Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2tHiuxqo6nbwZtqCAqKx2DbU76vrHWUX1BbZPF5E8jfB/0/3137302e37392e3230302e302f32342d3234203d3e20323636333034.roa
File:                     3137302e37392e3230302e302f32342d3234203d3e20323636333034.roa (raw, json)
Hash identifier:          iocg3XFiFTVYqAh+zipiGQT6mxfkCsw0pGM8bsNgycs=
Subject key identifier:   C2:4C:1C:39:70:DE:DB:15:C8:DA:8E:11:07:33:EB:33:5E:3C:1A:5D
Certificate issuer:       /CN=8A3100E87CE06C0F63F6CCC110C5C917FD7CEBF7
Certificate serial:       1459D4E0F2FBA2650F9D8E402A614C28B577DBF6
Authority key identifier: 8A:31:00:E8:7C:E0:6C:0F:63:F6:CC:C1:10:C5:C9:17:FD:7C:EB:F7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8A3100E87CE06C0F63F6CCC110C5C917FD7CEBF7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2tHiuxqo6nbwZtqCAqKx2DbU76vrHWUX1BbZPF5E8jfB/0/3137302e37392e3230302e302f32342d3234203d3e20323636333034.roa
Signing time:             Tue 27 Jun 2023 12:30:53 +0000
ROA not before:           Tue 27 Jun 2023 12:25:53 +0000
ROA not after:            Tue 25 Jun 2024 12:30:53 +0000
asID:                     266304
IP address blocks:        170.79.200.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:59:d4:e0:f2:fb:a2:65:0f:9d:8e:40:2a:61:4c:28:b5:77:db:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8A3100E87CE06C0F63F6CCC110C5C917FD7CEBF7
        Validity
            Not Before: Jun 27 12:25:53 2023 GMT
            Not After : Jun 25 12:30:53 2024 GMT
        Subject: CN=C24C1C3970DEDB15C8DA8E110733EB335E3C1A5D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:e6:b2:c8:45:7b:a0:14:c5:ad:f1:5f:c9:cb:
                    7b:85:11:c2:fa:0c:d4:6e:82:4b:79:b8:4a:89:95:
                    45:dc:aa:a9:dc:65:64:de:20:03:3b:26:6a:0a:62:
                    49:c8:95:5c:9f:ba:f4:a8:e1:d3:5c:1b:25:b8:bf:
                    cd:e9:0d:9f:8c:c2:27:26:ce:25:3f:ad:d7:c3:16:
                    27:b7:da:cf:60:1b:7b:e4:5f:45:f5:64:8c:13:92:
                    a2:4a:ab:98:ab:8e:7a:d7:53:c7:22:61:16:95:9c:
                    7a:41:ef:90:b5:c6:8c:9a:e0:a9:21:55:55:ce:3f:
                    ee:43:1a:0e:1b:92:17:29:40:8d:11:72:d6:10:5b:
                    ef:44:00:ff:1f:a3:12:f3:b1:3f:75:55:cc:74:a1:
                    cf:de:66:4f:cf:1d:a9:d5:c6:89:00:4b:a5:7c:1a:
                    09:dc:ba:d9:db:84:8b:ce:bd:e2:d6:14:78:3e:71:
                    86:89:24:06:ae:86:b8:20:a5:01:73:c8:2e:aa:f3:
                    e9:3a:98:fb:71:42:69:66:e6:bf:c8:52:ef:bd:48:
                    dc:38:9a:29:f7:b5:5b:50:8d:c2:9a:58:56:7f:9d:
                    cd:67:62:8e:70:2d:f2:69:bf:43:e8:75:c8:73:ad:
                    93:cf:df:b9:02:93:f3:6d:ae:d3:94:0b:0c:0b:39:
                    80:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:4C:1C:39:70:DE:DB:15:C8:DA:8E:11:07:33:EB:33:5E:3C:1A:5D
            X509v3 Authority Key Identifier:
                keyid:8A:31:00:E8:7C:E0:6C:0F:63:F6:CC:C1:10:C5:C9:17:FD:7C:EB:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2tHiuxqo6nbwZtqCAqKx2DbU76vrHWUX1BbZPF5E8jfB/0/8A3100E87CE06C0F63F6CCC110C5C917FD7CEBF7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8A3100E87CE06C0F63F6CCC110C5C917FD7CEBF7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2tHiuxqo6nbwZtqCAqKx2DbU76vrHWUX1BbZPF5E8jfB/0/3137302e37392e3230302e302f32342d3234203d3e20323636333034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.79.200.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6b:90:43:35:b3:79:58:f7:9b:4c:01:4a:91:8f:39:fd:a0:e6:
         05:1b:3d:63:cc:f9:e2:72:5a:d1:4c:bc:b2:33:1a:08:5b:0e:
         f3:a4:f9:45:ba:76:7b:5b:25:24:83:58:1d:5f:cf:aa:03:21:
         e9:a4:19:22:d4:ad:71:51:0c:cd:43:3f:33:07:c9:61:f1:6c:
         d4:b9:69:3f:12:9d:6e:e3:3b:85:92:4c:0f:07:3d:62:1c:e3:
         87:a6:33:e3:94:87:db:21:e4:02:61:5e:cc:f1:43:c9:e1:38:
         03:6e:1e:14:04:e2:ed:df:61:45:54:ca:58:3e:4d:dd:9b:cd:
         37:6b:28:dc:9d:a2:e2:53:f6:ae:84:65:71:14:19:73:f5:ba:
         d1:c9:37:31:75:9a:59:fd:b2:c7:8e:02:89:7e:8e:a6:ec:31:
         b0:af:83:e6:e1:4a:d1:f0:c1:91:e0:8a:90:07:c5:3b:ac:b4:
         61:c5:88:25:9b:69:38:f9:9c:91:4f:bb:98:b3:fa:53:ee:24:
         42:8a:bb:13:1c:41:9d:8e:89:3f:1f:f8:dc:65:96:dc:78:33:
         49:a7:b8:8c:5d:e8:58:06:6d:49:a8:b0:11:ee:c4:b8:57:8c:
         cb:38:6f:ae:81:ac:ae:12:40:51:b5:3b:5f:8c:61:af:02:f4:
         bc:61:d3:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 16:29:14 2025 by rpki-client