Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2o4paBoq6LzvHAs31rV7xtet2Hzi7TKLjBWpoMv7wDcQ/0/3137302e3233312e3133352e302f32342d3234203d3e20323635303639.roa
File:                     3137302e3233312e3133352e302f32342d3234203d3e20323635303639.roa (raw, json)
Hash identifier:          T/2cxwIV23Qc3Xsf2QQP3mUNR3imCpzNJo/NqqOLNdU=
Subject key identifier:   98:E8:C0:47:E3:74:00:19:C8:FC:D5:6D:22:A4:2F:E9:9B:AC:C8:5E
Certificate issuer:       /CN=17C70EDD5F8146F1E1E21940FCFB346A62CA5E41
Certificate serial:       1BD609B5B6C118BC651AE6F716372CF6375DC56A
Authority key identifier: 17:C7:0E:DD:5F:81:46:F1:E1:E2:19:40:FC:FB:34:6A:62:CA:5E:41
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/17C70EDD5F8146F1E1E21940FCFB346A62CA5E41.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2o4paBoq6LzvHAs31rV7xtet2Hzi7TKLjBWpoMv7wDcQ/0/3137302e3233312e3133352e302f32342d3234203d3e20323635303639.roa
Signing time:             Sat 26 Feb 2022 14:55:12 +0000
ROA not before:           Sat 26 Feb 2022 14:50:12 +0000
ROA not after:            Sat 25 Feb 2023 14:55:12 +0000
asID:                     265069
IP address blocks:        170.231.135.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:d6:09:b5:b6:c1:18:bc:65:1a:e6:f7:16:37:2c:f6:37:5d:c5:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=17C70EDD5F8146F1E1E21940FCFB346A62CA5E41
        Validity
            Not Before: Feb 26 14:50:12 2022 GMT
            Not After : Feb 25 14:55:12 2023 GMT
        Subject: CN=98E8C047E3740019C8FCD56D22A42FE99BACC85E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:05:dd:4e:65:c7:b0:eb:8b:5b:f8:1c:69:3a:
                    d8:ef:62:e4:be:38:63:ae:35:05:97:e2:cf:68:c9:
                    c3:1f:4a:5d:21:54:1e:96:c7:4e:c2:d7:c4:d4:a4:
                    25:a2:56:5a:00:de:52:c9:b6:73:ff:46:ec:b0:3e:
                    e3:d6:3e:b9:d6:49:e7:0b:9f:fa:86:c6:03:7d:3e:
                    d7:4d:d1:98:8a:85:ee:66:47:71:10:3e:35:cc:60:
                    7d:a2:48:db:1d:39:fc:e7:93:29:3a:53:0d:a0:75:
                    37:d1:13:1b:3b:15:25:a7:ff:8b:bd:cb:81:06:a5:
                    7c:e7:b0:64:9a:b1:68:02:ea:45:19:cb:e2:00:a9:
                    d1:4e:9a:6f:f3:c1:57:a9:96:97:e3:d9:c0:c1:ea:
                    15:39:25:0e:60:cd:6e:35:f5:58:61:30:a2:b9:3c:
                    87:18:c2:fe:42:a4:58:d2:f3:4e:96:ae:90:cb:01:
                    51:54:70:ba:cd:97:3b:c3:54:84:94:73:b9:c9:11:
                    9c:ee:77:6f:52:ba:c0:1e:5e:59:2e:41:40:6b:10:
                    a9:22:f9:b8:ef:2c:7d:00:6e:3f:80:1c:6f:ab:42:
                    a8:2e:37:3f:23:29:9f:24:57:6c:1e:5d:c1:be:c9:
                    cb:b6:55:f1:11:e7:a1:08:a7:b1:9b:77:3b:2d:05:
                    33:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:E8:C0:47:E3:74:00:19:C8:FC:D5:6D:22:A4:2F:E9:9B:AC:C8:5E
            X509v3 Authority Key Identifier:
                keyid:17:C7:0E:DD:5F:81:46:F1:E1:E2:19:40:FC:FB:34:6A:62:CA:5E:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2o4paBoq6LzvHAs31rV7xtet2Hzi7TKLjBWpoMv7wDcQ/0/17C70EDD5F8146F1E1E21940FCFB346A62CA5E41.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/17C70EDD5F8146F1E1E21940FCFB346A62CA5E41.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2o4paBoq6LzvHAs31rV7xtet2Hzi7TKLjBWpoMv7wDcQ/0/3137302e3233312e3133352e302f32342d3234203d3e20323635303639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.231.135.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a0:e4:85:c5:8f:ea:3e:49:4d:20:48:81:70:ce:5f:cd:a5:4f:
         94:ff:47:0f:e9:4e:4d:e0:8a:0e:23:8d:d1:55:f0:e6:54:b2:
         66:c6:c3:41:54:ad:5b:ca:b2:fc:0f:34:1d:7c:a0:15:f5:2a:
         00:dd:87:9d:10:bf:7c:e0:e4:2d:9a:c9:43:a4:b8:33:03:3e:
         df:bd:70:da:45:60:c3:69:1b:3e:17:86:d7:04:b8:eb:a3:3c:
         c6:66:87:49:8b:dd:0e:60:32:2c:3e:1c:4a:73:05:d3:68:0f:
         c6:0c:f3:34:c8:e9:b5:e1:01:a3:e7:8e:3c:1c:3c:8d:22:2f:
         29:77:f1:53:ab:d1:fd:15:e9:5f:b7:0b:68:0b:c8:43:5c:73:
         50:69:2c:19:ea:53:e0:e6:b3:a1:0c:55:0c:6b:0e:8f:e2:a7:
         ae:f8:34:01:de:da:60:83:bb:e2:9c:a6:82:87:02:d5:0f:96:
         89:25:83:9f:9f:02:8e:e5:6d:9e:41:7e:8b:c3:18:0a:36:77:
         0d:cd:c9:5a:85:31:ba:68:34:23:4a:dc:8d:f8:84:b1:4c:8a:
         89:6e:46:43:49:16:89:ff:38:e0:34:60:78:50:b3:e7:b1:8b:
         93:ae:5c:df:46:45:1c:10:3f:93:4d:b1:1b:94:a6:d2:4d:2f:
         4e:d1:be:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 04:12:19 2025 by rpki-client