Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2iRdQaEvaPgz4GhTWhgrvDEAp7pfLWToBHGDRzFyRBMx/0/3137302e3234342e33382e302f32342d3234203d3e20323636343930.roa
File:                     3137302e3234342e33382e302f32342d3234203d3e20323636343930.roa (raw, json)
Hash identifier:          Gx9dCI3pPsDETVMx2CDATX35YnP4KWeT1FXXIKpJ9ok=
Subject key identifier:   41:22:C1:25:F4:5D:05:A8:8F:29:2E:57:81:14:6A:DF:3B:5F:D8:5B
Certificate issuer:       /CN=C51069BD4C33DBE36053EA46C8B354BF95A2101D
Certificate serial:       5939F847D84BDF5E3A05B9407DC0D6CF7BB756A4
Authority key identifier: C5:10:69:BD:4C:33:DB:E3:60:53:EA:46:C8:B3:54:BF:95:A2:10:1D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C51069BD4C33DBE36053EA46C8B354BF95A2101D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2iRdQaEvaPgz4GhTWhgrvDEAp7pfLWToBHGDRzFyRBMx/0/3137302e3234342e33382e302f32342d3234203d3e20323636343930.roa
Signing time:             Tue 22 Mar 2022 00:01:07 +0000
ROA not before:           Mon 21 Mar 2022 23:56:07 +0000
ROA not after:            Tue 21 Mar 2023 00:01:07 +0000
asID:                     266490
IP address blocks:        170.244.38.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:39:f8:47:d8:4b:df:5e:3a:05:b9:40:7d:c0:d6:cf:7b:b7:56:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C51069BD4C33DBE36053EA46C8B354BF95A2101D
        Validity
            Not Before: Mar 21 23:56:07 2022 GMT
            Not After : Mar 21 00:01:07 2023 GMT
        Subject: CN=4122C125F45D05A88F292E5781146ADF3B5FD85B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:eb:9e:1f:f0:5d:3b:9e:1e:6e:82:0b:24:0a:
                    d5:f8:5c:e3:1e:25:15:c7:01:e2:e7:e8:38:78:e7:
                    df:d5:30:77:52:5a:24:cd:8a:64:09:45:14:ae:62:
                    a3:6c:15:5c:8d:e9:87:a9:0e:61:1a:61:10:e7:ee:
                    8b:87:db:ec:fb:3f:58:ee:df:3e:03:cc:0a:ff:38:
                    66:3a:4e:de:43:99:e2:7e:60:ff:8d:92:c9:1c:3a:
                    e3:7d:79:26:e5:f2:a7:b7:e5:03:5a:23:cf:7b:7e:
                    c4:b7:58:d6:34:09:27:3c:4f:1d:3a:c6:c6:0a:6f:
                    02:45:36:3e:6f:de:f5:30:ab:1f:4b:d6:a8:7f:00:
                    6d:ae:04:21:2c:d5:4e:41:d5:3e:6a:47:38:f5:58:
                    90:19:71:27:5e:42:07:cd:2c:f4:f8:3d:e3:75:4a:
                    a7:fe:21:1d:a8:b0:4a:f8:22:7d:22:dd:f9:1b:1e:
                    2a:ff:6e:cd:cc:fc:2b:61:7b:ba:12:8a:ec:44:7f:
                    be:79:a0:41:4a:0e:9d:a5:6b:a8:fc:89:5f:39:ab:
                    22:eb:e5:a1:2e:f7:01:da:92:47:bf:d9:45:35:dd:
                    42:2c:b9:72:57:cf:11:c6:61:d5:b6:30:ea:1f:30:
                    7f:59:4c:76:86:e3:d5:7f:1d:02:77:cb:a5:02:5a:
                    87:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:22:C1:25:F4:5D:05:A8:8F:29:2E:57:81:14:6A:DF:3B:5F:D8:5B
            X509v3 Authority Key Identifier:
                keyid:C5:10:69:BD:4C:33:DB:E3:60:53:EA:46:C8:B3:54:BF:95:A2:10:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2iRdQaEvaPgz4GhTWhgrvDEAp7pfLWToBHGDRzFyRBMx/0/C51069BD4C33DBE36053EA46C8B354BF95A2101D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C51069BD4C33DBE36053EA46C8B354BF95A2101D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2iRdQaEvaPgz4GhTWhgrvDEAp7pfLWToBHGDRzFyRBMx/0/3137302e3234342e33382e302f32342d3234203d3e20323636343930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.244.38.0/24

    Signature Algorithm: sha256WithRSAEncryption
         57:2c:66:b5:ff:c2:5d:96:3a:0e:31:58:0b:18:e8:d8:8c:91:
         c3:07:f5:49:cf:08:52:6a:97:3f:a5:f6:4e:34:ab:7d:f4:80:
         98:83:c9:57:4a:f2:5b:66:37:25:4c:bf:d3:6e:16:38:f6:ed:
         c9:ac:3e:2c:fd:b1:ce:52:62:ae:86:27:c1:48:e6:aa:d4:d4:
         e4:e8:81:59:9e:9b:14:67:60:4d:72:eb:8e:63:10:06:2a:cd:
         45:d0:3f:4d:27:a7:bc:2f:b2:1a:46:33:e0:e4:f5:a7:9e:9e:
         8f:d6:78:42:3a:70:66:33:8b:8e:a2:a3:16:7c:0b:7b:e6:8c:
         82:04:27:96:68:b1:79:d7:e6:3c:6b:09:93:78:d1:98:58:07:
         49:ce:d9:8c:ac:97:1c:f9:76:0b:b0:b6:b2:21:e6:6f:a8:60:
         40:a4:87:13:72:cf:d3:5c:4d:44:a7:e1:87:ae:d0:45:8e:15:
         d1:6b:8a:cf:53:93:bb:18:83:86:b8:9b:bb:19:14:9c:c5:c6:
         83:7f:56:09:42:54:ea:08:36:91:8d:b7:d0:eb:91:2d:e4:ea:
         f3:2a:90:de:98:91:c1:6e:cf:ce:38:8c:61:0b:cc:4b:2e:46:
         e9:ca:c9:e2:9c:44:11:d1:9a:95:4b:4c:e1:a4:9b:a8:87:9a:
         a5:9f:85:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:28:09 2025 by rpki-client