Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fm2mntrcgHRURKEjWrpUTiiardUTGB7krMytyaPY6VDZ/0/3137372e3132352e32382e302f32322d3234203d3e203532363432.roa
File:                     3137372e3132352e32382e302f32322d3234203d3e203532363432.roa (raw, json)
Hash identifier:          wmd36BNIkPDQ8UnDIoo22HnIIgm54+q/x4FdPAAYW80=
Subject key identifier:   49:67:42:85:22:9E:44:7D:42:AA:20:78:71:62:B3:D6:CF:B1:65:65
Certificate issuer:       /CN=8B4BC401AE86BB4EDD8185521B303D5AD281D7BB
Certificate serial:       228D8065FA90676F0A4688AD21D696828590ECDE
Authority key identifier: 8B:4B:C4:01:AE:86:BB:4E:DD:81:85:52:1B:30:3D:5A:D2:81:D7:BB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8B4BC401AE86BB4EDD8185521B303D5AD281D7BB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fm2mntrcgHRURKEjWrpUTiiardUTGB7krMytyaPY6VDZ/0/3137372e3132352e32382e302f32322d3234203d3e203532363432.roa
Signing time:             Fri 11 Aug 2023 17:38:07 +0000
ROA not before:           Fri 11 Aug 2023 17:33:07 +0000
ROA not after:            Fri 09 Aug 2024 17:38:07 +0000
asID:                     52642
IP address blocks:        177.125.28.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:8d:80:65:fa:90:67:6f:0a:46:88:ad:21:d6:96:82:85:90:ec:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8B4BC401AE86BB4EDD8185521B303D5AD281D7BB
        Validity
            Not Before: Aug 11 17:33:07 2023 GMT
            Not After : Aug  9 17:38:07 2024 GMT
        Subject: CN=49674285229E447D42AA20787162B3D6CFB16565
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:07:7d:84:c6:c8:a7:fd:6d:f3:0b:eb:44:4c:
                    0b:ed:36:ae:a8:07:ef:d7:3e:f8:fd:95:72:df:61:
                    5f:18:f4:2c:2e:e1:6d:80:71:5b:79:d9:d0:c1:3c:
                    fa:40:b4:cb:ae:29:91:bc:7b:85:71:74:e2:bf:e3:
                    1c:e4:b0:c8:df:ed:0f:f9:86:d6:38:e1:1e:03:db:
                    8c:9f:78:ad:da:26:25:e4:39:56:d5:05:2a:66:81:
                    07:a9:a8:98:a2:75:44:9f:7f:ee:50:69:91:58:69:
                    bb:49:67:9e:24:39:ab:eb:f5:b1:ab:a6:6a:dc:7a:
                    30:94:99:da:d8:37:a3:9e:52:0f:b0:06:01:07:38:
                    eb:ae:46:33:9a:75:f2:02:31:d3:6e:75:84:88:f3:
                    f8:f7:1b:6a:91:29:c5:6a:2a:37:dd:63:53:2c:7d:
                    68:a8:e8:9f:d8:05:75:e1:47:87:c0:e8:0d:24:9d:
                    6f:63:8a:2a:33:a3:7f:68:6b:9f:88:19:1e:5d:e9:
                    04:43:48:5a:32:e6:50:ae:a0:cb:15:92:52:2f:aa:
                    29:1b:1d:a5:8b:25:f2:82:83:f8:5f:53:82:99:e3:
                    ca:84:c8:82:83:19:e8:0e:db:9a:78:ac:22:a1:40:
                    ac:95:35:5f:2c:e6:9e:fb:1c:d2:75:60:bc:50:a3:
                    69:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:67:42:85:22:9E:44:7D:42:AA:20:78:71:62:B3:D6:CF:B1:65:65
            X509v3 Authority Key Identifier:
                keyid:8B:4B:C4:01:AE:86:BB:4E:DD:81:85:52:1B:30:3D:5A:D2:81:D7:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fm2mntrcgHRURKEjWrpUTiiardUTGB7krMytyaPY6VDZ/0/8B4BC401AE86BB4EDD8185521B303D5AD281D7BB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8B4BC401AE86BB4EDD8185521B303D5AD281D7BB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fm2mntrcgHRURKEjWrpUTiiardUTGB7krMytyaPY6VDZ/0/3137372e3132352e32382e302f32322d3234203d3e203532363432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.125.28.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1d:64:05:ef:b1:31:54:c7:11:0e:b8:63:b0:8c:90:0b:d2:ea:
         16:c9:a6:c6:8d:93:98:ec:39:90:4b:72:76:b2:90:92:23:4b:
         4d:38:08:d0:ce:5e:32:dc:db:5f:0b:44:36:62:a3:f4:95:b1:
         43:a5:de:82:34:9b:e7:3f:7a:ad:7b:c3:98:a3:72:c9:b0:34:
         26:46:cb:39:30:13:e5:8f:b0:8c:12:34:31:13:f8:8a:08:6d:
         39:9e:80:0b:65:a0:f4:e4:07:32:21:c4:9b:3f:88:04:de:98:
         0e:09:5a:a8:55:f6:b4:6e:4c:52:c8:be:a5:df:e7:87:ff:70:
         1a:60:79:ed:7b:35:e5:2e:bc:c6:d8:f3:0c:d5:0f:1d:c7:4d:
         42:d4:c7:62:d0:7f:e6:69:52:81:69:cb:19:ff:ba:7f:e1:6f:
         75:b2:ae:ba:c5:37:11:02:b7:14:42:c3:39:64:05:d5:8a:34:
         af:23:cc:cc:c2:3b:1b:ba:06:c7:fa:fc:00:09:df:60:65:72:
         ef:5a:cd:a3:96:06:de:29:5c:9c:66:de:2c:1d:f1:e8:9a:a9:
         42:f8:bf:d1:8e:07:99:a8:33:0b:3f:69:32:d8:20:75:24:05:
         3b:cd:ab:c4:86:b8:65:50:88:f0:6d:18:e1:f1:83:98:37:d6:
         1d:68:47:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 12:05:44 2025 by rpki-client