Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8bJEqVF5XoatTLePcsgpJ2ZRndC4MQKTbcVKKY22r7hM/0/3137302e3233382e3132382e302f32322d3332203d3e20323636333139.roa
File:                     3137302e3233382e3132382e302f32322d3332203d3e20323636333139.roa (raw, json)
Hash identifier:          Fet88AwMMEacgdATnzQMuAWtJ5w54ZsksuVpUBApndk=
Subject key identifier:   4E:58:35:A0:68:8A:B0:59:69:06:5A:59:3D:B1:66:9B:E4:FB:EA:B3
Certificate issuer:       /CN=4BE8A9E487872F0A44069CCAD1F533B7C68347E4
Certificate serial:       5EBFFEAA032C66B0A885FFAB13A2189203F3D962
Authority key identifier: 4B:E8:A9:E4:87:87:2F:0A:44:06:9C:CA:D1:F5:33:B7:C6:83:47:E4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4BE8A9E487872F0A44069CCAD1F533B7C68347E4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8bJEqVF5XoatTLePcsgpJ2ZRndC4MQKTbcVKKY22r7hM/0/3137302e3233382e3132382e302f32322d3332203d3e20323636333139.roa
Signing time:             Thu 06 Feb 2025 15:31:44 +0000
ROA not before:           Thu 06 Feb 2025 15:26:44 +0000
ROA not after:            Thu 05 Feb 2026 15:31:44 +0000
asID:                     266319
IP address blocks:        170.238.128.0/22 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:bf:fe:aa:03:2c:66:b0:a8:85:ff:ab:13:a2:18:92:03:f3:d9:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4BE8A9E487872F0A44069CCAD1F533B7C68347E4
        Validity
            Not Before: Feb  6 15:26:44 2025 GMT
            Not After : Feb  5 15:31:44 2026 GMT
        Subject: CN=4E5835A0688AB05969065A593DB1669BE4FBEAB3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:f3:4e:f5:88:e4:a8:83:17:41:9a:8c:cb:1b:
                    20:09:41:8c:71:84:e9:54:ff:d1:d9:f1:42:96:79:
                    93:f2:45:39:c3:54:c9:b9:cf:f0:0f:51:6e:94:40:
                    9b:99:6d:78:54:8c:12:b5:9a:fb:de:d9:bd:dc:f2:
                    1d:f0:3a:bd:eb:e9:e2:e6:05:12:29:4f:ce:85:6c:
                    77:42:4e:f3:24:cf:be:ac:47:cf:21:d1:bd:e6:ab:
                    70:a6:ad:97:be:55:80:a2:2d:16:dd:14:fd:13:10:
                    6b:eb:d9:fe:49:6f:42:ee:56:ef:70:7a:4b:84:50:
                    c6:64:6a:1c:57:69:2e:be:23:8a:0f:76:02:ec:87:
                    32:da:28:6f:ad:eb:d5:d1:b4:62:17:a1:0b:5f:6e:
                    3d:53:37:b2:f8:17:4c:1c:e1:e9:6a:88:93:c5:00:
                    78:44:48:46:4b:07:fa:ca:fe:73:a1:50:e6:c8:03:
                    10:58:b6:e8:bc:8d:0e:97:3e:10:ec:81:fe:27:37:
                    84:98:4f:64:fd:ee:5d:d2:fb:e4:f3:48:50:b6:a6:
                    4b:de:fd:6c:dd:18:7e:15:55:a8:b8:39:15:51:5b:
                    82:96:6d:13:30:98:02:ae:cd:8d:aa:db:aa:87:bc:
                    e0:0b:c7:2f:58:16:d6:20:b5:17:4e:f0:af:35:8b:
                    a6:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:58:35:A0:68:8A:B0:59:69:06:5A:59:3D:B1:66:9B:E4:FB:EA:B3
            X509v3 Authority Key Identifier:
                keyid:4B:E8:A9:E4:87:87:2F:0A:44:06:9C:CA:D1:F5:33:B7:C6:83:47:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8bJEqVF5XoatTLePcsgpJ2ZRndC4MQKTbcVKKY22r7hM/0/4BE8A9E487872F0A44069CCAD1F533B7C68347E4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4BE8A9E487872F0A44069CCAD1F533B7C68347E4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8bJEqVF5XoatTLePcsgpJ2ZRndC4MQKTbcVKKY22r7hM/0/3137302e3233382e3132382e302f32322d3332203d3e20323636333139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.238.128.0/22

    Signature Algorithm: sha256WithRSAEncryption
         bb:db:9f:c9:4e:45:a4:f1:77:4b:fd:b2:92:71:eb:1d:a5:66:
         90:96:50:a9:17:2f:47:70:a1:7d:78:ef:39:89:ed:d5:2d:a2:
         18:ac:4e:25:b3:2b:4b:ba:e4:fd:5c:78:e5:4b:2e:5f:1d:50:
         62:c4:f7:c3:06:55:20:ba:59:71:68:fc:f5:be:ef:0a:b7:46:
         68:2f:33:96:05:d9:b0:1c:53:68:10:7f:a7:c7:02:ce:26:c9:
         d7:0a:2f:fd:91:ff:47:d4:58:55:58:2d:b9:cc:a0:c0:33:9d:
         34:00:37:f1:a8:27:d1:6d:1a:ee:b7:1c:75:8d:30:e1:33:d2:
         db:6c:0d:36:ce:87:ca:cd:dc:4b:c6:b8:40:98:8b:fe:cd:25:
         34:98:32:ed:94:3c:cb:6f:9e:59:17:ff:cd:a4:59:37:fa:57:
         58:cb:cf:44:d3:7f:f9:c8:0d:9d:e6:a7:dc:0c:d2:2f:7e:25:
         1a:36:11:7a:7d:70:bf:f6:26:81:5b:cb:2e:18:20:59:39:bc:
         0b:ae:f8:e1:e3:4a:f9:d1:80:c5:c9:60:c5:a0:68:9d:f8:17:
         8a:e5:05:e0:75:e2:65:78:55:0b:71:ca:1f:a4:1d:f2:1f:65:
         94:02:4a:a6:df:ab:a5:5b:a2:5d:37:71:bb:3b:04:a9:ce:60:
         22:c6:b0:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 05:45:37 2025 by rpki-client