Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Bi57bpt2KLcrKhwYFofUJbqgi26q2DqdjuJVRWfXdZP7/0/3137302e3234342e33342e302f32332d3233203d3e20323636343937.roa
File:                     3137302e3234342e33342e302f32332d3233203d3e20323636343937.roa (raw, json)
Hash identifier:          ViCtW8Ug/GHqqHf0hLv7b2MvpcMeFfLhv3X9ODyXnjY=
Subject key identifier:   5B:2A:A1:D0:97:0E:6C:E4:E3:79:7E:94:8D:8E:B2:C9:EE:00:02:DA
Certificate issuer:       /CN=A0DAE8CDD320603218B6BE37D484CD0B492A9E94
Certificate serial:       0202EF5C2B216E6F4AF92E91E8AF93D33A5CAF36
Authority key identifier: A0:DA:E8:CD:D3:20:60:32:18:B6:BE:37:D4:84:CD:0B:49:2A:9E:94
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A0DAE8CDD320603218B6BE37D484CD0B492A9E94.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Bi57bpt2KLcrKhwYFofUJbqgi26q2DqdjuJVRWfXdZP7/0/3137302e3234342e33342e302f32332d3233203d3e20323636343937.roa
Signing time:             Fri 06 Dec 2024 16:52:02 +0000
ROA not before:           Fri 06 Dec 2024 16:47:02 +0000
ROA not after:            Fri 05 Dec 2025 16:52:02 +0000
asID:                     266497
IP address blocks:        170.244.34.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:02:ef:5c:2b:21:6e:6f:4a:f9:2e:91:e8:af:93:d3:3a:5c:af:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A0DAE8CDD320603218B6BE37D484CD0B492A9E94
        Validity
            Not Before: Dec  6 16:47:02 2024 GMT
            Not After : Dec  5 16:52:02 2025 GMT
        Subject: CN=5B2AA1D0970E6CE4E3797E948D8EB2C9EE0002DA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:f9:dd:66:03:04:35:0b:2b:2c:f7:33:89:4e:
                    74:75:8e:28:d7:83:20:0c:a8:2d:5b:1b:5c:6c:ca:
                    b3:d2:39:f1:ec:84:8d:da:e1:a9:2a:35:5e:79:fb:
                    fb:0a:fa:0f:af:da:83:8d:87:1d:00:d6:aa:39:16:
                    cf:d5:20:47:99:bd:1b:d3:1e:cd:d2:a3:ce:28:e9:
                    dd:95:45:12:5d:83:42:f6:c6:e0:d0:c7:5f:b9:f8:
                    c2:f0:4c:11:5f:f7:be:1f:7b:1e:e8:e7:49:64:8f:
                    bf:30:2a:26:b8:7f:ca:ea:ed:ee:ae:11:67:8b:65:
                    bd:8e:55:ff:8d:9b:04:44:fa:ea:bb:34:26:f3:7c:
                    cf:77:09:03:ae:c0:7d:be:b9:3e:aa:4c:b7:f2:2b:
                    e1:a4:f9:8a:70:10:64:c5:90:83:88:30:c9:f3:fb:
                    3a:25:6a:61:c6:76:ed:55:45:ef:37:05:f7:02:a7:
                    b5:53:c8:c3:00:eb:f8:19:6a:42:b8:c9:7a:94:0c:
                    52:dc:f9:10:1f:e3:b3:da:69:f2:e2:d7:cf:ba:77:
                    f9:cf:0b:55:99:09:eb:66:65:be:76:8c:1e:c4:af:
                    da:ab:6b:75:2c:0a:e0:1c:37:42:4a:44:41:36:92:
                    df:23:05:a2:60:d5:3b:d6:71:2d:0d:11:01:8c:55:
                    be:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:2A:A1:D0:97:0E:6C:E4:E3:79:7E:94:8D:8E:B2:C9:EE:00:02:DA
            X509v3 Authority Key Identifier:
                keyid:A0:DA:E8:CD:D3:20:60:32:18:B6:BE:37:D4:84:CD:0B:49:2A:9E:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Bi57bpt2KLcrKhwYFofUJbqgi26q2DqdjuJVRWfXdZP7/0/A0DAE8CDD320603218B6BE37D484CD0B492A9E94.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A0DAE8CDD320603218B6BE37D484CD0B492A9E94.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Bi57bpt2KLcrKhwYFofUJbqgi26q2DqdjuJVRWfXdZP7/0/3137302e3234342e33342e302f32332d3233203d3e20323636343937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.244.34.0/23

    Signature Algorithm: sha256WithRSAEncryption
         14:a8:13:d2:49:97:84:55:2f:e5:2b:39:61:66:6e:0b:ea:42:
         cb:e7:27:ab:36:7f:e0:ec:73:d9:9f:0c:cd:db:93:8d:11:80:
         56:f4:20:b7:3e:8d:64:5c:46:1f:db:32:16:d4:a3:42:a8:4b:
         2f:f2:1e:fc:20:df:b8:e9:c4:12:73:08:9e:89:84:1c:31:a1:
         15:1e:a0:0f:92:42:c8:0f:7c:86:32:f1:a1:43:98:f2:4f:1e:
         ef:5c:a2:8e:34:de:08:f2:f0:05:23:1a:ef:11:c7:d4:b0:3d:
         7b:6a:26:fb:65:af:b5:9b:c4:88:8e:f8:28:71:87:22:37:c7:
         60:a7:22:f0:7f:92:35:a6:97:46:2c:3c:28:dc:67:77:a0:1d:
         6b:3c:0f:54:7a:81:45:db:d4:5a:2b:7f:ff:6c:0b:4c:65:f3:
         a4:3d:c4:81:b6:f1:26:82:21:38:dc:d1:8e:51:64:cb:4d:53:
         2b:e4:15:63:18:35:41:54:be:e8:2b:db:30:f9:7a:7c:c6:1a:
         27:92:57:23:69:55:9c:f4:f3:c6:c5:fd:9f:5f:5b:96:b4:4b:
         81:90:a9:62:83:e1:07:e6:21:4c:d3:f0:35:63:0c:68:bb:41:
         1b:64:67:ff:4e:6d:6f:bf:15:04:e1:5d:d8:ec:7c:3a:33:26:
         65:d9:c4:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 01:35:24 2025 by rpki-client