F7C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6bQjfCPwLofcPu5Vbx7KEdEsp1t5QJEurPcyPaiXgcuN/0/3137372e33392e31322e302f32322d3232203d3e203532373930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.39.12.0/22

    Signature Algorithm: sha256WithRSAEncryption
         05:c1:0d:01:7d:bb:c7:f5:03:ce:f4:59:80:b5:bd:6d:da:92:
         a6:7b:f2:41:65:de:17:81:3c:1c:e1:c9:c5:91:e3:f7:c8:56:
         b1:84:6f:b3:f3:c4:d9:85:15:4f:42:33:20:60:d9:b9:62:95:
         ad:5c:36:2d:97:9e:1e:e0:61:3f:dc:de:7b:22:8b:7a:16:02:
         5a:3d:c0:60:13:a7:56:e5:0c:5f:f5:57:f2:5c:6f:fa:e7:bf:
         3f:5c:ea:b9:96:7f:41:fe:59:ab:a4:5c:bb:83:28:23:d7:48:
         f8:45:0f:5f:d4:bf:c7:2a:b9:f4:6f:a1:36:c2:69:47:10:31:
         30:6b:11:fd:8a:48:0f:75:fb:1a:ed:70:1b:2a:bd:89:18:d2:
         29:cd:16:ae:c8:83:db:30:d4:f9:4b:b3:3e:c4:7d:b7:76:ef:
         78:15:97:0d:01:ba:a3:8a:81:f2:f2:00:77:c1:3b:73:78:d6:
         6a:33:5f:28:23:6a:df:11:a1:a4:90:09:b6:9f:99:1c:a4:ef:
         ef:5d:f1:49:a8:8a:c1:e0:ca:14:41:e7:ea:3e:f3:1a:b3:62:
         d0:a2:02:0e:7f:4a:3b:ee:cd:27:d1:a5:29:ad:1b:d1:16:bb:
         a8:a4:65:df:ea:d5:33:23:57:d6:a8:00:51:b7:58:cc:b7:4f:
         90:3e:ca:5b
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUawLHW9S81ePJI57EVD+0P/SfnV0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTU1RTkzRDU2NUY2Rjc3RTM3QkY1NjFDRUVFNDY3MDQ4
QTAxM0Y3QzAeFw0yNTAzMTMxOTIxMjJaFw0yNjAzMTIxOTI2MjJaMDMxMTAvBgNV
BAMTKDZCQTU5NzQxMzUyMzM0RTJFNTI0RTY1MDRBMjkwMjhBNzExOTE5QTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiaMnxCkpAR7wbQyEGiYqn2g1S
DOzEDHrZ2zGAUvOG6cQND3SLlR5I0onO/GLRy8qdDBpFu9oaK3939HjMzzxYuNxx
NonbVmTc23Cx5bER8DCVqTOFGZMKbEx/f1xqIlAguYdwfWJNuY+agyBwCa/0PLvZ
CmfRKTp6H8+nBS8IfLDC1oVWf5qKQ7gFPrysL7RcCsKmCO0EELSabkffxerghSE/
Vt/hrrJlJ+hf/FB0qcH3NVNN+kIABKYh7HMsm1B3UFbOHE9JgitFluS6zU5eUg8k
YPu5BYO4x3OD4SpthT6HRaebMhAxcWWqZaQOC2J/lhTV5ijgB2ovnF5hFK+jAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUa6WXQTUjNOLlJOZQSikCinEZGaQwHwYDVR0j
BBgwFoAUpV6T1WX29343v1Yc7uRnBIoBP3wwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNmJRamZDUHdMb2ZjUHU1VmJ4N0tFZEVzcDF0NVFKRXVyUGN5UGFpWGdj
dU4vMC9BNTVFOTNENTY1RjZGNzdFMzdCRjU2MUNFRUU0NjcwNDhBMDEzRjdDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0E1NUU5M0Q1NjVGNkY3N0Uz
N0JGNTYxQ0VFRTQ2NzA0OEEwMTNGN0MuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzZiUWpmQ1B3TG9mY1B1NVZieDdLRWRFc3AxdDVRSkV1clBjeVBhaVhnY3VOLzAv
MzEzNzM3MmUzMzM5MmUzMTMyMmUzMDJmMzIzMjJkMzIzMjIwM2QzZTIwMzUzMjM3
MzkzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEArEnDDANBgkqhkiG9w0BAQsFAAOCAQEABcENAX27x/UD
zvRZgLW9bdqSpnvyQWXeF4E8HOHJxZHj98hWsYRvs/PE2YUVT0IzIGDZuWKVrVw2
LZeeHuBhP9zeeyKLehYCWj3AYBOnVuUMX/VX8lxv+ue/P1zquZZ/Qf5Zq6Rcu4Mo
I9dI+EUPX9S/xyq59G+hNsJpRxAxMGsR/YpID3X7Gu1wGyq9iRjSKc0WrsiD2zDU
+UuzPsR9t3bveBWXDQG6o4qB8vIAd8E7c3jWajNfKCNq3xGhpJAJtp+ZHKTv713x
SaiKweDKFEHn6j7zGrNi0KICDn9KO+7NJ9GlKa0b0Ra7qKRl3+rVMyNX1qgAUbdY
zLdPkD7KWw==
-----END CERTIFICATE-----
Generated at Sat Apr 12 08:01:56 2025 by rpki-client