Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6BpkhkJmtUfYAuvbymTJP9Q3U4eKfEpEHJiCqwMTSdDC/1/3137302e3234372e3233322e302f32322d3234203d3e203532383538.roa
File:                     3137302e3234372e3233322e302f32322d3234203d3e203532383538.roa (raw, json)
Hash identifier:          Dc7qsGnBFN/x3poD4Q4+4gdxYbxq0n2v8BYpm/q2K/I=
Subject key identifier:   3F:61:2A:C1:FE:C9:4A:98:56:B3:F2:B4:F2:3A:F1:86:21:F6:E6:33
Certificate issuer:       /CN=4765DF83369720EE1AF514C7CA6660A475D18592
Certificate serial:       0EFC9E5FA86FF02552AC6B270BD08E4F2B1FD0C0
Authority key identifier: 47:65:DF:83:36:97:20:EE:1A:F5:14:C7:CA:66:60:A4:75:D1:85:92
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4765DF83369720EE1AF514C7CA6660A475D18592.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6BpkhkJmtUfYAuvbymTJP9Q3U4eKfEpEHJiCqwMTSdDC/1/3137302e3234372e3233322e302f32322d3234203d3e203532383538.roa
Signing time:             Thu 06 Mar 2025 04:33:08 +0000
ROA not before:           Thu 06 Mar 2025 04:28:08 +0000
ROA not after:            Thu 05 Mar 2026 04:33:08 +0000
asID:                     52858
IP address blocks:        170.247.232.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:fc:9e:5f:a8:6f:f0:25:52:ac:6b:27:0b:d0:8e:4f:2b:1f:d0:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4765DF83369720EE1AF514C7CA6660A475D18592
        Validity
            Not Before: Mar  6 04:28:08 2025 GMT
            Not After : Mar  5 04:33:08 2026 GMT
        Subject: CN=3F612AC1FEC94A9856B3F2B4F23AF18621F6E633
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:9f:58:77:92:9f:a6:b6:d3:f7:80:66:2b:b9:
                    ef:8c:37:78:d7:a6:61:77:b6:5f:3c:14:7f:1e:f8:
                    f4:86:2c:c4:bc:8b:e7:b3:95:9e:00:53:63:6c:e6:
                    70:f3:e3:a5:b0:d7:77:f8:73:20:82:ee:00:25:55:
                    f5:f4:5f:cb:79:4b:3d:b0:7e:2c:07:72:b3:ae:a3:
                    a4:dd:67:ee:60:c8:d0:e0:d3:8c:ab:3f:c4:20:26:
                    78:63:93:ff:16:69:a1:04:be:d2:52:dd:4a:24:b4:
                    95:d4:01:8b:43:e0:76:17:76:0c:ae:3e:30:14:23:
                    24:2e:5f:01:4c:2a:4f:07:e9:bf:81:ca:c3:56:37:
                    94:ce:23:fa:cb:3c:b1:de:d5:85:40:26:6d:f5:15:
                    bf:16:61:27:ee:55:7a:d5:db:ef:45:cd:10:86:8b:
                    f6:be:7a:1d:06:e1:47:e8:f5:2d:48:ef:e7:ff:b9:
                    87:23:23:0b:fa:47:fa:78:b5:a8:c5:03:80:68:fb:
                    66:da:a2:fa:14:21:9c:e6:69:4d:1e:ad:76:a9:17:
                    e5:a6:fa:96:6d:68:19:81:50:39:69:19:66:89:e1:
                    41:ea:75:d9:9a:1f:0e:e0:e6:2c:a5:d9:12:a6:73:
                    ca:34:8c:6e:9c:80:89:4d:30:26:1b:69:15:34:f6:
                    4c:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:61:2A:C1:FE:C9:4A:98:56:B3:F2:B4:F2:3A:F1:86:21:F6:E6:33
            X509v3 Authority Key Identifier:
                keyid:47:65:DF:83:36:97:20:EE:1A:F5:14:C7:CA:66:60:A4:75:D1:85:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6BpkhkJmtUfYAuvbymTJP9Q3U4eKfEpEHJiCqwMTSdDC/1/4765DF83369720EE1AF514C7CA6660A475D18592.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4765DF83369720EE1AF514C7CA6660A475D18592.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6BpkhkJmtUfYAuvbymTJP9Q3U4eKfEpEHJiCqwMTSdDC/1/3137302e3234372e3233322e302f32322d3234203d3e203532383538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.247.232.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9a:6e:21:24:fe:2d:1e:73:22:99:a4:11:31:8e:5c:c1:61:4b:
         e9:fd:7c:4a:72:5f:10:35:e6:c3:0b:e8:c0:ee:40:12:c4:0f:
         68:c6:92:62:c8:51:c0:26:e9:67:0e:4b:3f:92:90:8d:01:b0:
         01:99:61:05:9f:f8:d0:7b:14:a8:9e:df:67:b1:6c:19:14:4e:
         2e:85:f6:69:5e:7a:a4:5d:1c:e9:be:c2:24:04:41:9a:39:eb:
         91:de:0a:24:2b:5c:f9:f8:9f:3e:1a:f8:18:22:ce:02:76:ac:
         7b:20:c6:ff:7d:22:6d:d4:49:ce:55:1d:b4:8e:e5:ad:f5:35:
         00:9a:4a:3b:23:00:1e:f3:ef:31:59:a4:69:64:83:9e:78:2c:
         f0:b0:31:4d:f9:ba:61:40:b5:bc:50:cc:e6:c4:e3:f5:9d:17:
         ae:67:8d:ee:a5:d6:1d:a7:6e:ec:2b:98:e3:a6:63:7b:75:a0:
         30:3a:29:42:d8:04:b0:f5:41:f6:fe:9e:91:ab:98:17:c0:a8:
         e9:14:89:03:21:05:c5:41:f2:ad:3b:34:f3:d1:a6:73:12:3f:
         de:ed:55:fe:75:c1:6d:7e:f0:bb:fc:53:ca:c1:38:a6:e7:7e:
         09:3e:cd:a9:88:30:33:68:e4:a0:44:95:7a:9c:12:fd:f9:3e:
         a6:a7:8c:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 07:57:28 2025 by rpki-client