Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Bi57bpt2KLcrKhwYFofUJbqgi26q2DqdjuJVRWfXdZP7/0/3137302e3234342e33322e302f32332d3233203d3e20323636343937.roa
File:                     3137302e3234342e33322e302f32332d3233203d3e20323636343937.roa (raw, json)
Hash identifier:          oIfhPtafiAvTWdeH9miJ+UjcK1CxnYWlqB+CT1Fwwzc=
Subject key identifier:   4B:21:23:CD:BE:95:5D:25:4C:CD:C8:13:AB:89:60:0A:75:B9:53:16
Certificate issuer:       /CN=A0DAE8CDD320603218B6BE37D484CD0B492A9E94
Certificate serial:       115162C822905BC03DB6A0C13B670CB80134BAF8
Authority key identifier: A0:DA:E8:CD:D3:20:60:32:18:B6:BE:37:D4:84:CD:0B:49:2A:9E:94
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A0DAE8CDD320603218B6BE37D484CD0B492A9E94.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Bi57bpt2KLcrKhwYFofUJbqgi26q2DqdjuJVRWfXdZP7/0/3137302e3234342e33322e302f32332d3233203d3e20323636343937.roa
Signing time:             Fri 06 Dec 2024 16:52:02 +0000
ROA not before:           Fri 06 Dec 2024 16:47:02 +0000
ROA not after:            Fri 05 Dec 2025 16:52:02 +0000
asID:                     266497
IP address blocks:        170.244.32.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:51:62:c8:22:90:5b:c0:3d:b6:a0:c1:3b:67:0c:b8:01:34:ba:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A0DAE8CDD320603218B6BE37D484CD0B492A9E94
        Validity
            Not Before: Dec  6 16:47:02 2024 GMT
            Not After : Dec  5 16:52:02 2025 GMT
        Subject: CN=4B2123CDBE955D254CCDC813AB89600A75B95316
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:11:03:26:f1:a4:4b:96:f3:05:65:33:0c:77:
                    19:6d:ae:2d:4e:9f:de:78:23:db:a0:62:52:43:83:
                    9a:08:2f:12:3b:7a:ca:16:2f:0d:59:74:44:fe:5e:
                    e3:6c:ca:85:ab:c2:eb:8f:cb:ea:e5:5c:dd:4b:e4:
                    92:da:15:6b:88:69:8a:23:37:8a:b0:4d:bf:8d:24:
                    b4:9e:be:5a:b7:71:bd:16:e3:c5:1d:e1:07:24:45:
                    60:db:bb:59:34:79:3e:8a:1e:73:52:7e:29:70:e7:
                    06:fd:9e:dd:8e:e1:6a:da:3b:14:23:de:da:65:1c:
                    22:09:c6:f8:33:8b:fd:15:f6:57:e1:d4:1f:5b:97:
                    0f:0c:21:bd:3c:74:8e:a7:cc:a6:a2:84:13:00:5a:
                    62:46:7a:5c:00:08:8f:88:54:f1:39:6f:19:35:a9:
                    1b:3a:89:dd:b1:f6:6c:90:05:f1:ee:65:5f:f4:4e:
                    0b:d0:49:3e:d2:3f:85:93:19:1e:1a:02:2b:71:c3:
                    a5:80:17:7b:cc:21:26:a7:97:01:4c:81:4d:5e:f3:
                    10:d1:a7:d7:13:8a:95:19:72:56:a4:10:2b:fa:12:
                    60:81:84:a7:94:e5:16:aa:bf:54:71:59:9a:a4:52:
                    cb:00:67:d5:4d:9a:57:05:c1:d3:e1:7e:3c:d1:e9:
                    23:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:21:23:CD:BE:95:5D:25:4C:CD:C8:13:AB:89:60:0A:75:B9:53:16
            X509v3 Authority Key Identifier:
                keyid:A0:DA:E8:CD:D3:20:60:32:18:B6:BE:37:D4:84:CD:0B:49:2A:9E:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Bi57bpt2KLcrKhwYFofUJbqgi26q2DqdjuJVRWfXdZP7/0/A0DAE8CDD320603218B6BE37D484CD0B492A9E94.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A0DAE8CDD320603218B6BE37D484CD0B492A9E94.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Bi57bpt2KLcrKhwYFofUJbqgi26q2DqdjuJVRWfXdZP7/0/3137302e3234342e33322e302f32332d3233203d3e20323636343937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.244.32.0/23

    Signature Algorithm: sha256WithRSAEncryption
         78:cb:57:ea:82:8f:ff:5c:3d:74:79:35:86:34:c5:a1:c4:ac:
         06:50:a0:bb:ac:fa:3f:70:27:87:3a:b2:9b:ba:1a:4d:11:cb:
         15:16:57:e5:ff:13:d0:bf:39:fa:61:2c:84:9c:52:57:36:26:
         c0:7e:1f:dc:10:67:17:06:3c:2f:2d:48:ed:dd:e6:a6:c5:90:
         1c:5f:35:81:48:8f:c7:fb:d8:84:64:72:b6:7b:34:af:5f:7c:
         11:cb:8e:f2:c8:b0:0e:a8:97:80:7a:66:18:3d:1b:8f:a6:4d:
         db:64:63:53:c6:d6:92:4e:ba:ec:cb:29:f3:46:0f:51:99:99:
         33:9e:5b:33:5c:64:27:d6:1a:e5:73:81:bf:f3:ee:8d:b8:11:
         5b:65:87:82:5f:da:98:ac:99:af:93:f5:9a:02:46:59:f0:33:
         99:41:d6:0e:ea:97:02:42:dd:43:11:d0:91:fe:db:40:bf:64:
         1d:b0:ca:20:e8:93:7d:9f:cc:8f:13:9b:bf:45:98:b7:2c:31:
         ac:6e:79:e9:d8:96:27:26:52:2b:b1:1b:e9:ab:8d:b1:57:8a:
         19:6f:3e:45:f5:2c:5e:85:f3:74:9a:21:80:f8:a8:26:da:38:
         8f:0b:70:4b:f1:9a:ff:03:40:69:b4:21:a4:1a:06:e0:9c:00:
         16:b9:dc:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 15:28:18 2025 by rpki-client