Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ASFPoznE41ueQyALgpiF8HskioVioGWe1BS8NhMCYNcD/0/3137302e3234342e38342e302f32322d3234203d3e20323636343933.roa
File:                     3137302e3234342e38342e302f32322d3234203d3e20323636343933.roa (raw, json)
Hash identifier:          fnwZ7rxBDtaDZ2WZ6LjBN2EBVe9twejgJtbs0LWQuTU=
Subject key identifier:   A0:99:DA:D5:38:33:F3:74:33:0F:41:6C:FB:98:53:91:BF:3A:B0:3F
Certificate issuer:       /CN=AEB0C90E0E86EDCAF388499DE512E2E086A39946
Certificate serial:       45B06A0240BADBC97D9EF33208D78B05F3E11881
Authority key identifier: AE:B0:C9:0E:0E:86:ED:CA:F3:88:49:9D:E5:12:E2:E0:86:A3:99:46
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AEB0C90E0E86EDCAF388499DE512E2E086A39946.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ASFPoznE41ueQyALgpiF8HskioVioGWe1BS8NhMCYNcD/0/3137302e3234342e38342e302f32322d3234203d3e20323636343933.roa
Signing time:             Fri 11 Aug 2023 13:38:03 +0000
ROA not before:           Fri 11 Aug 2023 13:33:03 +0000
ROA not after:            Fri 09 Aug 2024 13:38:03 +0000
asID:                     266493
IP address blocks:        170.244.84.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:b0:6a:02:40:ba:db:c9:7d:9e:f3:32:08:d7:8b:05:f3:e1:18:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AEB0C90E0E86EDCAF388499DE512E2E086A39946
        Validity
            Not Before: Aug 11 13:33:03 2023 GMT
            Not After : Aug  9 13:38:03 2024 GMT
        Subject: CN=A099DAD53833F374330F416CFB985391BF3AB03F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:bd:5b:02:8a:36:4d:0f:c9:fa:cc:6b:aa:65:
                    26:40:1e:4a:34:f5:30:2a:76:73:e8:de:6f:e8:b7:
                    64:92:41:50:af:c9:0f:a1:f9:1d:49:83:97:a0:7d:
                    31:5d:0b:e0:ec:5e:7c:8a:17:b9:e8:a7:03:94:7b:
                    b2:60:0e:2d:25:21:5b:49:6d:64:5a:d3:9e:b6:d8:
                    76:e4:bf:6d:52:c0:d4:58:ec:87:b2:f1:f4:35:ea:
                    a7:7d:84:31:30:d4:c3:17:7b:25:57:cb:20:42:ea:
                    a6:53:6a:2e:58:c6:8a:f6:e1:6f:42:55:56:1a:bc:
                    ed:e7:3d:a8:7e:43:78:a6:6b:d2:4d:c5:50:2b:54:
                    ee:25:1c:ff:fb:b8:59:c9:f5:9d:82:45:3b:95:61:
                    90:25:c0:cd:e6:e9:8e:e9:09:d7:8a:01:c4:19:54:
                    b5:c0:58:be:6c:92:29:fd:56:17:46:b2:aa:de:77:
                    e8:8b:7b:0c:cc:4d:3e:1c:50:06:29:69:69:06:32:
                    6c:ba:13:03:37:e0:b2:9e:95:2c:00:4f:c4:99:37:
                    30:aa:e2:0b:ef:3a:fd:90:63:5f:c6:d4:51:e7:cc:
                    d6:d5:41:d0:4a:69:d0:76:b4:c5:d4:79:72:85:d4:
                    66:6f:9f:92:a7:35:6a:27:bd:99:66:c0:7d:a9:57:
                    87:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:99:DA:D5:38:33:F3:74:33:0F:41:6C:FB:98:53:91:BF:3A:B0:3F
            X509v3 Authority Key Identifier:
                keyid:AE:B0:C9:0E:0E:86:ED:CA:F3:88:49:9D:E5:12:E2:E0:86:A3:99:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ASFPoznE41ueQyALgpiF8HskioVioGWe1BS8NhMCYNcD/0/AEB0C90E0E86EDCAF388499DE512E2E086A39946.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AEB0C90E0E86EDCAF388499DE512E2E086A39946.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ASFPoznE41ueQyALgpiF8HskioVioGWe1BS8NhMCYNcD/0/3137302e3234342e38342e302f32322d3234203d3e20323636343933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.244.84.0/22

    Signature Algorithm: sha256WithRSAEncryption
         ac:8a:94:25:c5:7a:c2:8f:35:d9:60:dc:ba:6c:18:66:79:b4:
         23:a9:b5:61:c2:64:e8:c7:06:fb:7c:6c:20:50:56:2e:3e:9b:
         e0:25:2f:b1:ad:3f:a2:2f:5f:21:b9:07:a9:0a:9b:18:37:c3:
         bd:30:5f:6d:30:cf:cd:02:9c:96:cb:99:43:1c:21:85:72:52:
         28:31:8c:02:18:b9:d9:8d:0a:b2:2a:4b:cc:5a:57:5f:77:81:
         2b:2e:cf:54:5c:c6:1f:31:c6:ec:4b:79:65:21:9e:10:ee:ac:
         ea:53:5c:e2:02:e4:fb:20:2d:48:2e:26:e8:6f:38:de:90:1e:
         c5:c4:10:02:ac:ef:c5:10:8a:27:19:c9:12:58:3c:7c:73:d4:
         e1:91:95:75:fa:f6:80:e9:1d:f3:21:d6:c6:4e:5b:2f:8b:61:
         23:73:85:7a:24:1d:9c:b2:55:40:d3:77:2f:3f:53:ab:00:c7:
         d3:02:28:d0:b0:c6:30:e9:ad:3d:7a:5a:f6:39:6b:03:50:c9:
         f1:ef:58:a5:f7:4c:63:03:e2:94:df:ec:9a:53:ed:4d:70:ba:
         88:c9:b2:7a:22:31:f6:27:84:71:2e:35:0d:2f:a1:34:b1:fc:
         bd:59:4f:22:0d:eb:88:43:bf:b1:35:32:42:10:27:d9:f6:47:
         92:e3:02:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:23:34 2025 by rpki-client