Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EFKEnx9WWdpy6bfnULB87wKJLDYsxmQK5JRhfahZqNWM/2/3137302e3234342e3230322e302f32342d3234203d3e20323636303133.roa
File:                     3137302e3234342e3230322e302f32342d3234203d3e20323636303133.roa (raw, json)
Hash identifier:          25Ua6k5qcjJiqMqMDAPKs10dfY1BrofsVc5H69FMpTw=
Subject key identifier:   19:DC:AF:4F:09:E1:74:9A:00:90:8B:80:79:DF:B2:1E:D8:F4:C1:65
Certificate issuer:       /CN=0CF49321F81789A195BED10A6CB07A13AF657F42
Certificate serial:       1430E851073DE5DBF047C8297188542903F35B5A
Authority key identifier: 0C:F4:93:21:F8:17:89:A1:95:BE:D1:0A:6C:B0:7A:13:AF:65:7F:42
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0CF49321F81789A195BED10A6CB07A13AF657F42.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EFKEnx9WWdpy6bfnULB87wKJLDYsxmQK5JRhfahZqNWM/2/3137302e3234342e3230322e302f32342d3234203d3e20323636303133.roa
Signing time:             Thu 06 Mar 2025 13:27:22 +0000
ROA not before:           Thu 06 Mar 2025 13:22:22 +0000
ROA not after:            Thu 05 Mar 2026 13:27:22 +0000
asID:                     266013
IP address blocks:        170.244.202.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:30:e8:51:07:3d:e5:db:f0:47:c8:29:71:88:54:29:03:f3:5b:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0CF49321F81789A195BED10A6CB07A13AF657F42
        Validity
            Not Before: Mar  6 13:22:22 2025 GMT
            Not After : Mar  5 13:27:22 2026 GMT
        Subject: CN=19DCAF4F09E1749A00908B8079DFB21ED8F4C165
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:7d:d2:24:8a:8d:93:c0:2c:ab:84:f7:93:f3:
                    52:89:ca:0c:71:0f:56:a5:0d:f2:00:48:72:e4:15:
                    64:99:10:31:fd:be:a3:a2:59:66:67:89:26:22:66:
                    39:01:11:27:70:dd:32:20:7c:43:bc:30:4a:d8:ae:
                    92:b8:ea:f5:e7:f2:43:14:b8:53:bb:1c:57:09:d0:
                    7d:f5:60:b7:6d:30:5c:60:28:8e:38:39:d6:f3:40:
                    ce:f5:71:3d:b0:4a:b1:47:65:71:04:c7:3b:eb:54:
                    6b:03:7a:65:fb:19:de:eb:80:08:2e:be:42:46:c0:
                    18:9a:86:2d:06:43:2e:b2:a7:12:03:5a:8e:ca:b7:
                    b9:56:3a:d9:04:cc:26:33:40:ee:24:58:1b:b7:42:
                    ce:20:e2:f8:d7:6c:c5:51:5d:1a:ca:cc:c1:19:2b:
                    44:ea:f5:3d:e9:7c:8e:9d:76:23:b7:96:06:47:35:
                    10:4d:bf:43:93:b3:2b:68:6b:a5:71:33:e2:de:d7:
                    f4:bc:8b:f8:83:76:05:dc:c4:fb:e9:56:6b:8c:92:
                    36:1a:5b:0a:bd:f8:ab:27:63:64:a0:13:34:c3:46:
                    14:b9:70:42:b8:a0:08:ad:3d:dd:fd:fa:f2:19:55:
                    73:35:c1:14:cc:b3:bc:56:ac:6f:db:0e:a2:cb:97:
                    e5:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:DC:AF:4F:09:E1:74:9A:00:90:8B:80:79:DF:B2:1E:D8:F4:C1:65
            X509v3 Authority Key Identifier:
                keyid:0C:F4:93:21:F8:17:89:A1:95:BE:D1:0A:6C:B0:7A:13:AF:65:7F:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EFKEnx9WWdpy6bfnULB87wKJLDYsxmQK5JRhfahZqNWM/2/0CF49321F81789A195BED10A6CB07A13AF657F42.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0CF49321F81789A195BED10A6CB07A13AF657F42.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EFKEnx9WWdpy6bfnULB87wKJLDYsxmQK5JRhfahZqNWM/2/3137302e3234342e3230322e302f32342d3234203d3e20323636303133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.244.202.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a7:8f:3e:d0:5c:5e:1e:95:ae:c2:c3:be:f7:d2:a3:64:6d:ba:
         5e:5b:ac:3a:67:43:90:9c:37:70:1a:b3:bf:cc:a0:1e:b8:51:
         8d:4e:45:da:4e:05:e4:97:dd:48:0e:e9:97:a6:d0:f0:c9:1b:
         f6:dd:42:d8:91:d5:14:01:e9:05:23:07:c7:02:94:91:90:9e:
         9d:48:69:90:8e:6a:8b:a9:83:23:ff:db:42:ec:4b:11:7f:64:
         6d:da:67:c1:5f:08:6d:6f:be:da:e5:f7:51:74:e4:7b:c5:b9:
         95:46:f0:bf:b1:b9:9a:6e:53:1e:6b:e5:f4:49:c2:e0:1a:18:
         9c:d1:98:a0:a2:e6:ea:53:f6:e3:6d:ab:01:ae:64:61:13:2d:
         cd:5a:49:4d:35:f0:59:52:c5:9a:cb:9b:f1:b1:8d:ac:80:e8:
         7c:21:b6:40:c4:5b:a6:b4:98:6e:5c:de:af:7f:8a:83:09:d6:
         9f:fa:5b:ba:38:83:0d:29:b5:ff:a5:4d:76:64:72:63:ae:86:
         d4:e8:00:ca:f6:f6:da:69:e8:11:07:a6:2f:a2:f0:01:61:d8:
         e2:12:aa:d1:71:db:45:01:a2:ef:bf:63:66:54:8a:62:8d:ac:
         1c:82:80:0c:aa:66:60:f6:8d:43:83:d5:ef:c0:bb:e5:04:71:
         99:b8:65:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 01:02:30 2025 by rpki-client