Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5jGAWQ4guM5JPpAts55LtLmVCsFXMyPhzcPZtSQEk4hk/0/3137302e3234372e36382e302f32322d3234203d3e203532353733.roa
File:                     3137302e3234372e36382e302f32322d3234203d3e203532353733.roa (raw, json)
Hash identifier:          +3KfjpEygQFXoaql87vveOD07asilTQ5LuZqH8DGRvk=
Subject key identifier:   D1:8A:FD:BD:43:C0:84:C0:91:02:E5:0A:27:A4:55:F8:B4:E0:D2:35
Certificate issuer:       /CN=3574A58A568C8AE1ADC3EE503BF56A5366499355
Certificate serial:       76C29A55A343A50288E67EF98FDEA9DDBBB6B653
Authority key identifier: 35:74:A5:8A:56:8C:8A:E1:AD:C3:EE:50:3B:F5:6A:53:66:49:93:55
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3574A58A568C8AE1ADC3EE503BF56A5366499355.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5jGAWQ4guM5JPpAts55LtLmVCsFXMyPhzcPZtSQEk4hk/0/3137302e3234372e36382e302f32322d3234203d3e203532353733.roa
Signing time:             Mon 29 May 2023 16:14:05 +0000
ROA not before:           Mon 29 May 2023 16:09:05 +0000
ROA not after:            Mon 27 May 2024 16:14:05 +0000
asID:                     52573
IP address blocks:        170.247.68.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:c2:9a:55:a3:43:a5:02:88:e6:7e:f9:8f:de:a9:dd:bb:b6:b6:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3574A58A568C8AE1ADC3EE503BF56A5366499355
        Validity
            Not Before: May 29 16:09:05 2023 GMT
            Not After : May 27 16:14:05 2024 GMT
        Subject: CN=D18AFDBD43C084C09102E50A27A455F8B4E0D235
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:b4:26:a1:c8:24:52:d8:02:16:ba:01:45:ab:
                    ba:e8:4e:b3:91:da:28:a0:63:0c:28:67:28:88:8e:
                    5f:9f:c2:ee:93:d2:ac:10:5f:f8:e9:9c:25:32:1d:
                    6b:01:47:b8:94:a5:80:65:fd:8e:42:d0:5d:b3:c4:
                    94:83:e1:b1:5f:72:b6:47:02:cc:15:cc:91:b1:2b:
                    6d:bb:a9:18:83:b6:92:7d:0a:66:ff:2d:4b:b2:29:
                    51:5f:68:97:8c:93:a3:75:62:2a:fd:03:a8:c5:52:
                    55:8f:52:bc:93:86:81:e1:73:c6:91:56:9a:1d:fa:
                    22:ac:fa:68:40:e5:81:56:03:56:7e:68:b1:d0:5e:
                    9d:47:74:e7:ab:80:d8:f5:2a:fe:50:82:80:ef:81:
                    d0:e9:db:b2:d9:83:a0:34:32:3a:f9:80:97:13:7b:
                    1c:89:63:08:87:80:e7:d7:52:01:60:25:1e:57:bf:
                    4a:c3:f5:11:95:95:8c:51:5a:fa:b7:4c:6c:96:ad:
                    2c:99:11:51:1c:6b:c7:9f:74:5e:96:c9:40:7a:47:
                    d0:7a:ae:9b:29:29:1c:36:7b:16:ae:ef:1c:01:18:
                    ed:8b:19:6d:6c:07:39:c7:56:26:59:b9:9e:66:17:
                    28:65:9e:c8:8c:f5:74:c1:ff:3b:5c:8e:c9:b4:30:
                    56:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:8A:FD:BD:43:C0:84:C0:91:02:E5:0A:27:A4:55:F8:B4:E0:D2:35
            X509v3 Authority Key Identifier:
                keyid:35:74:A5:8A:56:8C:8A:E1:AD:C3:EE:50:3B:F5:6A:53:66:49:93:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5jGAWQ4guM5JPpAts55LtLmVCsFXMyPhzcPZtSQEk4hk/0/3574A58A568C8AE1ADC3EE503BF56A5366499355.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3574A58A568C8AE1ADC3EE503BF56A5366499355.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5jGAWQ4guM5JPpAts55LtLmVCsFXMyPhzcPZtSQEk4hk/0/3137302e3234372e36382e302f32322d3234203d3e203532353733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.247.68.0/22

    Signature Algorithm: sha256WithRSAEncryption
         09:62:26:9b:7d:2b:d3:bc:b0:91:48:4f:73:d8:e5:38:c0:13:
         5a:86:e1:c9:92:99:f2:2c:01:ad:0a:a7:7b:21:61:31:f8:47:
         76:c7:97:ab:2e:58:34:ad:63:83:fb:ea:d9:6e:88:ba:f1:68:
         b5:52:7f:7e:e6:97:d6:27:93:6f:f7:5f:61:5e:ee:8f:18:3a:
         9b:80:61:17:07:39:fe:6f:7d:b4:00:61:ed:fc:73:48:e7:02:
         06:94:cb:d5:4c:7b:65:2b:7c:2b:cf:c1:1a:1d:2c:52:c3:4a:
         b6:b6:64:54:db:98:f6:2a:74:5e:59:9b:89:f0:fc:04:90:4b:
         54:e1:46:31:45:b2:14:9d:64:d8:84:0e:4b:65:8b:b7:6f:af:
         e0:e4:08:80:20:68:92:af:55:1c:33:62:3f:96:69:60:af:98:
         bd:55:01:fc:25:2a:34:16:9b:37:c9:be:b9:ff:7e:86:e4:fd:
         32:16:3d:71:92:86:ec:6f:e4:0a:f4:e8:13:82:f1:e4:f8:b6:
         18:08:4b:17:f2:ad:b5:79:c9:48:02:46:f4:4b:ed:5d:33:a6:
         cf:46:8c:c1:1a:5b:a8:c0:81:3e:bf:02:6a:6c:ed:fe:15:3a:
         1e:e3:21:24:05:48:45:5e:8f:1f:64:d9:cc:45:01:69:6f:a4:
         c6:1c:37:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:28:01 2025 by rpki-client