Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BzWL6DcvcB4YQ8A5ZDMp3i3LS2EWBSzh2PwrgZdDuWWB/1/3137302e38342e3234302e302f32322d3234203d3e203532363337.roa
File:                     3137302e38342e3234302e302f32322d3234203d3e203532363337.roa (raw, json)
Hash identifier:          WZ0+j5qTlrNFyG+DLEy9WjcpxfoTZ7e/u9JiFr7vHf4=
Subject key identifier:   9D:3E:11:D5:48:48:29:D3:9E:30:3E:05:25:44:D2:9A:BF:E4:23:10
Certificate issuer:       /CN=65957368ED64EBC667C549743F4EF7F7D715D062
Certificate serial:       4F7D00AB06D53BF072D186BF7212C7842BF3BE10
Authority key identifier: 65:95:73:68:ED:64:EB:C6:67:C5:49:74:3F:4E:F7:F7:D7:15:D0:62
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/65957368ED64EBC667C549743F4EF7F7D715D062.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BzWL6DcvcB4YQ8A5ZDMp3i3LS2EWBSzh2PwrgZdDuWWB/1/3137302e38342e3234302e302f32322d3234203d3e203532363337.roa
Signing time:             Wed 06 Dec 2023 05:00:00 +0000
ROA not before:           Wed 06 Dec 2023 04:55:00 +0000
ROA not after:            Wed 04 Dec 2024 05:00:00 +0000
asID:                     52637
IP address blocks:        170.84.240.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:7d:00:ab:06:d5:3b:f0:72:d1:86:bf:72:12:c7:84:2b:f3:be:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65957368ED64EBC667C549743F4EF7F7D715D062
        Validity
            Not Before: Dec  6 04:55:00 2023 GMT
            Not After : Dec  4 05:00:00 2024 GMT
        Subject: CN=3082010A0282010100E1D1CDF7BEC4F48D93521C46EA3A7380566E0313A8476C61FD3AE5E00B13C8E71176550B9C7A310ACCE84A538CC5D8A18375534D3412EB3A870E7A38AD8B399D6280C7DC20034EB072456FCD1C8B8C4D6051EC947E60827088AB26D95A679CAFD8D1FA0F9E885AD532FAE383AE3CFEF8BFF2613AD8F96185DE79516DD4F305475B5ACE8A4D75943B9CCC1CB0B6D85F0684DDAE926B01008818C683110C8EAB7BA9C15A7045F6B56A73C3FB11BC5BE580342851FCB872333A32E73BB52298CBF6E43DFBE5603AFA323A213408F1C4F2AF078E7640B6614AA508D91ECC90FC6EC1B6DA51D2DDA82A57B0328F90BD265C4315B9B4F48E92ADE77BBC07E8E9AA55170203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:d1:cd:f7:be:c4:f4:8d:93:52:1c:46:ea:3a:
                    73:80:56:6e:03:13:a8:47:6c:61:fd:3a:e5:e0:0b:
                    13:c8:e7:11:76:55:0b:9c:7a:31:0a:cc:e8:4a:53:
                    8c:c5:d8:a1:83:75:53:4d:34:12:eb:3a:87:0e:7a:
                    38:ad:8b:39:9d:62:80:c7:dc:20:03:4e:b0:72:45:
                    6f:cd:1c:8b:8c:4d:60:51:ec:94:7e:60:82:70:88:
                    ab:26:d9:5a:67:9c:af:d8:d1:fa:0f:9e:88:5a:d5:
                    32:fa:e3:83:ae:3c:fe:f8:bf:f2:61:3a:d8:f9:61:
                    85:de:79:51:6d:d4:f3:05:47:5b:5a:ce:8a:4d:75:
                    94:3b:9c:cc:1c:b0:b6:d8:5f:06:84:dd:ae:92:6b:
                    01:00:88:18:c6:83:11:0c:8e:ab:7b:a9:c1:5a:70:
                    45:f6:b5:6a:73:c3:fb:11:bc:5b:e5:80:34:28:51:
                    fc:b8:72:33:3a:32:e7:3b:b5:22:98:cb:f6:e4:3d:
                    fb:e5:60:3a:fa:32:3a:21:34:08:f1:c4:f2:af:07:
                    8e:76:40:b6:61:4a:a5:08:d9:1e:cc:90:fc:6e:c1:
                    b6:da:51:d2:dd:a8:2a:57:b0:32:8f:90:bd:26:5c:
                    43:15:b9:b4:f4:8e:92:ad:e7:7b:bc:07:e8:e9:aa:
                    55:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:3E:11:D5:48:48:29:D3:9E:30:3E:05:25:44:D2:9A:BF:E4:23:10
            X509v3 Authority Key Identifier:
                keyid:65:95:73:68:ED:64:EB:C6:67:C5:49:74:3F:4E:F7:F7:D7:15:D0:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BzWL6DcvcB4YQ8A5ZDMp3i3LS2EWBSzh2PwrgZdDuWWB/1/65957368ED64EBC667C549743F4EF7F7D715D062.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/65957368ED64EBC667C549743F4EF7F7D715D062.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BzWL6DcvcB4YQ8A5ZDMp3i3LS2EWBSzh2PwrgZdDuWWB/1/3137302e38342e3234302e302f32322d3234203d3e203532363337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.84.240.0/22

    Signature Algorithm: sha256WithRSAEncryption
         23:e0:31:b5:c3:95:1c:48:1f:79:fc:1a:4d:2b:8c:f8:0d:68:
         5f:bc:37:8d:9b:88:f7:66:84:f0:3b:26:49:01:46:42:ea:f4:
         4f:e2:ad:57:b3:cd:69:b0:b5:cf:c7:27:b0:c2:3d:75:18:e0:
         c2:0e:4a:38:d1:68:73:5f:bd:5e:dc:8d:b9:5f:e6:c4:0a:85:
         27:89:0c:78:10:04:1e:d4:ad:32:ab:1c:9f:b9:c5:2b:d1:66:
         c1:f5:ba:6c:8a:f8:46:ca:ec:dc:c7:47:c3:5d:5f:8c:f7:55:
         e6:8b:78:ec:38:f5:1a:87:e7:c8:cf:7d:22:b2:29:22:56:43:
         f2:9b:e3:ff:7f:2e:c8:cf:d5:24:09:5e:3d:9c:45:3c:35:34:
         64:18:c2:87:2d:2e:49:19:5f:df:e8:33:65:46:04:23:67:48:
         39:a1:5d:07:42:a5:d5:78:f8:95:2a:fe:b4:93:24:91:6a:b8:
         db:df:2b:98:54:cf:63:b6:9d:66:21:26:2e:9f:53:72:d2:31:
         f6:81:a1:4f:c5:8e:70:42:54:68:0f:16:0f:6b:41:18:3e:ac:
         d7:d7:9e:7c:19:48:4f:99:1a:08:6c:a3:60:fd:38:e9:79:9b:
         3e:8b:b9:05:03:5c:05:42:ee:a5:e7:7a:4c:e8:6b:d6:cd:9c:
         da:1f:f4:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:44:24 2025 by rpki-client