Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Bw8F5EocdsCkcN4YfKBPkYJtNz4UFDpFLrytzVi7geun/0/3137302e3234352e3132352e302f32342d3234203d3e20323636303232.roa
File:                     3137302e3234352e3132352e302f32342d3234203d3e20323636303232.roa (raw, json)
Hash identifier:          WjIYxPfAt55oQDmL15ZJZjjC6+Z89Jt5C7uu4qCVk40=
Subject key identifier:   48:51:12:3B:36:86:44:1A:D5:BC:2D:60:B4:96:BF:30:57:9A:8C:1F
Certificate issuer:       /CN=63B4DE457F8E070CF2B3E14A61FF7DDFB3F87000
Certificate serial:       6CC6B816DC0ACBA56436125DD82FA22801A7B159
Authority key identifier: 63:B4:DE:45:7F:8E:07:0C:F2:B3:E1:4A:61:FF:7D:DF:B3:F8:70:00
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/63B4DE457F8E070CF2B3E14A61FF7DDFB3F87000.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Bw8F5EocdsCkcN4YfKBPkYJtNz4UFDpFLrytzVi7geun/0/3137302e3234352e3132352e302f32342d3234203d3e20323636303232.roa
Signing time:             Tue 05 Nov 2024 14:47:37 +0000
ROA not before:           Tue 05 Nov 2024 14:42:37 +0000
ROA not after:            Tue 04 Nov 2025 14:47:37 +0000
asID:                     266022
IP address blocks:        170.245.125.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:c6:b8:16:dc:0a:cb:a5:64:36:12:5d:d8:2f:a2:28:01:a7:b1:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63B4DE457F8E070CF2B3E14A61FF7DDFB3F87000
        Validity
            Not Before: Nov  5 14:42:37 2024 GMT
            Not After : Nov  4 14:47:37 2025 GMT
        Subject: CN=4851123B3686441AD5BC2D60B496BF30579A8C1F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:67:13:33:ae:29:88:cd:c0:77:2f:6c:48:72:
                    ca:80:e6:f4:bb:fc:13:bc:4f:50:79:86:ec:e0:59:
                    e1:26:ac:e5:ae:63:d1:1f:02:61:b8:9d:a1:fd:c4:
                    c1:6d:e4:6a:81:ba:1b:66:9f:56:05:37:39:3b:2f:
                    e5:eb:d5:65:f3:17:51:63:fb:7f:01:cd:68:09:8c:
                    0f:2d:49:4c:4b:b6:81:e1:70:95:11:47:2d:28:81:
                    6b:3f:c4:76:e3:1e:d4:29:f7:49:9e:ab:48:9e:3d:
                    a3:1b:b6:a6:15:27:fe:09:d2:f6:b9:74:d2:1e:6d:
                    b4:f4:a8:d1:1e:0a:76:02:49:08:5d:33:41:10:ae:
                    79:52:6c:bf:2e:c3:6a:cc:a0:e5:e9:fa:b9:2a:ef:
                    a1:e7:87:84:fa:81:e7:ed:1c:22:e8:8c:20:2a:a2:
                    8e:08:3e:a3:09:1d:dc:df:41:96:01:96:84:9d:38:
                    af:bc:03:64:e4:2a:22:8f:e8:75:7b:72:27:b7:84:
                    47:42:3b:19:e9:71:d3:c0:07:75:52:22:5d:78:de:
                    f6:dd:ac:03:ad:4d:73:0c:a9:19:c4:14:27:60:47:
                    83:2b:e6:08:9a:13:eb:81:5e:fd:83:3d:fc:fc:59:
                    e3:21:0e:be:08:e3:3a:bf:e7:a1:71:47:bf:d8:68:
                    fb:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:51:12:3B:36:86:44:1A:D5:BC:2D:60:B4:96:BF:30:57:9A:8C:1F
            X509v3 Authority Key Identifier:
                keyid:63:B4:DE:45:7F:8E:07:0C:F2:B3:E1:4A:61:FF:7D:DF:B3:F8:70:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Bw8F5EocdsCkcN4YfKBPkYJtNz4UFDpFLrytzVi7geun/0/63B4DE457F8E070CF2B3E14A61FF7DDFB3F87000.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/63B4DE457F8E070CF2B3E14A61FF7DDFB3F87000.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Bw8F5EocdsCkcN4YfKBPkYJtNz4UFDpFLrytzVi7geun/0/3137302e3234352e3132352e302f32342d3234203d3e20323636303232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.245.125.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3e:da:6b:25:64:cd:03:32:86:4a:1d:61:69:7b:57:bc:f7:f6:
         b9:e9:ea:5f:e0:e5:a5:1a:a9:f0:dd:91:29:a4:2f:b1:2d:c1:
         b3:46:99:75:97:6f:e1:08:b4:70:b9:b4:b0:07:33:34:c6:b0:
         d7:93:7b:49:76:94:c8:2a:c6:96:a5:58:36:2d:44:1b:d7:b5:
         f0:92:ca:5b:ec:81:bb:f7:e5:0d:c0:9b:b3:3f:41:01:c5:75:
         69:03:86:9d:4c:81:77:30:bc:5a:61:86:39:90:f2:ea:cf:3e:
         92:87:5a:e5:a5:ac:cb:6c:b1:ae:60:7e:0a:d4:6e:cd:67:c2:
         b2:a7:85:53:b7:8a:6c:e5:7d:6c:2c:cb:8f:5e:60:e5:29:f2:
         0e:7d:6f:7d:63:7d:8e:4d:99:37:8d:af:34:1e:50:c7:8e:d8:
         14:77:a8:2e:1b:fe:62:ca:01:0a:65:82:7a:d9:69:4b:69:a4:
         03:55:24:db:d6:aa:1f:27:75:c4:86:3e:ca:11:52:71:57:bc:
         da:43:f8:ac:f7:a7:a3:38:1b:8f:bd:e4:15:f4:46:18:05:36:
         76:e0:c7:1f:11:a8:e2:ae:5d:a3:a1:b5:0e:fb:9a:49:25:17:
         69:05:91:10:5e:34:98:c6:d2:73:72:b8:84:7a:fe:89:98:b5:
         0b:c3:55:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:17:56 2025 by rpki-client