Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2VuJwKwnn46nNdS9dEszZ8JzKqGnaN9ZpDPgfsUmSuUP/0/3137302e302e33322e302f32322d3234203d3e20323634353530.roa
File:                     3137302e302e33322e302f32322d3234203d3e20323634353530.roa (raw, json)
Hash identifier:          pZ0Vr20uGMNFMIfYaC4MmcTZxPOkoN9Qw95L5ch5x8E=
Subject key identifier:   CD:A9:D8:52:9C:D2:EB:D7:7E:1B:68:F0:12:3F:0E:B2:87:C1:E7:CF
Certificate issuer:       /CN=4B3CF06C0002D40DE1ED23E6F8328E9F4F5E4668
Certificate serial:       7948EB620FA1F0412CF99666A206059F50DE1CA4
Authority key identifier: 4B:3C:F0:6C:00:02:D4:0D:E1:ED:23:E6:F8:32:8E:9F:4F:5E:46:68
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B3CF06C0002D40DE1ED23E6F8328E9F4F5E4668.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2VuJwKwnn46nNdS9dEszZ8JzKqGnaN9ZpDPgfsUmSuUP/0/3137302e302e33322e302f32322d3234203d3e20323634353530.roa
Signing time:             Wed 04 Dec 2024 03:46:28 +0000
ROA not before:           Wed 04 Dec 2024 03:41:28 +0000
ROA not after:            Wed 03 Dec 2025 03:46:28 +0000
asID:                     264550
IP address blocks:        170.0.32.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:48:eb:62:0f:a1:f0:41:2c:f9:96:66:a2:06:05:9f:50:de:1c:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4B3CF06C0002D40DE1ED23E6F8328E9F4F5E4668
        Validity
            Not Before: Dec  4 03:41:28 2024 GMT
            Not After : Dec  3 03:46:28 2025 GMT
        Subject: CN=CDA9D8529CD2EBD77E1B68F0123F0EB287C1E7CF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:e6:00:d0:20:c1:5e:2f:e4:7a:6e:26:20:e2:
                    fe:52:6c:c4:b9:ac:ef:96:0b:d2:d0:ac:9c:d0:ae:
                    dc:e1:51:7b:c9:b4:28:ef:e5:d0:55:b4:5f:4d:fa:
                    e8:b3:16:cf:48:b6:51:c7:e1:51:09:7d:ae:8d:08:
                    c8:ba:d0:60:fb:fa:11:7d:8e:17:f4:d3:13:29:7c:
                    34:99:84:fe:27:d3:0d:13:bd:45:31:ba:d0:10:c4:
                    f5:d3:69:57:a8:90:62:76:c1:cd:e9:18:c4:23:fc:
                    0c:ef:34:c9:49:8e:0f:66:19:6e:89:b0:d9:07:23:
                    31:35:ff:b4:f6:fc:43:ff:ca:98:ab:c6:70:2d:9f:
                    0c:60:0d:b6:97:d9:aa:7c:70:21:e2:a9:9e:7c:d9:
                    5d:9b:e6:27:fd:f2:19:25:71:61:55:ad:2b:d0:14:
                    c0:ba:b5:73:6b:56:98:45:c2:68:3f:57:dd:5b:ef:
                    5c:41:0c:a8:b7:e3:3f:1d:cd:ae:b2:1b:12:b8:1b:
                    e6:94:8e:52:44:7b:20:c8:25:5a:d7:db:e4:ad:b2:
                    57:1b:72:2f:e0:19:90:88:68:d0:06:5e:7e:27:2c:
                    d8:92:dc:f8:b2:51:f2:a9:f8:76:0a:b8:a0:c2:ce:
                    aa:3a:78:c0:65:27:6c:ef:f3:0d:28:9c:66:c3:92:
                    3c:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:A9:D8:52:9C:D2:EB:D7:7E:1B:68:F0:12:3F:0E:B2:87:C1:E7:CF
            X509v3 Authority Key Identifier:
                keyid:4B:3C:F0:6C:00:02:D4:0D:E1:ED:23:E6:F8:32:8E:9F:4F:5E:46:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2VuJwKwnn46nNdS9dEszZ8JzKqGnaN9ZpDPgfsUmSuUP/0/4B3CF06C0002D40DE1ED23E6F8328E9F4F5E4668.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B3CF06C0002D40DE1ED23E6F8328E9F4F5E4668.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2VuJwKwnn46nNdS9dEszZ8JzKqGnaN9ZpDPgfsUmSuUP/0/3137302e302e33322e302f32322d3234203d3e20323634353530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.0.32.0/22

    Signature Algorithm: sha256WithRSAEncryption
         72:af:0c:7f:eb:6d:49:12:b8:16:09:31:aa:1b:f4:e2:8a:ed:
         1c:41:30:d9:1a:de:ca:79:8e:72:7f:bc:c8:67:94:9e:16:6d:
         cd:e6:7e:f4:e9:a4:41:5d:db:1b:03:98:bd:b1:cf:10:24:70:
         5c:a7:2f:fd:e7:b8:c3:97:18:66:50:e7:58:b4:4a:7e:41:8d:
         81:b0:91:f3:98:c6:08:1d:07:ee:3f:d4:27:7c:f2:d9:77:bf:
         18:79:44:31:f0:91:12:1b:ed:ad:21:da:f5:d1:ed:b1:6b:e5:
         31:ed:d5:dd:5e:53:da:ee:59:1d:17:95:1b:03:f8:1b:ac:7b:
         18:b0:f9:fd:b8:3d:14:97:0c:b9:0c:9e:02:e6:76:d8:10:55:
         5e:66:f8:42:72:5a:04:57:10:c0:2d:98:03:e5:b6:44:b5:aa:
         09:ef:f4:2b:34:fc:1d:52:06:32:45:02:63:e9:40:b3:e6:3d:
         8c:e5:8a:7e:e0:26:08:c9:bb:e5:46:af:e6:32:ef:09:ee:ac:
         c2:02:2d:05:1b:26:fe:47:16:a7:93:98:65:2c:c3:e9:b3:cf:
         51:a9:56:e1:de:e7:e9:48:c5:26:7c:1c:7d:a4:89:5b:b7:9a:
         21:e1:37:c1:91:d4:d1:e7:6e:1a:ae:39:dc:2d:5b:4d:ea:04:
         3d:f2:4c:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 02:29:45 2025 by rpki-client