Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/2/3137302e3234342e3136342e302f32322d3234203d3e203532393430.roa
File:                     3137302e3234342e3136342e302f32322d3234203d3e203532393430.roa (raw, json)
Hash identifier:          CCyNudAcTpzqqU7TP4lHpxckV1yQtDJLZrWJ6nbqjj4=
Subject key identifier:   1E:7A:08:1F:F2:56:3B:5E:89:C1:E6:A8:10:E9:47:0C:92:7A:7B:4F
Certificate issuer:       /CN=2F394F99007CD172C0832F8415F6842A1475173D
Certificate serial:       1E7F275F2B570B2DF1700D299FE2FA4DB74D4F83
Authority key identifier: 2F:39:4F:99:00:7C:D1:72:C0:83:2F:84:15:F6:84:2A:14:75:17:3D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F394F99007CD172C0832F8415F6842A1475173D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/2/3137302e3234342e3136342e302f32322d3234203d3e203532393430.roa
Signing time:             Thu 31 Oct 2024 16:59:27 +0000
ROA not before:           Thu 31 Oct 2024 16:54:27 +0000
ROA not after:            Thu 30 Oct 2025 16:59:27 +0000
asID:                     52940
IP address blocks:        170.244.164.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:7f:27:5f:2b:57:0b:2d:f1:70:0d:29:9f:e2:fa:4d:b7:4d:4f:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2F394F99007CD172C0832F8415F6842A1475173D
        Validity
            Not Before: Oct 31 16:54:27 2024 GMT
            Not After : Oct 30 16:59:27 2025 GMT
        Subject: CN=1E7A081FF2563B5E89C1E6A810E9470C927A7B4F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:3c:f4:9d:d4:fd:3d:44:e5:d1:06:99:fb:b7:
                    b5:70:31:79:08:be:6d:ed:8f:8b:10:3f:3d:66:73:
                    67:0b:00:4c:2f:33:f0:e4:1d:1e:e8:cc:56:62:1e:
                    98:d3:46:f0:34:33:e3:31:c8:42:50:7c:17:f2:33:
                    f6:4b:ea:70:2a:bf:66:d5:14:ae:56:b6:46:ea:ae:
                    8f:26:ed:fa:89:b2:3b:a5:72:77:67:92:eb:e4:c6:
                    4f:0b:ff:2d:8f:99:b3:8a:bf:6f:e1:03:2b:ac:b3:
                    a9:71:0a:14:6f:bb:80:73:94:c7:54:16:62:ba:a6:
                    a3:a9:f7:6a:76:fa:1a:5e:2a:7c:49:f8:e0:ba:8b:
                    2d:5a:8b:39:cb:4b:9f:4b:f3:27:e5:d0:b1:3a:a7:
                    e2:ee:e5:06:4d:da:e6:f6:fc:f2:a2:52:54:b8:52:
                    ac:9a:23:c7:d7:a2:c4:8e:e8:e2:65:ad:cf:62:b4:
                    a4:da:f7:01:e8:e2:70:f6:5e:26:c4:c0:a7:a9:fb:
                    82:c0:7a:11:f4:34:f9:2a:4c:e8:92:70:70:d4:54:
                    39:69:2a:97:57:72:a6:4d:7e:cb:8f:84:11:a9:54:
                    aa:6e:e8:0b:02:4d:db:f7:d8:ae:16:33:ae:b9:ca:
                    bc:1f:6e:00:e7:e8:1a:e0:98:6c:cf:f6:f0:e7:c2:
                    42:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:7A:08:1F:F2:56:3B:5E:89:C1:E6:A8:10:E9:47:0C:92:7A:7B:4F
            X509v3 Authority Key Identifier:
                keyid:2F:39:4F:99:00:7C:D1:72:C0:83:2F:84:15:F6:84:2A:14:75:17:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/2/2F394F99007CD172C0832F8415F6842A1475173D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F394F99007CD172C0832F8415F6842A1475173D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/2/3137302e3234342e3136342e302f32322d3234203d3e203532393430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.244.164.0/22

    Signature Algorithm: sha256WithRSAEncryption
         96:7a:8a:6b:1a:1b:1f:c7:75:a0:0a:70:44:1c:f6:c6:c6:e3:
         29:70:c1:1e:f9:81:9d:b3:3e:d5:b2:b6:20:b8:06:f7:6c:04:
         03:c4:9e:70:43:97:75:42:8e:82:32:dd:7d:b7:4a:0f:af:fd:
         5d:22:38:0e:1f:55:ab:d8:e9:ed:f5:ee:15:7b:5c:9a:47:d1:
         39:e8:fd:3b:c0:cb:41:c9:3b:a6:ea:e8:d3:6b:03:81:cf:4c:
         32:a7:c9:5f:41:c2:1c:6e:78:c6:5e:a7:6f:b8:e7:45:fd:1a:
         f4:69:17:12:bd:42:41:70:46:14:5b:ba:d3:08:b6:4d:1d:c8:
         ec:9f:d4:21:75:b0:1d:0d:e4:84:9a:ab:fa:32:36:a9:25:83:
         93:a6:18:90:d8:e5:a7:8c:34:6a:f5:ee:05:76:b9:b9:33:a2:
         77:bb:17:9f:3f:82:3f:02:16:b7:6e:4c:eb:0a:79:64:9d:1a:
         4f:57:e6:7c:99:3c:0a:be:aa:eb:0c:23:59:3d:ae:fa:b8:10:
         37:c2:db:1e:47:de:b3:4b:26:a7:96:82:11:12:7c:cd:73:97:
         ee:97:1a:93:bf:2b:1d:91:6c:bb:68:ad:11:a1:33:d1:68:14:
         07:a5:04:c9:a0:e3:3e:2c:ea:6c:50:12:1f:38:37:3e:c5:c2:
         fa:91:a3:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:32:01 2025 by rpki-client