Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5DStw3JiYMo8QnDAcZZE5UhgCZP5dSuSxQGJtx7qFzgd/0/3137302e38302e36362e302f32342d3234203d3e20323632353134.roa
File:                     3137302e38302e36362e302f32342d3234203d3e20323632353134.roa (raw, json)
Hash identifier:          Qtoybeiqdib2cFgHfeciSEIYu9U3dQ+IpvK+wKRFjX8=
Subject key identifier:   56:74:FA:3F:DD:0E:C7:A6:CC:5D:8B:0D:1C:59:46:7C:F9:1B:07:4B
Certificate issuer:       /CN=6BB28979534152D56CDB8941822004B21C044476
Certificate serial:       4B18E8B7E88E363F6E1338AB7E3B005D85B59EA5
Authority key identifier: 6B:B2:89:79:53:41:52:D5:6C:DB:89:41:82:20:04:B2:1C:04:44:76
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6BB28979534152D56CDB8941822004B21C044476.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5DStw3JiYMo8QnDAcZZE5UhgCZP5dSuSxQGJtx7qFzgd/0/3137302e38302e36362e302f32342d3234203d3e20323632353134.roa
Signing time:             Sun 19 Mar 2023 13:26:28 +0000
ROA not before:           Sun 19 Mar 2023 13:21:28 +0000
ROA not after:            Sun 17 Mar 2024 13:26:28 +0000
asID:                     262514
IP address blocks:        170.80.66.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:18:e8:b7:e8:8e:36:3f:6e:13:38:ab:7e:3b:00:5d:85:b5:9e:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6BB28979534152D56CDB8941822004B21C044476
        Validity
            Not Before: Mar 19 13:21:28 2023 GMT
            Not After : Mar 17 13:26:28 2024 GMT
        Subject: CN=5674FA3FDD0EC7A6CC5D8B0D1C59467CF91B074B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:8a:21:a2:f1:ed:86:34:59:2d:35:98:3f:29:
                    bc:68:1c:90:14:52:27:2f:54:a0:93:d2:a6:18:ff:
                    db:d3:7e:09:98:82:67:cb:5f:94:ac:78:bb:ec:9f:
                    76:37:05:ec:bb:f6:50:df:23:f1:4a:de:32:08:82:
                    e8:c8:bf:a1:6c:b1:bc:dc:5a:5f:4c:ac:8f:fd:fe:
                    09:17:6a:87:6d:af:9f:fb:1d:c0:aa:d4:2f:7a:d7:
                    e5:49:68:b5:0b:67:0a:44:ce:72:14:4e:d1:c9:5c:
                    db:b9:95:57:be:fc:78:d4:86:ca:e8:3b:80:8c:91:
                    37:a0:2c:71:03:72:12:cc:a7:8c:34:62:04:01:e9:
                    49:61:01:3f:d7:b2:77:ee:54:35:a0:c8:b1:58:fb:
                    bc:44:31:1d:5b:47:eb:68:08:b5:9b:6d:58:e1:5b:
                    b2:ba:0a:f4:49:0b:27:95:f7:7c:d1:7e:d3:3b:21:
                    17:68:81:3b:13:bd:3f:c2:d7:04:bb:60:fc:9c:b3:
                    31:2d:c3:b1:0a:4c:84:f3:aa:b4:3e:d2:52:d6:0d:
                    c1:fc:7a:83:93:8a:6c:2f:3b:f4:15:8e:01:0a:7d:
                    b4:de:61:08:d1:d0:fc:5f:27:69:8c:e7:40:1d:5b:
                    7e:ea:47:21:1d:05:8b:c0:29:2b:77:2f:b2:b4:f0:
                    c6:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:74:FA:3F:DD:0E:C7:A6:CC:5D:8B:0D:1C:59:46:7C:F9:1B:07:4B
            X509v3 Authority Key Identifier:
                keyid:6B:B2:89:79:53:41:52:D5:6C:DB:89:41:82:20:04:B2:1C:04:44:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5DStw3JiYMo8QnDAcZZE5UhgCZP5dSuSxQGJtx7qFzgd/0/6BB28979534152D56CDB8941822004B21C044476.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6BB28979534152D56CDB8941822004B21C044476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5DStw3JiYMo8QnDAcZZE5UhgCZP5dSuSxQGJtx7qFzgd/0/3137302e38302e36362e302f32342d3234203d3e20323632353134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.80.66.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6a:6e:66:aa:8f:8c:b8:2c:fa:01:0d:44:a6:95:b4:0d:4c:26:
         8c:ea:f8:56:c3:75:fa:ef:79:fa:68:d7:0b:7e:38:f4:37:77:
         fb:24:f1:37:35:61:19:c1:bb:1e:18:55:53:10:99:77:99:7e:
         b2:55:58:16:9c:1e:ed:fc:b9:4a:e6:8a:98:1a:ca:0f:7e:3f:
         97:35:e7:dc:32:fc:3d:a2:0c:70:bc:15:8e:bf:08:96:7a:10:
         0d:38:8f:ab:61:d6:7b:b7:97:8b:77:37:af:e7:9e:d5:41:51:
         e4:1e:aa:f9:22:2a:2f:6f:45:4c:56:e7:bb:31:b7:47:21:41:
         96:e0:c8:0f:a3:c9:8c:4c:23:52:30:fb:16:6c:3c:a3:85:8b:
         aa:79:16:1c:10:bf:44:56:55:35:72:65:aa:34:e5:d0:02:0b:
         a9:af:f5:a8:62:7f:f8:e6:a7:b4:ed:4f:7a:24:78:02:56:38:
         58:94:94:f0:50:d4:00:b1:cb:21:a9:d9:0e:f1:2a:61:1e:1d:
         cf:45:15:9b:5f:fe:10:c1:5d:51:dd:51:ae:77:87:7c:44:ae:
         12:86:f6:ec:94:97:27:e4:d9:ae:8b:b0:1b:81:d5:a1:ac:e6:
         f1:11:2f:eb:de:a4:57:51:21:60:1c:6e:cc:54:c2:cb:77:78:
         f2:32:3d:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 02:47:28 2025 by rpki-client