Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AACY62Xqj4HnNXtvG2wfW4qZM3ANso7SVj9MRLY5yZ5a/0/3137302e3234352e33382e302f32332d3233203d3e20323636303231.roa
File:                     3137302e3234352e33382e302f32332d3233203d3e20323636303231.roa (raw, json)
Hash identifier:          ItO4u+OfbklhLmhbiZnyfFhMQFJZop0x6QM6NXZkGNQ=
Subject key identifier:   7B:03:5E:06:9C:5E:AB:BF:19:92:43:F3:3C:68:97:53:1D:1F:9D:41
Certificate issuer:       /CN=4D50CC6156147AA39474DCFF014FE478639F7DD3
Certificate serial:       775024B809C37072FA2EA5511279B60794BA8177
Authority key identifier: 4D:50:CC:61:56:14:7A:A3:94:74:DC:FF:01:4F:E4:78:63:9F:7D:D3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4D50CC6156147AA39474DCFF014FE478639F7DD3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AACY62Xqj4HnNXtvG2wfW4qZM3ANso7SVj9MRLY5yZ5a/0/3137302e3234352e33382e302f32332d3233203d3e20323636303231.roa
Signing time:             Tue 08 Jul 2025 13:48:08 +0000
ROA not before:           Tue 08 Jul 2025 13:43:08 +0000
ROA not after:            Tue 07 Jul 2026 13:48:08 +0000
asID:                     266021
IP address blocks:        170.245.38.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:50:24:b8:09:c3:70:72:fa:2e:a5:51:12:79:b6:07:94:ba:81:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4D50CC6156147AA39474DCFF014FE478639F7DD3
        Validity
            Not Before: Jul  8 13:43:08 2025 GMT
            Not After : Jul  7 13:48:08 2026 GMT
        Subject: CN=7B035E069C5EABBF199243F33C6897531D1F9D41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:02:e1:1c:23:42:27:f7:4d:f4:37:6f:45:0b:
                    a1:0f:50:3c:1a:ef:76:0f:94:bc:fc:7a:67:20:a5:
                    f4:d5:8a:a4:fd:88:f2:d8:3d:93:ab:76:bb:5b:72:
                    2e:75:8f:5d:b1:56:3c:66:15:1b:5c:bf:84:06:b1:
                    05:2b:98:be:33:5c:a4:26:44:b0:1b:85:d5:db:14:
                    c3:4a:83:58:2a:9a:23:80:2e:62:0a:20:a8:d4:75:
                    87:2d:5c:44:d0:7d:a5:f6:b7:ca:07:d0:98:d3:27:
                    68:ce:78:a6:5a:01:ee:f9:29:f2:a4:e9:ec:c9:04:
                    fc:27:13:7a:05:c0:4d:36:3c:cf:e3:b8:e6:d2:a1:
                    7d:c5:37:3f:a4:0e:d7:d3:ed:5f:48:2b:ee:b2:94:
                    63:96:c3:39:e2:47:e9:06:ba:55:28:06:0a:58:fc:
                    08:b6:aa:23:b8:9d:48:19:af:00:21:0d:a1:aa:59:
                    a0:ca:53:84:81:aa:b1:14:42:6d:9b:20:cd:87:40:
                    d8:e3:dd:81:99:de:01:be:bf:18:01:96:73:b3:5c:
                    75:17:9a:86:67:0d:62:87:26:71:6b:6b:8b:f1:2a:
                    0c:66:c1:e9:b6:a1:30:84:41:ae:b8:cb:8d:88:bc:
                    1e:34:14:db:15:c8:cc:bb:58:28:15:0d:47:5c:82:
                    a4:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:03:5E:06:9C:5E:AB:BF:19:92:43:F3:3C:68:97:53:1D:1F:9D:41
            X509v3 Authority Key Identifier:
                keyid:4D:50:CC:61:56:14:7A:A3:94:74:DC:FF:01:4F:E4:78:63:9F:7D:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AACY62Xqj4HnNXtvG2wfW4qZM3ANso7SVj9MRLY5yZ5a/0/4D50CC6156147AA39474DCFF014FE478639F7DD3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4D50CC6156147AA39474DCFF014FE478639F7DD3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AACY62Xqj4HnNXtvG2wfW4qZM3ANso7SVj9MRLY5yZ5a/0/3137302e3234352e33382e302f32332d3233203d3e20323636303231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.245.38.0/23

    Signature Algorithm: sha256WithRSAEncryption
         24:07:59:9a:b7:c5:ec:4f:b8:a6:97:68:78:39:f3:bf:87:ce:
         5a:68:d9:75:37:07:a0:b0:6f:76:21:28:d8:1e:77:46:83:76:
         2b:60:e6:49:74:44:26:5b:99:1b:37:42:94:1f:2c:93:c4:9e:
         7d:10:d1:ae:af:93:dd:69:c4:53:f5:96:c7:5a:46:15:af:92:
         8d:0c:2c:91:3a:51:7e:a7:3a:65:f2:a1:b2:3b:87:59:c3:d9:
         c7:2c:9a:88:9b:2b:83:9b:ec:86:6e:e8:1c:8f:cc:99:19:e7:
         7a:5b:ac:ae:40:3f:1e:cb:2e:22:7b:06:fb:2d:9c:f4:57:22:
         b3:2a:b0:f5:5b:c4:2d:ca:45:33:82:76:a6:39:10:f7:9c:dd:
         6f:38:1f:21:83:33:7d:65:39:7f:16:76:56:44:83:ca:e3:b5:
         6e:2b:c7:0c:47:c1:bd:d3:ce:2b:ce:b2:d9:41:64:c4:cd:61:
         8e:06:e4:7b:7a:1f:0e:9f:97:50:a3:99:49:69:ba:d3:f3:55:
         e5:1d:93:f4:bd:b1:70:af:10:c6:05:f5:d1:69:25:5c:63:72:
         04:da:be:76:85:d3:08:c5:b7:e6:48:f9:48:d1:28:eb:25:be:
         a3:c9:3f:20:96:16:56:c2:80:6a:d8:25:e9:c6:29:a9:c6:05:
         17:b7:96:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 15:01:38 2025 by rpki-client