Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/aTvUFQgCsqhBoFivznUNMLiqhrgNuuQysHptTnED3mF/0/3137372e36362e3137362e302f32322d3234203d3e203533303032.roa
File:                     3137372e36362e3137362e302f32322d3234203d3e203533303032.roa (raw, json)
Hash identifier:          QxulZE36SV3iWLXZ/5PHIaxCshXRPxEY8DPwYqEFvQ4=
Subject key identifier:   C4:EB:19:7F:21:95:2F:03:61:4F:47:AA:76:25:29:10:12:6F:82:53
Certificate issuer:       /CN=BDC75F483C9D6BDF3F8C2B8820E17A0D192D96E4
Certificate serial:       2676E29D5536B9862AE3878DF804F296B83AD4B6
Authority key identifier: BD:C7:5F:48:3C:9D:6B:DF:3F:8C:2B:88:20:E1:7A:0D:19:2D:96:E4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BDC75F483C9D6BDF3F8C2B8820E17A0D192D96E4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/aTvUFQgCsqhBoFivznUNMLiqhrgNuuQysHptTnED3mF/0/3137372e36362e3137362e302f32322d3234203d3e203533303032.roa
Signing time:             Thu 12 Jan 2023 20:02:31 +0000
ROA not before:           Thu 12 Jan 2023 19:57:31 +0000
ROA not after:            Thu 11 Jan 2024 20:02:31 +0000
asID:                     53002
IP address blocks:        177.66.176.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:76:e2:9d:55:36:b9:86:2a:e3:87:8d:f8:04:f2:96:b8:3a:d4:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BDC75F483C9D6BDF3F8C2B8820E17A0D192D96E4
        Validity
            Not Before: Jan 12 19:57:31 2023 GMT
            Not After : Jan 11 20:02:31 2024 GMT
        Subject: CN=C4EB197F21952F03614F47AA76252910126F8253
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:0e:6a:53:5f:d4:24:83:59:ad:0a:7e:fd:2f:
                    a6:6f:3d:a3:1b:9b:26:14:73:d7:5f:13:5d:19:21:
                    e1:57:54:dd:61:7c:87:98:db:f4:e8:fe:06:ac:41:
                    d9:ce:70:5b:aa:fd:31:c8:48:82:fa:19:2b:af:0f:
                    1a:af:08:2f:6b:ac:6e:44:0d:b9:34:bb:7f:da:a3:
                    d5:dd:1a:9a:3a:fd:34:08:7f:a1:ac:df:16:f8:97:
                    f9:0b:1c:86:9a:61:35:9b:d0:c4:e7:43:b9:cd:0d:
                    46:ef:04:7f:d7:11:66:b2:93:13:ef:48:70:92:93:
                    95:64:5b:43:6a:53:06:ed:9d:28:cd:af:ca:72:79:
                    72:8d:a1:fd:8e:92:d2:e1:f9:68:3f:21:c3:59:80:
                    79:43:35:85:ca:07:ed:1d:98:29:0e:c3:d9:56:0c:
                    23:55:25:5d:34:12:c3:b9:50:09:7a:be:9c:d1:c5:
                    6a:4a:3c:8c:57:64:7b:be:88:bd:43:19:52:9f:25:
                    b0:d6:23:3b:10:54:22:5b:36:d1:6e:1f:26:b2:af:
                    cd:df:01:fc:cf:38:26:da:79:cc:74:f2:24:68:2b:
                    cb:97:97:c6:8e:9e:89:02:91:91:c1:de:7c:4a:36:
                    d4:f2:23:5e:58:43:7a:48:a6:ad:35:36:86:42:c3:
                    fa:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:EB:19:7F:21:95:2F:03:61:4F:47:AA:76:25:29:10:12:6F:82:53
            X509v3 Authority Key Identifier:
                keyid:BD:C7:5F:48:3C:9D:6B:DF:3F:8C:2B:88:20:E1:7A:0D:19:2D:96:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/aTvUFQgCsqhBoFivznUNMLiqhrgNuuQysHptTnED3mF/0/BDC75F483C9D6BDF3F8C2B8820E17A0D192D96E4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BDC75F483C9D6BDF3F8C2B8820E17A0D192D96E4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/aTvUFQgCsqhBoFivznUNMLiqhrgNuuQysHptTnED3mF/0/3137372e36362e3137362e302f32322d3234203d3e203533303032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.66.176.0/22

    Signature Algorithm: sha256WithRSAEncryption
         39:c9:4a:77:7c:9b:f1:5d:9f:4b:36:4c:16:ee:e3:30:99:bd:
         6d:53:6a:bb:88:ef:01:73:c2:a8:2e:a5:b7:aa:23:f4:57:02:
         43:aa:47:23:20:e4:9d:42:61:a3:c4:cf:54:7d:18:52:e1:cb:
         d7:cd:f5:7a:b3:5a:c7:38:55:7b:e3:a2:32:a3:36:31:d5:40:
         42:87:62:68:e5:d9:83:cf:e4:1e:30:ec:5a:43:18:a1:40:08:
         2f:f2:3a:e5:2f:e2:e7:8d:14:3f:73:5e:80:02:6f:16:99:df:
         cb:b8:30:cc:75:87:3a:c1:fd:39:3b:7f:41:ac:48:04:eb:35:
         5d:e8:3f:29:5a:b7:63:6e:26:a7:df:f9:cb:05:a9:fb:be:c1:
         ea:09:c6:e9:6a:aa:69:86:f1:47:a8:4b:b0:6e:e4:1e:f4:51:
         f3:a5:c7:13:39:26:3d:f1:d5:e0:15:04:67:e6:cc:38:be:60:
         c7:50:c7:71:fc:bc:d8:55:96:d6:1e:56:e5:cc:ac:df:c8:20:
         9f:dc:53:f3:1d:35:07:f5:29:45:92:41:78:68:60:ba:67:3b:
         a0:b6:1e:8a:51:59:b4:4c:92:e5:8a:f5:30:e3:78:0d:97:d2:
         9b:0a:28:73:11:64:15:b8:df:90:91:53:ef:63:31:50:c2:0b:
         45:d5:4f:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:27:38 2025 by rpki-client