Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/75rfH9oQLQzzsZQP2Qra5NxJNhkNycfC1NQgrZMSXBVh/0/3137302e38332e3130302e302f32322d3232203d3e203532363031.roa
File:                     3137302e38332e3130302e302f32322d3232203d3e203532363031.roa (raw, json)
Hash identifier:          w+GZohu9YVIMYR7hS6fKHSMgegvRrwQ0hR7v7Ca/qY0=
Subject key identifier:   B6:DE:1B:13:F6:A8:39:AE:7B:3F:60:6B:08:3E:42:83:7C:94:45:DC
Certificate issuer:       /CN=96F3E99149446CE908CDA1678FD9180CD4020D16
Certificate serial:       4BBC6FD33043C48D05B62ACBEF4DB6FA81AA6731
Authority key identifier: 96:F3:E9:91:49:44:6C:E9:08:CD:A1:67:8F:D9:18:0C:D4:02:0D:16
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/96F3E99149446CE908CDA1678FD9180CD4020D16.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/75rfH9oQLQzzsZQP2Qra5NxJNhkNycfC1NQgrZMSXBVh/0/3137302e38332e3130302e302f32322d3232203d3e203532363031.roa
Signing time:             Tue 03 Dec 2024 18:42:38 +0000
ROA not before:           Tue 03 Dec 2024 18:37:38 +0000
ROA not after:            Tue 02 Dec 2025 18:42:38 +0000
asID:                     52601
IP address blocks:        170.83.100.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:bc:6f:d3:30:43:c4:8d:05:b6:2a:cb:ef:4d:b6:fa:81:aa:67:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96F3E99149446CE908CDA1678FD9180CD4020D16
        Validity
            Not Before: Dec  3 18:37:38 2024 GMT
            Not After : Dec  2 18:42:38 2025 GMT
        Subject: CN=B6DE1B13F6A839AE7B3F606B083E42837C9445DC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:41:55:18:68:08:99:06:21:0f:40:a4:c8:91:
                    f5:b5:9d:87:0b:88:5f:34:8c:0f:e9:66:cd:51:4b:
                    f5:63:d3:58:9b:24:fa:15:3e:2a:b9:bc:91:0c:a0:
                    c6:66:5b:8e:24:04:03:8a:00:7a:2b:cd:75:5e:8d:
                    8f:7b:d1:2a:8e:2b:f0:50:8f:49:0b:e5:39:9f:da:
                    dd:7f:43:b1:94:bd:ad:92:05:d9:d2:53:46:06:a2:
                    fc:ae:d1:89:0c:c0:d7:7c:f8:52:b0:12:ff:7a:32:
                    bd:2b:3e:20:66:a1:d7:28:9f:a7:9a:38:80:aa:0d:
                    f7:bb:00:3b:ca:cf:3d:1a:43:12:bf:96:bb:72:6f:
                    9d:a5:25:62:71:4a:3f:26:97:17:27:e2:ac:0f:29:
                    8e:28:48:e1:54:9c:9b:a1:83:f4:ad:b2:c8:28:11:
                    00:ff:6d:fb:d2:65:27:62:41:f8:3b:7a:42:32:cf:
                    95:7e:33:66:a7:31:71:74:5d:87:5b:0e:c2:e6:44:
                    0d:02:41:6d:1d:d8:55:9d:84:1a:bc:17:ae:ee:15:
                    ba:66:87:9f:8e:4e:6a:79:5a:73:9e:56:71:eb:99:
                    30:c0:79:65:51:e8:31:14:93:25:a1:ea:2c:a0:fe:
                    97:16:a9:1c:9c:73:64:ad:4b:d3:48:7a:ce:06:d7:
                    8b:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:DE:1B:13:F6:A8:39:AE:7B:3F:60:6B:08:3E:42:83:7C:94:45:DC
            X509v3 Authority Key Identifier:
                keyid:96:F3:E9:91:49:44:6C:E9:08:CD:A1:67:8F:D9:18:0C:D4:02:0D:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/75rfH9oQLQzzsZQP2Qra5NxJNhkNycfC1NQgrZMSXBVh/0/96F3E99149446CE908CDA1678FD9180CD4020D16.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/96F3E99149446CE908CDA1678FD9180CD4020D16.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/75rfH9oQLQzzsZQP2Qra5NxJNhkNycfC1NQgrZMSXBVh/0/3137302e38332e3130302e302f32322d3232203d3e203532363031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.83.100.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7c:dd:94:aa:83:aa:1b:b3:53:11:b3:0b:5b:65:56:7a:2a:c3:
         5a:a8:38:45:8c:e4:05:1d:1b:14:10:ec:31:e3:77:3e:81:70:
         6f:87:e0:b3:3c:cc:d6:f7:25:51:fc:b0:91:8d:a0:94:98:ca:
         1f:d7:fa:66:2c:94:07:80:f2:e6:58:70:34:be:88:dd:e0:20:
         c2:6d:e3:0c:18:7f:b0:0a:0e:08:98:a1:18:17:25:77:77:d5:
         79:23:98:22:fb:22:24:5a:9c:d2:b5:77:9a:76:24:27:21:82:
         ea:8a:ce:e5:f2:b0:0c:d3:d5:b5:1c:9c:9d:3a:c6:c2:df:27:
         ec:38:86:dc:40:1a:71:e2:90:5e:09:66:92:91:3f:e7:74:a5:
         57:23:ea:99:0a:fb:2c:69:4e:4e:38:27:5e:e1:47:3f:78:93:
         6b:2f:87:a0:9e:3b:44:03:49:7b:1a:6b:90:17:6c:11:6d:01:
         8f:18:03:1c:eb:a5:4d:7a:15:0c:e0:cc:e4:f0:1f:94:35:06:
         a3:3a:39:3b:f2:bb:9a:2e:90:1e:83:a2:3a:e6:af:96:2f:06:
         3e:e9:b6:a8:4a:6a:1a:f9:52:0c:fa:12:08:be:4a:04:17:08:
         31:f1:70:28:96:a1:9e:c7:c1:55:2f:18:33:b6:8a:8d:6f:be:
         c1:70:ba:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 18:30:31 2025 by rpki-client