Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/B9QJy4rD7YsPrsRQQNCY8saAa2hqNQyygqRB3zFpdXrp/1/3137302e38332e3139362e302f32322d3234203d3e20323636343736.roa
File:                     3137302e38332e3139362e302f32322d3234203d3e20323636343736.roa (raw, json)
Hash identifier:          tp2eTZsaYtnzq6h7K3CbHtt+CafmuOosCJ+GA15CKyI=
Subject key identifier:   3B:20:29:98:15:00:64:B0:FE:06:E3:7B:1C:91:15:55:DC:EE:BB:C1
Certificate issuer:       /CN=2576B728EF25561749172CD23BA7CC6840DF5628
Certificate serial:       26C7AA5C7C814FD584C77AD21DFF744F74DA6FBB
Authority key identifier: 25:76:B7:28:EF:25:56:17:49:17:2C:D2:3B:A7:CC:68:40:DF:56:28
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2576B728EF25561749172CD23BA7CC6840DF5628.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/B9QJy4rD7YsPrsRQQNCY8saAa2hqNQyygqRB3zFpdXrp/1/3137302e38332e3139362e302f32322d3234203d3e20323636343736.roa
Signing time:             Tue 10 Oct 2023 12:24:54 +0000
ROA not before:           Tue 10 Oct 2023 12:19:54 +0000
ROA not after:            Tue 08 Oct 2024 12:24:54 +0000
asID:                     266476
IP address blocks:        170.83.196.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:c7:aa:5c:7c:81:4f:d5:84:c7:7a:d2:1d:ff:74:4f:74:da:6f:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2576B728EF25561749172CD23BA7CC6840DF5628
        Validity
            Not Before: Oct 10 12:19:54 2023 GMT
            Not After : Oct  8 12:24:54 2024 GMT
        Subject: CN=3B202998150064B0FE06E37B1C911555DCEEBBC1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:f3:47:20:56:cb:4c:20:c8:c2:a6:52:06:60:
                    be:38:d2:bc:08:52:33:d4:8c:ca:9b:ae:54:28:35:
                    aa:d9:ec:4c:43:7d:10:d9:9c:22:e6:bd:b8:c3:4e:
                    da:96:f7:9b:79:4f:b7:f0:1c:8d:c1:ba:2f:66:48:
                    84:30:a8:13:9d:50:a3:54:ea:68:52:ec:0b:dd:b4:
                    17:cb:b3:03:ae:3a:44:a4:f9:8f:d2:89:35:f9:ec:
                    8f:52:3a:58:f3:ca:bf:43:f7:56:4d:ca:e3:a8:2f:
                    9e:0c:a7:8d:a2:64:96:96:fb:8b:40:61:82:71:c7:
                    38:c5:e0:fa:ff:cd:cd:66:05:c4:b9:3f:e0:0d:d2:
                    2b:30:06:50:8e:4c:92:78:c6:f1:a3:67:fd:db:5f:
                    de:8d:f3:cb:e8:28:c8:5d:da:d7:aa:36:e1:20:18:
                    cf:61:18:79:56:21:6e:96:dc:b0:51:b6:77:b4:1c:
                    75:16:ae:e8:9c:ac:1a:7e:f4:5e:f5:1e:c0:a5:4c:
                    eb:bb:c4:5e:7d:64:10:ad:a1:15:fc:c1:77:d6:78:
                    79:42:3a:a2:be:51:61:12:07:5a:b3:f0:37:02:28:
                    bc:6b:c7:11:b3:70:23:e2:21:21:f4:c7:bf:49:46:
                    80:1a:ea:cb:98:8d:fe:c1:37:65:9e:6f:3b:66:cc:
                    68:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:20:29:98:15:00:64:B0:FE:06:E3:7B:1C:91:15:55:DC:EE:BB:C1
            X509v3 Authority Key Identifier:
                keyid:25:76:B7:28:EF:25:56:17:49:17:2C:D2:3B:A7:CC:68:40:DF:56:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/B9QJy4rD7YsPrsRQQNCY8saAa2hqNQyygqRB3zFpdXrp/1/2576B728EF25561749172CD23BA7CC6840DF5628.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2576B728EF25561749172CD23BA7CC6840DF5628.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/B9QJy4rD7YsPrsRQQNCY8saAa2hqNQyygqRB3zFpdXrp/1/3137302e38332e3139362e302f32322d3234203d3e20323636343736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.83.196.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7d:0c:21:1c:94:f4:60:c7:d0:d1:01:2f:be:10:b4:7d:0c:b8:
         f6:70:3d:a5:8c:84:5a:04:13:80:70:02:8f:98:da:ab:d0:2d:
         8f:d6:cc:bb:24:e1:53:aa:2c:f4:b1:17:d6:b9:ae:c4:49:87:
         b5:b0:4c:c1:7a:01:7a:85:41:d6:4a:d7:aa:3c:17:25:ab:67:
         51:a6:ab:28:d3:db:31:c6:c9:5e:6e:9d:cb:21:cc:16:b8:79:
         3a:28:ee:0e:c6:ee:e0:72:c4:d0:ed:16:8a:a0:6a:f5:8a:07:
         d6:9b:34:d4:df:1e:57:35:0e:2a:44:cb:33:bb:87:92:f8:46:
         0b:5b:b1:7a:36:ca:cf:9c:63:48:de:10:62:ed:73:c9:c4:2b:
         c1:fa:44:31:4c:5f:00:09:4e:e4:8b:7d:f7:ef:d1:67:8f:62:
         46:20:22:30:e0:9e:7a:a1:30:a0:5b:5a:23:b8:4a:75:c6:07:
         d1:62:a8:25:aa:41:74:24:58:0f:ef:00:77:ba:39:e7:53:a1:
         86:42:4b:10:ed:8b:ae:5f:cb:50:49:c4:82:24:2f:b9:3f:94:
         0a:fe:98:cc:55:a6:7a:bb:1c:53:dc:38:90:f3:8a:07:53:15:
         3b:67:41:7a:9a:bb:92:c2:f6:2e:e7:ab:a8:7b:ec:13:27:a9:
         e4:b8:85:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:31:37 2025 by rpki-client