Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4ELhdCagDhRdrzrw6h4Ya1CqJFqcAKmwQTLQS9U3Gy2X/0/3137302e302e35382e302f32332d3233203d3e20323633333238.roa
File:                     3137302e302e35382e302f32332d3233203d3e20323633333238.roa (raw, json)
Hash identifier:          4fox5ausEga7/tIHEdXlb8iBb1Eiw8907NCL7TTDEWo=
Subject key identifier:   31:83:AF:FA:16:1B:07:51:8C:4A:9B:F4:E4:F3:19:B4:3D:C8:30:E1
Certificate issuer:       /CN=E449505565A4093BA0371B92F0139707DF957D35
Certificate serial:       010ACDDC7D5A90064AE8C5DBBD80049F6DD391F0
Authority key identifier: E4:49:50:55:65:A4:09:3B:A0:37:1B:92:F0:13:97:07:DF:95:7D:35
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E449505565A4093BA0371B92F0139707DF957D35.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4ELhdCagDhRdrzrw6h4Ya1CqJFqcAKmwQTLQS9U3Gy2X/0/3137302e302e35382e302f32332d3233203d3e20323633333238.roa
Signing time:             Wed 14 Jun 2023 21:20:20 +0000
ROA not before:           Wed 14 Jun 2023 21:15:20 +0000
ROA not after:            Wed 12 Jun 2024 21:20:20 +0000
asID:                     263328
IP address blocks:        170.0.58.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0a:cd:dc:7d:5a:90:06:4a:e8:c5:db:bd:80:04:9f:6d:d3:91:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E449505565A4093BA0371B92F0139707DF957D35
        Validity
            Not Before: Jun 14 21:15:20 2023 GMT
            Not After : Jun 12 21:20:20 2024 GMT
        Subject: CN=3183AFFA161B07518C4A9BF4E4F319B43DC830E1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:f3:47:42:7d:36:62:3e:f9:46:cd:88:f4:ca:
                    70:40:e0:08:38:32:95:4e:82:a9:19:4f:82:a4:46:
                    d6:64:31:a8:57:71:66:56:fa:7d:68:57:9f:03:c2:
                    87:83:6f:c5:6b:f8:99:30:ca:5c:e2:4c:c8:63:93:
                    93:d8:69:bb:f6:9a:63:d0:7e:16:46:a6:9a:0c:cc:
                    5c:87:75:3d:1d:76:0a:2b:f1:da:fb:d6:58:08:27:
                    de:07:10:60:ff:8e:d0:8f:1e:21:19:35:37:cd:9b:
                    c4:f3:fb:36:4d:44:24:da:5f:fc:5b:3d:26:0d:f9:
                    d2:77:27:f8:11:af:63:35:ee:df:a4:29:8b:81:da:
                    72:1c:e3:b8:a9:0e:32:e1:87:53:d4:ab:b1:f1:e3:
                    72:ae:37:2a:db:5f:83:3a:78:df:1c:5b:de:a8:10:
                    84:bd:f0:53:4f:cb:a8:6e:f3:a7:45:5b:0f:93:21:
                    fa:ba:a4:d8:e5:f8:3d:d3:d5:50:08:fb:e8:cb:b3:
                    6d:b9:cc:08:cc:fa:76:4b:8d:e7:77:16:57:ee:ad:
                    44:b3:0e:43:56:fa:ed:75:87:01:e2:39:24:a3:71:
                    39:7d:de:8a:ca:44:2f:62:0a:be:bc:62:d6:af:a3:
                    8e:aa:5e:74:1c:cc:52:63:0e:dc:aa:f2:19:30:73:
                    2e:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:83:AF:FA:16:1B:07:51:8C:4A:9B:F4:E4:F3:19:B4:3D:C8:30:E1
            X509v3 Authority Key Identifier:
                keyid:E4:49:50:55:65:A4:09:3B:A0:37:1B:92:F0:13:97:07:DF:95:7D:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4ELhdCagDhRdrzrw6h4Ya1CqJFqcAKmwQTLQS9U3Gy2X/0/E449505565A4093BA0371B92F0139707DF957D35.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E449505565A4093BA0371B92F0139707DF957D35.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4ELhdCagDhRdrzrw6h4Ya1CqJFqcAKmwQTLQS9U3Gy2X/0/3137302e302e35382e302f32332d3233203d3e20323633333238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.0.58.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b3:d1:31:40:7a:4e:e0:f2:14:3c:69:9e:16:44:f1:53:31:15:
         86:c8:9e:31:4a:50:33:ae:2b:1a:99:13:c4:8f:61:f6:81:d8:
         a3:d0:cf:ee:f7:39:7a:5a:52:21:62:34:fc:4d:ae:b1:30:03:
         a1:92:71:6f:e4:6c:05:e6:10:4b:28:d5:47:ec:0c:2c:6c:7d:
         32:df:58:5c:71:21:0b:f3:87:88:da:56:60:00:ee:d5:d1:f9:
         b0:1a:48:b4:8c:0c:d8:bf:57:d2:b1:f9:b0:fb:a9:8e:7b:04:
         98:4f:79:96:06:2d:59:f7:5f:88:11:3a:1b:27:0a:0a:30:cd:
         77:da:7d:a6:9f:fa:32:c1:e6:64:9e:1a:0a:9d:87:b2:a9:46:
         f9:e6:b3:28:08:4b:af:d2:34:66:b0:6a:ff:bf:72:1b:a0:f0:
         a3:d4:94:20:77:e3:7d:ec:76:f9:53:b6:00:43:eb:ec:9b:07:
         4b:6a:28:7f:de:3b:57:08:35:0a:27:4d:68:b2:32:3e:03:85:
         13:aa:9a:dd:bd:f9:88:26:57:5a:e1:a7:5f:63:f3:e7:a0:bb:
         49:3e:3f:37:a7:01:2e:dd:aa:b8:b9:35:5c:d7:cf:9e:75:f6:
         0d:14:50:5f:50:bf:af:d0:82:4f:d3:8d:cd:3e:63:8b:53:30:
         99:8c:00:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:30:05 2025 by rpki-client