Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A5qNovLNMMSNQckTiyzSHiRUh9GeaQC2zzq1duKqFdSS/1/3137302e38302e34382e302f32322d3232203d3e20323636333734.roa
File:                     3137302e38302e34382e302f32322d3232203d3e20323636333734.roa (raw, json)
Hash identifier:          9+ioA8iW3wDN9f27KoCoYuS2Xxc1WiJBzblSsKv38+c=
Subject key identifier:   C4:E6:00:44:33:75:25:C2:22:CB:72:83:BB:D1:AA:3B:50:A0:32:5D
Certificate issuer:       /CN=0F9708322570D07CA4BE75EF484B6831664FE864
Certificate serial:       0DE1923595BDBCB8EA01564CC794613DF0D3B418
Authority key identifier: 0F:97:08:32:25:70:D0:7C:A4:BE:75:EF:48:4B:68:31:66:4F:E8:64
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0F9708322570D07CA4BE75EF484B6831664FE864.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A5qNovLNMMSNQckTiyzSHiRUh9GeaQC2zzq1duKqFdSS/1/3137302e38302e34382e302f32322d3232203d3e20323636333734.roa
Signing time:             Wed 05 Mar 2025 21:49:43 +0000
ROA not before:           Wed 05 Mar 2025 21:44:43 +0000
ROA not after:            Wed 04 Mar 2026 21:49:43 +0000
asID:                     266374
IP address blocks:        170.80.48.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:e1:92:35:95:bd:bc:b8:ea:01:56:4c:c7:94:61:3d:f0:d3:b4:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0F9708322570D07CA4BE75EF484B6831664FE864
        Validity
            Not Before: Mar  5 21:44:43 2025 GMT
            Not After : Mar  4 21:49:43 2026 GMT
        Subject: CN=C4E60044337525C222CB7283BBD1AA3B50A0325D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:7c:0c:94:0c:30:17:b8:bd:df:f1:91:c3:59:
                    11:60:76:8a:18:4e:97:e3:cd:c8:83:24:a4:e1:d3:
                    a0:b4:81:9f:16:96:f2:22:24:74:3d:75:f9:df:67:
                    33:e2:d9:3b:4d:80:52:e3:2c:c4:54:6c:d4:7e:c2:
                    8b:ad:76:ec:a6:da:2d:3a:3d:c9:ef:6b:7c:84:1b:
                    a0:ae:c5:49:1f:a2:7d:07:dd:85:c5:63:40:cc:84:
                    93:8a:8f:ad:bd:c5:ee:eb:e4:cf:90:f2:51:24:3f:
                    4f:b0:42:b4:1e:fa:f0:32:c8:a2:58:9f:39:94:61:
                    40:53:42:c4:35:ed:3c:5a:0e:dd:aa:ce:7e:81:f4:
                    53:a0:ea:c1:f3:f2:f0:9e:b0:63:6e:55:6c:01:31:
                    e4:c4:a1:7c:d8:10:81:b8:43:03:a6:70:65:7c:08:
                    1e:1b:73:c2:f4:35:ab:79:27:93:94:c3:70:fc:40:
                    10:e8:05:f3:c5:d3:ea:05:98:ac:13:7d:8c:8c:36:
                    ff:19:0d:46:f6:ad:ba:24:8d:92:30:f2:dc:7c:4f:
                    87:ab:c8:4d:c2:e1:36:79:63:a4:40:fd:1f:10:a6:
                    96:4d:c1:47:f1:da:60:de:67:2b:d5:3e:40:1a:e1:
                    08:7d:4f:02:99:8e:10:1e:14:52:e5:bd:47:1e:85:
                    70:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:E6:00:44:33:75:25:C2:22:CB:72:83:BB:D1:AA:3B:50:A0:32:5D
            X509v3 Authority Key Identifier:
                keyid:0F:97:08:32:25:70:D0:7C:A4:BE:75:EF:48:4B:68:31:66:4F:E8:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A5qNovLNMMSNQckTiyzSHiRUh9GeaQC2zzq1duKqFdSS/1/0F9708322570D07CA4BE75EF484B6831664FE864.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0F9708322570D07CA4BE75EF484B6831664FE864.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A5qNovLNMMSNQckTiyzSHiRUh9GeaQC2zzq1duKqFdSS/1/3137302e38302e34382e302f32322d3232203d3e20323636333734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.80.48.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4a:e6:19:1c:7b:80:7a:81:a5:64:fc:ab:98:13:45:60:28:1b:
         86:20:2f:5d:8d:0e:3b:b2:43:4e:c1:04:2e:f7:0f:55:0d:53:
         8d:3d:e7:ef:a7:6b:fb:38:f3:6f:c6:e1:02:1e:48:2c:b2:7b:
         4a:fa:2c:51:a7:52:c6:69:20:80:bc:1e:35:82:19:b4:da:64:
         d6:4c:e7:a6:bf:f6:17:30:d0:8d:f6:9f:34:92:ce:65:0f:14:
         fa:91:18:a7:b8:a3:b0:98:c1:a6:3c:f4:27:12:df:68:15:ca:
         82:cd:4d:34:46:cb:0e:92:99:13:78:86:a9:39:f5:a7:f9:8c:
         87:84:72:37:57:79:99:a8:d3:2f:20:45:73:c5:34:4a:2d:ad:
         ba:f5:a6:23:fe:ee:48:40:59:91:08:fb:ab:73:8c:51:df:4f:
         5e:a7:01:d4:46:7a:22:8c:b6:5b:14:52:c3:fc:63:6f:fb:52:
         32:85:f7:25:c4:50:da:d6:f1:3f:ee:26:6e:6d:ef:9d:4e:24:
         d0:6c:85:1a:ab:1b:43:64:7a:46:64:0f:50:29:28:b0:cd:31:
         03:5c:57:b9:cc:a3:13:97:f1:24:6c:a3:fd:c4:24:05:b3:61:
         4f:10:02:12:e0:13:4e:40:6c:89:d1:e2:a4:e3:53:43:49:9f:
         1f:c6:a1:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 13:43:40 2025 by rpki-client