Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DsNym3AhwDJKaistw2zB3shGSWMSA4Pfm6j94ofPU4tB/0/3137302e3234342e32362e302f32332d3233203d3e20323636343839.roa
File:                     3137302e3234342e32362e302f32332d3233203d3e20323636343839.roa (raw, json)
Hash identifier:          HryCv4LjreK5gHERXkjKqMOCJR7iHZXH73jcnaqvBt0=
Subject key identifier:   34:C3:E8:A3:80:A5:5A:44:A8:FA:4F:88:BE:DE:B8:57:13:A1:F2:4B
Certificate issuer:       /CN=220AE1280604BECE0967859CB7EF5F59A2813C95
Certificate serial:       6007E0E436B95B87B4F890F80E917D10E7CDC5F3
Authority key identifier: 22:0A:E1:28:06:04:BE:CE:09:67:85:9C:B7:EF:5F:59:A2:81:3C:95
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/220AE1280604BECE0967859CB7EF5F59A2813C95.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DsNym3AhwDJKaistw2zB3shGSWMSA4Pfm6j94ofPU4tB/0/3137302e3234342e32362e302f32332d3233203d3e20323636343839.roa
Signing time:             Tue 16 May 2023 12:41:33 +0000
ROA not before:           Tue 16 May 2023 12:36:33 +0000
ROA not after:            Tue 14 May 2024 12:41:33 +0000
asID:                     266489
IP address blocks:        170.244.26.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:07:e0:e4:36:b9:5b:87:b4:f8:90:f8:0e:91:7d:10:e7:cd:c5:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=220AE1280604BECE0967859CB7EF5F59A2813C95
        Validity
            Not Before: May 16 12:36:33 2023 GMT
            Not After : May 14 12:41:33 2024 GMT
        Subject: CN=34C3E8A380A55A44A8FA4F88BEDEB85713A1F24B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:68:3f:3b:4a:bd:ab:ef:d8:69:6a:db:2c:87:
                    93:70:67:6e:fa:c0:c5:75:d1:8a:09:1e:e1:ea:23:
                    92:5f:f8:2a:9e:ef:96:a0:95:ca:6c:4e:45:a6:84:
                    d9:d9:95:ef:4b:b1:a0:52:da:05:c2:f8:ee:67:ad:
                    c8:85:de:b8:26:ad:b3:ad:10:3c:39:48:e5:85:80:
                    a8:5a:b8:8f:10:ee:b3:8d:b6:56:d7:ab:cb:69:a8:
                    e4:dc:a3:55:a1:6f:cf:3c:85:ac:90:b2:2b:73:b7:
                    b0:02:42:99:54:41:28:0b:33:e1:97:6d:e1:ff:8b:
                    03:d1:b4:23:4e:e4:e4:59:e3:fe:51:04:9d:4d:46:
                    0b:06:25:65:3a:b2:f4:fb:80:fe:6f:45:d9:e2:ba:
                    a3:b8:0e:41:01:4e:59:56:11:41:de:6f:71:35:92:
                    03:79:1d:56:ba:ac:99:55:d4:ff:eb:ce:13:78:8c:
                    53:11:89:6c:e7:08:87:e3:12:1c:d1:06:d8:b9:c7:
                    f6:78:2f:f5:e1:13:68:92:f3:81:3d:9d:d2:9c:30:
                    00:9d:97:33:c0:06:66:b7:99:a1:6e:9d:8e:ac:8e:
                    93:ab:90:00:f1:73:91:e4:f2:fd:bb:9e:d3:92:5a:
                    40:ed:dd:9a:82:02:a4:8b:6d:65:69:06:9e:05:fc:
                    1b:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:C3:E8:A3:80:A5:5A:44:A8:FA:4F:88:BE:DE:B8:57:13:A1:F2:4B
            X509v3 Authority Key Identifier:
                keyid:22:0A:E1:28:06:04:BE:CE:09:67:85:9C:B7:EF:5F:59:A2:81:3C:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DsNym3AhwDJKaistw2zB3shGSWMSA4Pfm6j94ofPU4tB/0/220AE1280604BECE0967859CB7EF5F59A2813C95.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/220AE1280604BECE0967859CB7EF5F59A2813C95.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DsNym3AhwDJKaistw2zB3shGSWMSA4Pfm6j94ofPU4tB/0/3137302e3234342e32362e302f32332d3233203d3e20323636343839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.244.26.0/23

    Signature Algorithm: sha256WithRSAEncryption
         ee:a3:39:06:04:10:b7:b9:78:5b:2f:28:83:36:12:39:be:8c:
         33:cb:4f:70:bc:4f:db:ac:3e:e2:2a:97:c5:7e:5e:23:dc:d8:
         39:53:9a:64:54:f2:75:bc:d8:d6:fe:0e:dd:ac:4a:20:f9:20:
         4a:d1:d8:e3:f5:9f:5c:9d:63:e7:77:57:16:b5:7c:c0:7c:39:
         45:46:64:0b:89:7a:84:e5:52:9a:f2:6d:f3:b8:70:ec:10:79:
         4d:8d:dd:b0:ac:9e:1c:b1:84:00:8b:66:81:b2:1d:37:ed:14:
         fa:c9:74:73:b1:41:aa:1a:7b:95:c5:fe:69:8d:17:37:01:f4:
         d6:01:9a:28:07:87:31:9e:f4:1f:83:da:a8:6f:0d:ad:7a:c5:
         37:22:4c:ab:91:22:87:69:40:8c:5f:42:ac:f5:3b:b4:b9:c1:
         cf:cb:45:b2:c0:14:cc:f0:19:03:3a:e5:b0:99:b0:d9:78:bc:
         71:1b:1d:79:a6:46:be:97:fb:aa:c0:eb:28:06:8a:b1:d3:58:
         c9:97:e2:f2:b4:5d:b0:f3:af:36:dd:2f:4e:fd:af:ea:3c:f7:
         f4:14:60:51:1f:26:17:3a:8b:65:62:53:7c:af:35:67:4f:e8:
         bd:30:05:d6:18:37:ef:3a:c9:b3:60:55:6a:fa:d6:c3:c4:f8:
         b1:7b:6a:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 05:14:44 2025 by rpki-client