Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Dg4BB9CjZgYDyRzZFVsXjYxc8CinzUA6QjgtPy4L7frA/1/3230312e372e3136372e302f32342d3234203d3e20323633323930.roa
File:                     3230312e372e3136372e302f32342d3234203d3e20323633323930.roa (raw, json)
Hash identifier:          YNX3vA/npm5GJiKUdwharYp275WpylXhRJ6UF4O1Fl8=
Subject key identifier:   2D:C3:AE:F1:69:11:3F:A5:6C:11:44:0E:F4:C8:89:60:16:C3:19:02
Certificate issuer:       /CN=A27C713EEC3E4E5F319E67684ECFC96BEB54F973
Certificate serial:       48737843FFC104C3C17703281AE06FE7629A5DD2
Authority key identifier: A2:7C:71:3E:EC:3E:4E:5F:31:9E:67:68:4E:CF:C9:6B:EB:54:F9:73
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A27C713EEC3E4E5F319E67684ECFC96BEB54F973.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Dg4BB9CjZgYDyRzZFVsXjYxc8CinzUA6QjgtPy4L7frA/1/3230312e372e3136372e302f32342d3234203d3e20323633323930.roa
Signing time:             Mon 02 Jun 2025 20:53:19 +0000
ROA not before:           Mon 02 Jun 2025 20:48:19 +0000
ROA not after:            Mon 01 Jun 2026 20:53:19 +0000
asID:                     263290
IP address blocks:        201.7.167.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:73:78:43:ff:c1:04:c3:c1:77:03:28:1a:e0:6f:e7:62:9a:5d:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A27C713EEC3E4E5F319E67684ECFC96BEB54F973
        Validity
            Not Before: Jun  2 20:48:19 2025 GMT
            Not After : Jun  1 20:53:19 2026 GMT
        Subject: CN=2DC3AEF169113FA56C11440EF4C8896016C31902
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:f5:c3:6e:3c:f8:1a:6e:be:5d:97:b6:67:a5:
                    77:a0:01:af:7c:a7:62:05:54:01:1f:9a:b1:0b:97:
                    32:3f:0a:b3:0f:07:cd:b3:8c:68:82:b7:d4:b9:8a:
                    67:f0:40:30:61:57:8a:1e:99:63:96:b3:0d:41:fc:
                    fa:2f:2d:a3:2e:a4:56:92:1b:db:d2:a0:b4:be:cb:
                    01:83:97:db:27:93:6b:9e:ba:25:06:49:71:8b:61:
                    aa:c7:c9:26:5f:6e:68:14:b5:5a:b4:b5:bd:91:fa:
                    3d:c3:b0:d6:c9:4b:7f:42:5f:6c:5d:4e:3c:19:bc:
                    03:f7:cd:3b:0a:e5:1b:9f:8c:99:91:55:3a:3c:f7:
                    b0:2b:93:90:4b:d0:92:ec:eb:c5:ff:c4:22:36:08:
                    23:39:01:27:11:40:d7:14:be:31:79:39:bb:fe:58:
                    72:ef:50:4d:91:dc:0b:66:53:fd:81:4a:ef:1d:19:
                    a5:bc:35:2e:d0:d9:70:e3:36:9a:3b:c4:14:a9:5c:
                    27:e4:e5:18:b5:c8:9e:6c:c0:89:b9:36:10:63:e4:
                    b3:a1:fc:fc:4a:21:43:93:fc:61:8c:95:b0:94:f9:
                    d4:3f:1a:fb:37:91:cd:e9:f7:05:04:b3:9c:b8:7c:
                    27:6b:4a:17:41:78:25:e3:f3:43:0e:fe:27:f9:be:
                    53:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:C3:AE:F1:69:11:3F:A5:6C:11:44:0E:F4:C8:89:60:16:C3:19:02
            X509v3 Authority Key Identifier:
                keyid:A2:7C:71:3E:EC:3E:4E:5F:31:9E:67:68:4E:CF:C9:6B:EB:54:F9:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Dg4BB9CjZgYDyRzZFVsXjYxc8CinzUA6QjgtPy4L7frA/1/A27C713EEC3E4E5F319E67684ECFC96BEB54F973.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A27C713EEC3E4E5F319E67684ECFC96BEB54F973.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Dg4BB9CjZgYDyRzZFVsXjYxc8CinzUA6QjgtPy4L7frA/1/3230312e372e3136372e302f32342d3234203d3e20323633323930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.7.167.0/24

    Signature Algorithm: sha256WithRSAEncryption
         50:7f:29:4e:41:c7:74:35:b5:9b:2c:00:39:59:bb:54:11:c0:
         91:41:32:fc:15:55:e9:43:36:01:96:36:63:e1:94:8b:c6:be:
         bf:1c:26:75:7b:df:8e:02:b3:5b:7d:86:5e:bf:e7:b3:8c:85:
         fd:82:4c:0f:1b:14:27:14:91:ac:ef:f7:71:f7:50:c1:8f:5f:
         52:9c:37:28:c6:fd:d0:48:e3:9f:54:ec:e0:68:39:d6:b3:be:
         b4:bd:03:a7:ec:e3:6f:91:8c:ea:e4:7d:16:2f:16:ba:19:46:
         b7:21:76:17:b9:07:19:d0:fe:6d:01:31:61:01:32:7e:89:19:
         5d:6a:38:6a:3a:f7:96:54:74:93:f1:87:65:90:d9:9c:29:28:
         2f:b5:18:ef:0c:79:fc:09:7c:e8:fd:2f:c3:84:2c:2a:8d:56:
         96:88:d5:b4:4d:15:41:40:2e:b8:bf:1e:8d:28:05:77:1b:08:
         35:77:cc:39:15:70:f4:fd:98:26:82:58:52:73:dc:24:16:0d:
         a9:59:6c:9e:9d:47:89:b1:eb:e5:9a:83:ef:bb:10:40:bd:ec:
         99:72:d8:44:48:34:eb:2d:a3:e9:3d:de:63:7a:3c:bf:ba:fc:
         0e:e2:77:24:b1:76:70:fb:62:a6:02:da:f2:0a:d3:3c:58:72:
         3b:a0:75:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 05:44:41 2025 by rpki-client