Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4shvGyxQgd2jzqpn9VgAgVz1pWrXAA91xFsW3Txa2Q2Q/0/3137302e3135302e33362e302f32322d3234203d3e20323635303234.roa
File:                     3137302e3135302e33362e302f32322d3234203d3e20323635303234.roa (raw, json)
Hash identifier:          WanGddQBlMU2/vCBXItDamDXvrpdqoxWk/3cKLMJfFU=
Subject key identifier:   4B:30:3B:0D:26:9F:8B:BD:A8:50:D1:C7:C2:B7:38:18:BC:E8:B9:EF
Certificate issuer:       /CN=4911F873F72A053B543EB5703FA4F17EC4F79B55
Certificate serial:       2D9F26DEEABC1208D1B8203B0D3B9FE990B4168F
Authority key identifier: 49:11:F8:73:F7:2A:05:3B:54:3E:B5:70:3F:A4:F1:7E:C4:F7:9B:55
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4911F873F72A053B543EB5703FA4F17EC4F79B55.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4shvGyxQgd2jzqpn9VgAgVz1pWrXAA91xFsW3Txa2Q2Q/0/3137302e3135302e33362e302f32322d3234203d3e20323635303234.roa
Signing time:             Sat 04 Nov 2023 16:54:25 +0000
ROA not before:           Sat 04 Nov 2023 16:49:25 +0000
ROA not after:            Sat 02 Nov 2024 16:54:25 +0000
asID:                     265024
IP address blocks:        170.150.36.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:9f:26:de:ea:bc:12:08:d1:b8:20:3b:0d:3b:9f:e9:90:b4:16:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4911F873F72A053B543EB5703FA4F17EC4F79B55
        Validity
            Not Before: Nov  4 16:49:25 2023 GMT
            Not After : Nov  2 16:54:25 2024 GMT
        Subject: CN=4B303B0D269F8BBDA850D1C7C2B73818BCE8B9EF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:1e:a2:08:e8:d7:db:3d:1b:05:36:da:79:24:
                    bf:c5:39:fc:19:e7:24:b0:62:51:82:6b:1c:c8:15:
                    bc:0d:61:8a:ec:0d:70:35:3e:4e:e7:2f:4b:fe:0d:
                    89:41:76:26:7c:f0:97:f1:8e:be:3f:eb:2a:d4:91:
                    2b:e4:e2:00:59:72:7d:57:7f:2d:61:ba:e4:61:1b:
                    b8:23:3c:68:74:db:1c:15:14:0c:b7:08:4d:b3:57:
                    d8:a6:5f:cc:27:59:fb:18:85:24:f5:8b:2a:a9:0e:
                    40:48:dc:cf:99:4c:17:ed:27:a2:78:61:dd:0a:0e:
                    ce:f2:4d:ef:b1:6c:85:38:a8:c7:a2:cf:b9:0a:8d:
                    4d:11:22:ad:97:7a:4d:f3:9b:15:15:a3:45:0d:4d:
                    6e:9b:02:64:30:2f:5c:ea:c4:46:8b:74:5b:08:2a:
                    64:39:76:43:59:66:51:19:68:25:76:83:49:a7:51:
                    8f:a1:ba:0a:7b:be:f0:fb:c0:99:7d:55:42:7b:df:
                    7b:2e:51:7f:5d:63:68:f0:8a:f9:26:85:63:f3:c7:
                    8f:98:a6:5e:ee:bd:00:e0:5e:b1:41:68:20:df:46:
                    6b:18:d8:ef:56:73:c4:4f:a1:b4:38:fa:25:c9:c3:
                    4d:90:b9:a8:fa:9a:59:ac:3e:e1:09:59:e4:bd:50:
                    76:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:30:3B:0D:26:9F:8B:BD:A8:50:D1:C7:C2:B7:38:18:BC:E8:B9:EF
            X509v3 Authority Key Identifier:
                keyid:49:11:F8:73:F7:2A:05:3B:54:3E:B5:70:3F:A4:F1:7E:C4:F7:9B:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4shvGyxQgd2jzqpn9VgAgVz1pWrXAA91xFsW3Txa2Q2Q/0/4911F873F72A053B543EB5703FA4F17EC4F79B55.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4911F873F72A053B543EB5703FA4F17EC4F79B55.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4shvGyxQgd2jzqpn9VgAgVz1pWrXAA91xFsW3Txa2Q2Q/0/3137302e3135302e33362e302f32322d3234203d3e20323635303234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.150.36.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7e:d4:d7:cc:2a:ff:10:45:64:35:2d:9f:2a:4f:0a:99:e6:dd:
         4c:a1:d5:87:5c:9a:32:c1:33:19:aa:a3:1a:2c:c8:80:c6:a4:
         3a:90:99:6e:ff:5b:e9:c9:a8:99:3c:50:18:99:77:d7:eb:f8:
         86:26:8f:9a:f8:42:fb:df:b1:32:6c:5e:8b:59:44:be:df:6a:
         0d:05:3b:c3:8b:6c:96:c0:a0:a0:4f:eb:ee:ce:8d:9f:e8:db:
         cb:de:be:0b:00:77:d7:6d:ea:ea:a5:fa:5a:d5:df:b7:bf:5d:
         8c:8b:c9:48:a7:60:38:61:3c:78:55:ea:f6:20:b7:fa:6e:2c:
         8f:84:6a:a6:04:9a:48:28:22:e6:f9:25:0e:6a:81:98:24:20:
         ec:bc:b6:5d:4d:ba:ef:41:52:ec:72:42:a4:2d:fe:7f:c4:f5:
         0e:c3:87:44:3b:de:59:3a:86:b9:e8:48:b7:6f:cd:ad:96:71:
         47:2a:d8:10:35:c2:d0:94:33:86:81:ad:db:ca:ba:0b:d7:e7:
         1a:6f:06:7d:27:3b:3c:fa:f8:41:5f:c8:b8:c0:4b:93:4a:4a:
         9b:e6:8a:b2:be:ab:ef:96:62:3e:30:c2:e5:25:fd:68:7c:ff:
         25:3b:f2:53:a8:70:df:0f:13:5b:fa:81:0b:a0:3b:5e:8d:f4:
         bc:20:d4:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:30:35 2025 by rpki-client