Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7dKXGhCmGRhtTKZCsTUVbmcCS4Y3Fs1TN1U6vg2Rzdsp/0/3137302e38342e3130362e302f32332d3233203d3e20323635303233.roa
File:                     3137302e38342e3130362e302f32332d3233203d3e20323635303233.roa (raw, json)
Hash identifier:          59rGXR13Qk+0N/ZBzLBqfSe61h1p5oQMGy2Pa7rcEvM=
Subject key identifier:   E3:D6:78:D5:82:9A:B5:08:2C:54:5E:F6:DC:53:28:EC:F8:C9:77:07
Certificate issuer:       /CN=38955979C264791E7D2D4649EF8D839B1E81393A
Certificate serial:       5A5D8A0201EAD173B1E79668F3A9C51F6EFF4404
Authority key identifier: 38:95:59:79:C2:64:79:1E:7D:2D:46:49:EF:8D:83:9B:1E:81:39:3A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/38955979C264791E7D2D4649EF8D839B1E81393A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7dKXGhCmGRhtTKZCsTUVbmcCS4Y3Fs1TN1U6vg2Rzdsp/0/3137302e38342e3130362e302f32332d3233203d3e20323635303233.roa
Signing time:             Tue 23 Aug 2022 18:47:19 +0000
ROA not before:           Tue 23 Aug 2022 18:42:19 +0000
ROA not after:            Tue 22 Aug 2023 18:47:19 +0000
asID:                     265023
IP address blocks:        170.84.106.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:5d:8a:02:01:ea:d1:73:b1:e7:96:68:f3:a9:c5:1f:6e:ff:44:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38955979C264791E7D2D4649EF8D839B1E81393A
        Validity
            Not Before: Aug 23 18:42:19 2022 GMT
            Not After : Aug 22 18:47:19 2023 GMT
        Subject: CN=E3D678D5829AB5082C545EF6DC5328ECF8C97707
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:c5:5e:be:10:98:23:bc:2a:2e:15:3b:01:f2:
                    16:c5:7e:40:84:5d:3d:15:b5:56:d2:74:e3:cb:c9:
                    5b:f6:28:4d:72:4c:b3:aa:1f:4d:c0:ac:d9:3a:8f:
                    ab:30:c0:e6:84:03:16:bd:a6:7d:50:2c:db:ae:62:
                    0b:ec:5a:d9:d0:aa:db:67:91:3e:bd:18:3f:12:20:
                    4c:64:62:aa:22:e7:cd:8c:ef:ef:5f:86:7e:a9:0a:
                    41:3e:46:ea:25:57:aa:32:46:78:3f:f5:d3:2b:e7:
                    f5:5d:fc:9c:04:ba:11:b4:64:61:1b:14:98:d7:f2:
                    ae:86:70:23:90:91:31:54:24:f7:3f:ca:0b:36:29:
                    86:38:63:e4:b6:9d:a4:e0:6d:fc:79:4f:a7:a7:62:
                    e7:03:20:b9:93:89:3a:67:60:a6:ab:4d:7f:96:58:
                    2e:73:95:72:77:0b:49:50:b3:5d:3b:8e:ca:0d:74:
                    eb:d4:60:76:21:5c:8b:b3:6a:a6:70:b2:0c:6e:11:
                    50:2c:9c:80:8f:ca:e3:b9:fd:b3:9b:ad:91:67:0e:
                    b7:aa:52:ec:56:70:cf:dd:05:10:f7:66:a5:bf:88:
                    39:c4:b9:c7:de:be:a9:2f:ac:e4:dc:52:e9:50:a0:
                    89:c4:76:9b:90:d5:6d:01:d0:96:3f:6a:f0:25:92:
                    b2:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:D6:78:D5:82:9A:B5:08:2C:54:5E:F6:DC:53:28:EC:F8:C9:77:07
            X509v3 Authority Key Identifier:
                keyid:38:95:59:79:C2:64:79:1E:7D:2D:46:49:EF:8D:83:9B:1E:81:39:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7dKXGhCmGRhtTKZCsTUVbmcCS4Y3Fs1TN1U6vg2Rzdsp/0/38955979C264791E7D2D4649EF8D839B1E81393A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/38955979C264791E7D2D4649EF8D839B1E81393A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7dKXGhCmGRhtTKZCsTUVbmcCS4Y3Fs1TN1U6vg2Rzdsp/0/3137302e38342e3130362e302f32332d3233203d3e20323635303233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.84.106.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8f:fb:09:b1:9e:fc:3c:87:8b:d1:ed:1d:95:cc:3d:7b:2c:b9:
         73:d6:13:43:7d:24:03:2c:21:bd:a4:7c:cd:72:20:2e:e7:5f:
         31:46:0f:84:e0:84:1e:be:b5:7e:ae:29:1f:0f:a9:d1:7a:2b:
         c0:99:21:c7:f8:2d:f9:da:34:c9:73:2d:ef:7a:53:f0:1b:63:
         35:f1:1b:0c:5b:14:57:48:49:82:7f:fa:12:1d:9c:0b:24:f8:
         4e:24:bc:2f:7a:d2:47:eb:ab:a7:eb:ac:65:8e:43:24:a8:e8:
         14:65:53:db:88:d6:09:df:2e:d7:e0:50:f4:be:cd:2d:ae:23:
         2b:8f:39:ba:1e:f7:4f:38:25:a6:bf:a2:02:6d:41:71:e8:4d:
         5f:55:94:01:82:70:27:40:43:fe:41:e9:dc:06:3e:a1:ab:e6:
         67:ee:8c:75:9d:52:92:10:c1:9f:f8:c5:20:f2:1c:a0:bb:e6:
         9b:b7:49:d3:c5:a6:9a:f7:95:93:ce:19:0d:4d:39:07:5a:39:
         d0:63:78:0e:bc:38:53:aa:66:38:5b:76:84:95:ee:52:dc:cd:
         5d:80:2a:c9:77:a1:5f:95:e3:21:ad:2e:7d:dd:17:aa:0d:2c:
         b3:6b:1a:d9:ab:9b:c4:08:3f:c7:1b:35:f3:11:6a:b8:d7:c5:
         f0:a6:fc:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:44:03 2025 by rpki-client