Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/E6gBRuz7jBYdMmehGq5E6YpU82jo1TKjpV9dQunVkVwg/0/3137302e3234352e3232302e302f32332d3233203d3e20323636303238.roa
File:                     3137302e3234352e3232302e302f32332d3233203d3e20323636303238.roa (raw, json)
Hash identifier:          foL7S7CsZUndtiNriLm6qX3atb5xeiOmuno3kB08Qew=
Subject key identifier:   C7:B0:26:8D:30:FD:30:17:AB:65:13:AC:5C:05:B5:FF:1E:9D:5B:FA
Certificate issuer:       /CN=4C3661D86B4D2DE5DBED0E8EDA26A9616F1F9614
Certificate serial:       66121DA03D2C0BB577FA5879ECB20C7F567D57E7
Authority key identifier: 4C:36:61:D8:6B:4D:2D:E5:DB:ED:0E:8E:DA:26:A9:61:6F:1F:96:14
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4C3661D86B4D2DE5DBED0E8EDA26A9616F1F9614.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E6gBRuz7jBYdMmehGq5E6YpU82jo1TKjpV9dQunVkVwg/0/3137302e3234352e3232302e302f32332d3233203d3e20323636303238.roa
Signing time:             Wed 12 Apr 2023 23:23:23 +0000
ROA not before:           Wed 12 Apr 2023 23:18:23 +0000
ROA not after:            Wed 10 Apr 2024 23:23:23 +0000
asID:                     266028
IP address blocks:        170.245.220.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:12:1d:a0:3d:2c:0b:b5:77:fa:58:79:ec:b2:0c:7f:56:7d:57:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4C3661D86B4D2DE5DBED0E8EDA26A9616F1F9614
        Validity
            Not Before: Apr 12 23:18:23 2023 GMT
            Not After : Apr 10 23:23:23 2024 GMT
        Subject: CN=C7B0268D30FD3017AB6513AC5C05B5FF1E9D5BFA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:5b:70:22:56:76:a6:22:87:b3:3f:65:f5:bf:
                    83:63:a8:a6:5e:7d:14:4a:ce:73:6d:25:a1:87:ab:
                    cd:ad:cd:00:b3:f3:fe:ca:61:a1:b2:35:e5:3d:c4:
                    bf:03:21:c7:53:c2:9c:1b:8c:96:6c:60:71:fa:e9:
                    f4:8f:b8:a5:6b:78:ef:f6:3b:de:f7:1c:67:e1:9b:
                    f9:96:49:4e:87:1b:fe:c4:4e:b0:e5:c1:63:85:d4:
                    02:7c:c9:8e:a3:d4:29:27:ae:ef:98:18:f2:1d:69:
                    76:8a:be:44:9b:f3:02:ae:74:81:29:bf:6c:5b:59:
                    27:c7:18:bd:d3:d0:8e:60:01:ba:85:5e:81:bf:02:
                    c0:78:a5:07:0c:4a:e5:b5:73:36:b3:07:fe:18:ae:
                    ed:47:01:f8:40:6a:39:33:f8:d1:7b:0c:54:b2:f9:
                    4b:58:f0:ca:c6:dd:64:50:74:0e:db:e7:75:d5:bb:
                    aa:ca:67:3d:8d:22:30:27:ac:9b:47:cf:60:ef:5a:
                    ee:7f:5c:f2:d4:67:ad:cd:fa:b0:ee:9e:ce:66:6c:
                    c8:cf:df:f2:42:41:db:46:99:2e:a2:7b:4a:ed:8d:
                    ca:27:8c:7b:82:23:c0:5e:2e:33:17:4b:32:b4:f0:
                    b9:59:30:67:b3:1d:d8:2b:69:32:14:43:db:ce:e8:
                    19:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:B0:26:8D:30:FD:30:17:AB:65:13:AC:5C:05:B5:FF:1E:9D:5B:FA
            X509v3 Authority Key Identifier:
                keyid:4C:36:61:D8:6B:4D:2D:E5:DB:ED:0E:8E:DA:26:A9:61:6F:1F:96:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E6gBRuz7jBYdMmehGq5E6YpU82jo1TKjpV9dQunVkVwg/0/4C3661D86B4D2DE5DBED0E8EDA26A9616F1F9614.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4C3661D86B4D2DE5DBED0E8EDA26A9616F1F9614.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E6gBRuz7jBYdMmehGq5E6YpU82jo1TKjpV9dQunVkVwg/0/3137302e3234352e3232302e302f32332d3233203d3e20323636303238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.245.220.0/23

    Signature Algorithm: sha256WithRSAEncryption
         29:1b:6c:b5:be:18:c9:df:27:61:cc:38:08:7b:72:aa:42:3c:
         c8:25:e8:82:7b:09:e7:75:5b:a1:94:e0:d9:9f:eb:0f:3f:45:
         6b:b6:76:02:a8:92:5d:9a:7f:92:7d:da:69:6b:96:21:c9:24:
         64:ad:50:23:63:f4:fa:03:65:8f:ff:9c:df:91:0c:24:ae:15:
         88:1c:60:db:1a:b0:01:28:3d:cb:83:9a:8d:d7:78:ec:39:54:
         34:4a:2a:2d:a2:fe:24:d0:e1:ff:87:ea:84:99:5b:80:2f:1e:
         7e:d8:d5:f4:91:ee:55:8a:0e:c8:12:3a:4d:94:26:58:b4:2c:
         60:c8:90:f1:0e:e1:84:31:04:18:ad:13:f8:3e:bf:46:27:99:
         b0:a4:99:c3:f2:05:a3:7f:2f:7e:9e:60:97:ad:72:63:80:08:
         3b:69:56:b2:e1:8c:60:10:99:8d:42:27:a3:6a:2b:a4:64:24:
         bc:7a:9d:2d:46:c0:78:05:69:dc:ec:9d:7c:d8:6a:e5:6d:d7:
         e1:2c:ab:58:28:ad:11:20:85:47:53:5c:00:b2:d5:52:c3:5b:
         2f:58:1e:68:d1:59:64:49:0f:a1:11:e9:0e:58:6d:90:ae:7e:
         41:f9:ba:c8:af:db:2b:2f:9b:98:cb:1b:b2:3a:c7:93:87:f5:
         59:27:2f:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:47:09 2025 by rpki-client