Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Dg4BB9CjZgYDyRzZFVsXjYxc8CinzUA6QjgtPy4L7frA/1/3230312e372e3136362e302f32342d3234203d3e20323633323930.roa
File:                     3230312e372e3136362e302f32342d3234203d3e20323633323930.roa (raw, json)
Hash identifier:          ZQmLdC9qOloPuONKUU0eM/b7H2o3K4cn7drbzQ+Rhd4=
Subject key identifier:   71:6D:ED:ED:D0:09:81:03:EA:C3:B4:94:F6:43:06:7A:99:D5:9F:0C
Certificate issuer:       /CN=A27C713EEC3E4E5F319E67684ECFC96BEB54F973
Certificate serial:       4BDD9209C03CA70F4C4A6685EDAF9D4446D9A538
Authority key identifier: A2:7C:71:3E:EC:3E:4E:5F:31:9E:67:68:4E:CF:C9:6B:EB:54:F9:73
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A27C713EEC3E4E5F319E67684ECFC96BEB54F973.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Dg4BB9CjZgYDyRzZFVsXjYxc8CinzUA6QjgtPy4L7frA/1/3230312e372e3136362e302f32342d3234203d3e20323633323930.roa
Signing time:             Mon 02 Jun 2025 20:53:12 +0000
ROA not before:           Mon 02 Jun 2025 20:48:12 +0000
ROA not after:            Mon 01 Jun 2026 20:53:12 +0000
asID:                     263290
IP address blocks:        201.7.166.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:dd:92:09:c0:3c:a7:0f:4c:4a:66:85:ed:af:9d:44:46:d9:a5:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A27C713EEC3E4E5F319E67684ECFC96BEB54F973
        Validity
            Not Before: Jun  2 20:48:12 2025 GMT
            Not After : Jun  1 20:53:12 2026 GMT
        Subject: CN=716DEDEDD0098103EAC3B494F643067A99D59F0C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:17:b7:4b:51:14:5f:71:1a:d8:45:f2:3f:c6:
                    07:d9:53:e7:31:8d:76:0c:3e:6f:17:2e:8d:57:f5:
                    1f:c4:e5:90:ef:72:c3:1f:1b:e1:27:74:df:de:f5:
                    85:69:eb:46:5d:be:2b:d7:e8:71:b9:3a:50:b0:6e:
                    f9:9d:1e:7b:ed:e0:36:c1:6a:c6:9a:22:ab:76:4b:
                    23:80:1d:58:60:62:57:09:59:c9:24:db:ec:29:d1:
                    8c:9c:d9:cd:7d:65:a7:95:fb:25:3e:51:01:da:4f:
                    9c:ba:34:70:57:0f:c1:2c:91:e3:99:dd:5c:3e:a4:
                    f6:a7:33:ea:e9:f4:6d:80:e5:ae:83:51:d9:c7:dc:
                    78:e5:92:6d:63:8f:e8:11:d9:d9:7d:a3:ee:bc:1f:
                    f2:0e:22:e2:a8:54:66:bb:eb:2c:9b:96:01:70:5f:
                    4e:3e:07:61:ad:d7:6f:45:d5:0d:bc:44:39:76:23:
                    f3:71:e6:d3:3c:a6:98:99:60:e8:9d:78:24:ab:ca:
                    8c:f5:db:db:76:0d:16:49:ae:d8:fc:77:ae:05:4c:
                    89:1f:07:48:72:54:e6:bb:29:95:0d:35:02:28:8c:
                    fb:07:4c:bd:8a:b1:06:71:e6:24:6b:6e:85:6e:e4:
                    13:60:e6:f8:72:dc:54:97:c8:45:40:26:f0:5f:fe:
                    bc:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:6D:ED:ED:D0:09:81:03:EA:C3:B4:94:F6:43:06:7A:99:D5:9F:0C
            X509v3 Authority Key Identifier:
                keyid:A2:7C:71:3E:EC:3E:4E:5F:31:9E:67:68:4E:CF:C9:6B:EB:54:F9:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Dg4BB9CjZgYDyRzZFVsXjYxc8CinzUA6QjgtPy4L7frA/1/A27C713EEC3E4E5F319E67684ECFC96BEB54F973.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A27C713EEC3E4E5F319E67684ECFC96BEB54F973.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Dg4BB9CjZgYDyRzZFVsXjYxc8CinzUA6QjgtPy4L7frA/1/3230312e372e3136362e302f32342d3234203d3e20323633323930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.7.166.0/24

    Signature Algorithm: sha256WithRSAEncryption
         86:ed:79:9a:26:32:64:7d:a3:46:8b:a3:bb:61:c8:a6:e8:42:
         02:8b:87:f4:ea:e0:4e:b1:ee:8e:7b:7e:26:da:2a:b8:5e:98:
         36:33:31:6b:e9:fd:ad:74:e2:d5:18:b7:26:96:62:e4:20:35:
         8e:6e:2a:16:08:18:56:fd:e1:b2:b9:31:b8:2b:fe:6d:3f:2d:
         1b:5a:8e:ea:64:a5:7b:27:79:e3:07:94:12:52:8f:5c:8a:bc:
         a7:dc:35:b7:bd:25:da:a5:f5:6d:52:65:90:dd:85:10:0f:cb:
         15:06:fd:71:27:c2:e8:02:a0:ec:70:7c:0d:06:e9:89:cf:fe:
         18:29:43:97:83:b4:94:ca:ca:26:bf:62:3f:8d:6a:b0:92:fd:
         02:a3:e5:cb:44:c4:6a:d6:c8:4b:91:b2:52:e3:c2:c0:f6:cc:
         b7:a3:94:ff:c8:12:8a:f2:b2:28:f7:71:c2:2f:b7:a4:3c:4b:
         34:d0:ee:ae:b5:ec:63:f4:9f:2f:b4:cd:ca:05:f8:94:a1:90:
         bf:07:f4:37:d4:3f:11:e9:42:69:86:ca:36:76:46:87:79:ea:
         69:9b:23:b1:d3:80:5a:21:8a:42:eb:3f:e6:72:ae:ff:77:3c:
         02:ad:4a:9f:56:c4:0b:c3:f4:8d:62:20:27:a6:5c:bc:42:32:
         eb:b1:fb:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 01:24:57 2025 by rpki-client