Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DhSptJHFELEV3Mm2sPYjjT3iTWD7idfYYU1AXKCQ6Zkg/0/3137302e37392e36302e302f32322d3232203d3e20323636323837.roa
File:                     3137302e37392e36302e302f32322d3232203d3e20323636323837.roa (raw, json)
Hash identifier:          M6V+6/FiQNBVf24EIIiv6MoBlsTgLpmC+04hTkzc1v4=
Subject key identifier:   5F:14:72:2C:A6:46:D0:F5:D5:DC:1E:EE:C5:D7:D9:A5:5B:0C:D6:52
Certificate issuer:       /CN=9A7757F2422FC09935E55C6FC83910131BF7B3D5
Certificate serial:       6A6EB5CDD9A73F1CF0FE2B78556AD4A347EC1441
Authority key identifier: 9A:77:57:F2:42:2F:C0:99:35:E5:5C:6F:C8:39:10:13:1B:F7:B3:D5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9A7757F2422FC09935E55C6FC83910131BF7B3D5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DhSptJHFELEV3Mm2sPYjjT3iTWD7idfYYU1AXKCQ6Zkg/0/3137302e37392e36302e302f32322d3232203d3e20323636323837.roa
Signing time:             Sun 14 May 2023 23:31:37 +0000
ROA not before:           Sun 14 May 2023 23:26:37 +0000
ROA not after:            Sun 12 May 2024 23:31:37 +0000
asID:                     266287
IP address blocks:        170.79.60.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:6e:b5:cd:d9:a7:3f:1c:f0:fe:2b:78:55:6a:d4:a3:47:ec:14:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9A7757F2422FC09935E55C6FC83910131BF7B3D5
        Validity
            Not Before: May 14 23:26:37 2023 GMT
            Not After : May 12 23:31:37 2024 GMT
        Subject: CN=5F14722CA646D0F5D5DC1EEEC5D7D9A55B0CD652
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:dd:36:7d:1f:5d:1d:e2:1b:11:82:7d:63:0b:
                    2d:c7:95:62:d3:bb:c0:89:b7:5e:71:17:40:b3:45:
                    9e:dd:67:63:4f:64:4c:81:60:78:8f:5f:17:86:a8:
                    50:89:bc:d9:da:50:8f:13:d0:ca:36:99:ad:66:23:
                    ef:78:5a:1a:f0:ac:79:25:ef:87:93:de:12:9e:f2:
                    ea:5b:b1:63:d4:9b:74:3b:f8:f8:50:13:5a:e1:67:
                    0a:fd:c3:50:10:db:78:33:25:fc:3a:b6:87:08:e9:
                    27:82:bd:86:62:63:40:6a:1c:5a:be:a4:45:1c:ae:
                    58:94:4f:5d:6d:f7:23:14:59:ae:43:f3:f7:cb:3f:
                    61:51:06:0e:c0:24:ca:e4:d3:14:c8:a0:29:12:ab:
                    47:6a:50:4e:7c:51:b5:e8:d8:a2:ba:29:46:77:9b:
                    f2:33:54:e0:a6:31:99:83:54:ad:90:2e:b4:d7:71:
                    7d:d5:dd:8f:03:00:62:ba:f7:7e:03:e7:ad:e4:22:
                    ed:6f:b9:e7:66:e0:fc:d0:f6:7f:74:93:9f:bb:cf:
                    f1:60:92:1c:7c:03:7f:83:85:30:eb:16:e9:5e:9d:
                    e3:72:b6:04:34:7d:39:8d:42:6a:2f:2c:47:74:43:
                    26:e4:87:31:f2:c8:7a:71:b5:52:90:cd:ab:3a:8c:
                    bc:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:14:72:2C:A6:46:D0:F5:D5:DC:1E:EE:C5:D7:D9:A5:5B:0C:D6:52
            X509v3 Authority Key Identifier:
                keyid:9A:77:57:F2:42:2F:C0:99:35:E5:5C:6F:C8:39:10:13:1B:F7:B3:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DhSptJHFELEV3Mm2sPYjjT3iTWD7idfYYU1AXKCQ6Zkg/0/9A7757F2422FC09935E55C6FC83910131BF7B3D5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9A7757F2422FC09935E55C6FC83910131BF7B3D5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DhSptJHFELEV3Mm2sPYjjT3iTWD7idfYYU1AXKCQ6Zkg/0/3137302e37392e36302e302f32322d3232203d3e20323636323837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.79.60.0/22

    Signature Algorithm: sha256WithRSAEncryption
         30:30:77:0a:47:79:53:50:22:9f:dc:28:c9:1e:d4:f9:c8:f1:
         d4:87:85:d8:ce:4a:b9:cc:5a:25:19:5f:f5:be:3d:51:3e:af:
         5a:2f:5c:05:46:3b:49:1e:12:d9:10:d8:e7:d0:17:99:a3:9d:
         5d:83:2e:b3:2f:fc:51:90:55:80:52:12:07:92:ab:18:e5:72:
         bb:f3:fb:a4:50:10:28:4e:17:db:7d:f1:c0:c8:7e:4c:d2:90:
         d6:59:ee:f2:83:68:c0:0b:b8:6a:03:4b:00:af:92:a9:99:c4:
         67:9f:f6:0f:e1:52:6c:28:82:05:36:3f:75:c9:1d:f4:44:48:
         c8:ac:8e:07:ea:14:35:88:24:c1:24:48:df:5c:8e:1e:f3:82:
         09:d0:7a:a7:7c:f6:f8:8c:e9:20:5e:1a:a9:10:cc:79:9f:48:
         50:a6:bf:0a:6b:cb:f9:bb:47:f8:31:84:e2:03:56:65:9b:0f:
         d8:b5:9c:81:51:8c:e5:23:3b:c3:f5:5a:c0:27:32:f8:a8:6a:
         94:f5:06:92:64:1c:4b:8b:4c:e6:d0:d0:20:84:b2:d6:87:0e:
         fe:ea:54:67:1c:b1:44:83:a7:be:9a:2a:ec:d2:0e:49:8f:76:
         b2:b1:56:bd:6b:85:84:75:e8:8a:14:a4:90:7c:af:ec:91:f8:
         2d:b8:91:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:47:29 2025 by rpki-client