Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AGS4xfD5qP5JBXbKKTkeJZp9V4NDJuKTr53B8dJYjtA/0/3137302e38332e3133352e302f32342d3234203d3e20323632353838.roa
File:                     3137302e38332e3133352e302f32342d3234203d3e20323632353838.roa (raw, json)
Hash identifier:          MrrYbraiwjbUhl6g1Lmu1ImLLfXWSfHgv6/Ca+p73tw=
Subject key identifier:   04:BE:6F:BB:25:99:94:CD:9F:87:83:22:54:D0:11:FE:13:6C:5B:C9
Certificate issuer:       /CN=5CC02E8E2938AFADEA467289D4C793583546A57D
Certificate serial:       5D017576B1BB172C900DFADB5B1D06858D232E59
Authority key identifier: 5C:C0:2E:8E:29:38:AF:AD:EA:46:72:89:D4:C7:93:58:35:46:A5:7D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5CC02E8E2938AFADEA467289D4C793583546A57D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AGS4xfD5qP5JBXbKKTkeJZp9V4NDJuKTr53B8dJYjtA/0/3137302e38332e3133352e302f32342d3234203d3e20323632353838.roa
Signing time:             Sat 09 Apr 2022 14:18:32 +0000
ROA not before:           Sat 09 Apr 2022 14:13:32 +0000
ROA not after:            Sat 08 Apr 2023 14:18:32 +0000
asID:                     262588
IP address blocks:        170.83.135.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:01:75:76:b1:bb:17:2c:90:0d:fa:db:5b:1d:06:85:8d:23:2e:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5CC02E8E2938AFADEA467289D4C793583546A57D
        Validity
            Not Before: Apr  9 14:13:32 2022 GMT
            Not After : Apr  8 14:18:32 2023 GMT
        Subject: CN=04BE6FBB259994CD9F87832254D011FE136C5BC9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:22:fd:6c:cc:e3:95:54:9b:f0:34:3e:d8:99:
                    97:d4:50:4f:d6:83:e0:74:05:a4:d0:4d:18:92:1c:
                    36:d6:5b:c3:da:f8:47:71:75:f5:2f:e1:16:fc:90:
                    3b:92:62:96:ce:b0:11:4a:71:96:4f:fb:e9:95:4f:
                    2f:f6:4c:04:11:87:b0:bd:ba:7b:e6:ea:59:5e:b1:
                    90:2b:b8:c2:6c:a8:fa:5c:9c:b6:4d:82:1b:73:05:
                    dc:9b:2c:2d:c4:8e:d9:20:c0:cc:e6:f1:4e:e8:95:
                    19:4e:a9:45:91:bd:75:f6:55:e1:83:a8:58:c0:ca:
                    5e:93:56:55:98:d3:32:f2:69:83:d4:c3:53:e2:da:
                    4a:76:4a:f5:5a:a1:22:4c:d8:c4:e6:f5:9f:ca:57:
                    5e:e7:32:33:4a:93:c6:b5:94:fb:09:7e:9d:df:0f:
                    0f:94:8b:b1:fd:d1:0b:f6:88:11:4c:a2:c7:8b:8e:
                    ae:81:f4:cc:79:f5:66:59:26:97:cd:94:f3:15:59:
                    1f:af:87:d1:94:e0:2f:5b:ba:00:2d:eb:73:15:5f:
                    a5:ea:27:ef:b8:ad:5a:d2:c9:f5:d7:26:8a:7d:5f:
                    1e:a9:06:2a:2c:e1:a8:18:11:48:c4:f2:1c:10:cf:
                    ef:86:cb:7b:6c:db:57:69:cc:a8:c3:f3:70:8c:8b:
                    13:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:BE:6F:BB:25:99:94:CD:9F:87:83:22:54:D0:11:FE:13:6C:5B:C9
            X509v3 Authority Key Identifier:
                keyid:5C:C0:2E:8E:29:38:AF:AD:EA:46:72:89:D4:C7:93:58:35:46:A5:7D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AGS4xfD5qP5JBXbKKTkeJZp9V4NDJuKTr53B8dJYjtA/0/5CC02E8E2938AFADEA467289D4C793583546A57D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5CC02E8E2938AFADEA467289D4C793583546A57D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AGS4xfD5qP5JBXbKKTkeJZp9V4NDJuKTr53B8dJYjtA/0/3137302e38332e3133352e302f32342d3234203d3e20323632353838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.83.135.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5f:85:8e:c1:e8:29:9b:59:5c:8a:a7:7d:e9:8b:5c:b9:48:13:
         40:ec:48:96:d0:70:41:55:96:ff:d4:03:b7:86:5f:3d:17:fe:
         3a:f2:16:af:0b:df:8e:dc:46:f3:2d:e2:4e:06:6e:09:4d:90:
         55:87:98:b6:24:33:8a:6e:45:43:ec:38:aa:5e:1e:41:e0:43:
         8b:a5:52:51:ff:31:e9:a4:b0:77:16:3d:c2:ac:6e:51:90:e1:
         91:b0:79:d0:2c:fe:de:ba:7b:fe:e2:99:75:6d:27:ec:d1:ee:
         3b:44:64:60:65:93:3c:7f:02:12:7f:97:58:6b:95:36:db:dd:
         48:e7:3c:9d:f5:ed:6a:a4:43:dd:b4:34:17:7f:56:b9:8c:b6:
         b7:04:56:7c:dc:8d:3c:98:35:ec:4f:05:1b:85:91:7c:55:83:
         fe:85:a9:73:35:2c:3d:2c:9f:0d:d0:ee:00:cc:38:33:80:51:
         cb:35:7f:8b:d7:ac:ac:73:45:0b:74:f4:4b:e4:96:8d:32:0e:
         ca:dd:da:c2:11:ae:5a:29:38:34:57:c7:2a:00:19:d8:a4:13:
         ea:29:c9:1a:4d:4a:66:fc:de:b0:c8:8f:9f:08:3c:c2:d6:99:
         45:c9:25:14:a6:42:15:d6:35:3d:4b:73:9b:5d:68:31:3e:78:
         71:e2:90:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:20:35 2025 by rpki-client