Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DG9qDAdvPnBq2rMxT84ENPnuYNQG6yD9rKSXx3k6iB8j/0/3137302e3234362e3139302e302f32342d3234203d3e20323634303031.roa
File:                     3137302e3234362e3139302e302f32342d3234203d3e20323634303031.roa (raw, json)
Hash identifier:          dy12hmuTnwCS5H02hpZshXf5h6cysAq5aN84YN8QvvE=
Subject key identifier:   C8:36:93:7B:6B:8D:B3:AA:70:98:01:33:5C:93:DA:A1:67:E8:00:1A
Certificate issuer:       /CN=5BD9C37F561760317DA770DA6B6E5E3CC72A9FE1
Certificate serial:       52C1CBE70FD41D26F1F41EC62174F0D9401C7376
Authority key identifier: 5B:D9:C3:7F:56:17:60:31:7D:A7:70:DA:6B:6E:5E:3C:C7:2A:9F:E1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5BD9C37F561760317DA770DA6B6E5E3CC72A9FE1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DG9qDAdvPnBq2rMxT84ENPnuYNQG6yD9rKSXx3k6iB8j/0/3137302e3234362e3139302e302f32342d3234203d3e20323634303031.roa
Signing time:             Thu 18 May 2023 17:11:48 +0000
ROA not before:           Thu 18 May 2023 17:06:48 +0000
ROA not after:            Thu 16 May 2024 17:11:48 +0000
asID:                     264001
IP address blocks:        170.246.190.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:c1:cb:e7:0f:d4:1d:26:f1:f4:1e:c6:21:74:f0:d9:40:1c:73:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5BD9C37F561760317DA770DA6B6E5E3CC72A9FE1
        Validity
            Not Before: May 18 17:06:48 2023 GMT
            Not After : May 16 17:11:48 2024 GMT
        Subject: CN=C836937B6B8DB3AA709801335C93DAA167E8001A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:7c:67:f4:66:23:a5:5e:f5:aa:96:e8:9a:47:
                    4c:d9:97:64:f2:e2:a3:01:a7:40:66:a3:7b:c3:a1:
                    f8:4e:0d:14:05:f8:3f:da:96:43:e1:b0:29:ed:ce:
                    20:2d:9d:be:3c:e3:36:57:7a:80:23:b8:e0:57:54:
                    63:65:ef:1d:e4:2c:88:a1:84:87:66:10:cf:29:e6:
                    38:a4:a2:33:1a:84:db:17:3a:cd:38:84:e1:6f:ee:
                    c4:72:46:49:38:74:fa:e9:75:b1:ad:40:8c:2c:90:
                    26:ab:6d:ba:26:a8:c4:bf:67:9b:1c:cf:00:72:7b:
                    14:61:4e:ff:0a:30:9b:9f:e2:92:0b:1b:41:65:da:
                    c0:10:e5:e2:69:61:9c:76:1b:f5:31:40:ed:92:35:
                    f6:c5:87:ae:a5:16:57:49:b9:99:e8:01:37:3a:e7:
                    f9:21:91:cb:a9:50:0b:7f:47:7b:37:c2:08:7b:d0:
                    9e:25:fb:01:e9:b2:58:51:11:10:5a:11:84:0c:81:
                    2b:0b:33:e1:26:cb:6f:46:1d:c6:5a:7e:53:7d:81:
                    d0:c5:cb:68:cc:7f:b7:8a:65:78:d6:50:ab:8a:42:
                    1a:02:ca:e5:cd:8a:f5:fa:0e:df:28:4a:3d:82:49:
                    fe:f6:0b:b8:80:1f:2c:20:1b:43:58:65:9b:ca:16:
                    28:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:36:93:7B:6B:8D:B3:AA:70:98:01:33:5C:93:DA:A1:67:E8:00:1A
            X509v3 Authority Key Identifier:
                keyid:5B:D9:C3:7F:56:17:60:31:7D:A7:70:DA:6B:6E:5E:3C:C7:2A:9F:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DG9qDAdvPnBq2rMxT84ENPnuYNQG6yD9rKSXx3k6iB8j/0/5BD9C37F561760317DA770DA6B6E5E3CC72A9FE1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5BD9C37F561760317DA770DA6B6E5E3CC72A9FE1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DG9qDAdvPnBq2rMxT84ENPnuYNQG6yD9rKSXx3k6iB8j/0/3137302e3234362e3139302e302f32342d3234203d3e20323634303031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.246.190.0/24

    Signature Algorithm: sha256WithRSAEncryption
         45:10:7f:cd:35:4c:3e:75:a7:17:a7:7f:f2:65:e1:ca:bc:6e:
         66:24:ce:b6:0c:63:7a:c0:30:98:8e:b5:52:2d:d8:b1:75:69:
         5a:56:a4:26:ca:a2:67:ef:dc:d5:1b:0e:12:14:fa:03:39:72:
         b5:fd:26:b4:27:6b:b5:dc:dc:7a:2f:d5:af:f1:6d:a0:f6:9e:
         d9:c6:43:c2:66:da:16:61:94:95:2a:e4:7b:cc:0f:91:98:ab:
         14:a1:7e:36:8f:5e:4c:d1:78:6b:6b:c1:76:6e:fb:ae:40:a1:
         01:01:53:8e:7e:3f:df:4f:24:2b:4c:21:c7:7d:39:ec:ac:48:
         9b:20:5a:56:f5:87:26:91:d7:a0:48:c8:2b:a9:2f:d8:4a:07:
         28:0d:f5:56:68:ca:4d:aa:11:a8:42:26:8a:40:72:d7:a9:b5:
         e7:ce:5d:1f:d7:54:56:15:c0:86:2d:77:84:58:b1:78:ab:67:
         88:2b:ca:8b:53:b0:94:12:4d:61:0b:ca:26:db:3a:4d:2f:5f:
         cc:b7:9e:85:55:78:b3:15:b6:1e:2e:cb:d2:2a:14:c6:9f:18:
         07:22:75:85:d2:a6:16:c7:87:04:28:57:d0:81:8b:a2:28:10:
         11:22:3e:90:ac:fa:ea:a6:47:e3:48:3a:26:17:75:80:85:2e:
         1c:de:ec:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 05:50:47 2025 by rpki-client