Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3MPpVoKqFMSS2e4Yupst27DW182CvprC4kjwSsZU8AaX/0/3137302e38322e31362e302f32322d3232203d3e20323636343337.roa
File:                     3137302e38322e31362e302f32322d3232203d3e20323636343337.roa (raw, json)
Hash identifier:          7ln5/FNaAV/k8vwT3F64Tf5S34wE7Q7KJ7Bj3y4/kI0=
Subject key identifier:   53:A0:1D:7C:B7:10:42:20:29:9E:A1:B6:4E:01:B7:2A:5B:24:73:3E
Certificate issuer:       /CN=0381D8A02BA99F48982DB0E51B0F614DC9B6173D
Certificate serial:       1D313DB41116FC657B96F4FD70BE08EB437929DC
Authority key identifier: 03:81:D8:A0:2B:A9:9F:48:98:2D:B0:E5:1B:0F:61:4D:C9:B6:17:3D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0381D8A02BA99F48982DB0E51B0F614DC9B6173D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3MPpVoKqFMSS2e4Yupst27DW182CvprC4kjwSsZU8AaX/0/3137302e38322e31362e302f32322d3232203d3e20323636343337.roa
Signing time:             Thu 05 May 2022 13:32:49 +0000
ROA not before:           Thu 05 May 2022 13:27:49 +0000
ROA not after:            Thu 04 May 2023 13:32:49 +0000
asID:                     266437
IP address blocks:        170.82.16.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:31:3d:b4:11:16:fc:65:7b:96:f4:fd:70:be:08:eb:43:79:29:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0381D8A02BA99F48982DB0E51B0F614DC9B6173D
        Validity
            Not Before: May  5 13:27:49 2022 GMT
            Not After : May  4 13:32:49 2023 GMT
        Subject: CN=53A01D7CB7104220299EA1B64E01B72A5B24733E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:1f:1f:71:31:73:21:1d:d3:a7:a6:76:53:4c:
                    92:da:6b:c5:21:15:7f:29:e3:a2:77:90:3d:b8:52:
                    7d:f7:7b:7c:4c:63:5a:5e:84:e6:2d:27:48:c8:79:
                    cc:18:19:3a:01:d1:0f:78:40:1b:1d:2e:c9:ba:bd:
                    6a:ad:f4:51:03:cc:03:63:9c:f9:b3:88:d4:49:f7:
                    c8:66:93:eb:5f:e7:f1:94:49:4c:b5:cb:63:03:3e:
                    b3:1f:4a:66:4c:c0:6e:0c:b4:2c:53:a3:49:d8:fd:
                    43:3f:61:c2:67:1b:43:61:c1:bd:43:85:b3:d1:0a:
                    f1:cd:ba:25:2e:98:20:75:be:76:5b:98:fd:d0:1d:
                    5c:4e:14:46:1d:1b:68:8e:01:47:1b:7a:81:21:d9:
                    7a:9e:6c:9f:15:1f:3c:4d:93:32:28:98:6b:92:5b:
                    98:0e:1d:b4:94:7d:2d:aa:b3:d2:41:ca:1c:ef:e6:
                    46:ad:72:d1:d8:06:c7:de:10:bf:2f:5a:b7:37:fd:
                    84:a7:f6:42:ec:8f:aa:2d:be:21:76:6d:31:f4:4e:
                    0a:d9:e9:90:52:0a:ae:26:dc:13:6d:1a:b4:ec:3c:
                    b2:5f:79:1a:f4:61:46:98:05:c7:40:37:51:86:d8:
                    7a:a3:80:fd:4b:69:17:d7:83:93:d3:cb:40:7a:03:
                    46:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:A0:1D:7C:B7:10:42:20:29:9E:A1:B6:4E:01:B7:2A:5B:24:73:3E
            X509v3 Authority Key Identifier:
                keyid:03:81:D8:A0:2B:A9:9F:48:98:2D:B0:E5:1B:0F:61:4D:C9:B6:17:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3MPpVoKqFMSS2e4Yupst27DW182CvprC4kjwSsZU8AaX/0/0381D8A02BA99F48982DB0E51B0F614DC9B6173D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0381D8A02BA99F48982DB0E51B0F614DC9B6173D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3MPpVoKqFMSS2e4Yupst27DW182CvprC4kjwSsZU8AaX/0/3137302e38322e31362e302f32322d3232203d3e20323636343337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.82.16.0/22

    Signature Algorithm: sha256WithRSAEncryption
         88:82:2b:0c:ac:47:d7:76:d1:b6:12:0e:e0:24:96:6c:a7:08:
         17:fe:4f:d3:68:05:b0:35:37:6b:06:c0:95:7c:ff:b8:e6:46:
         69:96:93:a1:8f:d7:5f:ad:1e:25:ea:cc:57:e1:1d:03:a4:9e:
         1f:59:21:33:14:0f:ba:12:97:80:b8:ed:ae:8b:b0:b0:1b:4e:
         bf:59:8d:e0:66:3e:10:64:98:ad:3a:4b:21:13:68:9a:3a:b6:
         c5:48:bb:4e:68:d4:0a:68:34:2a:59:57:52:da:ea:40:56:9b:
         4d:ad:90:bf:55:39:51:b0:cf:5d:91:35:d0:5a:fe:0a:ff:4d:
         21:a4:15:64:43:f3:ad:7a:87:60:9c:74:ec:c6:7c:a9:40:09:
         cb:81:50:29:c4:9f:bf:d9:ae:dd:a9:07:68:55:4d:66:ef:1a:
         1c:ce:12:08:eb:a1:a1:1a:bf:6e:af:d5:bb:67:74:95:27:99:
         b1:81:52:e4:1c:01:23:d2:39:a3:d1:ac:90:f0:3f:22:f0:d4:
         d9:30:60:e1:3f:74:e8:a9:2b:d0:35:51:b5:0a:97:8c:13:32:
         07:12:2a:dc:98:13:3a:61:be:42:ec:5e:1c:55:bb:52:7f:6d:
         09:57:e8:43:08:af:dc:2a:a9:15:18:5c:1e:d1:df:1c:53:ce:
         5a:63:ba:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:53:42 2025 by rpki-client