Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/61fgewLU3GnGfRz8fYCDwQxcqQdQZHSBqGMigdnXMiMM/0/3137302e38302e34342e302f32322d3232203d3e20323636333638.roa
File:                     3137302e38302e34342e302f32322d3232203d3e20323636333638.roa (raw, json)
Hash identifier:          0jNLvAt+I87wPZNMDoQK/U66WDlDbseg1uwpqrihd6Y=
Subject key identifier:   52:BC:71:7E:37:08:C0:04:5B:B6:FD:0F:55:C6:27:88:2B:AF:AE:D4
Certificate issuer:       /CN=2A3CA2DBD8297399B3831FD990D4BFDBEC0BED07
Certificate serial:       1C7CD3B606E5785451E85E512774036902561370
Authority key identifier: 2A:3C:A2:DB:D8:29:73:99:B3:83:1F:D9:90:D4:BF:DB:EC:0B:ED:07
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A3CA2DBD8297399B3831FD990D4BFDBEC0BED07.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/61fgewLU3GnGfRz8fYCDwQxcqQdQZHSBqGMigdnXMiMM/0/3137302e38302e34342e302f32322d3232203d3e20323636333638.roa
Signing time:             Tue 17 Dec 2024 19:59:08 +0000
ROA not before:           Tue 17 Dec 2024 19:54:08 +0000
ROA not after:            Tue 16 Dec 2025 19:59:08 +0000
asID:                     266368
IP address blocks:        170.80.44.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:7c:d3:b6:06:e5:78:54:51:e8:5e:51:27:74:03:69:02:56:13:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A3CA2DBD8297399B3831FD990D4BFDBEC0BED07
        Validity
            Not Before: Dec 17 19:54:08 2024 GMT
            Not After : Dec 16 19:59:08 2025 GMT
        Subject: CN=52BC717E3708C0045BB6FD0F55C627882BAFAED4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:ee:0c:08:eb:e3:b6:fd:d6:c4:52:f3:05:6f:
                    05:88:99:78:36:cf:ee:b3:d7:30:2c:b9:d5:78:d4:
                    0d:16:6b:52:70:0b:72:ed:3d:67:0c:41:f3:d7:95:
                    93:95:a2:05:1b:50:6e:62:5a:75:6e:80:41:e5:ca:
                    70:6e:e7:b4:5d:93:71:82:c1:52:13:58:00:64:ee:
                    c7:1b:92:5f:a3:98:db:cf:6e:9b:fd:bd:b1:75:ec:
                    4e:14:89:02:e5:64:68:aa:92:6b:2a:cf:f7:3e:19:
                    5d:ee:74:ad:c3:49:1a:57:33:a2:72:fb:b3:92:59:
                    d7:ea:06:a7:f5:37:b5:5e:d1:df:28:02:92:67:3f:
                    f3:ee:b0:c5:c2:e4:7c:b6:e3:82:f3:7e:c1:8f:81:
                    d7:8a:af:bb:29:5a:07:06:b7:37:a3:22:61:10:c2:
                    cc:99:ce:98:24:3a:bd:26:e1:58:08:45:71:b3:d9:
                    95:cc:9e:ad:bb:1d:d2:15:95:db:8e:06:c3:99:e2:
                    ba:c8:e0:90:dc:2f:f2:28:da:a9:7b:6c:ff:ee:86:
                    a3:cb:f5:4b:12:4b:92:3f:78:71:7a:e3:65:93:00:
                    2a:bc:4d:6c:33:88:96:24:76:95:19:b1:f8:dc:50:
                    de:b3:76:06:a2:44:8a:5b:d6:33:ee:55:04:ce:35:
                    f8:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:BC:71:7E:37:08:C0:04:5B:B6:FD:0F:55:C6:27:88:2B:AF:AE:D4
            X509v3 Authority Key Identifier:
                keyid:2A:3C:A2:DB:D8:29:73:99:B3:83:1F:D9:90:D4:BF:DB:EC:0B:ED:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/61fgewLU3GnGfRz8fYCDwQxcqQdQZHSBqGMigdnXMiMM/0/2A3CA2DBD8297399B3831FD990D4BFDBEC0BED07.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A3CA2DBD8297399B3831FD990D4BFDBEC0BED07.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/61fgewLU3GnGfRz8fYCDwQxcqQdQZHSBqGMigdnXMiMM/0/3137302e38302e34342e302f32322d3232203d3e20323636333638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.80.44.0/22

    Signature Algorithm: sha256WithRSAEncryption
         89:04:7a:3a:dc:7b:f6:3a:3f:fe:b7:b0:f7:5d:96:a6:5b:68:
         72:97:ec:52:2c:05:0a:e1:4d:31:87:c3:89:ff:01:6f:a8:80:
         e1:36:2d:e2:62:17:9a:83:49:0f:14:b2:89:be:38:22:8d:c5:
         0d:22:01:ef:3e:14:77:2d:ba:b0:04:0d:10:fe:58:d4:0e:09:
         65:8a:31:72:f9:5e:f1:5f:f0:d6:2c:b7:c9:3a:50:a4:59:24:
         32:dc:be:c7:e8:2c:1c:74:4e:fd:b4:2c:98:33:3a:70:92:ce:
         21:ce:74:93:51:9f:9e:57:19:bb:76:e8:52:9f:eb:23:a0:e3:
         04:e6:d6:8a:3b:46:42:7e:38:11:f0:38:88:73:00:10:e8:dc:
         e6:f6:7b:9d:8a:fd:37:5e:79:a7:31:01:1e:49:1f:db:d5:d7:
         42:f2:cb:5c:d1:8b:5b:16:90:2c:38:4d:d5:db:b4:42:a0:86:
         c7:94:c6:2c:a2:aa:27:7a:e7:e3:f9:0b:86:bf:5b:af:f4:e8:
         29:4a:88:77:19:7e:98:5e:f3:2f:c1:50:0f:ed:03:30:1e:39:
         f7:d9:7a:82:1e:ba:a3:ed:09:9b:99:9f:38:24:02:dd:de:98:
         16:da:3f:69:d8:95:c4:27:b8:65:75:08:ad:a4:74:e4:23:e0:
         3e:07:46:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 09:38:39 2025 by rpki-client