Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DG9qDAdvPnBq2rMxT84ENPnuYNQG6yD9rKSXx3k6iB8j/0/3137302e3234362e3138382e302f32342d3234203d3e20323634303031.roa
File:                     3137302e3234362e3138382e302f32342d3234203d3e20323634303031.roa (raw, json)
Hash identifier:          89DOiOIwcwfELVeHpf7cbrMY/Yv3TVcunBpSniEajSI=
Subject key identifier:   43:60:19:29:98:AD:DA:8D:BD:97:F9:F4:82:97:0E:65:E8:B6:9F:3D
Certificate issuer:       /CN=5BD9C37F561760317DA770DA6B6E5E3CC72A9FE1
Certificate serial:       3CE36C89E90CFA422BDE916A37A985DD9B643EB0
Authority key identifier: 5B:D9:C3:7F:56:17:60:31:7D:A7:70:DA:6B:6E:5E:3C:C7:2A:9F:E1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5BD9C37F561760317DA770DA6B6E5E3CC72A9FE1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DG9qDAdvPnBq2rMxT84ENPnuYNQG6yD9rKSXx3k6iB8j/0/3137302e3234362e3138382e302f32342d3234203d3e20323634303031.roa
Signing time:             Sat 18 Nov 2023 16:56:47 +0000
ROA not before:           Sat 18 Nov 2023 16:51:47 +0000
ROA not after:            Sat 16 Nov 2024 16:56:47 +0000
asID:                     264001
IP address blocks:        170.246.188.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:e3:6c:89:e9:0c:fa:42:2b:de:91:6a:37:a9:85:dd:9b:64:3e:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5BD9C37F561760317DA770DA6B6E5E3CC72A9FE1
        Validity
            Not Before: Nov 18 16:51:47 2023 GMT
            Not After : Nov 16 16:56:47 2024 GMT
        Subject: CN=4360192998ADDA8DBD97F9F482970E65E8B69F3D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:9b:0f:5f:27:cb:85:d9:f3:51:fc:35:a8:8c:
                    a0:5c:48:68:bf:33:89:c4:f0:89:a3:da:f5:80:1a:
                    7d:c9:f2:69:aa:05:4e:57:06:5e:f5:95:8b:0e:d4:
                    f1:f5:b3:04:94:08:bb:31:2e:6c:4f:b3:3e:7d:7e:
                    8e:65:36:dd:a2:47:ca:35:24:e2:46:ad:0f:35:ec:
                    f1:a2:a5:0d:af:da:09:01:50:4d:90:e5:06:24:92:
                    d4:5c:1e:97:67:10:fd:08:c6:25:73:77:55:72:c2:
                    89:54:e3:35:f2:be:a5:5d:17:9d:7c:94:54:8a:79:
                    af:54:94:8d:7e:ab:5c:7f:19:de:c3:e0:0a:34:cb:
                    67:02:1c:34:92:8d:ae:42:59:8d:bd:d4:d1:24:a1:
                    a0:fa:36:c0:6a:1c:6c:a7:6f:ab:d1:f4:41:b5:31:
                    4c:56:7f:54:92:ab:ff:5d:50:16:6a:c0:01:42:01:
                    3f:2f:a7:7b:2e:c0:38:1e:84:04:3b:8b:1a:43:28:
                    00:49:d8:0b:b3:c5:1d:9a:f3:2b:25:44:1e:ed:f5:
                    07:90:a2:45:d0:cf:9e:b5:15:14:d9:2b:8b:55:53:
                    50:ea:aa:e9:fe:1b:98:1b:65:d6:c5:1f:78:02:45:
                    d6:a9:ca:f1:6e:ee:81:6b:5f:d8:4e:cf:53:2e:49:
                    60:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:60:19:29:98:AD:DA:8D:BD:97:F9:F4:82:97:0E:65:E8:B6:9F:3D
            X509v3 Authority Key Identifier:
                keyid:5B:D9:C3:7F:56:17:60:31:7D:A7:70:DA:6B:6E:5E:3C:C7:2A:9F:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DG9qDAdvPnBq2rMxT84ENPnuYNQG6yD9rKSXx3k6iB8j/0/5BD9C37F561760317DA770DA6B6E5E3CC72A9FE1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5BD9C37F561760317DA770DA6B6E5E3CC72A9FE1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DG9qDAdvPnBq2rMxT84ENPnuYNQG6yD9rKSXx3k6iB8j/0/3137302e3234362e3138382e302f32342d3234203d3e20323634303031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.246.188.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8d:64:5f:a4:34:58:91:d6:9b:78:e1:57:df:d0:d7:34:1c:9a:
         d4:6f:57:e7:6d:e7:6f:69:06:7a:57:11:5b:be:68:ea:80:21:
         d4:51:9f:9f:ed:ed:27:34:07:83:28:8d:67:d1:cf:27:1a:21:
         a8:b6:ea:82:12:f5:82:6c:36:65:14:6a:9c:e9:26:06:ae:3d:
         6b:ba:3c:82:2a:85:90:ad:a8:fc:4f:6b:4d:40:c9:55:41:0a:
         e0:6d:ce:53:16:10:fa:54:10:24:d4:07:9b:7b:32:53:37:bf:
         2d:44:5f:b7:52:3d:3c:69:48:f1:f0:e2:53:a3:73:65:57:61:
         96:9e:95:03:ed:47:89:ab:a8:d8:b8:1f:2b:27:5f:00:04:37:
         77:ca:08:37:6d:b4:07:01:a6:14:9d:34:54:6a:47:e6:61:00:
         f2:54:96:ac:37:1f:8a:d3:b1:ca:8f:a8:bb:8e:1d:2b:8c:9b:
         39:de:80:ea:7a:09:a9:50:2d:6c:bf:aa:72:98:4d:ea:4b:a9:
         e5:36:83:87:78:82:6f:25:99:51:e4:29:d6:ab:0f:b3:9c:4e:
         ca:43:33:a4:cb:f9:1c:f9:e4:f1:09:29:0c:30:a1:a5:34:1e:
         1a:40:63:12:49:04:a8:72:b6:82:99:45:1f:5e:43:df:a4:41:
         f4:4b:f4:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 05:44:22 2025 by rpki-client