Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6BpkhkJmtUfYAuvbymTJP9Q3U4eKfEpEHJiCqwMTSdDC/0/3137302e3234372e3233322e302f32322d3234203d3e203532383538.roa
File:                     3137302e3234372e3233322e302f32322d3234203d3e203532383538.roa (raw, json)
Hash identifier:          VP40X5piHy/7T6kWQhUqAYud3HHYzC5BoXfV3QxcWzM=
Subject key identifier:   1D:02:F7:5B:25:64:80:F7:B3:02:93:F9:C0:53:49:C2:B5:DF:8A:E8
Certificate issuer:       /CN=3F89ED2DE6A8CF764FD3D048DA5C4C6AC483D757
Certificate serial:       266F0755CF24BE384699577C524AA1DD1F346765
Authority key identifier: 3F:89:ED:2D:E6:A8:CF:76:4F:D3:D0:48:DA:5C:4C:6A:C4:83:D7:57
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3F89ED2DE6A8CF764FD3D048DA5C4C6AC483D757.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6BpkhkJmtUfYAuvbymTJP9Q3U4eKfEpEHJiCqwMTSdDC/0/3137302e3234372e3233322e302f32322d3234203d3e203532383538.roa
Signing time:             Fri 08 Mar 2024 19:09:02 +0000
ROA not before:           Fri 08 Mar 2024 19:04:02 +0000
ROA not after:            Fri 07 Mar 2025 19:09:02 +0000
asID:                     52858
IP address blocks:        170.247.232.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:6f:07:55:cf:24:be:38:46:99:57:7c:52:4a:a1:dd:1f:34:67:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3F89ED2DE6A8CF764FD3D048DA5C4C6AC483D757
        Validity
            Not Before: Mar  8 19:04:02 2024 GMT
            Not After : Mar  7 19:09:02 2025 GMT
        Subject: CN=1D02F75B256480F7B30293F9C05349C2B5DF8AE8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:e5:39:f1:21:db:0c:b6:a8:69:3f:76:f3:c5:
                    98:cd:89:03:04:bc:46:24:96:8a:1b:bc:70:59:a2:
                    b2:5f:51:a4:03:4b:a8:5b:7b:69:fe:c3:ed:2d:8d:
                    bb:87:29:c0:4d:e3:77:60:0c:ed:e3:84:1c:34:15:
                    30:8d:c1:7c:77:c5:b8:16:e0:bc:14:9f:53:d9:b7:
                    e7:65:1f:65:24:33:2c:c8:52:af:e0:d7:9c:84:38:
                    12:30:4b:4a:2c:7a:30:a9:1e:53:c0:0d:f0:41:42:
                    eb:ed:28:01:75:46:6d:92:0c:ec:cb:81:f6:9a:08:
                    2a:e6:89:f8:4e:fe:19:89:42:25:9f:29:0a:10:ec:
                    74:27:2d:0a:66:d7:4e:3b:b9:48:c8:63:a9:6d:d7:
                    f1:18:9f:eb:08:4a:12:08:81:16:84:02:22:39:67:
                    90:f8:6e:3a:55:3b:b1:be:d0:7c:3a:cb:17:44:6c:
                    a5:1b:c6:7c:7f:d8:bf:53:b3:a2:ee:ca:b2:85:ec:
                    32:cd:c7:df:1f:ea:97:c2:f0:a5:bd:9f:c0:e7:d7:
                    47:3f:27:f7:0b:fd:1d:b0:95:2a:dc:22:65:41:b1:
                    68:2b:8d:0c:bb:0e:ac:61:b9:e2:ad:6c:28:a9:83:
                    8d:a8:98:4a:3f:7b:77:e6:43:ba:b9:dc:66:a7:47:
                    c2:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:02:F7:5B:25:64:80:F7:B3:02:93:F9:C0:53:49:C2:B5:DF:8A:E8
            X509v3 Authority Key Identifier:
                keyid:3F:89:ED:2D:E6:A8:CF:76:4F:D3:D0:48:DA:5C:4C:6A:C4:83:D7:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6BpkhkJmtUfYAuvbymTJP9Q3U4eKfEpEHJiCqwMTSdDC/0/3F89ED2DE6A8CF764FD3D048DA5C4C6AC483D757.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3F89ED2DE6A8CF764FD3D048DA5C4C6AC483D757.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6BpkhkJmtUfYAuvbymTJP9Q3U4eKfEpEHJiCqwMTSdDC/0/3137302e3234372e3233322e302f32322d3234203d3e203532383538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.247.232.0/22

    Signature Algorithm: sha256WithRSAEncryption
         47:1f:23:ba:ad:6d:41:39:aa:eb:f4:be:74:42:7d:6e:3a:93:
         e2:dc:d6:91:d5:65:f7:30:56:10:ce:ac:8c:4d:23:36:6f:18:
         53:85:1d:f6:4e:0f:af:02:19:db:0f:c4:3d:74:29:99:d9:7c:
         fd:df:15:60:31:0e:3c:22:f2:58:c0:9d:08:1a:b3:fc:72:6a:
         d5:48:28:73:f2:21:c7:0d:ef:c7:17:b8:fc:1d:9b:cd:b5:a1:
         5e:a1:94:b8:68:f3:30:d1:f0:85:3b:79:61:3e:56:c1:e6:63:
         a1:2c:3d:d8:bc:3c:9c:0d:7f:d1:cd:6c:05:5d:74:6c:3e:f9:
         22:c1:d3:83:9b:a2:4a:52:0a:ef:5f:75:cc:f2:9d:ce:4b:d7:
         e7:ae:56:2f:32:b2:5f:7f:32:91:aa:20:4b:73:a8:2f:df:3c:
         86:6d:91:a0:7a:42:98:7a:6d:ac:fd:0d:24:b5:0d:bc:5b:9d:
         e2:dd:47:4f:a5:38:88:df:91:23:21:27:9e:7b:47:b4:ed:c5:
         4a:68:5b:7a:26:f8:6b:21:21:2e:f8:4f:62:32:ed:1a:ee:5d:
         6d:73:2d:7e:52:7d:b4:16:0e:40:9f:d7:40:47:02:bd:2d:53:
         6d:87:49:07:8d:28:b0:6e:09:26:29:f2:ba:f8:f3:4b:b1:fa:
         dc:11:cc:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:05:45 2025 by rpki-client