Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AACY62Xqj4HnNXtvG2wfW4qZM3ANso7SVj9MRLY5yZ5a/0/3137302e3234352e33362e302f32322d3232203d3e20323636303231.roa
File:                     3137302e3234352e33362e302f32322d3232203d3e20323636303231.roa (raw, json)
Hash identifier:          fScQJLaF4EQc0SPsvZcIUh597R4l32gBRiJV9gnHixo=
Subject key identifier:   76:AC:3E:66:8E:85:BC:AE:21:3F:F1:7E:D2:48:D1:D6:24:60:57:15
Certificate issuer:       /CN=4D50CC6156147AA39474DCFF014FE478639F7DD3
Certificate serial:       4AD8817D608DEC7843AC0BB8FC41992457AD16F5
Authority key identifier: 4D:50:CC:61:56:14:7A:A3:94:74:DC:FF:01:4F:E4:78:63:9F:7D:D3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4D50CC6156147AA39474DCFF014FE478639F7DD3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AACY62Xqj4HnNXtvG2wfW4qZM3ANso7SVj9MRLY5yZ5a/0/3137302e3234352e33362e302f32322d3232203d3e20323636303231.roa
Signing time:             Tue 08 Jul 2025 13:48:09 +0000
ROA not before:           Tue 08 Jul 2025 13:43:09 +0000
ROA not after:            Tue 07 Jul 2026 13:48:09 +0000
asID:                     266021
IP address blocks:        170.245.36.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:d8:81:7d:60:8d:ec:78:43:ac:0b:b8:fc:41:99:24:57:ad:16:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4D50CC6156147AA39474DCFF014FE478639F7DD3
        Validity
            Not Before: Jul  8 13:43:09 2025 GMT
            Not After : Jul  7 13:48:09 2026 GMT
        Subject: CN=76AC3E668E85BCAE213FF17ED248D1D624605715
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:b9:9d:c6:09:5e:28:f6:44:c0:9e:e6:55:86:
                    8d:28:26:fc:d6:fc:46:f1:26:1b:80:e4:ec:1d:ce:
                    d1:63:20:18:a9:dd:f7:12:30:9d:8b:11:9a:33:c0:
                    03:c6:6c:41:4c:09:3f:88:f2:20:fd:7a:ab:f7:21:
                    b5:d2:ee:3c:5a:df:e3:8e:74:94:ce:c7:27:d8:35:
                    c9:a7:b7:75:3b:21:f9:92:cd:14:9e:34:59:75:4c:
                    4b:c0:78:5f:91:62:56:40:00:50:dc:ea:5f:d3:f1:
                    9e:2b:03:00:65:8a:55:9b:0d:2f:2c:2d:ec:00:c8:
                    e3:16:8b:27:b6:72:55:f4:3f:02:b6:e7:dd:f2:42:
                    15:c0:03:b1:c2:66:45:c8:90:10:7e:83:18:24:2b:
                    1d:b4:27:67:21:aa:d7:ca:ed:31:a1:4f:c3:8a:a4:
                    bd:da:9a:1d:2b:b8:3f:4e:e5:76:13:45:e9:98:2e:
                    9e:55:bc:e6:03:df:72:c1:77:3b:33:d4:c5:2b:af:
                    b0:77:05:36:d1:61:f1:99:f5:2a:74:3e:ec:f7:e1:
                    ec:9e:87:9b:10:dc:f2:77:05:39:e8:d5:03:f1:48:
                    3c:79:44:c1:4d:a9:af:9a:07:6b:ad:7c:74:0f:59:
                    6a:0e:0c:e6:db:34:8c:9a:75:1e:ac:9c:e2:03:3f:
                    60:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:AC:3E:66:8E:85:BC:AE:21:3F:F1:7E:D2:48:D1:D6:24:60:57:15
            X509v3 Authority Key Identifier:
                keyid:4D:50:CC:61:56:14:7A:A3:94:74:DC:FF:01:4F:E4:78:63:9F:7D:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AACY62Xqj4HnNXtvG2wfW4qZM3ANso7SVj9MRLY5yZ5a/0/4D50CC6156147AA39474DCFF014FE478639F7DD3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4D50CC6156147AA39474DCFF014FE478639F7DD3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AACY62Xqj4HnNXtvG2wfW4qZM3ANso7SVj9MRLY5yZ5a/0/3137302e3234352e33362e302f32322d3232203d3e20323636303231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.245.36.0/22

    Signature Algorithm: sha256WithRSAEncryption
         74:7c:65:50:99:bb:a5:8d:c7:e2:2c:c3:ad:67:86:1d:7b:50:
         38:be:da:f7:f1:f7:1e:05:50:a8:ba:fd:c3:bf:92:fe:30:69:
         04:0a:6f:61:84:98:a3:0a:30:c5:69:36:a2:e2:f4:ed:87:36:
         79:5f:22:b7:32:2b:c7:bf:01:40:8b:92:3e:7c:5f:f5:60:cf:
         90:2c:2b:6d:50:e4:78:bc:4f:9b:b8:bd:6d:2c:f4:88:a1:7d:
         7e:06:d7:86:e2:6a:e0:0f:2b:00:0d:f2:eb:5b:ed:3d:b4:7c:
         21:5d:8b:9d:74:77:aa:04:e1:c3:56:e4:89:ae:59:0a:62:44:
         9b:5d:9b:63:20:a9:8a:e2:2b:a9:d3:71:28:0e:28:e2:5f:fb:
         60:15:d0:b5:73:06:15:9e:8c:c0:ee:4e:a4:74:0d:ef:41:32:
         b9:5b:a1:e0:c1:18:29:92:19:c0:ed:43:c4:e2:a0:46:3a:42:
         f7:c5:87:d2:97:70:de:3a:77:56:03:87:07:a4:06:e7:ae:4f:
         31:c9:7c:10:04:38:af:97:34:55:37:fc:d6:f7:c4:7b:77:82:
         e3:c6:ab:ee:15:ab:0f:55:52:85:44:c1:09:f5:c8:4d:ec:db:
         b7:53:fe:63:ef:a3:3d:d3:77:60:c0:9a:a1:4f:cd:81:53:90:
         a7:fa:9b:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 15:15:50 2025 by rpki-client