Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2rC2b4pRVSgEqvcauGPe3Eo89e5D5wz2Pyn764wLAnKF/4/3137302e38302e36342e302f32322d3234203d3e20323632353134.roa
File:                     3137302e38302e36342e302f32322d3234203d3e20323632353134.roa (raw, json)
Hash identifier:          zNLzOznkP4xiD8DV3jWeTHBuFIth9n3qwG0fJ/t4jyI=
Subject key identifier:   7A:C5:81:10:B3:57:AF:1E:CC:F8:49:0C:7F:24:EA:A2:B7:A7:28:9C
Certificate issuer:       /CN=E603E9E9CBA4E18AF6D5A9489E1A922EC2BCA36D
Certificate serial:       275C3B8918A4E312B883AC4EF962FE26FCA723BA
Authority key identifier: E6:03:E9:E9:CB:A4:E1:8A:F6:D5:A9:48:9E:1A:92:2E:C2:BC:A3:6D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E603E9E9CBA4E18AF6D5A9489E1A922EC2BCA36D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2rC2b4pRVSgEqvcauGPe3Eo89e5D5wz2Pyn764wLAnKF/4/3137302e38302e36342e302f32322d3234203d3e20323632353134.roa
Signing time:             Fri 14 Oct 2022 01:47:20 +0000
ROA not before:           Fri 14 Oct 2022 01:42:20 +0000
ROA not after:            Fri 13 Oct 2023 01:47:20 +0000
asID:                     262514
IP address blocks:        170.80.64.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:5c:3b:89:18:a4:e3:12:b8:83:ac:4e:f9:62:fe:26:fc:a7:23:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E603E9E9CBA4E18AF6D5A9489E1A922EC2BCA36D
        Validity
            Not Before: Oct 14 01:42:20 2022 GMT
            Not After : Oct 13 01:47:20 2023 GMT
        Subject: CN=7AC58110B357AF1ECCF8490C7F24EAA2B7A7289C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:bb:b7:52:c5:4d:6c:cb:e5:2b:95:fe:0f:05:
                    b4:cd:4d:d9:ae:be:54:33:ad:3c:2e:cc:89:39:98:
                    64:2a:ed:a7:af:0c:78:76:f1:8b:f9:02:46:be:66:
                    2a:c0:30:1d:93:a1:1b:2c:fe:60:d2:13:d7:eb:e6:
                    02:05:66:6d:92:09:9f:6c:90:ad:78:db:c1:03:53:
                    fc:d2:0b:13:8f:49:9c:3a:13:d9:98:72:52:01:13:
                    2c:3a:2c:fa:2f:a6:58:96:53:ce:64:1e:40:54:47:
                    b1:9f:bb:29:6e:51:cb:12:d5:ba:6a:58:d8:84:a1:
                    c2:51:8d:9e:53:c8:1f:b6:71:f8:f9:71:0d:30:54:
                    9e:a1:0e:b4:00:e5:cc:c3:f2:68:55:1e:4c:8d:70:
                    b3:b2:86:3e:eb:e6:88:69:ab:3b:5d:9d:b6:52:d4:
                    87:ff:c0:3a:db:eb:6d:16:20:1d:71:c2:8d:c7:51:
                    d7:51:f8:11:ea:70:6e:f5:d8:f8:e4:08:e4:81:f9:
                    75:c5:6e:0b:8a:03:86:d4:f3:a1:b1:de:4d:36:7b:
                    bb:d2:88:c5:d2:a2:78:f6:66:0f:72:e4:90:93:ce:
                    ac:d0:a7:e4:a3:d9:16:6d:ae:29:fe:d8:ed:d1:4e:
                    0b:35:e9:03:79:64:07:ec:dd:32:87:75:ba:ad:9a:
                    21:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:C5:81:10:B3:57:AF:1E:CC:F8:49:0C:7F:24:EA:A2:B7:A7:28:9C
            X509v3 Authority Key Identifier:
                keyid:E6:03:E9:E9:CB:A4:E1:8A:F6:D5:A9:48:9E:1A:92:2E:C2:BC:A3:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2rC2b4pRVSgEqvcauGPe3Eo89e5D5wz2Pyn764wLAnKF/4/E603E9E9CBA4E18AF6D5A9489E1A922EC2BCA36D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E603E9E9CBA4E18AF6D5A9489E1A922EC2BCA36D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2rC2b4pRVSgEqvcauGPe3Eo89e5D5wz2Pyn764wLAnKF/4/3137302e38302e36342e302f32322d3234203d3e20323632353134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.80.64.0/22

    Signature Algorithm: sha256WithRSAEncryption
         cf:4e:9b:8d:36:6a:ba:49:ce:10:42:db:0e:e2:f4:42:05:2e:
         e0:65:dd:d0:95:16:0d:45:03:ce:b8:29:be:83:b8:19:d7:da:
         7b:d8:c6:43:e1:4e:12:bc:38:c6:1f:22:4e:7c:94:9c:70:43:
         c5:79:d3:d6:5f:04:85:22:a2:51:54:ce:99:0e:9d:27:02:20:
         d1:a9:6e:70:d6:d5:43:4e:21:34:5b:27:d7:30:b3:4c:2a:bf:
         eb:e7:f4:a8:d7:9d:e7:0d:2c:dd:7c:b0:70:6f:ab:bb:a3:f6:
         df:17:79:f6:95:2d:90:7a:d9:a5:21:68:3c:52:f5:17:e3:d4:
         f3:74:d3:a6:dc:5c:2c:a3:86:97:79:61:7d:3e:72:0e:72:93:
         d4:16:12:24:aa:04:91:1f:4a:63:0b:8d:21:91:4d:77:fc:70:
         82:ff:61:d1:cf:3f:89:5c:48:4c:d1:9c:6d:72:73:2b:7b:a0:
         16:58:0e:7d:a1:09:02:0b:c4:34:24:cc:de:23:16:c1:90:2c:
         ac:73:c2:bc:0a:6a:49:91:c3:e8:5b:8d:05:8d:93:b1:4e:38:
         5e:d6:af:37:7d:24:b8:9c:25:91:40:96:d4:69:d5:30:57:c6:
         65:36:a7:bd:6e:98:82:4b:e6:21:fb:77:6a:5e:e6:dd:59:b4:
         5f:3a:b2:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 15:33:01 2025 by rpki-client