Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4EkPoBX3XbxbFZekirRqn8BXiDU8enSrfrwhWexXhPTN/1/3137302e3235342e39362e302f32322d3233203d3e20323635313032.roa
File:                     3137302e3235342e39362e302f32322d3233203d3e20323635313032.roa (raw, json)
Hash identifier:          FGul15wYeUij2YZcYNMla6cZEps5mQkQq2eCa8KjEAk=
Subject key identifier:   C6:56:08:27:33:E2:C3:3A:24:B4:71:26:A3:3E:6E:A7:B7:78:26:08
Certificate issuer:       /CN=E106FEFC240ABBEBD1D589EFF1774FFC909DB7B9
Certificate serial:       676C15DF287518B82102858E3FB7F3F0DCBD5C55
Authority key identifier: E1:06:FE:FC:24:0A:BB:EB:D1:D5:89:EF:F1:77:4F:FC:90:9D:B7:B9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E106FEFC240ABBEBD1D589EFF1774FFC909DB7B9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4EkPoBX3XbxbFZekirRqn8BXiDU8enSrfrwhWexXhPTN/1/3137302e3235342e39362e302f32322d3233203d3e20323635313032.roa
Signing time:             Mon 19 Dec 2022 11:25:35 +0000
ROA not before:           Mon 19 Dec 2022 11:20:35 +0000
ROA not after:            Mon 18 Dec 2023 11:25:35 +0000
asID:                     265102
IP address blocks:        170.254.96.0/22 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:6c:15:df:28:75:18:b8:21:02:85:8e:3f:b7:f3:f0:dc:bd:5c:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E106FEFC240ABBEBD1D589EFF1774FFC909DB7B9
        Validity
            Not Before: Dec 19 11:20:35 2022 GMT
            Not After : Dec 18 11:25:35 2023 GMT
        Subject: CN=C656082733E2C33A24B47126A33E6EA7B7782608
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:cf:06:17:d3:08:e1:c5:6a:92:4e:3a:15:00:
                    a9:2b:71:4e:06:8d:53:4f:e8:42:09:68:00:2f:da:
                    57:f8:8b:2f:29:8f:57:97:cf:34:ab:78:17:78:30:
                    fe:08:9d:4e:06:7b:ee:71:d7:6f:16:fe:f7:33:91:
                    8a:63:2d:a9:38:98:cf:fa:bd:99:38:a7:fe:04:53:
                    0b:6d:4b:9f:21:8c:15:75:dd:b2:a1:24:d6:11:bf:
                    8d:58:51:d7:0e:cf:b0:f7:60:d7:96:e4:61:92:91:
                    c5:0a:bb:02:a4:34:dd:1f:43:55:1c:35:f1:7a:ed:
                    88:e6:f4:e3:ac:b1:a0:8d:cd:df:a5:17:79:f1:da:
                    f0:ea:35:c5:3c:f1:70:8c:34:70:3b:36:83:53:e7:
                    5d:3e:8b:63:1f:fe:93:5f:2b:88:56:1c:8b:17:67:
                    a5:01:18:5b:e1:90:a6:cc:0f:c5:89:7a:03:e5:9c:
                    b3:05:50:45:d4:f5:df:d2:af:a0:90:d3:60:b4:84:
                    84:13:be:b7:0e:b6:62:b9:e2:a1:b6:fa:4a:89:d2:
                    6e:22:65:a5:9c:55:be:9a:62:67:8b:51:d1:31:36:
                    4d:4d:7f:e6:f2:21:53:2f:c9:05:0c:98:6b:ec:07:
                    75:76:d1:6a:96:0f:2d:ec:b1:a8:13:d6:b4:d3:ac:
                    b8:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:56:08:27:33:E2:C3:3A:24:B4:71:26:A3:3E:6E:A7:B7:78:26:08
            X509v3 Authority Key Identifier:
                keyid:E1:06:FE:FC:24:0A:BB:EB:D1:D5:89:EF:F1:77:4F:FC:90:9D:B7:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4EkPoBX3XbxbFZekirRqn8BXiDU8enSrfrwhWexXhPTN/1/E106FEFC240ABBEBD1D589EFF1774FFC909DB7B9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E106FEFC240ABBEBD1D589EFF1774FFC909DB7B9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4EkPoBX3XbxbFZekirRqn8BXiDU8enSrfrwhWexXhPTN/1/3137302e3235342e39362e302f32322d3233203d3e20323635313032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.254.96.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2b:00:56:c3:ab:6c:53:6a:f8:1c:70:03:88:f2:e1:52:30:79:
         58:55:8a:e7:ad:cb:0b:e4:1a:b4:08:43:7a:cb:7c:64:c3:f0:
         80:9d:47:ff:da:2f:c6:8a:be:0c:77:c9:e9:21:51:a1:7a:1d:
         61:e5:2b:4b:84:74:e9:79:df:5d:60:8d:a5:9d:60:84:9d:1b:
         b9:22:59:a7:9d:3c:f8:55:ac:b6:df:cb:28:3f:fa:71:cb:06:
         99:88:2e:97:f8:cc:20:c5:76:04:40:62:65:b5:93:ee:b5:3a:
         5f:c9:25:1a:76:93:5b:6b:f2:a2:eb:94:7e:02:3e:d6:b6:1f:
         fc:66:fd:50:6e:69:b6:34:27:f5:7f:07:5c:3a:9e:fb:bd:85:
         8e:17:00:08:27:d4:ee:20:7d:25:76:61:0d:df:79:c9:38:0f:
         0c:14:9a:3e:32:42:92:ec:03:9d:60:98:f9:fc:29:ed:db:6e:
         66:dd:2d:02:0b:91:98:79:03:e2:30:11:e6:7f:f7:6b:39:b5:
         00:7e:94:a4:8a:39:fe:8b:82:3b:69:b8:a3:0d:a1:ef:79:0a:
         11:e3:31:fd:2f:51:b5:ee:d4:70:be:4d:d8:66:9f:fb:10:b6:
         43:15:20:85:6e:0f:e5:18:b6:b0:1c:3a:76:96:84:50:9f:76:
         af:e1:52:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 03:50:50 2025 by rpki-client