Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8B7YwzQXRn6vaj7DJHPqjMiQHiawVEBCJDNrt8fZMZWk/0/3134332e3235352e3136382e302f32322d3232203d3e20323632333736.roa
File:                     3134332e3235352e3136382e302f32322d3232203d3e20323632333736.roa (raw, json)
Hash identifier:          URqXDHRWq5tbj4V2ZDhlsduuZ3A70slKMyDEJWHSfwA=
Subject key identifier:   CD:A7:BE:2D:67:59:AA:F1:F9:30:22:5B:2C:69:56:85:58:D9:6A:F9
Certificate issuer:       /CN=C47C4419F3B0301460D71A68A39D35E25A0926C3
Certificate serial:       410FCBBF3F0A689EE36201AE55B78A2675213857
Authority key identifier: C4:7C:44:19:F3:B0:30:14:60:D7:1A:68:A3:9D:35:E2:5A:09:26:C3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C47C4419F3B0301460D71A68A39D35E25A0926C3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8B7YwzQXRn6vaj7DJHPqjMiQHiawVEBCJDNrt8fZMZWk/0/3134332e3235352e3136382e302f32322d3232203d3e20323632333736.roa
Signing time:             Tue 04 Jun 2024 17:34:09 +0000
ROA not before:           Tue 04 Jun 2024 17:29:09 +0000
ROA not after:            Tue 03 Jun 2025 17:34:09 +0000
asID:                     262376
IP address blocks:        143.255.168.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:0f:cb:bf:3f:0a:68:9e:e3:62:01:ae:55:b7:8a:26:75:21:38:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C47C4419F3B0301460D71A68A39D35E25A0926C3
        Validity
            Not Before: Jun  4 17:29:09 2024 GMT
            Not After : Jun  3 17:34:09 2025 GMT
        Subject: CN=CDA7BE2D6759AAF1F930225B2C69568558D96AF9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:54:8a:42:2c:3e:3c:8f:8a:4e:2e:e4:29:7d:
                    84:98:5b:52:f6:f6:72:5f:5c:09:df:6f:e8:56:71:
                    55:01:1f:96:16:de:bc:73:b0:f6:3a:2f:90:65:88:
                    98:d2:85:d9:bf:4c:c7:6f:05:dd:be:10:c5:99:c6:
                    87:99:5f:ad:18:72:a5:e2:04:ed:c6:e4:5f:42:6a:
                    c1:0c:ac:67:cc:39:cf:dd:76:c3:19:20:6a:25:d0:
                    0a:66:d9:8f:ee:15:d7:47:dc:f7:7d:d5:2e:66:65:
                    fc:34:88:f6:ba:62:f4:3e:8c:7b:49:48:58:50:6d:
                    6d:f8:48:a8:4c:c2:09:af:1a:0f:47:24:f6:a2:b8:
                    82:db:89:b8:2f:e8:39:ee:cf:69:cd:7b:c1:52:cb:
                    09:35:67:fc:55:36:b8:06:14:e4:f4:78:7d:6e:92:
                    f0:96:92:a9:aa:7c:1b:fa:6b:2a:4e:aa:85:12:35:
                    c8:39:8c:1b:82:84:67:51:28:e2:15:09:11:1f:2a:
                    98:97:db:07:55:29:01:36:68:66:2f:cb:71:9c:a7:
                    92:bd:d6:c2:09:77:19:29:16:07:28:0f:e8:b7:ff:
                    73:28:7a:15:3d:05:d0:c2:c2:cd:27:07:c7:12:f8:
                    69:25:92:8d:e3:d8:02:3e:6f:fa:a6:b0:cb:b6:aa:
                    99:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:A7:BE:2D:67:59:AA:F1:F9:30:22:5B:2C:69:56:85:58:D9:6A:F9
            X509v3 Authority Key Identifier:
                keyid:C4:7C:44:19:F3:B0:30:14:60:D7:1A:68:A3:9D:35:E2:5A:09:26:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8B7YwzQXRn6vaj7DJHPqjMiQHiawVEBCJDNrt8fZMZWk/0/C47C4419F3B0301460D71A68A39D35E25A0926C3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C47C4419F3B0301460D71A68A39D35E25A0926C3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8B7YwzQXRn6vaj7DJHPqjMiQHiawVEBCJDNrt8fZMZWk/0/3134332e3235352e3136382e302f32322d3232203d3e20323632333736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.255.168.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8c:b7:4a:37:b6:8a:b0:dc:9e:95:cc:14:a5:3b:09:3c:f6:92:
         02:9c:5e:8c:de:9a:ef:97:f8:30:23:f5:fb:fc:88:5d:56:6b:
         95:b4:b8:ad:4b:46:49:0d:d7:51:d0:bc:6f:20:e2:d8:4f:0c:
         39:b4:b8:69:d0:02:a1:85:0f:c3:34:bb:cf:b8:61:ac:62:89:
         0d:61:a2:8f:6f:73:4e:7a:7e:b6:32:42:b7:ca:89:9b:e2:43:
         51:5b:f6:ed:8f:1a:49:84:17:f8:0c:88:1c:89:17:69:ca:d9:
         0c:bb:3e:15:94:b1:07:a3:f2:bc:1b:2c:ed:da:60:f9:0a:a2:
         41:4a:7a:c2:1b:3a:0d:6c:88:d7:3c:ef:dd:53:95:c2:51:fb:
         13:f7:94:d3:5a:02:38:52:e6:0d:b8:ad:dc:7c:20:09:34:83:
         66:b1:d7:06:70:5d:3f:30:34:b3:56:b5:d5:b1:7b:29:bd:b1:
         1e:d6:79:72:5e:39:87:39:29:ff:c8:d0:d1:eb:63:8a:54:6d:
         fd:49:0d:7f:10:e3:51:ca:56:89:17:a0:07:9e:d3:91:ba:a9:
         81:8e:bd:6a:07:59:91:b1:86:bc:22:b6:57:d7:45:52:18:ca:
         80:89:45:1e:c1:54:35:e1:72:2d:a1:de:22:d1:ca:d9:18:a7:
         af:e3:49:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 04:18:16 2025 by rpki-client