Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3PY3oimPZrDoQfBGhmZBhdeTjTuYZha8PyTm3yM6njNp/1/3137302e3233392e3134302e302f32322d3232203d3e20323636333533.roa
File:                     3137302e3233392e3134302e302f32322d3232203d3e20323636333533.roa (raw, json)
Hash identifier:          SD9+6qJQAu0uXqafZ6FBsjtIxy/CKWG330KUeoU73Y0=
Subject key identifier:   E9:0C:D7:D6:96:37:DB:04:B6:22:8E:0F:DF:0C:53:AF:F7:FF:8B:A2
Certificate issuer:       /CN=0E568A521D9BB239CE1691093572B8FCA9B6DA87
Certificate serial:       7ABB7E186CE12F06122B2B6632EFFF8911FC5262
Authority key identifier: 0E:56:8A:52:1D:9B:B2:39:CE:16:91:09:35:72:B8:FC:A9:B6:DA:87
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0E568A521D9BB239CE1691093572B8FCA9B6DA87.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3PY3oimPZrDoQfBGhmZBhdeTjTuYZha8PyTm3yM6njNp/1/3137302e3233392e3134302e302f32322d3232203d3e20323636333533.roa
Signing time:             Mon 27 Dec 2021 18:05:09 +0000
ROA not before:           Mon 27 Dec 2021 18:00:09 +0000
ROA not after:            Mon 26 Dec 2022 18:05:09 +0000
asID:                     266353
IP address blocks:        170.239.140.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:bb:7e:18:6c:e1:2f:06:12:2b:2b:66:32:ef:ff:89:11:fc:52:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0E568A521D9BB239CE1691093572B8FCA9B6DA87
        Validity
            Not Before: Dec 27 18:00:09 2021 GMT
            Not After : Dec 26 18:05:09 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:7c:d1:e3:32:d2:97:4f:c9:d8:af:73:e4:62:
                    31:c0:5b:34:11:35:db:62:52:50:11:a4:ee:b2:db:
                    40:dd:ba:e4:3a:88:00:f1:6e:3f:48:36:93:ab:93:
                    c0:4e:ca:89:cd:ce:23:6b:6e:d5:7f:8d:22:9d:98:
                    ee:5a:c4:12:2f:91:5f:75:19:67:84:50:40:01:78:
                    bb:f6:29:db:61:18:12:bb:f0:8e:55:08:50:36:ab:
                    20:81:d0:87:69:13:ca:b5:d6:cb:50:49:37:86:46:
                    e2:e2:73:4d:d0:e6:b7:81:06:1c:0d:b4:58:a7:3b:
                    9e:ed:93:b0:09:37:81:c0:74:d9:85:9a:e8:60:4d:
                    ac:4e:35:f3:c4:96:c1:b4:28:11:eb:23:95:03:8e:
                    90:b4:cd:73:c6:07:1d:f2:d8:00:14:69:b9:94:f0:
                    47:10:63:0f:d4:c8:45:01:df:8d:35:b6:34:9c:d2:
                    66:56:44:0a:be:8a:c6:65:95:fb:28:56:20:1c:57:
                    2f:66:bc:81:12:d3:ab:bd:f8:2a:d0:03:d7:90:a8:
                    aa:32:99:3f:a7:b1:e7:46:92:98:d0:e6:fe:16:a8:
                    bd:0d:92:86:cb:57:4a:39:5c:ed:50:2d:1a:c3:f5:
                    eb:a3:3d:6d:21:cd:bf:59:25:a7:ab:44:09:0b:9f:
                    4b:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:0C:D7:D6:96:37:DB:04:B6:22:8E:0F:DF:0C:53:AF:F7:FF:8B:A2
            X509v3 Authority Key Identifier:
                keyid:0E:56:8A:52:1D:9B:B2:39:CE:16:91:09:35:72:B8:FC:A9:B6:DA:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3PY3oimPZrDoQfBGhmZBhdeTjTuYZha8PyTm3yM6njNp/1/0E568A521D9BB239CE1691093572B8FCA9B6DA87.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0E568A521D9BB239CE1691093572B8FCA9B6DA87.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3PY3oimPZrDoQfBGhmZBhdeTjTuYZha8PyTm3yM6njNp/1/3137302e3233392e3134302e302f32322d3232203d3e20323636333533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.239.140.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a4:8c:1d:eb:81:b9:ff:0a:57:39:d2:68:94:e3:0a:d9:8b:e6:
         3d:88:e8:15:07:0d:da:ae:f0:f9:4b:5a:f0:52:a3:8e:2f:9b:
         e1:10:32:2d:aa:06:9e:36:7f:1e:c9:e1:40:15:d3:a6:af:e2:
         5c:17:c3:53:45:3f:e5:84:2c:21:24:bb:31:cc:5e:e4:56:69:
         e1:f0:22:78:5f:dd:bd:13:8f:1d:27:06:4f:41:5a:fd:8e:12:
         ac:fd:14:92:d3:4f:81:6a:fb:96:63:d7:8d:43:85:53:d5:b0:
         4c:75:ef:41:b9:d6:1b:64:b8:09:01:63:4d:d5:2e:e0:9f:1e:
         21:2b:2c:ff:82:cb:cc:8e:a6:c6:aa:b1:31:49:4d:ed:9a:c2:
         10:8d:00:02:6c:df:f8:02:5f:2b:de:08:59:80:b2:dd:69:c9:
         bd:5e:7f:95:00:d3:a2:3b:1f:40:ab:d4:46:38:24:ea:fb:2d:
         b7:49:a1:bf:82:23:fb:fc:35:ab:60:06:d7:d7:2b:6c:b0:5a:
         9f:7f:70:ed:fe:2e:67:3a:01:e3:0e:2e:cc:64:a7:b3:d5:53:
         05:91:c5:83:bc:cb:9c:10:12:0b:64:94:9d:2b:da:86:6a:2b:
         27:ea:b4:4c:d1:c3:1f:4f:10:c9:52:d4:65:1a:fd:09:34:ea:
         1e:92:f0:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 10:58:57 2025 by rpki-client