Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DsENnrTFgdhvbZuB6Vq6SMYijs1uZbaDuEj7B925CvMm/0/3137302e38342e3134332e302f32342d3234203d3e20323635303137.roa
File:                     3137302e38342e3134332e302f32342d3234203d3e20323635303137.roa (raw, json)
Hash identifier:          g6MefQm4aXIwQFDhUQoxrRBI4fl8UlfOszPgEtIpm1w=
Subject key identifier:   99:6A:AB:0B:1F:44:59:57:AE:7F:91:D9:7D:90:F1:C7:B9:29:3F:0B
Certificate issuer:       /CN=DC222A62D59E22735410EC6F4D5BD74D575FAD95
Certificate serial:       0E1C004B76E7C3BCBBE3DF84DA3C676EB7C51E17
Authority key identifier: DC:22:2A:62:D5:9E:22:73:54:10:EC:6F:4D:5B:D7:4D:57:5F:AD:95
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DC222A62D59E22735410EC6F4D5BD74D575FAD95.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DsENnrTFgdhvbZuB6Vq6SMYijs1uZbaDuEj7B925CvMm/0/3137302e38342e3134332e302f32342d3234203d3e20323635303137.roa
Signing time:             Tue 12 Nov 2024 14:14:41 +0000
ROA not before:           Tue 12 Nov 2024 14:09:41 +0000
ROA not after:            Tue 11 Nov 2025 14:14:41 +0000
asID:                     265017
IP address blocks:        170.84.143.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:1c:00:4b:76:e7:c3:bc:bb:e3:df:84:da:3c:67:6e:b7:c5:1e:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DC222A62D59E22735410EC6F4D5BD74D575FAD95
        Validity
            Not Before: Nov 12 14:09:41 2024 GMT
            Not After : Nov 11 14:14:41 2025 GMT
        Subject: CN=996AAB0B1F445957AE7F91D97D90F1C7B9293F0B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:ee:56:a0:11:e0:c1:c2:47:d3:3a:9f:7b:fd:
                    36:ab:de:b6:46:00:c3:68:0f:f0:5b:19:dd:01:ee:
                    21:b0:2f:93:73:d0:9e:49:a2:02:55:d4:09:95:f4:
                    8d:0e:0d:04:aa:77:f9:f6:8d:37:af:83:63:d2:a2:
                    4e:be:99:51:57:be:db:32:f5:58:c9:08:67:5b:5d:
                    81:1a:20:ea:0a:fc:1d:85:af:c1:df:9d:37:b7:78:
                    6f:0e:eb:15:3e:27:20:c3:c1:18:41:ac:72:60:3e:
                    f5:d5:a2:aa:60:e2:f6:8f:03:7c:2b:a1:ce:02:e0:
                    4f:ba:01:c6:67:68:6d:b0:4e:78:75:81:6f:d9:96:
                    d0:cd:5b:7c:cb:0d:5f:08:eb:8e:92:7d:34:ee:6b:
                    b8:e9:d4:d7:bf:7a:cd:4b:bc:3b:bc:08:e5:0f:1c:
                    d4:07:d4:6d:05:4f:3d:24:30:e9:58:2c:31:91:47:
                    37:30:63:eb:17:f4:7f:e5:e4:43:ca:84:61:45:b4:
                    d8:85:6f:f0:d5:3e:e4:a4:e9:3c:f1:5a:28:f7:a3:
                    1c:a2:c8:ec:f1:44:3e:db:e4:0d:ed:6a:88:28:3f:
                    f1:59:7e:e0:e0:b8:d2:db:5c:26:7f:5d:8c:bd:e5:
                    55:d5:19:1e:8b:b7:60:a8:99:6c:77:45:d4:5d:1f:
                    1d:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:6A:AB:0B:1F:44:59:57:AE:7F:91:D9:7D:90:F1:C7:B9:29:3F:0B
            X509v3 Authority Key Identifier:
                keyid:DC:22:2A:62:D5:9E:22:73:54:10:EC:6F:4D:5B:D7:4D:57:5F:AD:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DsENnrTFgdhvbZuB6Vq6SMYijs1uZbaDuEj7B925CvMm/0/DC222A62D59E22735410EC6F4D5BD74D575FAD95.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DC222A62D59E22735410EC6F4D5BD74D575FAD95.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DsENnrTFgdhvbZuB6Vq6SMYijs1uZbaDuEj7B925CvMm/0/3137302e38342e3134332e302f32342d3234203d3e20323635303137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.84.143.0/24

    Signature Algorithm: sha256WithRSAEncryption
         50:4b:4a:99:8d:6c:e2:36:9c:50:23:8a:3f:90:da:90:f7:86:
         2a:27:5e:3d:17:a4:06:54:94:43:33:1c:7c:23:ed:0e:89:3b:
         b7:e0:7e:be:bd:39:20:8f:7e:77:6c:da:4b:6a:58:e8:f0:c0:
         f9:99:a1:cb:d6:2c:1d:9e:2d:b9:ee:0a:c7:f3:9f:51:fa:a0:
         2d:51:13:9f:1d:15:a2:b7:43:db:6e:6b:63:7f:bf:38:db:22:
         ed:f1:71:97:a3:5a:be:ba:d4:e9:ce:9f:00:66:68:67:ba:46:
         62:ed:8e:45:de:68:24:e6:b0:51:18:e3:80:38:ce:02:e1:ea:
         b9:1a:70:42:62:93:f3:4c:54:10:ad:0c:00:6a:4e:ba:c0:12:
         7c:24:26:05:03:54:33:04:b6:2b:5a:44:bb:20:c6:e4:6c:4d:
         c6:3d:6e:b4:4c:e5:35:ca:80:84:0b:2f:de:ba:34:72:87:53:
         b4:1a:fc:b9:d7:40:83:33:8b:ea:f3:d8:8b:8b:29:ee:2c:cc:
         40:61:bb:5a:b7:c3:51:b6:bd:de:f6:60:5d:dc:9a:d8:a8:14:
         84:41:7d:d9:e3:9c:c0:ee:e9:01:ea:16:8e:b7:1a:a3:b4:7b:
         1b:77:f3:7e:8b:bb:f0:83:75:44:16:81:b8:ab:21:c4:50:2b:
         36:db:e7:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:58:04 2025 by rpki-client