Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A5qNovLNMMSNQckTiyzSHiRUh9GeaQC2zzq1duKqFdSS/0/3137302e38302e34382e302f32342d3234203d3e20323636333734.roa
File:                     3137302e38302e34382e302f32342d3234203d3e20323636333734.roa (raw, json)
Hash identifier:          etQ4qMYM6JZutqysfFj7IBZk/bb2xhPVXy+Q8+OHln0=
Subject key identifier:   83:56:06:F8:B8:5C:8D:C1:56:1F:3E:45:3A:B3:40:08:EB:E2:8B:E2
Certificate issuer:       /CN=BF8A4AE4CCFB516D07A1A24039C662A1F86B89DD
Certificate serial:       21DCDB8E1104C8654423039A3B0F6E045A31A706
Authority key identifier: BF:8A:4A:E4:CC:FB:51:6D:07:A1:A2:40:39:C6:62:A1:F8:6B:89:DD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BF8A4AE4CCFB516D07A1A24039C662A1F86B89DD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A5qNovLNMMSNQckTiyzSHiRUh9GeaQC2zzq1duKqFdSS/0/3137302e38302e34382e302f32342d3234203d3e20323636333734.roa
Signing time:             Tue 26 Jul 2022 13:35:04 +0000
ROA not before:           Tue 26 Jul 2022 13:30:04 +0000
ROA not after:            Tue 25 Jul 2023 13:35:04 +0000
asID:                     266374
IP address blocks:        170.80.48.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:dc:db:8e:11:04:c8:65:44:23:03:9a:3b:0f:6e:04:5a:31:a7:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BF8A4AE4CCFB516D07A1A24039C662A1F86B89DD
        Validity
            Not Before: Jul 26 13:30:04 2022 GMT
            Not After : Jul 25 13:35:04 2023 GMT
        Subject: CN=835606F8B85C8DC1561F3E453AB34008EBE28BE2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:a9:2e:a3:7b:e2:b3:11:22:81:e8:87:bb:93:
                    b3:ea:9a:08:86:b5:51:45:81:71:4b:ec:8f:76:30:
                    81:cc:16:25:90:6f:df:2b:00:2b:f1:f9:1a:d9:79:
                    02:d8:49:17:74:5f:db:a5:82:5b:ef:3d:b9:b1:00:
                    15:a0:db:80:ef:fd:cc:9a:3b:00:31:d9:c0:2f:b0:
                    84:e9:e3:0d:4d:11:b5:30:f7:b7:9e:77:47:79:9b:
                    1d:b2:39:8a:b1:96:54:ae:ff:dd:af:3f:54:64:cc:
                    1d:26:d4:06:f0:b2:3b:37:1f:39:0d:a0:8d:ed:a7:
                    c3:b0:5b:3c:b7:88:89:84:7f:3b:79:0a:3e:99:81:
                    29:75:1e:ba:0f:b3:32:77:26:8f:14:04:f7:6b:8a:
                    a9:42:3b:0a:3e:37:74:42:5d:35:73:25:ca:1c:4e:
                    9b:1f:a8:96:0c:4c:9b:9f:b1:5c:4f:d5:e6:43:75:
                    66:15:99:6b:ba:34:42:a1:f2:ea:24:0a:14:48:67:
                    c1:85:7f:da:ad:71:ef:9a:82:68:42:a1:ed:41:34:
                    40:53:8c:6c:9d:e9:6f:01:43:8b:5d:69:2b:95:cf:
                    4c:60:e0:a5:4d:2a:ff:7e:06:f3:c5:fb:80:e2:fc:
                    71:a6:67:43:c6:f4:39:b3:ae:77:d1:27:f7:aa:ab:
                    87:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:56:06:F8:B8:5C:8D:C1:56:1F:3E:45:3A:B3:40:08:EB:E2:8B:E2
            X509v3 Authority Key Identifier:
                keyid:BF:8A:4A:E4:CC:FB:51:6D:07:A1:A2:40:39:C6:62:A1:F8:6B:89:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A5qNovLNMMSNQckTiyzSHiRUh9GeaQC2zzq1duKqFdSS/0/BF8A4AE4CCFB516D07A1A24039C662A1F86B89DD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BF8A4AE4CCFB516D07A1A24039C662A1F86B89DD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A5qNovLNMMSNQckTiyzSHiRUh9GeaQC2zzq1duKqFdSS/0/3137302e38302e34382e302f32342d3234203d3e20323636333734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.80.48.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a8:af:db:dd:7b:72:3c:43:e9:de:4a:aa:e2:28:c6:d6:16:15:
         46:28:22:47:c6:10:24:c4:44:b3:0c:f1:dd:7d:58:c5:9e:7f:
         80:f0:30:9f:df:79:e0:dc:e8:b6:f6:36:d6:df:7a:e7:8c:8a:
         e9:6a:7a:24:75:8c:50:6f:2c:9f:8c:0e:d6:bc:dd:66:1c:56:
         c4:19:58:16:17:c1:61:75:d3:d6:89:62:bd:ab:ff:82:77:34:
         67:7b:82:31:ae:5e:60:21:9c:3f:98:e6:b3:a3:ee:66:4b:50:
         32:a8:07:a4:1f:2a:12:10:dd:da:5e:33:ea:85:fe:59:07:38:
         f5:b6:15:5f:f0:1c:f1:b3:61:34:41:3b:3e:d7:4d:e5:f9:b1:
         17:ce:77:e9:ee:07:cc:d5:dd:83:8b:9c:3e:fa:43:ba:25:24:
         44:cd:a0:8d:dd:35:a1:2d:72:2b:d5:8d:1c:d2:c3:d8:19:7b:
         58:46:82:70:ba:80:c4:3f:7a:75:a4:c5:c1:d6:eb:98:b3:ab:
         48:33:3b:51:b7:e0:f6:09:21:c9:fd:34:8c:5f:84:75:a8:38:
         e4:c2:f4:92:de:43:1f:b1:33:21:d4:a9:5a:f7:45:d2:3e:d9:
         74:0b:9e:4b:19:12:36:9e:ee:ed:af:a3:d1:05:f3:96:cb:77:
         47:1e:18:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:46:01 2025 by rpki-client