Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3PY3oimPZrDoQfBGhmZBhdeTjTuYZha8PyTm3yM6njNp/1/3137302e3233392e3134312e302f32342d3234203d3e20323636333533.roa
File:                     3137302e3233392e3134312e302f32342d3234203d3e20323636333533.roa (raw, json)
Hash identifier:          BQ5oxvBWoNjBOlETz5rE876I/TUK5huP+5NJC9jw64E=
Subject key identifier:   15:4A:C4:FD:1D:73:2D:87:51:73:1D:2C:AF:24:2B:FA:A2:E8:88:39
Certificate issuer:       /CN=0E568A521D9BB239CE1691093572B8FCA9B6DA87
Certificate serial:       0618DD86DB14F3ADE992B22AB78D859E6EF3BE28
Authority key identifier: 0E:56:8A:52:1D:9B:B2:39:CE:16:91:09:35:72:B8:FC:A9:B6:DA:87
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0E568A521D9BB239CE1691093572B8FCA9B6DA87.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3PY3oimPZrDoQfBGhmZBhdeTjTuYZha8PyTm3yM6njNp/1/3137302e3233392e3134312e302f32342d3234203d3e20323636333533.roa
Signing time:             Mon 27 Dec 2021 18:05:08 +0000
ROA not before:           Mon 27 Dec 2021 18:00:08 +0000
ROA not after:            Mon 26 Dec 2022 18:05:08 +0000
asID:                     266353
IP address blocks:        170.239.141.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:18:dd:86:db:14:f3:ad:e9:92:b2:2a:b7:8d:85:9e:6e:f3:be:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0E568A521D9BB239CE1691093572B8FCA9B6DA87
        Validity
            Not Before: Dec 27 18:00:08 2021 GMT
            Not After : Dec 26 18:05:08 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:e0:39:df:05:91:a6:ba:3c:56:0c:81:f4:91:
                    93:fe:4a:1b:6a:5f:34:f4:6f:09:39:58:a5:d9:15:
                    dc:f6:a2:28:ee:eb:37:6c:45:0b:d7:1f:12:6e:a2:
                    fc:c8:82:29:c6:bd:6d:85:ed:a4:69:4c:e3:f5:0c:
                    67:a3:f8:c1:54:07:c2:8f:bc:c6:04:dd:8e:bd:ec:
                    be:b8:37:6b:6a:f4:4c:ec:99:1f:6f:55:e6:74:97:
                    fd:b3:df:37:5f:9e:c7:cd:0c:8e:b8:f8:7c:37:ca:
                    06:a1:a6:9e:b6:53:0f:75:4f:d8:54:59:3c:18:92:
                    78:8e:c6:26:c0:34:ab:fe:a9:b7:93:b0:c3:08:fd:
                    b1:2f:2d:b6:7e:d8:6a:29:73:89:ae:41:a5:36:e8:
                    a4:db:be:68:d8:92:a0:57:43:11:75:31:ad:97:e6:
                    7a:8e:32:8c:5b:8a:5f:08:7c:7a:bc:df:d0:bc:0a:
                    c1:89:94:e4:7c:02:22:4f:d1:8c:42:20:cb:87:aa:
                    5f:2f:d6:f9:70:af:83:99:f2:07:9f:c5:d7:5b:7c:
                    4d:df:81:3d:ef:e8:7f:6c:d7:a7:08:09:a6:c5:aa:
                    42:54:b9:66:a9:58:0e:2a:e3:93:da:d6:bf:90:88:
                    c8:4d:24:27:2e:d5:dc:a8:34:81:75:f2:74:2b:c6:
                    2c:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:4A:C4:FD:1D:73:2D:87:51:73:1D:2C:AF:24:2B:FA:A2:E8:88:39
            X509v3 Authority Key Identifier:
                keyid:0E:56:8A:52:1D:9B:B2:39:CE:16:91:09:35:72:B8:FC:A9:B6:DA:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3PY3oimPZrDoQfBGhmZBhdeTjTuYZha8PyTm3yM6njNp/1/0E568A521D9BB239CE1691093572B8FCA9B6DA87.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0E568A521D9BB239CE1691093572B8FCA9B6DA87.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3PY3oimPZrDoQfBGhmZBhdeTjTuYZha8PyTm3yM6njNp/1/3137302e3233392e3134312e302f32342d3234203d3e20323636333533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.239.141.0/24

    Signature Algorithm: sha256WithRSAEncryption
         40:c8:05:50:26:98:6f:e0:65:a2:69:48:73:c5:3d:1d:da:1b:
         3c:56:4a:f1:27:4f:06:e2:7c:cf:2e:7e:b2:92:ae:50:4f:da:
         c1:8b:b4:04:30:20:5f:25:bc:1e:d9:c2:b4:39:8c:72:07:6f:
         2f:42:97:07:7f:0c:ea:92:f8:dd:81:58:2e:5d:b4:9f:6b:c3:
         53:52:99:74:3e:37:e2:44:52:72:3a:86:bd:b8:ec:be:66:23:
         47:ff:03:6a:66:a9:2c:5d:ee:fe:86:e0:de:4c:e6:bb:c0:e2:
         5d:41:ea:fa:f9:60:23:80:2b:27:e6:f9:9f:47:f8:9c:15:37:
         49:e1:4c:4e:cc:ee:91:cc:18:71:64:4e:77:2f:d0:c9:32:2d:
         72:4e:a0:04:28:18:c6:8e:d4:66:95:ff:08:5b:fd:4a:b2:ed:
         3e:45:42:b5:e6:1e:d7:70:9e:c2:e7:4e:7e:62:43:f2:e0:e5:
         ed:c9:eb:fa:d2:a0:7c:d1:08:10:47:f6:83:83:4b:6f:e0:96:
         28:3f:a5:9f:45:b3:ef:4e:6c:90:6a:f6:d4:2b:18:40:78:29:
         f0:6e:23:36:22:22:93:89:20:10:be:a9:18:ce:d2:33:51:f6:
         e4:32:10:a5:df:60:70:1e:7c:0e:18:4a:70:08:82:c3:59:c6:
         99:2f:83:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:19:26 2025 by rpki-client