Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8kUmK7JT6oTdEnZFhHK18LpnpKYuHM8q1GhbTrMJb8pd/0/3137302e302e3230342e302f32322d3232203d3e20323731373234.roa
File:                     3137302e302e3230342e302f32322d3232203d3e20323731373234.roa (raw, json)
Hash identifier:          n4akDhIXkCZyBL1i68TlGh8n8H76npXQAQSKmLIB7ts=
Subject key identifier:   3B:3D:4D:27:DE:21:C1:A4:02:FE:DC:06:78:8A:90:58:AD:1D:31:7F
Certificate issuer:       /CN=2665C5CDE8A42C9F8B1032308AEC6CF95990FC6F
Certificate serial:       7C5E53326B4D035CC2916B0260731C5B1EA9DB36
Authority key identifier: 26:65:C5:CD:E8:A4:2C:9F:8B:10:32:30:8A:EC:6C:F9:59:90:FC:6F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2665C5CDE8A42C9F8B1032308AEC6CF95990FC6F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8kUmK7JT6oTdEnZFhHK18LpnpKYuHM8q1GhbTrMJb8pd/0/3137302e302e3230342e302f32322d3232203d3e20323731373234.roa
Signing time:             Thu 06 Oct 2022 17:40:03 +0000
ROA not before:           Thu 06 Oct 2022 17:35:03 +0000
ROA not after:            Thu 05 Oct 2023 17:40:03 +0000
asID:                     271724
IP address blocks:        170.0.204.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:5e:53:32:6b:4d:03:5c:c2:91:6b:02:60:73:1c:5b:1e:a9:db:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2665C5CDE8A42C9F8B1032308AEC6CF95990FC6F
        Validity
            Not Before: Oct  6 17:35:03 2022 GMT
            Not After : Oct  5 17:40:03 2023 GMT
        Subject: CN=3B3D4D27DE21C1A402FEDC06788A9058AD1D317F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:1a:64:38:32:98:91:9f:92:c8:f9:40:68:61:
                    85:c3:c4:f7:24:8f:2d:b0:62:ef:b0:51:99:a1:b0:
                    f9:25:61:3c:9d:26:78:78:4d:0e:d6:21:3d:74:38:
                    6f:47:a4:fd:ea:54:0c:e3:3a:73:7c:54:55:8d:8c:
                    b5:69:6e:da:89:a2:3d:d8:d8:23:15:2e:7a:43:1b:
                    74:c9:fe:bd:06:02:4c:81:8d:d1:7c:cc:fa:e8:b2:
                    58:5f:49:6a:85:8e:4a:38:1b:36:f9:30:1b:23:17:
                    ba:8c:a0:f8:e2:bd:2d:ce:06:b6:16:bc:f4:1c:4e:
                    e1:85:a4:10:87:0a:5b:15:00:8f:9c:43:4d:30:d6:
                    ee:88:8a:c8:ed:7d:e4:c4:5e:be:2d:89:a8:22:e8:
                    5d:d1:73:95:db:9e:b8:a2:71:75:4b:ba:45:3f:28:
                    ac:17:9e:e4:59:3a:ef:0e:15:79:60:5a:cf:6a:90:
                    a9:e7:31:39:5e:80:a4:80:17:f4:25:90:5a:17:ae:
                    c6:ac:1b:14:23:4b:06:64:0d:14:4e:8b:02:a2:b3:
                    95:80:6c:7c:15:a1:94:0f:34:08:26:26:33:2d:9e:
                    8d:90:27:19:7f:ae:f1:2a:7d:d0:42:66:1e:d3:85:
                    b1:b9:1b:96:87:08:23:e8:9c:ac:97:42:23:70:fa:
                    62:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:3D:4D:27:DE:21:C1:A4:02:FE:DC:06:78:8A:90:58:AD:1D:31:7F
            X509v3 Authority Key Identifier:
                keyid:26:65:C5:CD:E8:A4:2C:9F:8B:10:32:30:8A:EC:6C:F9:59:90:FC:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8kUmK7JT6oTdEnZFhHK18LpnpKYuHM8q1GhbTrMJb8pd/0/2665C5CDE8A42C9F8B1032308AEC6CF95990FC6F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2665C5CDE8A42C9F8B1032308AEC6CF95990FC6F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8kUmK7JT6oTdEnZFhHK18LpnpKYuHM8q1GhbTrMJb8pd/0/3137302e302e3230342e302f32322d3232203d3e20323731373234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.0.204.0/22

    Signature Algorithm: sha256WithRSAEncryption
         53:76:46:79:28:00:f0:25:81:fb:68:6d:2b:a3:5a:d8:11:8d:
         34:01:a7:b5:0f:da:70:31:24:46:42:ff:cc:73:37:22:df:f2:
         17:08:13:b3:f7:ae:9e:87:7a:36:b3:b4:4b:67:57:72:e3:3b:
         43:86:0a:08:30:aa:ea:f8:34:b3:95:a9:80:92:07:5f:c0:16:
         0a:2e:da:bc:d2:8a:35:af:8d:09:ca:12:63:fb:be:25:b0:46:
         58:7f:ca:80:ac:c9:ea:09:cf:98:14:b8:77:f0:48:07:73:68:
         d5:34:82:94:b2:71:71:1d:fb:28:68:61:bc:09:3e:57:0e:16:
         22:35:fe:22:a7:f1:30:48:d0:b8:34:27:9d:f4:f9:11:ee:4b:
         b2:ad:10:dd:eb:2c:17:de:2f:09:b5:a2:52:cd:df:10:d2:a4:
         2c:5c:87:eb:77:ac:b3:25:4a:75:59:a6:42:45:94:5f:28:f3:
         8e:bf:5d:7e:43:93:7c:e6:56:d6:06:00:8e:d7:31:9d:5e:bf:
         9f:04:95:bf:78:1b:19:4c:80:b6:5a:4d:41:76:a8:b5:04:a5:
         67:c5:f5:12:be:e9:15:f4:5c:02:77:3d:c6:16:32:72:57:ba:
         9c:e6:a6:38:0d:dd:b7:d0:de:79:83:1f:f8:35:ed:1c:f2:7e:
         09:19:41:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 01:32:53 2025 by rpki-client