Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BaBZKaj3KUWNE1p8fhoyCLspn2X9pwMU7PkS2ciAonPv/0/3137372e36372e302e302f32312d3231203d3e20323632393932.roa
File:                     3137372e36372e302e302f32312d3231203d3e20323632393932.roa (raw, json)
Hash identifier:          EDPLAlM4ObvZ0pAPkv6TPZyd3a3E0KTpVqPgKuKrl7U=
Subject key identifier:   54:B3:E3:37:B5:B8:CA:28:C1:A6:F1:19:43:37:16:BB:B6:2A:1D:4C
Certificate issuer:       /CN=D25FB7A3641FB6992609C3E87677747FD5176120
Certificate serial:       42BCED4866D7A507049E766D6B2ACE8FA3008B71
Authority key identifier: D2:5F:B7:A3:64:1F:B6:99:26:09:C3:E8:76:77:74:7F:D5:17:61:20
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D25FB7A3641FB6992609C3E87677747FD5176120.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BaBZKaj3KUWNE1p8fhoyCLspn2X9pwMU7PkS2ciAonPv/0/3137372e36372e302e302f32312d3231203d3e20323632393932.roa
Signing time:             Sat 17 Dec 2022 23:31:22 +0000
ROA not before:           Sat 17 Dec 2022 23:26:22 +0000
ROA not after:            Sat 16 Dec 2023 23:31:22 +0000
asID:                     262992
IP address blocks:        177.67.0.0/21 maxlen: 21
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:bc:ed:48:66:d7:a5:07:04:9e:76:6d:6b:2a:ce:8f:a3:00:8b:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D25FB7A3641FB6992609C3E87677747FD5176120
        Validity
            Not Before: Dec 17 23:26:22 2022 GMT
            Not After : Dec 16 23:31:22 2023 GMT
        Subject: CN=54B3E337B5B8CA28C1A6F119433716BBB62A1D4C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:98:3f:fa:77:67:f7:70:24:dc:63:6a:d9:e4:
                    90:03:ea:f0:be:58:e1:2d:d1:e0:84:20:08:52:5c:
                    51:b7:62:0d:a6:3e:ef:d1:2e:42:fb:75:47:43:25:
                    e7:a2:73:e6:79:84:0f:75:39:06:c7:6e:e6:01:4b:
                    8e:61:3f:8b:8e:b0:41:ff:44:c9:59:42:c1:4a:eb:
                    c2:67:00:2f:e2:21:52:44:c5:07:d5:39:89:ca:5d:
                    3e:ea:02:ba:1e:c3:e9:e5:6a:9f:68:c4:a4:07:ae:
                    e1:91:05:25:41:70:48:9e:bb:ea:76:27:18:37:db:
                    c3:aa:9a:ae:4a:0e:a5:ce:c7:2a:45:3b:50:fe:32:
                    e2:7f:eb:d0:97:af:02:2f:d2:b2:a6:32:4a:df:18:
                    3a:ea:61:79:7c:da:88:12:8d:ab:5a:ab:9d:38:2b:
                    46:38:3e:1b:b1:94:16:21:aa:2b:9b:5f:40:d7:8b:
                    77:16:d1:a4:cb:1d:d0:80:d6:28:aa:13:06:e2:6f:
                    84:3d:fa:45:36:97:a9:12:a0:24:79:7e:29:56:38:
                    75:55:66:87:7f:2e:0f:3e:d9:f0:77:bb:4d:7e:ab:
                    51:0a:12:c3:6d:9f:a4:91:ed:35:6f:da:aa:3e:5d:
                    f4:b1:76:13:9b:54:60:a8:eb:12:f6:09:a2:9f:ae:
                    2e:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:B3:E3:37:B5:B8:CA:28:C1:A6:F1:19:43:37:16:BB:B6:2A:1D:4C
            X509v3 Authority Key Identifier:
                keyid:D2:5F:B7:A3:64:1F:B6:99:26:09:C3:E8:76:77:74:7F:D5:17:61:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BaBZKaj3KUWNE1p8fhoyCLspn2X9pwMU7PkS2ciAonPv/0/D25FB7A3641FB6992609C3E87677747FD5176120.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D25FB7A3641FB6992609C3E87677747FD5176120.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BaBZKaj3KUWNE1p8fhoyCLspn2X9pwMU7PkS2ciAonPv/0/3137372e36372e302e302f32312d3231203d3e20323632393932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.67.0.0/21

    Signature Algorithm: sha256WithRSAEncryption
         91:26:44:a8:b9:e0:75:e5:ad:6a:56:b9:c1:07:01:8d:b8:8f:
         5b:a6:6b:7d:5d:51:1d:55:8b:f7:07:91:7c:46:7a:29:6a:88:
         78:20:72:51:4d:50:db:61:cc:d1:37:11:58:bc:f0:84:93:45:
         90:23:8f:c6:c3:39:c1:f5:01:36:fe:bb:5e:7b:a9:cb:c0:e7:
         0a:fc:5f:0e:0e:c6:f8:b3:1e:58:ce:a6:98:94:8c:ce:f4:b2:
         87:a2:47:0b:3f:72:a3:15:5b:05:00:7d:09:9a:51:09:34:29:
         47:7a:da:ba:4e:e2:99:1e:69:75:7b:e4:15:8d:00:60:24:ec:
         52:e7:ba:7e:0b:e1:c8:e6:24:0c:3c:a9:a3:c2:97:f4:a0:40:
         22:b8:3e:01:0a:b4:ae:1a:48:e1:5e:a4:6f:77:a8:81:16:5f:
         ba:43:6a:06:f2:38:3e:6a:19:7c:fe:f7:46:c2:f7:49:a4:75:
         00:34:7a:56:91:65:44:d1:75:04:e6:04:c4:82:44:3a:39:27:
         fd:5b:c1:e0:0e:97:91:df:5f:4b:6d:9f:a3:91:8a:03:33:df:
         c5:3a:84:b4:4a:d4:24:02:be:f6:f6:06:64:34:5a:0a:95:88:
         8e:7b:42:a3:2f:2c:3c:b6:10:93:89:93:37:74:e6:aa:76:73:
         27:13:7c:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:27:13 2025 by rpki-client