Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3H9QCx2HAzmUgn4Xy7inndDm2fDLyuEHmqnw74RuwDh8/0/3137302e38322e3132302e302f32322d3234203d3e20323633363638.roa
File:                     3137302e38322e3132302e302f32322d3234203d3e20323633363638.roa (raw, json)
Hash identifier:          OkaCwvtci/Z5nIYfaXHzpygdbRtndxBwe2vfvgtS+2U=
Subject key identifier:   24:D1:2C:23:A1:9D:AB:B8:7E:8D:21:5B:4E:5D:A4:11:68:89:E0:10
Certificate issuer:       /CN=60E921DA704678B7895C0AE504490F34BD5AB662
Certificate serial:       44B760EE337A16C8480E85E1A46DE21C4707390F
Authority key identifier: 60:E9:21:DA:70:46:78:B7:89:5C:0A:E5:04:49:0F:34:BD:5A:B6:62
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/60E921DA704678B7895C0AE504490F34BD5AB662.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3H9QCx2HAzmUgn4Xy7inndDm2fDLyuEHmqnw74RuwDh8/0/3137302e38322e3132302e302f32322d3234203d3e20323633363638.roa
Signing time:             Mon 10 Jul 2023 14:24:35 +0000
ROA not before:           Mon 10 Jul 2023 14:19:35 +0000
ROA not after:            Mon 08 Jul 2024 14:24:35 +0000
asID:                     263668
IP address blocks:        170.82.120.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:b7:60:ee:33:7a:16:c8:48:0e:85:e1:a4:6d:e2:1c:47:07:39:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60E921DA704678B7895C0AE504490F34BD5AB662
        Validity
            Not Before: Jul 10 14:19:35 2023 GMT
            Not After : Jul  8 14:24:35 2024 GMT
        Subject: CN=24D12C23A19DABB87E8D215B4E5DA4116889E010
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:a4:3f:1f:f2:54:66:33:ca:b3:69:7f:69:ac:
                    e1:a5:ef:e7:0e:9e:c9:96:a2:48:ef:d5:a2:6f:8d:
                    1c:0f:66:e1:72:21:84:cb:9b:bc:7a:c8:58:67:d0:
                    98:06:05:b7:23:d3:5b:ee:ce:96:1d:ed:1a:a7:4a:
                    55:10:d1:1b:ba:15:e1:c6:c0:3a:fb:60:3d:4b:d8:
                    5d:2b:d0:6c:26:ff:ee:09:60:56:f5:09:3d:4c:0f:
                    6a:e4:fa:1b:db:5c:65:36:fc:4d:51:3f:17:25:b0:
                    35:a5:f4:af:19:cd:79:e0:85:ab:52:e3:45:0b:ac:
                    a7:cc:2c:76:c4:b2:bd:29:5d:5f:e0:d8:d6:b9:df:
                    da:44:27:1b:ea:8a:f1:57:21:7c:09:76:c6:c2:53:
                    f0:e6:76:44:c4:a6:6e:e2:e7:37:f7:94:98:c2:90:
                    12:8c:e0:cb:91:59:b9:2b:6b:2f:35:e5:4f:a9:e0:
                    1a:bf:4e:e7:06:04:89:2d:55:ba:c9:2c:4a:08:a2:
                    6d:81:ca:2e:62:e1:fd:c1:d8:5c:35:40:30:5d:42:
                    c8:52:e7:47:0d:6d:77:64:23:7b:c2:bd:6a:a3:9f:
                    76:e9:47:5c:d5:2e:7d:4e:d8:6e:40:6b:05:5f:37:
                    48:6e:48:57:db:82:a8:cc:59:58:df:37:cf:f8:88:
                    fd:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:D1:2C:23:A1:9D:AB:B8:7E:8D:21:5B:4E:5D:A4:11:68:89:E0:10
            X509v3 Authority Key Identifier:
                keyid:60:E9:21:DA:70:46:78:B7:89:5C:0A:E5:04:49:0F:34:BD:5A:B6:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3H9QCx2HAzmUgn4Xy7inndDm2fDLyuEHmqnw74RuwDh8/0/60E921DA704678B7895C0AE504490F34BD5AB662.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/60E921DA704678B7895C0AE504490F34BD5AB662.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3H9QCx2HAzmUgn4Xy7inndDm2fDLyuEHmqnw74RuwDh8/0/3137302e38322e3132302e302f32322d3234203d3e20323633363638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.82.120.0/22

    Signature Algorithm: sha256WithRSAEncryption
         82:fc:ec:17:0a:bf:f1:33:b9:82:d6:83:c9:3a:ca:0f:4a:c3:
         5a:d7:e5:38:1f:0c:6b:9a:0a:ce:74:4b:34:9d:33:4a:ca:5c:
         9c:11:70:ba:80:0b:7d:ce:e4:9f:47:76:dc:6d:79:d0:4f:8d:
         5e:b7:94:3d:71:ce:e6:46:ff:20:b9:2d:74:5c:71:14:a9:f1:
         b8:b2:07:84:86:4f:f5:ae:da:cf:96:74:de:7c:4e:a8:c9:d4:
         74:fc:ea:33:9b:1a:67:10:e8:4d:16:7c:7e:65:b5:6b:b1:0f:
         32:9c:ed:ae:51:88:52:e8:6f:40:7a:b9:99:41:83:ed:a0:b8:
         c6:10:eb:01:cd:29:c4:8f:4a:50:94:bd:3b:74:d7:bd:f1:e9:
         1a:b5:0b:c9:02:80:6b:92:71:fe:cb:f2:a6:31:67:b0:77:a7:
         5f:15:f4:1c:2e:0e:61:a6:e4:0f:11:55:6c:0b:78:c5:5a:68:
         ef:32:6b:0a:ff:d8:4f:d4:e2:59:e8:80:60:a4:83:31:60:0a:
         40:90:d0:a0:93:ca:4c:ab:f4:67:3d:d0:90:18:cd:f3:26:1d:
         9e:c0:8a:7c:66:1a:1b:f6:93:f3:cb:05:31:ca:70:9e:94:ed:
         dc:77:5c:79:ed:f5:da:4b:02:3e:a0:0f:48:ab:fc:46:59:fb:
         ef:fc:86:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:06:31 2025 by rpki-client