Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BCRUvLvswSKz8s2qTwaoKMt88WS2DRMFWcYxB6iyRuGs/0/3230312e37312e31322e302f32322d3234203d3e20323730323834.roa
File:                     3230312e37312e31322e302f32322d3234203d3e20323730323834.roa (raw, json)
Hash identifier:          ATdLzMAtOG8PzlA5/EWDuxvkG9rKwqRilcajTgwdwxw=
Subject key identifier:   CF:A3:E6:C5:77:FB:12:AF:30:7E:3A:06:EC:80:18:8B:C3:86:41:F4
Certificate issuer:       /CN=63AC10C4AA74CC3238BC10B3EBA01B8FC116DB0E
Certificate serial:       4B92F4A74B810327F440C2C54E722653D055F77B
Authority key identifier: 63:AC:10:C4:AA:74:CC:32:38:BC:10:B3:EB:A0:1B:8F:C1:16:DB:0E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/63AC10C4AA74CC3238BC10B3EBA01B8FC116DB0E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BCRUvLvswSKz8s2qTwaoKMt88WS2DRMFWcYxB6iyRuGs/0/3230312e37312e31322e302f32322d3234203d3e20323730323834.roa
Signing time:             Sat 25 Jun 2022 01:28:01 +0000
ROA not before:           Sat 25 Jun 2022 01:23:01 +0000
ROA not after:            Sat 24 Jun 2023 01:28:01 +0000
asID:                     270284
IP address blocks:        201.71.12.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:92:f4:a7:4b:81:03:27:f4:40:c2:c5:4e:72:26:53:d0:55:f7:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63AC10C4AA74CC3238BC10B3EBA01B8FC116DB0E
        Validity
            Not Before: Jun 25 01:23:01 2022 GMT
            Not After : Jun 24 01:28:01 2023 GMT
        Subject: CN=CFA3E6C577FB12AF307E3A06EC80188BC38641F4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:fd:41:42:f4:08:40:d9:51:3b:4b:43:90:07:
                    09:2e:d4:7d:2c:c2:6d:b5:b4:3b:3f:5f:da:92:86:
                    e1:0c:39:ce:aa:ec:33:46:e4:95:92:c8:9a:be:b3:
                    4d:a9:27:c4:53:1c:8a:23:69:ff:bd:c8:02:94:2b:
                    e4:1c:a6:9a:38:90:ef:fe:21:3a:44:0b:bd:f2:2d:
                    7f:ce:e9:5a:35:09:3e:5f:27:11:e4:6d:b0:59:0b:
                    d4:2f:45:a3:96:b5:dc:c8:df:b6:2b:a2:19:21:ef:
                    8a:c2:80:7c:02:a1:f4:4e:3f:39:e5:9d:d9:bd:49:
                    48:22:2b:ff:0f:8a:12:d4:c3:b7:f5:70:bb:d3:46:
                    80:49:9f:64:be:60:7a:b1:6d:5f:d7:b9:d8:9c:d6:
                    28:47:15:9b:ea:43:b9:3f:2e:3a:8a:4c:09:47:28:
                    39:90:da:f0:af:04:4e:9a:03:cd:8e:84:83:01:e5:
                    9a:ff:fc:94:b0:87:1c:2e:c9:53:64:a9:95:94:45:
                    2a:e6:35:10:bf:7c:f8:11:9f:46:fd:ec:af:77:bb:
                    07:e7:56:b6:44:60:24:6b:0a:be:63:5d:38:b9:10:
                    c5:3f:19:3b:9c:ed:d9:b3:f2:a3:3b:de:ef:ce:c7:
                    44:d1:70:2f:c3:16:b1:9c:75:71:7f:4f:03:76:0c:
                    da:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:A3:E6:C5:77:FB:12:AF:30:7E:3A:06:EC:80:18:8B:C3:86:41:F4
            X509v3 Authority Key Identifier:
                keyid:63:AC:10:C4:AA:74:CC:32:38:BC:10:B3:EB:A0:1B:8F:C1:16:DB:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BCRUvLvswSKz8s2qTwaoKMt88WS2DRMFWcYxB6iyRuGs/0/63AC10C4AA74CC3238BC10B3EBA01B8FC116DB0E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/63AC10C4AA74CC3238BC10B3EBA01B8FC116DB0E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BCRUvLvswSKz8s2qTwaoKMt88WS2DRMFWcYxB6iyRuGs/0/3230312e37312e31322e302f32322d3234203d3e20323730323834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.71.12.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6c:e3:df:d2:36:d2:ef:99:e5:0a:53:4f:25:5c:10:f5:69:a5:
         c1:c6:e2:c4:4e:40:c2:08:dd:b9:62:31:82:18:fa:b5:43:be:
         75:18:ce:1d:9e:ca:58:2c:2f:fc:c3:3d:c7:bd:a5:d7:dc:e9:
         f9:00:29:29:01:18:05:58:01:f8:a1:38:b8:a9:6b:ef:a8:f1:
         d7:1d:4c:c2:d4:09:01:b5:e7:4d:56:e8:4c:88:90:fe:a0:ec:
         d7:3a:6e:b1:ba:88:34:7a:04:ba:91:f7:e2:ad:4b:df:b3:d2:
         52:62:97:54:28:33:9c:00:26:8e:13:8f:3f:c0:b4:f5:a9:62:
         87:89:16:b4:ca:a5:77:a3:2d:68:c4:2a:f4:73:78:db:6c:0f:
         39:50:56:d9:bb:49:a5:ab:cf:9e:83:3b:02:82:b8:8c:5c:1b:
         26:ba:9b:2e:0d:22:99:7e:cf:1b:15:ef:b1:2e:05:80:35:aa:
         3b:d6:28:d8:1c:69:c3:eb:be:bb:62:48:4d:26:76:85:8a:9b:
         c6:bc:8f:17:c4:c7:e5:6f:0e:4a:14:77:f2:24:ab:13:93:74:
         c5:67:ae:56:e4:32:c2:83:7c:97:18:9b:76:ec:9c:59:89:97:
         c6:2c:ce:d2:36:80:5c:c0:06:21:3b:19:32:4a:34:f4:cf:ef:
         fd:5d:ca:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:30:52 2025 by rpki-client