Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BaBZKaj3KUWNE1p8fhoyCLspn2X9pwMU7PkS2ciAonPv/0/3137302e3234372e35322e302f32322d3232203d3e20323632393932.roa
File:                     3137302e3234372e35322e302f32322d3232203d3e20323632393932.roa (raw, json)
Hash identifier:          ilQ7uRP3dwjd8dnVi1r4tw5w++UylH82BTvxgbp24xA=
Subject key identifier:   6C:1A:9C:35:C6:FF:47:03:98:B1:40:8E:35:9F:4C:40:E5:F3:93:91
Certificate issuer:       /CN=D25FB7A3641FB6992609C3E87677747FD5176120
Certificate serial:       688E8ECDF0273F00A26D50A2797369F94424C75E
Authority key identifier: D2:5F:B7:A3:64:1F:B6:99:26:09:C3:E8:76:77:74:7F:D5:17:61:20
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D25FB7A3641FB6992609C3E87677747FD5176120.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BaBZKaj3KUWNE1p8fhoyCLspn2X9pwMU7PkS2ciAonPv/0/3137302e3234372e35322e302f32322d3232203d3e20323632393932.roa
Signing time:             Sat 17 Dec 2022 23:32:25 +0000
ROA not before:           Sat 17 Dec 2022 23:27:25 +0000
ROA not after:            Sat 16 Dec 2023 23:32:25 +0000
asID:                     262992
IP address blocks:        170.247.52.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:8e:8e:cd:f0:27:3f:00:a2:6d:50:a2:79:73:69:f9:44:24:c7:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D25FB7A3641FB6992609C3E87677747FD5176120
        Validity
            Not Before: Dec 17 23:27:25 2022 GMT
            Not After : Dec 16 23:32:25 2023 GMT
        Subject: CN=6C1A9C35C6FF470398B1408E359F4C40E5F39391
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:b8:19:a4:b0:0e:88:b0:e9:a5:30:0f:90:44:
                    5d:a7:f9:7f:9c:6f:dd:a1:45:aa:23:5e:66:1f:48:
                    5f:a4:75:ab:f2:6b:b2:f9:43:6e:15:c1:d8:14:5e:
                    ab:44:81:7a:fd:d8:01:75:23:02:dd:3b:5c:25:f0:
                    f9:01:8a:8c:cd:30:17:09:d7:ca:70:0c:9e:29:c4:
                    3c:bd:9f:a5:11:fb:6e:52:95:d8:99:f2:c4:08:d8:
                    85:af:89:e0:2e:1d:46:71:a0:4e:1e:9c:13:e6:a6:
                    10:8f:1c:87:89:8d:fd:20:ed:3c:8c:0f:71:60:55:
                    07:9c:6e:12:2b:77:db:ac:8d:6b:1e:73:6e:87:aa:
                    a9:ad:3f:16:75:be:1f:d7:da:10:5c:c9:6f:ac:9c:
                    9c:38:64:f4:75:e6:00:ec:08:57:b0:69:dd:71:a8:
                    1f:dc:78:7d:96:bf:62:07:a2:53:18:16:d6:d7:7d:
                    ea:40:84:4d:f6:d0:64:d6:1c:f8:e3:ae:64:f0:27:
                    08:43:5b:bb:2c:57:bb:b5:29:18:00:37:bc:32:6c:
                    4e:20:5a:f7:7d:ea:2c:c3:85:67:80:3d:9b:90:c7:
                    e8:44:7b:cf:e8:a7:21:8c:be:fa:2f:ca:30:cf:bd:
                    f3:ef:fc:5c:b8:33:8c:d7:67:78:4a:0f:7c:f0:d6:
                    8d:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:1A:9C:35:C6:FF:47:03:98:B1:40:8E:35:9F:4C:40:E5:F3:93:91
            X509v3 Authority Key Identifier:
                keyid:D2:5F:B7:A3:64:1F:B6:99:26:09:C3:E8:76:77:74:7F:D5:17:61:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BaBZKaj3KUWNE1p8fhoyCLspn2X9pwMU7PkS2ciAonPv/0/D25FB7A3641FB6992609C3E87677747FD5176120.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D25FB7A3641FB6992609C3E87677747FD5176120.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BaBZKaj3KUWNE1p8fhoyCLspn2X9pwMU7PkS2ciAonPv/0/3137302e3234372e35322e302f32322d3232203d3e20323632393932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.247.52.0/22

    Signature Algorithm: sha256WithRSAEncryption
         66:14:3d:a1:1f:35:a2:6e:1c:7c:e2:15:a2:41:9b:1b:5d:b0:
         f3:a8:8c:14:d4:3a:b9:50:3d:6b:58:f9:2b:68:6c:6b:f1:87:
         56:0c:73:5a:3a:fe:b1:1e:91:ae:55:33:86:36:c4:45:07:ff:
         b4:75:0c:0d:23:27:ed:06:d0:35:89:ba:8d:c4:ac:c4:5f:fb:
         84:f7:d2:8a:f6:a2:bd:21:9e:57:13:3c:13:ce:72:5f:07:94:
         31:14:f4:fd:39:27:ad:d8:40:72:84:d3:4a:4a:bf:19:64:c2:
         96:c0:39:c0:98:aa:8a:76:e7:d7:4f:d8:c5:e5:35:9a:a0:8e:
         f0:fa:4c:6f:9d:ee:3d:6e:a9:52:9a:7a:90:2d:68:53:de:9c:
         fa:52:9f:d0:6d:25:aa:cd:bf:f0:56:e7:be:94:10:88:05:d5:
         4c:1f:d1:ae:5e:23:ad:97:8d:6b:f3:d7:9a:54:7e:9c:2e:ff:
         4f:e1:a3:16:8b:4b:a7:d9:4e:e5:e2:12:c8:bb:da:20:e2:12:
         1e:e7:58:2c:8e:da:93:08:4f:c2:55:16:b0:37:dc:53:a6:f0:
         1f:14:e0:9d:2d:8f:e8:cb:1d:6f:50:23:24:61:1b:c5:a5:64:
         6e:c2:7d:57:f7:21:b9:54:4d:98:04:a6:55:24:d2:e6:94:d1:
         bc:aa:e3:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:38:10 2025 by rpki-client