Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Avp9w8ghYcbVeDefvMDCChbYTGoepuXEnkYMqeQZP1PD/0/3137302e37382e3234342e302f32322d3234203d3e20323633333338.roa
File:                     3137302e37382e3234342e302f32322d3234203d3e20323633333338.roa (raw, json)
Hash identifier:          OF1svCqwdBiEOqXCMpVt3vBWOQW+bybqxfXEwW02I8o=
Subject key identifier:   79:3F:9D:38:7F:AB:B0:47:9D:91:D7:09:B9:21:E7:D0:13:A1:9F:99
Certificate issuer:       /CN=7B463853EA4AC012BD9F3194CFA33AF32591DF0B
Certificate serial:       215983063B4A9D393CB64A28BDC0801F1465AB98
Authority key identifier: 7B:46:38:53:EA:4A:C0:12:BD:9F:31:94:CF:A3:3A:F3:25:91:DF:0B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7B463853EA4AC012BD9F3194CFA33AF32591DF0B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Avp9w8ghYcbVeDefvMDCChbYTGoepuXEnkYMqeQZP1PD/0/3137302e37382e3234342e302f32322d3234203d3e20323633333338.roa
Signing time:             Wed 12 Feb 2025 11:47:57 +0000
ROA not before:           Wed 12 Feb 2025 11:42:57 +0000
ROA not after:            Wed 11 Feb 2026 11:47:57 +0000
asID:                     263338
IP address blocks:        170.78.244.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:59:83:06:3b:4a:9d:39:3c:b6:4a:28:bd:c0:80:1f:14:65:ab:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7B463853EA4AC012BD9F3194CFA33AF32591DF0B
        Validity
            Not Before: Feb 12 11:42:57 2025 GMT
            Not After : Feb 11 11:47:57 2026 GMT
        Subject: CN=793F9D387FABB0479D91D709B921E7D013A19F99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:21:d5:83:4a:27:09:e8:e3:bc:8f:a3:07:cf:
                    a2:52:62:5e:9a:94:2f:b2:e2:f7:7d:55:fc:f2:98:
                    a8:b0:54:a9:f9:f1:4f:36:6c:3f:c4:e9:e0:35:83:
                    63:71:58:ef:3c:ee:b6:8c:13:d0:5e:4a:4a:24:df:
                    1b:89:09:af:32:3d:82:b1:81:9e:97:cc:83:82:a9:
                    f1:64:57:22:ec:5f:a5:24:aa:eb:04:63:29:2f:a0:
                    c8:ea:7b:10:0d:ce:d0:f5:2e:0b:2b:33:9d:ae:ae:
                    2d:8e:ee:9e:63:60:c1:c5:2f:ec:73:2b:76:07:46:
                    67:d3:4f:ac:9a:d1:f9:64:bc:47:24:4e:e8:28:8f:
                    5d:35:39:34:0b:67:53:4f:02:84:27:54:cb:87:34:
                    9a:c5:9c:d0:65:57:72:68:e2:4c:12:1b:ec:b3:cd:
                    d6:02:11:6b:a1:10:fd:b0:d8:c1:d6:b5:9e:2a:f0:
                    95:88:5d:68:68:7e:39:02:8f:6a:b3:70:06:73:26:
                    87:95:5d:5e:34:39:0d:c0:da:af:21:39:b7:0c:db:
                    44:bc:43:04:b7:4e:fa:95:ef:84:e3:41:aa:5d:cf:
                    dd:ae:6a:41:4e:c9:34:42:40:34:3f:ea:46:bd:e6:
                    69:43:13:9d:11:81:da:8a:a9:30:9b:f3:51:f6:21:
                    09:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:3F:9D:38:7F:AB:B0:47:9D:91:D7:09:B9:21:E7:D0:13:A1:9F:99
            X509v3 Authority Key Identifier:
                keyid:7B:46:38:53:EA:4A:C0:12:BD:9F:31:94:CF:A3:3A:F3:25:91:DF:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Avp9w8ghYcbVeDefvMDCChbYTGoepuXEnkYMqeQZP1PD/0/7B463853EA4AC012BD9F3194CFA33AF32591DF0B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7B463853EA4AC012BD9F3194CFA33AF32591DF0B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Avp9w8ghYcbVeDefvMDCChbYTGoepuXEnkYMqeQZP1PD/0/3137302e37382e3234342e302f32322d3234203d3e20323633333338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.78.244.0/22

    Signature Algorithm: sha256WithRSAEncryption
         05:a5:c6:43:79:54:ed:77:1c:eb:10:d5:32:a8:62:23:9f:a2:
         6b:36:04:e7:5b:ef:e0:57:22:22:aa:4f:a9:cb:8a:c1:c3:e1:
         99:00:f6:29:00:29:62:81:d8:b3:2d:40:55:89:6e:4c:b7:d2:
         da:54:ea:95:da:28:1c:ea:41:06:f1:f2:30:6a:77:9e:a0:74:
         bf:4c:7a:83:32:17:c7:bb:ec:18:07:ac:d5:0a:71:bb:6f:af:
         d6:aa:49:15:f2:db:53:5b:fc:c0:5c:75:a3:fc:ad:19:8e:2d:
         40:ea:14:84:13:46:39:8a:9e:d9:4c:4a:60:05:80:e5:51:57:
         85:22:c9:26:7f:fd:d3:14:35:98:ea:4b:af:5c:46:a0:b1:e8:
         8e:22:35:6c:29:0d:f7:e6:a6:21:42:a9:55:53:1e:cc:2f:a1:
         47:79:3c:a1:7c:9f:16:f1:6e:c1:a0:10:fa:55:7b:f3:1c:c8:
         a5:c2:cb:cf:b4:dc:33:b0:32:2d:4c:87:89:15:65:40:00:5d:
         b9:62:9a:40:53:c6:22:f6:f9:4d:42:87:c3:7a:9e:6f:33:32:
         38:b1:78:ec:06:fc:b3:b6:a1:94:b2:70:47:05:10:7c:b1:e1:
         72:52:17:5b:9e:9f:2c:e1:7f:8a:8d:6a:fe:39:ae:db:c2:bd:
         17:ba:85:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 23:15:05 2025 by rpki-client