Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/61fgewLU3GnGfRz8fYCDwQxcqQdQZHSBqGMigdnXMiMM/0/3137302e38302e34342e302f32342d3234203d3e20323636333638.roa
File:                     3137302e38302e34342e302f32342d3234203d3e20323636333638.roa (raw, json)
Hash identifier:          HqO3OPEP7rdN6Zjax6+rtJB+Vgy9PtamkdYDDjZHNOE=
Subject key identifier:   50:B4:63:7D:D8:62:86:36:9E:D7:33:EE:B4:2F:13:7E:9E:A9:7A:44
Certificate issuer:       /CN=2A3CA2DBD8297399B3831FD990D4BFDBEC0BED07
Certificate serial:       7BD07D9AAB10FEB435692B107CAD0F2744BCA3E4
Authority key identifier: 2A:3C:A2:DB:D8:29:73:99:B3:83:1F:D9:90:D4:BF:DB:EC:0B:ED:07
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A3CA2DBD8297399B3831FD990D4BFDBEC0BED07.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/61fgewLU3GnGfRz8fYCDwQxcqQdQZHSBqGMigdnXMiMM/0/3137302e38302e34342e302f32342d3234203d3e20323636333638.roa
Signing time:             Thu 20 Mar 2025 20:03:33 +0000
ROA not before:           Thu 20 Mar 2025 19:58:33 +0000
ROA not after:            Thu 19 Mar 2026 20:03:33 +0000
asID:                     266368
IP address blocks:        170.80.44.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:d0:7d:9a:ab:10:fe:b4:35:69:2b:10:7c:ad:0f:27:44:bc:a3:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A3CA2DBD8297399B3831FD990D4BFDBEC0BED07
        Validity
            Not Before: Mar 20 19:58:33 2025 GMT
            Not After : Mar 19 20:03:33 2026 GMT
        Subject: CN=50B4637DD86286369ED733EEB42F137E9EA97A44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:0f:28:58:b5:fc:66:f0:2b:2f:03:b1:0a:0b:
                    17:70:a2:37:97:c5:4e:67:e6:05:51:cd:07:82:8b:
                    f2:f0:a0:a2:b1:66:e9:83:60:db:cc:96:ce:b5:a6:
                    f3:3c:d3:7f:a4:e0:33:b7:4f:e4:68:4e:8c:66:81:
                    fc:a1:35:60:24:d0:00:f2:a3:82:09:06:b7:5b:a1:
                    a6:15:a8:c4:cc:0a:58:de:69:aa:24:5c:e3:9b:3f:
                    0f:8b:cc:ec:ed:30:4e:23:be:36:f4:06:20:e3:4e:
                    1a:0f:ea:d2:1c:b3:fa:40:c8:01:1d:f4:e7:f2:ee:
                    cd:27:42:9f:03:d2:36:29:73:c5:f6:25:e3:3f:d9:
                    9d:e5:47:2a:de:da:3c:15:0b:a7:af:f8:71:26:73:
                    01:d0:fc:f6:f4:a8:39:6b:e4:f7:3f:ad:68:4c:53:
                    e7:52:c1:12:ab:8f:e4:45:92:62:8f:14:d0:70:b9:
                    b4:45:5f:da:c4:59:31:fb:b5:4f:fe:25:f8:f0:28:
                    99:f6:74:a0:36:14:bb:e5:f7:39:a4:e9:27:3b:a9:
                    fe:40:53:62:58:c3:cb:ce:53:a4:0f:3b:15:b5:0b:
                    5e:fe:ad:cf:33:eb:95:f2:5a:40:e8:e8:fb:ac:a8:
                    c0:ae:7d:d0:16:b0:c6:84:f9:8a:79:ed:3b:c5:37:
                    98:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:B4:63:7D:D8:62:86:36:9E:D7:33:EE:B4:2F:13:7E:9E:A9:7A:44
            X509v3 Authority Key Identifier:
                keyid:2A:3C:A2:DB:D8:29:73:99:B3:83:1F:D9:90:D4:BF:DB:EC:0B:ED:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/61fgewLU3GnGfRz8fYCDwQxcqQdQZHSBqGMigdnXMiMM/0/2A3CA2DBD8297399B3831FD990D4BFDBEC0BED07.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A3CA2DBD8297399B3831FD990D4BFDBEC0BED07.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/61fgewLU3GnGfRz8fYCDwQxcqQdQZHSBqGMigdnXMiMM/0/3137302e38302e34342e302f32342d3234203d3e20323636333638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.80.44.0/24

    Signature Algorithm: sha256WithRSAEncryption
         90:e9:95:44:06:ee:49:ba:11:c4:11:da:7d:00:ed:04:8f:e7:
         f0:69:7e:83:a7:e9:9c:f0:f0:5b:5f:bb:98:79:f6:19:0f:41:
         69:27:af:7d:6f:51:52:00:d3:97:d7:88:69:a7:da:bc:71:5f:
         ba:b8:09:ea:d2:55:6c:bd:22:56:dc:e4:20:f7:55:5b:af:6b:
         81:ad:ed:b2:f7:4e:8e:a5:da:3e:2c:1b:93:98:5d:6e:c0:ce:
         52:4f:a0:3c:4a:0a:57:48:6e:06:d9:66:96:59:c7:bb:ae:76:
         5f:1a:13:4b:1f:52:a5:91:7c:f9:15:ea:e0:f4:28:6b:ba:12:
         fb:b4:bd:3c:9d:4d:6b:2e:94:e7:f1:ac:c4:65:ce:f6:41:a4:
         36:98:2d:65:f6:a7:5c:e3:41:5a:fe:86:cc:4a:cd:14:48:77:
         21:f0:2b:03:21:fc:86:e2:10:72:96:9f:46:db:39:29:6f:c2:
         ff:e0:d8:86:48:a9:08:ae:25:67:61:ca:7f:69:f4:f6:ab:4d:
         a6:24:f2:c3:da:23:83:06:c7:06:e2:ee:1d:47:e1:59:ad:75:
         8c:ed:c7:99:3c:6e:33:b8:71:c2:a1:37:5e:7b:02:d9:12:bf:
         c8:34:da:93:2e:77:90:60:d5:38:b6:0d:26:85:a0:52:5d:81:
         b4:31:4e:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 04:14:23 2025 by rpki-client