Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3PY3oimPZrDoQfBGhmZBhdeTjTuYZha8PyTm3yM6njNp/0/3137302e3233392e3134302e302f32332d3233203d3e20323636333533.roa
File:                     3137302e3233392e3134302e302f32332d3233203d3e20323636333533.roa (raw, json)
Hash identifier:          HEYqrZND9c6hC1mDRm+bq8K+hizPItML1s4mrieDmFo=
Subject key identifier:   CA:48:6E:E0:F7:20:BC:01:BC:07:F9:1D:BC:B2:51:AE:99:5D:91:3D
Certificate issuer:       /CN=4397BA36879D0CCC02611CE4E0C4F1812A3EC108
Certificate serial:       7AE8E226C05382F416B424246E245DE643E58337
Authority key identifier: 43:97:BA:36:87:9D:0C:CC:02:61:1C:E4:E0:C4:F1:81:2A:3E:C1:08
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4397BA36879D0CCC02611CE4E0C4F1812A3EC108.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3PY3oimPZrDoQfBGhmZBhdeTjTuYZha8PyTm3yM6njNp/0/3137302e3233392e3134302e302f32332d3233203d3e20323636333533.roa
Signing time:             Wed 27 Mar 2024 20:00:00 +0000
ROA not before:           Wed 27 Mar 2024 19:55:00 +0000
ROA not after:            Wed 26 Mar 2025 20:00:00 +0000
asID:                     266353
IP address blocks:        170.239.140.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:e8:e2:26:c0:53:82:f4:16:b4:24:24:6e:24:5d:e6:43:e5:83:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4397BA36879D0CCC02611CE4E0C4F1812A3EC108
        Validity
            Not Before: Mar 27 19:55:00 2024 GMT
            Not After : Mar 26 20:00:00 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:71:17:5a:13:ae:d5:a1:b3:f9:ce:ee:f8:1e:
                    1d:fc:bd:3f:7b:44:02:e8:e3:93:0d:9c:53:53:d4:
                    cc:8f:00:a5:ba:a3:b5:ca:e6:80:dd:20:a6:af:af:
                    ba:02:77:43:f1:69:a4:e1:e9:c8:1a:8c:fd:39:bb:
                    6c:c2:e4:c3:22:81:d9:3d:fc:6e:e6:a7:00:dc:7f:
                    64:7e:d5:05:49:1b:a2:01:b8:26:81:d2:33:e3:3e:
                    1e:a9:67:fd:34:0c:13:86:f6:f7:33:48:f7:1d:7b:
                    89:8d:16:27:8c:9a:60:00:d4:ab:37:50:90:e3:aa:
                    0c:36:99:0a:75:26:02:18:c9:2d:e7:80:bc:c4:2c:
                    10:e1:6e:fb:d6:71:14:45:99:59:c4:94:d2:80:8a:
                    af:e6:32:c7:56:8c:dd:92:3a:22:35:ac:67:37:db:
                    3d:a4:50:8a:18:d5:c3:76:c7:55:70:27:ed:b0:1c:
                    16:39:8f:ec:1d:46:da:4b:f8:13:a7:35:40:13:c0:
                    a5:f9:49:49:3b:03:ef:42:16:c7:55:79:42:f4:82:
                    ce:88:ce:c9:75:51:d8:b4:39:a2:33:bd:2b:7d:0d:
                    76:eb:9f:5b:0f:4a:31:de:9a:fb:17:e5:0f:70:7f:
                    4e:22:fa:a2:b7:c2:2d:a0:d8:f6:be:1e:0c:2f:5d:
                    55:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:48:6E:E0:F7:20:BC:01:BC:07:F9:1D:BC:B2:51:AE:99:5D:91:3D
            X509v3 Authority Key Identifier:
                keyid:43:97:BA:36:87:9D:0C:CC:02:61:1C:E4:E0:C4:F1:81:2A:3E:C1:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3PY3oimPZrDoQfBGhmZBhdeTjTuYZha8PyTm3yM6njNp/0/4397BA36879D0CCC02611CE4E0C4F1812A3EC108.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4397BA36879D0CCC02611CE4E0C4F1812A3EC108.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3PY3oimPZrDoQfBGhmZBhdeTjTuYZha8PyTm3yM6njNp/0/3137302e3233392e3134302e302f32332d3233203d3e20323636333533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.239.140.0/23

    Signature Algorithm: sha256WithRSAEncryption
         38:77:ea:20:a0:d1:09:6e:6d:8b:75:ed:3e:12:33:90:61:4f:
         a7:3a:0a:77:53:8f:97:c5:b5:dc:d6:28:46:3d:de:d3:3d:5e:
         45:fa:86:74:9e:e8:1a:44:8b:cf:e6:7d:24:52:eb:93:2a:fd:
         b3:f2:ec:eb:95:01:06:4b:88:9c:f6:b6:01:f9:a6:35:59:7e:
         d2:11:9d:a0:3e:b5:be:e6:2e:9c:1a:86:68:c4:b0:9b:ba:bd:
         08:ad:1e:5a:1d:93:d8:58:74:8f:8b:da:e0:52:7c:cf:59:ef:
         cc:64:9f:df:c0:bd:23:53:f1:c6:2d:17:fe:ea:e8:4b:61:9a:
         07:4b:09:d6:0d:93:f5:3f:aa:3d:5d:ff:55:58:18:b3:98:e4:
         e5:c3:0d:bb:e4:80:01:db:5a:96:3d:dd:bf:40:b9:77:e8:cc:
         63:c2:55:79:2d:a4:95:ce:1d:52:62:74:7f:d9:31:da:e5:60:
         0c:24:fe:b6:75:59:1b:58:e1:04:f9:aa:7a:97:0b:b9:84:01:
         90:6d:30:60:86:38:14:ae:8a:c8:49:fc:25:1c:5d:d1:95:3f:
         40:e7:70:1d:e7:41:8d:57:0d:c8:4a:f4:24:ff:59:05:2e:d1:
         3b:a6:8a:e2:1b:e1:b3:f8:10:24:0e:c6:72:37:d0:e3:ae:1a:
         33:bb:af:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:24:12 2025 by rpki-client