Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CozZWaDfdu3BbhkFfSfbs33gaGgMyRfDBEDXRr8xSr8a/0/3137302e3233392e39362e302f32322d3332203d3e20323634333937.roa
File:                     3137302e3233392e39362e302f32322d3332203d3e20323634333937.roa (raw, json)
Hash identifier:          fNr5BMvSiqAqMCg8mXIo6+EG3gxlBXg3Zac9eR70aLo=
Subject key identifier:   23:9E:EC:59:A7:86:E6:EB:EB:D1:7E:3F:40:36:59:21:9F:D2:6F:4A
Certificate issuer:       /CN=E099C399B33A5BD4B09B4048096B814CE28EFBD9
Certificate serial:       47B9ACB186A7A1E1C31A3E27A17A548FC54AD7CC
Authority key identifier: E0:99:C3:99:B3:3A:5B:D4:B0:9B:40:48:09:6B:81:4C:E2:8E:FB:D9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E099C399B33A5BD4B09B4048096B814CE28EFBD9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CozZWaDfdu3BbhkFfSfbs33gaGgMyRfDBEDXRr8xSr8a/0/3137302e3233392e39362e302f32322d3332203d3e20323634333937.roa
Signing time:             Tue 06 May 2025 20:08:41 +0000
ROA not before:           Tue 06 May 2025 20:03:41 +0000
ROA not after:            Tue 05 May 2026 20:08:41 +0000
asID:                     264397
IP address blocks:        170.239.96.0/22 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:b9:ac:b1:86:a7:a1:e1:c3:1a:3e:27:a1:7a:54:8f:c5:4a:d7:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E099C399B33A5BD4B09B4048096B814CE28EFBD9
        Validity
            Not Before: May  6 20:03:41 2025 GMT
            Not After : May  5 20:08:41 2026 GMT
        Subject: CN=239EEC59A786E6EBEBD17E3F403659219FD26F4A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:0c:b3:d6:66:a5:54:22:44:e8:93:c8:2c:95:
                    9a:6f:0e:54:9d:d0:32:04:fa:59:f3:c0:55:7f:2c:
                    ac:60:e7:c2:05:a8:43:26:22:eb:d4:2f:6f:88:56:
                    28:eb:81:4d:e0:96:0e:49:ed:63:ce:0c:37:d7:1b:
                    9f:1c:cb:e1:da:5f:3e:e8:08:7d:13:59:28:f6:c6:
                    f5:d4:90:5e:d5:fe:8e:11:e3:a2:27:36:96:65:f6:
                    ae:13:0f:af:1f:11:f1:bc:a3:0f:4d:28:57:5f:02:
                    8d:16:7a:94:bd:a9:50:5e:d4:6d:89:f4:49:f6:25:
                    27:8a:84:0c:db:c8:70:3d:ef:86:71:ec:34:85:c7:
                    9d:ce:ce:66:ed:57:c6:c8:3b:d4:51:d7:23:25:29:
                    e5:ca:af:cc:e8:7b:59:ea:c0:cf:4d:eb:54:e8:b0:
                    25:61:f4:e5:f7:41:0d:17:e1:76:3e:a4:f3:cb:54:
                    45:2e:4a:b3:17:d8:a0:1e:6b:ad:7e:b9:75:ff:fd:
                    57:0f:ba:4d:b8:35:ac:15:50:68:cd:b2:a9:01:e5:
                    74:7b:38:b4:f4:53:c3:49:dc:35:21:bb:5d:9a:1c:
                    5c:20:a1:56:67:b5:47:3e:d6:4c:8e:3d:36:47:9f:
                    73:7a:7a:58:c0:03:ca:86:4a:57:5f:a5:aa:18:2f:
                    79:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:9E:EC:59:A7:86:E6:EB:EB:D1:7E:3F:40:36:59:21:9F:D2:6F:4A
            X509v3 Authority Key Identifier:
                keyid:E0:99:C3:99:B3:3A:5B:D4:B0:9B:40:48:09:6B:81:4C:E2:8E:FB:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CozZWaDfdu3BbhkFfSfbs33gaGgMyRfDBEDXRr8xSr8a/0/E099C399B33A5BD4B09B4048096B814CE28EFBD9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E099C399B33A5BD4B09B4048096B814CE28EFBD9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CozZWaDfdu3BbhkFfSfbs33gaGgMyRfDBEDXRr8xSr8a/0/3137302e3233392e39362e302f32322d3332203d3e20323634333937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.239.96.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0e:e9:56:e2:3a:dc:81:16:54:af:02:34:ba:b5:d5:3f:65:d0:
         62:94:2a:de:cf:b8:ae:ff:50:f7:20:1c:ff:5d:94:cf:91:4b:
         56:b2:91:82:0f:90:88:65:e0:d5:be:43:f9:02:d6:49:dd:17:
         96:b0:ee:04:4d:d5:b3:a9:b4:9d:ff:5c:a5:53:8c:43:96:9e:
         37:3c:c0:4e:5c:ed:d4:7e:89:8f:78:97:68:b0:40:58:6f:95:
         f8:b1:fd:76:4f:5e:b8:14:18:e4:b0:a3:3e:3e:03:4e:d6:fc:
         26:73:c6:07:cc:b8:e5:1b:34:12:b7:42:a4:30:bc:c1:ef:63:
         a9:77:bf:73:5c:da:42:59:d6:9b:65:c0:27:6d:6b:78:f6:ae:
         65:e4:be:4e:05:35:1b:5c:40:7f:3c:e0:38:d3:7e:84:2a:dc:
         fb:86:7e:5b:b7:20:07:eb:02:1b:72:c1:cd:cb:5c:ea:cd:e0:
         ff:71:f6:0b:aa:3f:4a:ab:fa:e5:f7:03:73:bd:19:e1:43:04:
         92:54:3f:dd:c9:19:a4:39:04:6c:0d:b7:83:74:3c:c1:36:35:
         88:ec:14:99:e1:36:10:09:61:11:c0:ba:d6:88:1e:d1:3d:6d:
         ea:7a:21:15:cb:4f:c8:ba:d8:a8:27:6c:26:8a:bf:f7:b3:b0:
         a9:56:9a:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 12:07:34 2025 by rpki-client