Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7QgBtXKwEXrrr6QVearG7FUgmhWwxb9UGpq33Leorfc9/0/3137302e3233392e35322e302f32322d3234203d3e20323635313238.roa
File:                     3137302e3233392e35322e302f32322d3234203d3e20323635313238.roa (raw, json)
Hash identifier:          4rIRDQgFKKowM/4mALhVcI7zkLR24+tsobAaReWKTlQ=
Subject key identifier:   91:DE:61:75:5A:63:EC:8B:A7:D8:D6:A9:DF:1D:25:22:38:E7:F7:8B
Certificate issuer:       /CN=B935CB53DB7E745249F1AF9043A9E01F3DC62EAC
Certificate serial:       17C8CF3C9F113773167D8F841F2E0FA80F9A3533
Authority key identifier: B9:35:CB:53:DB:7E:74:52:49:F1:AF:90:43:A9:E0:1F:3D:C6:2E:AC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B935CB53DB7E745249F1AF9043A9E01F3DC62EAC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7QgBtXKwEXrrr6QVearG7FUgmhWwxb9UGpq33Leorfc9/0/3137302e3233392e35322e302f32322d3234203d3e20323635313238.roa
Signing time:             Fri 14 Jul 2023 01:32:34 +0000
ROA not before:           Fri 14 Jul 2023 01:27:34 +0000
ROA not after:            Fri 12 Jul 2024 01:32:34 +0000
asID:                     265128
IP address blocks:        170.239.52.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:c8:cf:3c:9f:11:37:73:16:7d:8f:84:1f:2e:0f:a8:0f:9a:35:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B935CB53DB7E745249F1AF9043A9E01F3DC62EAC
        Validity
            Not Before: Jul 14 01:27:34 2023 GMT
            Not After : Jul 12 01:32:34 2024 GMT
        Subject: CN=91DE61755A63EC8BA7D8D6A9DF1D252238E7F78B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:12:21:15:f6:e8:fc:03:13:eb:e8:ee:30:f0:
                    6b:76:80:5a:03:ba:54:e2:13:f5:98:da:f6:20:9a:
                    0a:9e:52:14:67:c3:d8:46:36:f6:b6:f6:2c:98:dd:
                    ac:b8:0d:23:fe:ab:da:3a:2b:8f:ff:32:e1:f5:8e:
                    20:85:3c:f4:c1:05:b2:33:f7:08:d4:20:c3:31:3d:
                    2f:e7:e6:d9:f6:24:22:a4:d6:8c:f5:6b:c7:7f:5d:
                    2d:42:73:26:be:4c:50:93:35:7b:0d:13:ce:9c:73:
                    f9:67:b5:71:7f:3a:54:1e:7f:d8:00:55:50:48:56:
                    10:1f:66:6f:4c:9f:ec:ec:fc:13:b9:9f:08:86:f4:
                    50:fe:a7:41:96:6a:42:20:a5:4d:b3:78:51:77:41:
                    d9:b9:00:70:71:4f:5c:3f:07:30:9e:56:82:30:2f:
                    84:d2:21:95:b9:8b:30:75:17:1d:ea:a4:ac:a5:6e:
                    e5:a6:6e:eb:b5:4d:a3:48:2b:e2:54:a8:de:e2:b4:
                    1d:ad:a3:1d:85:a6:d9:34:55:45:26:e2:30:33:32:
                    36:9c:c4:42:8a:c2:4c:78:fa:cb:0a:93:32:06:59:
                    54:75:61:b2:ed:89:9f:2d:c9:69:54:72:53:64:63:
                    93:96:e5:0f:42:1b:69:c1:0b:d4:c6:6a:b3:ca:db:
                    32:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:DE:61:75:5A:63:EC:8B:A7:D8:D6:A9:DF:1D:25:22:38:E7:F7:8B
            X509v3 Authority Key Identifier:
                keyid:B9:35:CB:53:DB:7E:74:52:49:F1:AF:90:43:A9:E0:1F:3D:C6:2E:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7QgBtXKwEXrrr6QVearG7FUgmhWwxb9UGpq33Leorfc9/0/B935CB53DB7E745249F1AF9043A9E01F3DC62EAC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B935CB53DB7E745249F1AF9043A9E01F3DC62EAC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7QgBtXKwEXrrr6QVearG7FUgmhWwxb9UGpq33Leorfc9/0/3137302e3233392e35322e302f32322d3234203d3e20323635313238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.239.52.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1a:e5:0e:8b:75:45:2c:4a:5a:1a:19:73:59:e5:08:f9:ee:56:
         51:6c:db:fc:c1:cf:34:c7:e4:a9:fa:f1:f8:4c:4b:40:01:33:
         74:a9:dc:8d:e3:8a:b5:c3:6a:5f:14:d8:38:03:c4:ea:7b:64:
         9a:26:4b:e0:1e:71:fe:f8:d6:9d:aa:f7:e7:f8:db:78:80:00:
         8e:c3:1f:d4:b9:05:16:23:64:0d:ce:74:ab:fc:76:3a:1f:33:
         72:fb:56:1d:2b:05:53:4f:89:92:96:a9:da:58:d7:ee:23:12:
         c7:d7:e5:80:3d:ee:fb:91:44:d8:eb:5b:15:e4:29:ae:c8:09:
         6e:a8:25:74:e9:81:98:91:dc:d9:9c:13:d5:30:60:71:48:5d:
         f3:d2:be:8f:99:30:1e:3b:94:08:a8:ab:a3:c4:40:60:8c:0a:
         ec:52:5c:a3:81:57:dd:8e:cf:5b:ec:35:cf:bf:e8:73:c9:e4:
         18:f9:2d:1c:49:1e:5c:81:8e:a6:47:47:87:b2:a0:9b:d4:74:
         70:5e:fb:cc:6f:7d:32:13:ac:b9:ca:40:a8:76:41:48:01:93:
         0a:46:b0:b0:29:bc:8f:4d:ea:d0:25:36:73:cf:3a:03:85:47:
         e5:12:d3:5c:46:35:85:bb:2a:dc:a4:97:e0:ee:19:68:7a:36:
         06:c6:bb:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 02:22:25 2025 by rpki-client