Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/3137302e38302e3137382e302f32342d3234203d3e20323632323933.roa
File:                     3137302e38302e3137382e302f32342d3234203d3e20323632323933.roa (raw, json)
Hash identifier:          sTYBzg2ZCT6q/UItiqmJ8HVOku+SOPjMQqf7cp0K4U0=
Subject key identifier:   84:B5:70:B2:DE:DE:D1:7F:77:2A:D3:D3:5D:04:C5:6C:80:F7:29:63
Certificate issuer:       /CN=1A01AD3383BFA38B76F1CA139958102A17AF0391
Certificate serial:       74B614DE02F9ECC27DF223FDE2C865B71AF3A86E
Authority key identifier: 1A:01:AD:33:83:BF:A3:8B:76:F1:CA:13:99:58:10:2A:17:AF:03:91
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1A01AD3383BFA38B76F1CA139958102A17AF0391.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/3137302e38302e3137382e302f32342d3234203d3e20323632323933.roa
Signing time:             Tue 02 Jan 2024 21:16:38 +0000
ROA not before:           Tue 02 Jan 2024 21:11:38 +0000
ROA not after:            Tue 31 Dec 2024 21:16:38 +0000
asID:                     262293
IP address blocks:        170.80.178.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:b6:14:de:02:f9:ec:c2:7d:f2:23:fd:e2:c8:65:b7:1a:f3:a8:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1A01AD3383BFA38B76F1CA139958102A17AF0391
        Validity
            Not Before: Jan  2 21:11:38 2024 GMT
            Not After : Dec 31 21:16:38 2024 GMT
        Subject: CN=84B570B2DEDED17F772AD3D35D04C56C80F72963
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:24:a9:ed:bc:c6:ac:b1:2b:3c:37:6a:3d:66:
                    da:6a:6d:3c:8a:c1:d5:10:95:b5:61:c4:66:c3:ab:
                    78:09:95:f1:06:41:6a:84:4d:6f:ff:82:ff:a7:51:
                    78:40:17:d5:cc:8d:01:70:d6:e1:95:c6:12:e8:1f:
                    d5:6b:83:43:e3:b1:eb:84:6b:4c:e8:90:b6:f4:62:
                    95:8a:47:39:41:36:94:4a:10:aa:2b:72:e2:c5:01:
                    8a:bc:f8:54:c5:a7:48:80:06:d4:13:99:7e:c3:68:
                    19:32:66:b2:33:e5:d1:0f:6f:a9:9c:48:ba:ac:66:
                    ec:6d:cf:d9:ba:33:5f:f3:b5:f8:40:d7:b3:f4:c1:
                    b2:90:f0:2c:56:0e:b6:b6:99:3f:87:ac:82:20:4b:
                    7b:d5:39:88:99:27:2a:de:45:b4:21:7a:27:76:96:
                    d2:70:8e:a3:29:2d:e4:66:16:f7:fe:99:5e:f2:0e:
                    50:d8:2c:d4:3d:5d:50:3a:c3:db:a1:be:1a:77:14:
                    29:9e:a3:ff:59:29:4c:28:ff:59:a1:de:a4:f6:63:
                    bb:75:cf:80:bd:18:fe:0b:1d:91:e5:f8:9f:0f:86:
                    36:6e:8e:8e:60:77:53:a6:e3:97:8d:45:df:00:17:
                    b1:97:1f:17:94:9f:64:2a:b2:7d:e4:19:c3:c7:22:
                    d2:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:B5:70:B2:DE:DE:D1:7F:77:2A:D3:D3:5D:04:C5:6C:80:F7:29:63
            X509v3 Authority Key Identifier:
                keyid:1A:01:AD:33:83:BF:A3:8B:76:F1:CA:13:99:58:10:2A:17:AF:03:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/1A01AD3383BFA38B76F1CA139958102A17AF0391.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1A01AD3383BFA38B76F1CA139958102A17AF0391.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/3137302e38302e3137382e302f32342d3234203d3e20323632323933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.80.178.0/24

    Signature Algorithm: sha256WithRSAEncryption
         33:ff:79:b8:b7:ce:15:5b:61:17:fa:4d:9d:45:61:81:2e:0d:
         67:20:61:99:d4:a4:02:a4:ad:f8:d1:cd:d0:94:e2:ba:76:08:
         90:0a:b2:81:00:42:43:cb:7a:66:4b:ee:c1:e3:65:33:4a:22:
         eb:7e:3f:16:92:1b:30:01:5a:d4:01:07:3f:3f:b3:8a:86:68:
         42:7b:db:ed:99:45:de:09:b9:9f:e4:ed:9f:3c:df:f5:d8:2a:
         69:af:96:13:8d:9a:ce:5b:1b:63:18:9e:77:f1:f9:e5:9d:d7:
         5d:8a:90:7a:4b:73:50:a1:31:19:75:62:19:2c:3b:80:6c:f9:
         ea:c7:5a:0b:5c:89:5e:55:22:fe:03:71:a7:6b:6f:d6:95:cf:
         d3:16:39:bc:f2:6f:b2:3f:be:e0:e5:6c:93:40:15:eb:1f:d2:
         4b:15:a5:4a:a0:8d:f1:f4:11:da:69:86:3a:ac:00:fe:ac:3d:
         ef:76:f8:9e:cb:2a:46:b9:62:76:f2:1d:94:5a:65:e7:c0:16:
         49:bc:dc:21:b6:6f:f1:86:61:f8:b9:c7:58:36:fc:f2:37:b8:
         59:d0:e7:68:15:28:a2:35:76:ef:10:59:f1:a2:7d:fa:4e:dd:
         8a:c4:54:eb:26:28:39:5a:1c:a1:dd:5b:16:cb:6b:07:17:fa:
         f2:68:5b:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:34:22 2025 by rpki-client