Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BaBZKaj3KUWNE1p8fhoyCLspn2X9pwMU7PkS2ciAonPv/0/3137302e3234372e35322e302f32322d3234203d3e20323632353039.roa
File:                     3137302e3234372e35322e302f32322d3234203d3e20323632353039.roa (raw, json)
Hash identifier:          zYGfnSwoHd33X0sOOEcff8GNZ9uqfADpcvKzfVEN/LQ=
Subject key identifier:   A8:31:35:99:04:75:32:9F:C6:2B:BE:67:C0:A3:26:A3:61:19:F1:02
Certificate issuer:       /CN=D25FB7A3641FB6992609C3E87677747FD5176120
Certificate serial:       2040C8EFCAFCDBD5FBF9AE60AD03FE05D9611DB9
Authority key identifier: D2:5F:B7:A3:64:1F:B6:99:26:09:C3:E8:76:77:74:7F:D5:17:61:20
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D25FB7A3641FB6992609C3E87677747FD5176120.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BaBZKaj3KUWNE1p8fhoyCLspn2X9pwMU7PkS2ciAonPv/0/3137302e3234372e35322e302f32322d3234203d3e20323632353039.roa
Signing time:             Thu 06 Oct 2022 17:39:56 +0000
ROA not before:           Thu 06 Oct 2022 17:34:56 +0000
ROA not after:            Thu 05 Oct 2023 17:39:56 +0000
asID:                     262509
IP address blocks:        170.247.52.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:40:c8:ef:ca:fc:db:d5:fb:f9:ae:60:ad:03:fe:05:d9:61:1d:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D25FB7A3641FB6992609C3E87677747FD5176120
        Validity
            Not Before: Oct  6 17:34:56 2022 GMT
            Not After : Oct  5 17:39:56 2023 GMT
        Subject: CN=A83135990475329FC62BBE67C0A326A36119F102
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:f2:89:53:0b:b8:73:92:ca:67:e5:6a:b3:8a:
                    f3:41:c0:fa:cf:0d:11:05:86:d7:71:48:d2:5d:d2:
                    79:3f:e5:33:43:de:d6:42:09:56:6f:25:52:bc:ff:
                    b0:ce:38:59:6d:a6:ca:6c:f8:35:af:d7:2f:29:9b:
                    c1:b6:f2:6d:09:b3:33:34:8f:6b:64:22:98:bb:80:
                    e5:d6:8d:b9:5c:be:a2:4f:2c:cd:42:12:a9:bf:3d:
                    a2:c1:be:56:ff:37:b4:a9:33:6a:2f:b6:e1:32:b4:
                    72:a1:6a:b5:44:31:9a:0c:2b:15:75:3d:7d:ee:2d:
                    b2:d4:e9:ea:aa:ab:95:9b:3d:13:d6:5a:69:38:59:
                    59:16:d6:8e:c7:09:af:b3:6b:e4:55:e7:91:f8:e5:
                    67:d8:ad:ef:9b:c2:4f:bc:8a:6d:4a:6c:65:53:a9:
                    d8:ac:ae:4a:de:59:36:ae:86:ca:52:08:37:1a:8f:
                    ad:15:fe:dc:60:25:42:26:7a:b0:32:95:af:e5:8a:
                    17:65:25:5d:48:e4:6e:4a:83:b0:36:37:a5:d1:a5:
                    b5:36:33:87:b4:66:4c:25:ad:0c:19:96:03:d4:69:
                    81:5c:78:67:c3:bb:67:bb:92:3f:11:78:06:df:dc:
                    95:48:c2:2a:d7:f9:6e:e0:1c:a4:31:2c:f0:ff:82:
                    f2:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:31:35:99:04:75:32:9F:C6:2B:BE:67:C0:A3:26:A3:61:19:F1:02
            X509v3 Authority Key Identifier:
                keyid:D2:5F:B7:A3:64:1F:B6:99:26:09:C3:E8:76:77:74:7F:D5:17:61:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BaBZKaj3KUWNE1p8fhoyCLspn2X9pwMU7PkS2ciAonPv/0/D25FB7A3641FB6992609C3E87677747FD5176120.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D25FB7A3641FB6992609C3E87677747FD5176120.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BaBZKaj3KUWNE1p8fhoyCLspn2X9pwMU7PkS2ciAonPv/0/3137302e3234372e35322e302f32322d3234203d3e20323632353039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.247.52.0/22

    Signature Algorithm: sha256WithRSAEncryption
         92:3a:c8:23:c2:ca:0d:75:11:16:63:71:8f:4e:4d:2f:cc:4f:
         ea:03:49:c0:85:a4:4a:aa:67:29:ee:f7:15:e6:15:fb:32:9e:
         a5:b1:c4:08:c3:07:69:5c:92:84:88:b0:e7:a9:78:83:21:fb:
         b3:d3:02:57:99:66:08:08:d6:85:5a:7e:c0:ba:ed:02:49:3e:
         81:63:55:c6:93:1e:9f:6e:30:cf:d4:86:1d:22:46:98:ad:45:
         d0:6f:f7:59:a6:75:d4:cb:53:80:90:70:62:f6:c3:04:4a:d8:
         9e:c5:6b:41:08:78:6f:ff:ff:50:93:8d:36:be:fe:08:6c:04:
         ac:ef:8f:25:36:34:f8:4d:0c:0b:ba:bb:ee:36:55:a4:6e:c5:
         14:bc:f3:1c:00:af:71:9f:e1:8d:da:a4:10:92:1b:74:ec:55:
         7b:85:f3:ae:28:7e:9d:a5:fb:56:60:05:89:a7:f4:80:b6:4c:
         4e:84:61:38:6e:18:15:d2:90:e8:0f:5f:6c:40:ab:14:42:2d:
         3a:39:38:fe:32:41:14:db:29:1f:bd:61:a4:72:82:bd:94:1f:
         21:cb:c0:2d:52:a2:c7:73:f3:e5:58:a2:3b:9c:2a:0a:de:b7:
         40:a6:a7:59:c0:20:5f:08:9f:a7:e5:2c:a5:81:32:48:59:06:
         f0:25:7a:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:45:28 2025 by rpki-client