Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A7iBffgxDBxYqduVBqXVJPRtigiD1kn5Rwy6DeeEKxkL/0/3134332e3230382e3234342e302f32322d3234203d3e20323635313337.roa
File:                     3134332e3230382e3234342e302f32322d3234203d3e20323635313337.roa (raw, json)
Hash identifier:          tl0dobeqcbzc5lh8k2rM1RcgQKjJtc94/eqH31PhexM=
Subject key identifier:   7F:E8:DC:66:7A:D8:13:FC:E4:D5:06:95:80:31:60:4C:6B:EA:34:83
Certificate issuer:       /CN=0A34E2B1310867F58391872E9DA25E6F2439CEEA
Certificate serial:       7C80D0655F506E23A0019318A5F6AB98A0825B53
Authority key identifier: 0A:34:E2:B1:31:08:67:F5:83:91:87:2E:9D:A2:5E:6F:24:39:CE:EA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0A34E2B1310867F58391872E9DA25E6F2439CEEA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A7iBffgxDBxYqduVBqXVJPRtigiD1kn5Rwy6DeeEKxkL/0/3134332e3230382e3234342e302f32322d3234203d3e20323635313337.roa
Signing time:             Mon 25 Oct 2021 18:46:15 +0000
ROA not before:           Mon 25 Oct 2021 18:41:15 +0000
ROA not after:            Mon 24 Oct 2022 18:46:15 +0000
asID:                     265137
IP address blocks:        143.208.244.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:80:d0:65:5f:50:6e:23:a0:01:93:18:a5:f6:ab:98:a0:82:5b:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0A34E2B1310867F58391872E9DA25E6F2439CEEA
        Validity
            Not Before: Oct 25 18:41:15 2021 GMT
            Not After : Oct 24 18:46:15 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:32:5b:53:8e:d8:25:c6:4e:1e:f8:79:d5:ec:
                    47:45:0a:6f:ba:cd:6e:b6:2c:47:1d:4b:1b:78:dc:
                    94:cf:30:b7:7a:b1:3f:08:e4:64:0f:6a:34:7a:f5:
                    b7:9c:d2:0d:c4:09:5c:da:42:57:e2:74:8c:4d:91:
                    b1:9e:37:62:61:9b:73:84:10:1c:63:65:43:a9:ff:
                    cc:77:22:1c:fd:db:f6:f5:16:be:0a:f7:32:86:54:
                    3a:93:de:8c:89:72:fd:3a:eb:8c:64:ea:09:6f:e0:
                    aa:ed:ec:1b:4e:3b:62:b4:73:94:ce:b2:b4:55:25:
                    8d:16:f5:dd:1a:91:61:41:05:35:84:71:5d:d3:64:
                    29:a6:06:e6:d2:08:18:69:f9:a2:14:e7:22:9b:09:
                    22:af:ef:ce:05:f4:5f:58:9d:bf:98:44:0e:35:5d:
                    93:84:e4:68:e1:14:ee:7b:49:50:31:03:33:89:b2:
                    50:6c:af:cf:a8:3a:f4:54:eb:1d:86:b8:46:12:a2:
                    78:0a:b7:a5:23:5b:93:a4:ca:bf:e0:0e:fb:aa:6f:
                    93:ff:bb:82:0b:70:6d:bd:d5:44:20:93:1d:38:cf:
                    14:e9:ae:6c:1a:90:16:08:ee:3d:02:89:46:dd:b0:
                    c2:f0:08:38:2e:fe:58:50:b7:3f:ea:89:54:1f:57:
                    dd:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:E8:DC:66:7A:D8:13:FC:E4:D5:06:95:80:31:60:4C:6B:EA:34:83
            X509v3 Authority Key Identifier:
                keyid:0A:34:E2:B1:31:08:67:F5:83:91:87:2E:9D:A2:5E:6F:24:39:CE:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A7iBffgxDBxYqduVBqXVJPRtigiD1kn5Rwy6DeeEKxkL/0/0A34E2B1310867F58391872E9DA25E6F2439CEEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0A34E2B1310867F58391872E9DA25E6F2439CEEA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A7iBffgxDBxYqduVBqXVJPRtigiD1kn5Rwy6DeeEKxkL/0/3134332e3230382e3234342e302f32322d3234203d3e20323635313337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.208.244.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7d:dd:08:3c:82:9e:82:ac:cd:67:14:c8:06:73:0c:a3:c6:3f:
         5b:c1:ff:e0:b2:b4:0d:20:d8:62:26:36:c9:86:c7:1c:55:40:
         10:fd:41:98:9a:51:60:63:f1:79:5f:5e:e0:03:6e:5f:ff:6b:
         dd:04:08:04:a1:85:1a:44:d2:00:cf:ca:c5:1f:1b:3e:d7:62:
         ae:2a:15:82:b1:1e:fc:b7:f4:97:c3:6f:80:6f:70:1f:7d:04:
         bf:d1:ff:78:c2:56:c0:29:25:0b:5f:e5:32:1f:2a:7d:77:49:
         16:cf:5e:98:af:ec:f6:46:91:c3:44:cb:5a:d1:e6:5c:23:6f:
         63:2c:9e:e3:82:64:d2:63:4b:54:48:a9:56:2e:5f:be:b6:b2:
         9d:87:30:2a:a0:c5:be:0f:6b:ed:e0:b8:36:25:98:78:82:e8:
         d2:02:8f:28:05:f7:00:47:f4:52:9e:11:29:7d:da:21:7e:ad:
         80:15:e4:27:bf:a8:38:c2:fe:9a:cc:21:b8:26:7f:29:fb:bf:
         a2:54:55:35:23:a5:88:3a:05:44:ba:09:96:55:4d:ba:65:c1:
         d5:ef:d4:1f:c0:23:0d:66:60:44:d9:ee:4c:bf:75:14:d5:2f:
         5e:f4:12:e3:45:88:ae:dd:33:94:65:6c:89:25:9b:8a:5f:20:
         6d:e7:df:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 16:46:35 2025 by rpki-client