Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DG9qDAdvPnBq2rMxT84ENPnuYNQG6yD9rKSXx3k6iB8j/0/3137302e3234362e3138382e302f32322d3232203d3e20323634303031.roa
File:                     3137302e3234362e3138382e302f32322d3232203d3e20323634303031.roa (raw, json)
Hash identifier:          d7BEaEdxDVynWUFYPeIrU06hWKkqJTt/xXBCz3/3Pqs=
Subject key identifier:   E4:EB:E0:60:89:79:63:DF:BC:0D:8B:43:B9:7A:66:43:98:5A:F6:29
Certificate issuer:       /CN=5BD9C37F561760317DA770DA6B6E5E3CC72A9FE1
Certificate serial:       56664B0040470CA53F02C8241A22157B71123B71
Authority key identifier: 5B:D9:C3:7F:56:17:60:31:7D:A7:70:DA:6B:6E:5E:3C:C7:2A:9F:E1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5BD9C37F561760317DA770DA6B6E5E3CC72A9FE1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DG9qDAdvPnBq2rMxT84ENPnuYNQG6yD9rKSXx3k6iB8j/0/3137302e3234362e3138382e302f32322d3232203d3e20323634303031.roa
Signing time:             Wed 15 Nov 2023 16:55:29 +0000
ROA not before:           Wed 15 Nov 2023 16:50:29 +0000
ROA not after:            Wed 13 Nov 2024 16:55:29 +0000
asID:                     264001
IP address blocks:        170.246.188.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:66:4b:00:40:47:0c:a5:3f:02:c8:24:1a:22:15:7b:71:12:3b:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5BD9C37F561760317DA770DA6B6E5E3CC72A9FE1
        Validity
            Not Before: Nov 15 16:50:29 2023 GMT
            Not After : Nov 13 16:55:29 2024 GMT
        Subject: CN=E4EBE060897963DFBC0D8B43B97A6643985AF629
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:a6:f4:9e:c2:8f:f4:cd:ee:16:10:fa:0d:78:
                    36:82:56:87:e9:e1:7d:66:1c:b7:31:47:81:4a:e7:
                    12:19:fb:5e:c6:e1:c9:4d:d1:09:e7:c5:c1:d4:e3:
                    20:eb:db:74:0b:a9:93:56:6c:ee:fd:dd:22:71:9a:
                    1c:7b:f6:d2:89:9f:5d:f8:3a:3e:49:31:7d:5b:01:
                    e4:22:8a:37:9b:40:78:27:f7:e7:e2:2a:e9:84:a0:
                    70:e6:e6:14:f3:dd:67:7e:dc:39:1b:4b:08:90:a0:
                    a9:8a:89:e2:b9:bb:e9:76:e2:50:46:1a:c8:0a:3c:
                    85:df:e6:66:2e:3c:98:87:9f:bc:06:6d:e4:86:3e:
                    12:80:83:6b:76:d7:b7:58:c7:16:1b:d8:6a:e1:62:
                    f9:c8:57:11:e1:43:5d:1b:e4:12:4b:03:be:80:14:
                    c1:a0:be:39:1a:b1:52:4d:49:55:fb:67:3e:cd:ae:
                    e5:c9:19:a4:2b:cd:c8:e0:8d:45:29:21:77:8d:0b:
                    cc:bb:ad:65:b2:b3:56:82:06:4e:76:f5:87:7b:e3:
                    9c:22:4a:1f:a0:e8:73:ec:7a:75:a3:9e:38:e7:28:
                    76:6e:8c:be:ae:3a:bc:8e:2f:64:61:5b:5d:ae:70:
                    a4:8b:0f:26:ec:2b:9e:c0:65:2b:28:24:a1:d6:eb:
                    54:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:EB:E0:60:89:79:63:DF:BC:0D:8B:43:B9:7A:66:43:98:5A:F6:29
            X509v3 Authority Key Identifier:
                keyid:5B:D9:C3:7F:56:17:60:31:7D:A7:70:DA:6B:6E:5E:3C:C7:2A:9F:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DG9qDAdvPnBq2rMxT84ENPnuYNQG6yD9rKSXx3k6iB8j/0/5BD9C37F561760317DA770DA6B6E5E3CC72A9FE1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5BD9C37F561760317DA770DA6B6E5E3CC72A9FE1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DG9qDAdvPnBq2rMxT84ENPnuYNQG6yD9rKSXx3k6iB8j/0/3137302e3234362e3138382e302f32322d3232203d3e20323634303031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.246.188.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4e:cd:66:99:46:29:da:ea:8d:1f:69:2d:6e:da:75:8e:86:a5:
         1f:f8:3e:bf:73:0d:78:aa:8e:85:8e:b4:e7:eb:49:e0:52:5c:
         10:e0:41:6d:7f:e4:ed:31:fa:9a:48:82:88:d8:a6:f0:24:aa:
         70:6b:7b:b4:18:a7:57:69:f7:fb:ed:18:e0:0b:b3:91:e7:54:
         fb:7a:d0:e1:01:e0:88:31:54:b8:12:c4:ef:08:bd:0b:70:e0:
         00:b2:5d:a2:fa:90:05:2b:3d:7c:f4:dd:32:ac:54:60:8c:f9:
         2a:b9:9b:e5:fe:67:cb:8e:9f:e0:20:cb:7e:9e:e9:fc:41:ee:
         18:33:68:4c:be:a4:0e:9f:30:98:55:b5:75:72:03:0f:c7:82:
         65:88:60:34:45:f9:8b:de:ea:85:ce:ae:88:1a:6d:15:3a:43:
         f7:6b:7f:a5:b9:9a:93:b8:86:16:35:fc:57:87:6f:35:02:67:
         8b:31:37:86:e9:0f:b6:44:51:df:cd:09:31:5b:44:59:1f:ab:
         2b:9e:a8:45:05:71:3f:09:0d:b8:c1:e6:0f:60:d8:52:6b:e1:
         33:9c:2a:0b:f6:71:49:01:e4:f4:6f:c3:21:ee:15:13:8a:bf:
         a8:d6:28:2a:2d:50:02:8c:f8:65:ea:a0:dc:ed:5a:d8:d2:41:
         1f:24:b5:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 05:50:30 2025 by rpki-client