Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AxbvZHtnSg9S89B2aV5RdzTc6LERpZxGd6xA7bBDajjG/0/3134332e3133372e3137352e302f32342d3234203d3e20323730393438.roa
File:                     3134332e3133372e3137352e302f32342d3234203d3e20323730393438.roa (raw, json)
Hash identifier:          BTPpZ4a1lw5cZERg1t9ifGDv1kC+fyq+LDba4qo0Ecs=
Subject key identifier:   43:37:5D:7D:DE:13:87:95:46:62:DE:9E:A4:3D:AA:7F:82:91:71:21
Certificate issuer:       /CN=AB6F23D742FEBD4C1AAE1CF44F37795FEA52A635
Certificate serial:       7FDDA8E5C8660E799F4CBB96378C02B872E31514
Authority key identifier: AB:6F:23:D7:42:FE:BD:4C:1A:AE:1C:F4:4F:37:79:5F:EA:52:A6:35
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AB6F23D742FEBD4C1AAE1CF44F37795FEA52A635.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AxbvZHtnSg9S89B2aV5RdzTc6LERpZxGd6xA7bBDajjG/0/3134332e3133372e3137352e302f32342d3234203d3e20323730393438.roa
Signing time:             Mon 01 Jul 2024 14:49:14 +0000
ROA not before:           Mon 01 Jul 2024 14:44:14 +0000
ROA not after:            Mon 30 Jun 2025 14:49:14 +0000
asID:                     270948
IP address blocks:        143.137.175.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:dd:a8:e5:c8:66:0e:79:9f:4c:bb:96:37:8c:02:b8:72:e3:15:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AB6F23D742FEBD4C1AAE1CF44F37795FEA52A635
        Validity
            Not Before: Jul  1 14:44:14 2024 GMT
            Not After : Jun 30 14:49:14 2025 GMT
        Subject: CN=43375D7DDE1387954662DE9EA43DAA7F82917121
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:4b:e3:f7:fa:0c:0b:0b:30:5c:c1:96:32:f6:
                    63:90:42:66:36:66:12:e8:d8:ae:83:7b:41:c0:5a:
                    13:c2:12:48:6b:95:ed:be:2b:74:28:eb:69:cd:05:
                    41:d1:e9:91:25:22:d6:4e:a7:f4:b4:50:a6:5d:df:
                    84:6b:f9:e9:28:49:ae:96:1c:73:b8:7f:08:d5:1c:
                    e2:ed:ba:9b:fb:6a:c8:6c:02:ab:30:b9:d1:79:d9:
                    49:91:84:81:2f:03:64:3d:14:40:84:3b:64:05:cf:
                    a7:05:38:af:a0:e5:6d:86:a7:65:72:20:28:8f:d7:
                    7e:55:e2:0e:79:03:c1:c6:4b:ef:da:5b:64:cb:38:
                    cf:3f:fa:c3:9c:3a:f1:1e:4e:29:29:ed:94:cc:2b:
                    0c:66:5e:78:6d:e2:cb:61:1a:22:c9:1c:3c:e2:4c:
                    aa:7a:b6:fe:9f:24:46:7c:6b:63:1a:80:ac:87:ad:
                    1c:23:68:48:97:42:0c:f5:5a:9d:9e:21:3b:36:ca:
                    d1:47:99:12:f5:1e:21:61:70:81:28:eb:4e:54:b0:
                    79:83:e2:98:3d:b9:02:da:64:92:16:cc:d8:ea:17:
                    5a:33:cd:f1:f1:c1:ab:e2:f6:53:8b:9d:e1:3b:18:
                    e1:7c:02:44:5a:00:4a:3d:97:df:47:2f:a2:21:7b:
                    c2:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:37:5D:7D:DE:13:87:95:46:62:DE:9E:A4:3D:AA:7F:82:91:71:21
            X509v3 Authority Key Identifier:
                keyid:AB:6F:23:D7:42:FE:BD:4C:1A:AE:1C:F4:4F:37:79:5F:EA:52:A6:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AxbvZHtnSg9S89B2aV5RdzTc6LERpZxGd6xA7bBDajjG/0/AB6F23D742FEBD4C1AAE1CF44F37795FEA52A635.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AB6F23D742FEBD4C1AAE1CF44F37795FEA52A635.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AxbvZHtnSg9S89B2aV5RdzTc6LERpZxGd6xA7bBDajjG/0/3134332e3133372e3137352e302f32342d3234203d3e20323730393438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.137.175.0/24

    Signature Algorithm: sha256WithRSAEncryption
         85:25:14:04:78:88:c2:72:f7:80:68:c3:f3:79:b6:7e:d9:8a:
         ef:97:19:88:ef:19:7e:88:39:94:89:11:d9:5d:ea:d6:b1:15:
         5c:b0:4a:56:0b:22:c5:f3:a2:26:b3:8f:e7:26:3a:cb:9d:24:
         07:ea:35:35:29:e4:58:a3:c3:99:ea:de:4c:03:cd:28:90:4b:
         93:a2:26:62:f3:47:6d:65:40:a5:08:b8:00:83:27:f2:37:22:
         1e:84:f0:11:5f:a3:bd:f5:ef:07:e9:5f:e5:f5:e9:89:71:0b:
         40:07:3c:bf:4f:60:55:e2:89:cf:5d:97:22:bf:97:22:6c:47:
         80:7e:0e:d1:8c:20:b1:88:26:32:60:82:bc:e3:f9:ba:41:80:
         d5:c5:f5:ef:ac:9e:f8:48:9c:c1:63:3a:e3:6b:5e:08:8e:6a:
         ab:b8:0f:55:55:1a:97:a4:c4:0c:58:bf:83:fc:7c:6e:5b:b1:
         9c:76:59:84:2b:97:ff:26:60:29:89:ec:df:42:37:f4:91:b6:
         d7:11:a5:66:fb:d2:48:40:80:a8:49:df:1e:53:b0:ff:b7:a2:
         04:aa:0a:17:09:f0:d2:ec:41:2d:d9:cf:56:5b:88:ee:31:2c:
         fe:13:31:40:aa:5a:5c:fd:b4:53:d6:79:21:63:81:3e:57:3e:
         67:d5:31:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:22:44 2025 by rpki-client