Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BTtet5GYaj7Y2JATX62kCZTNy7R2oJqsMuUoeTPSXyeE/0/3137302e37392e3137312e302f32342d3234203d3e20323636333032.roa
File:                     3137302e37392e3137312e302f32342d3234203d3e20323636333032.roa (raw, json)
Hash identifier:          74YrqHgZehmMszUoDVTgBl2YReYZlnNA0zwf3h38QKg=
Subject key identifier:   76:1F:88:49:50:D0:36:72:0E:C2:0F:26:B4:8C:5E:5A:18:78:72:47
Certificate issuer:       /CN=F9387F47D8872E43A828969C27F3B31F1C2E66C6
Certificate serial:       747AE8762F5A76C456A24EB4A6DD5F716367BAC0
Authority key identifier: F9:38:7F:47:D8:87:2E:43:A8:28:96:9C:27:F3:B3:1F:1C:2E:66:C6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F9387F47D8872E43A828969C27F3B31F1C2E66C6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BTtet5GYaj7Y2JATX62kCZTNy7R2oJqsMuUoeTPSXyeE/0/3137302e37392e3137312e302f32342d3234203d3e20323636333032.roa
Signing time:             Tue 20 Feb 2024 22:31:03 +0000
ROA not before:           Tue 20 Feb 2024 22:26:03 +0000
ROA not after:            Tue 18 Feb 2025 22:31:03 +0000
asID:                     266302
IP address blocks:        170.79.171.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:7a:e8:76:2f:5a:76:c4:56:a2:4e:b4:a6:dd:5f:71:63:67:ba:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F9387F47D8872E43A828969C27F3B31F1C2E66C6
        Validity
            Not Before: Feb 20 22:26:03 2024 GMT
            Not After : Feb 18 22:31:03 2025 GMT
        Subject: CN=761F884950D036720EC20F26B48C5E5A18787247
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:4f:0d:fe:8f:bb:48:06:c3:cd:a3:ef:4d:cf:
                    a1:c9:03:76:44:e2:cf:b6:81:96:98:85:31:df:db:
                    49:a5:48:c7:74:0f:9d:84:49:e9:54:6e:1c:2b:f9:
                    43:1a:89:8d:9b:d5:1d:a1:d1:7d:69:f0:ac:58:c6:
                    ec:74:04:cb:d1:0d:d6:27:f7:65:13:95:4f:02:42:
                    94:42:c8:60:d0:c0:c9:f6:36:ea:9f:4d:89:61:7b:
                    2f:0a:6b:49:e9:9c:2d:9e:2e:65:ab:83:7d:2b:10:
                    65:3c:a2:0b:11:03:7d:f8:a3:da:5f:51:e1:8a:af:
                    3e:2c:17:9b:25:d3:8d:52:f5:2e:02:00:1f:a5:44:
                    44:da:6a:be:1e:47:11:9d:d2:ed:64:a7:a3:79:dc:
                    74:6f:10:9c:e8:76:e5:4b:71:f4:49:d3:0c:f2:5c:
                    d5:22:9b:ac:c9:f2:04:49:7a:9d:e5:de:22:92:e5:
                    86:4f:1e:5b:fe:6f:1c:7c:94:24:45:e2:84:41:5c:
                    ff:4d:fd:9d:fc:e4:f2:b7:53:6a:b9:2f:c8:75:6f:
                    71:46:08:f8:23:3b:4d:e8:b6:de:b6:ed:a7:31:28:
                    cb:e7:b7:59:be:38:ea:14:4c:6e:a7:0d:ae:1e:1b:
                    ae:e8:2c:80:b4:da:41:cd:ab:41:aa:bb:ee:c9:b2:
                    06:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:1F:88:49:50:D0:36:72:0E:C2:0F:26:B4:8C:5E:5A:18:78:72:47
            X509v3 Authority Key Identifier:
                keyid:F9:38:7F:47:D8:87:2E:43:A8:28:96:9C:27:F3:B3:1F:1C:2E:66:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BTtet5GYaj7Y2JATX62kCZTNy7R2oJqsMuUoeTPSXyeE/0/F9387F47D8872E43A828969C27F3B31F1C2E66C6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F9387F47D8872E43A828969C27F3B31F1C2E66C6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BTtet5GYaj7Y2JATX62kCZTNy7R2oJqsMuUoeTPSXyeE/0/3137302e37392e3137312e302f32342d3234203d3e20323636333032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.79.171.0/24

    Signature Algorithm: sha256WithRSAEncryption
         73:55:c3:e4:17:f5:9f:13:2a:ec:1e:f4:4b:19:80:b1:d4:38:
         fd:19:7a:ce:29:bc:ee:c9:ad:90:fe:82:95:17:36:89:ce:df:
         47:49:79:a3:7c:20:50:e6:81:f7:97:df:e3:ca:af:87:3d:88:
         88:19:c7:db:ad:2d:58:da:dd:03:97:42:f1:19:68:5c:eb:f8:
         a4:1b:2b:32:e9:c2:81:50:fd:0d:f0:98:0f:28:bc:a9:ac:83:
         89:bb:5e:9c:5c:c3:44:75:d3:e5:60:e9:4a:2a:bc:8d:2b:ff:
         00:30:9d:15:73:f2:08:8b:9e:73:0a:24:9a:b3:cd:57:1f:8a:
         a8:0b:04:c5:c7:24:3b:8f:6d:96:b2:f4:4a:cd:8a:7f:38:8f:
         17:f6:e8:52:01:32:59:3e:46:91:dd:56:86:7c:47:55:69:ea:
         3c:bf:e3:55:dd:c5:58:f1:52:44:d1:c3:ab:22:12:5b:ac:8d:
         95:d6:fa:4f:56:2b:2d:6b:f7:9b:69:5f:e8:3f:4d:12:ee:71:
         63:4f:63:ac:da:13:06:e3:fc:bc:09:26:a0:b4:c6:32:17:76:
         fd:33:a1:de:a5:bf:55:11:3a:7c:2d:80:4f:e2:37:e6:90:1c:
         76:ad:f5:8b:80:6c:35:d6:a3:df:69:6e:08:3c:0a:11:c2:0d:
         db:30:93:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 11:48:48 2025 by rpki-client