Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2UDdFBPRLT4owx99QheiQdCqUxoMPHTfgJxhcLmUpt5Q/0/3137302e3233332e3233362e302f32322d3332203d3e20323635303938.roa
File:                     3137302e3233332e3233362e302f32322d3332203d3e20323635303938.roa (raw, json)
Hash identifier:          CKwFqDX+aT/0BvxaGnZeRqSAm/SkhLO/IeoVsEfs1tY=
Subject key identifier:   F7:E8:F1:5E:48:E3:8A:C7:1F:A0:59:D8:FB:3E:3C:AF:38:E5:B2:BE
Certificate issuer:       /CN=00A11C7AD994FADA94CDDB398BF4111F38632AF3
Certificate serial:       13AA0E01877E088027F3881F2E64A1E818E0BDD5
Authority key identifier: 00:A1:1C:7A:D9:94:FA:DA:94:CD:DB:39:8B:F4:11:1F:38:63:2A:F3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/00A11C7AD994FADA94CDDB398BF4111F38632AF3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2UDdFBPRLT4owx99QheiQdCqUxoMPHTfgJxhcLmUpt5Q/0/3137302e3233332e3233362e302f32322d3332203d3e20323635303938.roa
Signing time:             Wed 07 Aug 2024 16:53:29 +0000
ROA not before:           Wed 07 Aug 2024 16:48:29 +0000
ROA not after:            Wed 06 Aug 2025 16:53:29 +0000
asID:                     265098
IP address blocks:        170.233.236.0/22 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:aa:0e:01:87:7e:08:80:27:f3:88:1f:2e:64:a1:e8:18:e0:bd:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00A11C7AD994FADA94CDDB398BF4111F38632AF3
        Validity
            Not Before: Aug  7 16:48:29 2024 GMT
            Not After : Aug  6 16:53:29 2025 GMT
        Subject: CN=F7E8F15E48E38AC71FA059D8FB3E3CAF38E5B2BE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:31:30:42:3e:a8:1f:71:ab:67:49:4e:54:77:
                    df:b6:93:86:b2:49:ea:28:1c:e6:b8:20:94:a8:38:
                    48:92:19:d5:56:67:e9:27:31:f1:f7:f8:ce:9f:d6:
                    54:86:14:c9:ea:f5:18:9f:34:71:e0:2c:4c:7c:20:
                    c5:c6:f2:05:84:bd:83:47:6e:38:1a:51:d0:ff:67:
                    aa:10:69:e5:00:43:b8:38:81:4d:6d:de:e7:f7:41:
                    bb:8f:42:ed:7a:88:58:36:20:40:e7:93:a3:d3:fd:
                    94:de:52:01:38:8a:81:1e:b2:9a:48:4f:8f:72:ff:
                    b0:e1:da:46:e6:6e:40:2c:09:67:0c:d1:dc:c9:e6:
                    3b:a9:66:86:c8:d0:76:dc:c4:e7:1a:ce:e1:e2:f6:
                    5b:fb:c7:43:9b:2c:16:31:d7:9a:27:bd:1b:25:dd:
                    e5:16:b9:39:3b:45:fa:7a:98:75:22:c4:01:b4:45:
                    49:33:6a:24:f4:cf:34:ff:d7:70:15:0b:a4:c1:60:
                    a9:d9:f5:2d:09:60:77:5c:ce:fe:16:b1:6c:bc:e6:
                    21:80:a3:46:37:2b:c6:1f:44:67:fc:8a:94:1d:a1:
                    80:1e:ea:1b:a4:44:30:a7:ba:57:40:bb:b1:ff:79:
                    d6:84:e1:b4:99:f9:c3:7f:92:10:98:7f:d7:b6:1d:
                    cb:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:E8:F1:5E:48:E3:8A:C7:1F:A0:59:D8:FB:3E:3C:AF:38:E5:B2:BE
            X509v3 Authority Key Identifier:
                keyid:00:A1:1C:7A:D9:94:FA:DA:94:CD:DB:39:8B:F4:11:1F:38:63:2A:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2UDdFBPRLT4owx99QheiQdCqUxoMPHTfgJxhcLmUpt5Q/0/00A11C7AD994FADA94CDDB398BF4111F38632AF3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/00A11C7AD994FADA94CDDB398BF4111F38632AF3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2UDdFBPRLT4owx99QheiQdCqUxoMPHTfgJxhcLmUpt5Q/0/3137302e3233332e3233362e302f32322d3332203d3e20323635303938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.233.236.0/22

    Signature Algorithm: sha256WithRSAEncryption
         35:fd:48:9a:ad:70:ef:c9:b8:6b:aa:08:82:d0:22:5f:86:76:
         55:9b:aa:24:31:8b:48:aa:cc:4e:ad:b3:6b:8e:4d:09:36:35:
         61:f5:3e:11:0e:89:88:e7:de:87:10:0a:da:c9:6b:92:7e:05:
         38:43:1a:35:37:e1:73:48:b2:49:d3:a0:eb:2a:0a:da:a5:35:
         47:89:fa:9d:20:92:41:dd:8b:8e:14:e0:34:6c:2e:c8:99:7c:
         99:38:9a:47:bd:54:d4:10:fe:85:2b:c9:6e:2e:a4:13:f2:b9:
         56:2a:8c:d6:4c:42:cd:3b:13:4f:37:88:fb:a4:7d:11:50:ed:
         7f:b7:f7:c1:4d:0b:45:c7:cf:86:f6:0b:98:b3:f5:d1:04:d1:
         2b:1a:89:c0:4e:32:58:81:33:72:5f:4e:d2:cb:77:99:e9:e2:
         00:42:88:47:55:58:fb:70:50:8d:24:40:11:9c:51:21:e1:0e:
         a0:8c:7b:cd:24:98:54:e1:c3:b2:11:62:36:77:78:86:39:77:
         74:26:e2:26:41:08:ad:d5:53:94:ac:5a:1a:c0:56:77:2a:fc:
         5b:73:65:0d:fe:1a:b5:a6:4d:50:16:24:52:c4:3e:80:18:c4:
         b8:0d:6d:ca:63:52:2e:3e:1e:b0:5b:13:05:af:c2:8d:79:60:
         f8:0c:2e:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 04:01:11 2025 by rpki-client