Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2o4paBoq6LzvHAs31rV7xtet2Hzi7TKLjBWpoMv7wDcQ/0/3137302e3233312e3133342e302f32332d3233203d3e20323635303639.roa
File:                     3137302e3233312e3133342e302f32332d3233203d3e20323635303639.roa (raw, json)
Hash identifier:          fT2s8VUT/z0HhThvzjbcIfZSBnaVPvXpMVS8GpkH1RE=
Subject key identifier:   8C:B0:7D:13:B4:E5:FA:D2:30:C9:B5:25:86:CB:DD:A2:8F:4A:9E:BB
Certificate issuer:       /CN=17C70EDD5F8146F1E1E21940FCFB346A62CA5E41
Certificate serial:       1B3F65FDF784C0CCFB05DD4875433F56248AC64A
Authority key identifier: 17:C7:0E:DD:5F:81:46:F1:E1:E2:19:40:FC:FB:34:6A:62:CA:5E:41
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/17C70EDD5F8146F1E1E21940FCFB346A62CA5E41.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2o4paBoq6LzvHAs31rV7xtet2Hzi7TKLjBWpoMv7wDcQ/0/3137302e3233312e3133342e302f32332d3233203d3e20323635303639.roa
Signing time:             Sat 26 Feb 2022 14:55:11 +0000
ROA not before:           Sat 26 Feb 2022 14:50:11 +0000
ROA not after:            Sat 25 Feb 2023 14:55:11 +0000
asID:                     265069
IP address blocks:        170.231.134.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:3f:65:fd:f7:84:c0:cc:fb:05:dd:48:75:43:3f:56:24:8a:c6:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=17C70EDD5F8146F1E1E21940FCFB346A62CA5E41
        Validity
            Not Before: Feb 26 14:50:11 2022 GMT
            Not After : Feb 25 14:55:11 2023 GMT
        Subject: CN=8CB07D13B4E5FAD230C9B52586CBDDA28F4A9EBB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:b1:18:cf:95:ae:87:be:61:ea:59:53:69:cf:
                    bf:bd:d7:6a:f5:15:98:0b:c5:a8:ec:5e:11:ed:c6:
                    dc:08:df:1c:f3:5b:ab:96:aa:b3:f1:c2:b5:02:39:
                    4f:9d:3a:8f:04:fa:0f:80:ca:5e:7c:0d:3d:f9:fc:
                    18:a9:6e:18:4c:0c:d2:a0:59:10:4f:d1:79:82:33:
                    e6:64:b7:be:10:d6:ce:64:c6:d5:c1:fb:2b:b0:ef:
                    db:cc:2f:bb:91:01:e7:5d:69:a4:bf:ae:44:5f:26:
                    be:67:a3:5f:b9:db:62:36:6c:4c:47:cf:33:63:c5:
                    7a:7a:3f:4a:36:67:6c:72:b4:d7:f6:b3:c5:82:0e:
                    3b:a7:bd:89:e0:f3:27:7b:08:fc:9a:74:c5:08:8e:
                    b0:43:1f:90:33:c2:f7:11:5d:34:f2:13:3b:9d:e6:
                    a4:df:5f:3d:30:17:75:7d:c4:9a:09:a4:bc:3a:41:
                    df:aa:8e:47:62:c5:b4:bc:d3:cb:1a:3a:8c:49:c5:
                    9d:47:9f:77:54:45:79:b5:f2:fd:01:5d:e7:eb:7c:
                    3e:05:b7:c3:84:80:6e:11:5f:03:db:0e:c5:4d:35:
                    48:47:41:ff:08:2b:ca:73:be:ee:17:7c:fe:34:a2:
                    20:ce:7f:c9:2c:66:f3:ba:ce:5b:1e:77:0e:ed:e5:
                    04:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:B0:7D:13:B4:E5:FA:D2:30:C9:B5:25:86:CB:DD:A2:8F:4A:9E:BB
            X509v3 Authority Key Identifier:
                keyid:17:C7:0E:DD:5F:81:46:F1:E1:E2:19:40:FC:FB:34:6A:62:CA:5E:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2o4paBoq6LzvHAs31rV7xtet2Hzi7TKLjBWpoMv7wDcQ/0/17C70EDD5F8146F1E1E21940FCFB346A62CA5E41.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/17C70EDD5F8146F1E1E21940FCFB346A62CA5E41.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2o4paBoq6LzvHAs31rV7xtet2Hzi7TKLjBWpoMv7wDcQ/0/3137302e3233312e3133342e302f32332d3233203d3e20323635303639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.231.134.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7b:d5:d5:63:52:b1:5d:f8:25:35:dc:18:a8:94:cb:9d:b7:dc:
         fb:29:82:9e:93:fe:27:1b:a6:55:9f:a4:a1:f7:ea:dc:6f:04:
         0b:5a:4e:a5:9d:0c:f2:b4:4f:1a:ed:09:65:bc:1c:41:f8:3a:
         dc:a4:3b:37:a1:92:30:c1:97:07:6e:e5:bc:79:f1:82:68:eb:
         b8:a7:e2:c4:d6:3f:36:67:af:1c:0d:ce:56:95:9d:82:6d:93:
         4a:19:38:f7:1b:5b:4a:38:ac:df:84:75:ec:d1:00:b6:80:c2:
         e6:de:8d:fa:da:5a:61:67:b5:04:1c:d9:f1:71:c4:83:11:1f:
         6a:f7:9c:a4:a5:20:dc:cd:d9:ec:6e:68:1b:47:da:58:14:26:
         d5:4b:45:57:71:59:bd:e1:f2:8d:c2:99:3f:a9:a4:db:23:6a:
         39:d9:37:6d:de:2b:53:56:b9:71:c8:9f:ee:2d:d5:ea:5f:58:
         31:b7:7d:23:5e:ad:f8:44:82:42:f0:06:65:90:2d:76:51:07:
         05:c2:5b:18:1c:5f:87:60:e1:b9:39:d1:da:63:90:eb:ca:0d:
         5b:23:72:14:52:2d:cd:3f:f3:54:89:bb:8d:19:fd:c8:f6:2a:
         8a:4f:79:a3:6a:52:2e:37:c8:4c:11:d1:22:5d:ec:39:fe:1d:
         9e:cd:65:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 02:16:02 2025 by rpki-client