Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8uDet3fkaPhb1F5tGf188urY9BDNkxoDiJDgU8BA1rc9/1/3137302e3234362e3231322e302f32322d3332203d3e20323633383737.roa
File:                     3137302e3234362e3231322e302f32322d3332203d3e20323633383737.roa (raw, json)
Hash identifier:          EW0bF1u4bur/zPzPb4/jkaTrzF2NSPUcuwmp/N5eHog=
Subject key identifier:   E0:30:81:4E:A1:90:7E:F5:AF:05:A5:03:51:7D:40:9C:DD:60:9F:AB
Certificate issuer:       /CN=849A24446B9E3C80503AA50B35CDFE864B50F299
Certificate serial:       764682EC6437D1BB96868CB83C688AD50C0AA00D
Authority key identifier: 84:9A:24:44:6B:9E:3C:80:50:3A:A5:0B:35:CD:FE:86:4B:50:F2:99
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/849A24446B9E3C80503AA50B35CDFE864B50F299.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8uDet3fkaPhb1F5tGf188urY9BDNkxoDiJDgU8BA1rc9/1/3137302e3234362e3231322e302f32322d3332203d3e20323633383737.roa
Signing time:             Thu 06 Mar 2025 10:04:41 +0000
ROA not before:           Thu 06 Mar 2025 09:59:41 +0000
ROA not after:            Thu 05 Mar 2026 10:04:41 +0000
asID:                     263877
IP address blocks:        170.246.212.0/22 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:46:82:ec:64:37:d1:bb:96:86:8c:b8:3c:68:8a:d5:0c:0a:a0:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=849A24446B9E3C80503AA50B35CDFE864B50F299
        Validity
            Not Before: Mar  6 09:59:41 2025 GMT
            Not After : Mar  5 10:04:41 2026 GMT
        Subject: CN=E030814EA1907EF5AF05A503517D409CDD609FAB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:eb:0e:ae:2f:c4:97:f7:73:91:65:fe:e7:0d:
                    c2:93:17:bd:a4:30:5b:8e:42:d3:dd:d4:b0:c3:28:
                    33:a0:76:04:1e:a4:fa:b7:16:e5:8d:71:0f:03:d9:
                    d8:06:8e:74:4e:49:11:40:8c:ad:a4:e4:3d:c9:e3:
                    5f:2b:94:a4:d9:98:30:92:08:08:ab:d3:5c:56:05:
                    0e:f2:af:5d:9b:3b:2b:dd:fc:f3:eb:ac:3d:21:be:
                    d4:56:ae:d9:ae:1e:77:0e:70:bd:89:28:d5:47:12:
                    df:b6:7f:1e:15:5e:f9:85:2e:be:da:6c:d8:70:37:
                    f1:64:16:ef:d8:88:4f:8c:d4:d8:9c:d5:3c:2d:15:
                    d6:9a:53:23:f3:16:7a:4c:1e:42:67:33:cc:d9:f5:
                    0d:9f:9c:d3:c2:9f:93:a4:32:88:23:4a:e0:2d:de:
                    ce:2b:c4:1d:b9:82:d7:01:24:bf:d7:52:5f:37:d3:
                    ed:42:fd:8f:98:1e:4a:39:c0:15:82:99:5c:1a:e8:
                    82:55:fa:51:8b:35:1d:20:90:07:be:30:aa:61:3f:
                    61:6c:6b:0a:a4:b2:0d:af:6e:27:84:8f:3a:2f:0c:
                    be:f9:8c:2a:b6:b9:23:62:ec:8e:2f:ea:e2:3c:40:
                    5f:e5:c0:38:93:b3:8d:b5:55:6a:1b:c4:1a:19:09:
                    26:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:30:81:4E:A1:90:7E:F5:AF:05:A5:03:51:7D:40:9C:DD:60:9F:AB
            X509v3 Authority Key Identifier:
                keyid:84:9A:24:44:6B:9E:3C:80:50:3A:A5:0B:35:CD:FE:86:4B:50:F2:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8uDet3fkaPhb1F5tGf188urY9BDNkxoDiJDgU8BA1rc9/1/849A24446B9E3C80503AA50B35CDFE864B50F299.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/849A24446B9E3C80503AA50B35CDFE864B50F299.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8uDet3fkaPhb1F5tGf188urY9BDNkxoDiJDgU8BA1rc9/1/3137302e3234362e3231322e302f32322d3332203d3e20323633383737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.246.212.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3b:c9:d8:17:b5:9e:27:20:54:bd:b6:44:dd:c6:63:21:1b:f2:
         ea:57:31:1f:65:4d:6f:d0:3d:be:84:7d:32:56:31:57:94:4a:
         2e:e7:1b:37:79:1c:51:3b:3d:39:06:98:4a:2e:3f:5a:e5:b1:
         ca:77:05:bf:41:89:ed:4e:c8:c4:bd:8b:a3:8f:87:13:1c:6e:
         91:0e:b4:33:b0:f4:a5:f7:85:7a:79:93:bd:5f:94:f8:00:ad:
         fc:6e:e5:c9:ef:2e:f5:e8:23:76:28:47:08:23:52:b5:0d:c3:
         03:28:7b:56:f6:eb:02:26:4e:49:e2:77:3c:1e:7d:5b:ea:11:
         4d:20:71:c0:22:00:15:f3:2f:39:c4:7e:88:5a:63:d3:1c:9a:
         5c:ea:00:81:d2:07:02:82:65:3b:6d:1f:57:2a:24:24:b6:e9:
         6c:2e:58:eb:c4:4a:34:97:99:06:c4:79:6a:29:e3:f9:6f:ae:
         f5:d4:d0:8b:01:6b:c2:61:41:57:81:9d:17:1b:e1:e7:b1:1f:
         74:7f:26:fa:34:bb:9c:d7:c7:51:df:ff:bd:25:58:24:17:62:
         c2:6e:e5:43:d0:ee:3a:02:db:8e:cf:10:7b:97:97:1c:ba:47:
         bc:e6:c0:d7:fb:56:63:aa:12:11:6c:09:c1:7c:76:6a:4a:e6:
         42:77:1b:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 10:14:05 2025 by rpki-client