Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Eg1jgK2EZ5zxoGsFMZDkmeReoaaiYwEnqx5rwPAQvMxN/0/3137302e38342e37362e302f32322d3332203d3e20323634393939.roa
File:                     3137302e38342e37362e302f32322d3332203d3e20323634393939.roa (raw, json)
Hash identifier:          0Kl4RFnt0jfD0cv2KIg1nUIiRqqLif2zb0x1A0qmtvE=
Subject key identifier:   CB:10:C2:86:7D:C8:A4:37:07:AF:64:31:8B:AF:04:08:5A:CB:81:67
Certificate issuer:       /CN=8ABCB3C4EC219B8E85923BB54651F450DE6CAE55
Certificate serial:       572F094B0C4A314805291F051BAF2E327E26D8A3
Authority key identifier: 8A:BC:B3:C4:EC:21:9B:8E:85:92:3B:B5:46:51:F4:50:DE:6C:AE:55
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8ABCB3C4EC219B8E85923BB54651F450DE6CAE55.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Eg1jgK2EZ5zxoGsFMZDkmeReoaaiYwEnqx5rwPAQvMxN/0/3137302e38342e37362e302f32322d3332203d3e20323634393939.roa
Signing time:             Fri 09 Aug 2024 20:47:02 +0000
ROA not before:           Fri 09 Aug 2024 20:42:02 +0000
ROA not after:            Fri 08 Aug 2025 20:47:02 +0000
asID:                     264999
IP address blocks:        170.84.76.0/22 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:2f:09:4b:0c:4a:31:48:05:29:1f:05:1b:af:2e:32:7e:26:d8:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ABCB3C4EC219B8E85923BB54651F450DE6CAE55
        Validity
            Not Before: Aug  9 20:42:02 2024 GMT
            Not After : Aug  8 20:47:02 2025 GMT
        Subject: CN=CB10C2867DC8A43707AF64318BAF04085ACB8167
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:93:93:33:bb:60:27:79:ba:40:d2:50:b4:e7:
                    99:7b:2f:db:0d:ed:c2:65:b1:c1:02:ff:99:ab:01:
                    1a:86:b0:08:e9:c0:99:0e:d2:63:2a:69:22:62:01:
                    44:66:32:7f:07:09:1c:5b:ce:c8:18:5b:3b:6d:69:
                    32:d3:9f:13:d1:94:00:9b:79:fe:8a:f2:f5:b2:f8:
                    46:22:13:19:0b:f8:c0:8d:fd:39:58:77:6f:ca:c6:
                    be:50:bf:8f:27:aa:44:9b:94:08:e7:26:b0:4a:54:
                    a3:7d:22:bc:20:46:9c:ea:7e:e8:c7:60:87:42:72:
                    49:3d:b1:95:1d:fa:c1:5d:f8:6d:c3:49:16:99:95:
                    23:bb:b2:83:53:3f:21:15:42:26:96:e8:7b:20:8b:
                    a2:85:45:64:f9:99:f6:62:e3:e8:47:d6:49:4c:a9:
                    c1:6d:09:4e:bd:59:1b:81:46:79:ae:57:69:79:bb:
                    b6:8f:9a:85:88:50:66:29:86:c4:30:4a:85:85:49:
                    ff:a0:0c:64:bf:3f:af:4f:fe:03:17:8a:f9:50:19:
                    c6:61:fb:40:24:c5:0d:6f:f6:8d:57:42:24:f2:30:
                    f8:6b:bc:89:c3:ea:a4:ca:b8:9f:ef:f4:54:ab:af:
                    cc:30:2c:c2:2d:c2:5c:56:07:53:b2:ec:74:9c:69:
                    bb:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:10:C2:86:7D:C8:A4:37:07:AF:64:31:8B:AF:04:08:5A:CB:81:67
            X509v3 Authority Key Identifier:
                keyid:8A:BC:B3:C4:EC:21:9B:8E:85:92:3B:B5:46:51:F4:50:DE:6C:AE:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Eg1jgK2EZ5zxoGsFMZDkmeReoaaiYwEnqx5rwPAQvMxN/0/8ABCB3C4EC219B8E85923BB54651F450DE6CAE55.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8ABCB3C4EC219B8E85923BB54651F450DE6CAE55.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Eg1jgK2EZ5zxoGsFMZDkmeReoaaiYwEnqx5rwPAQvMxN/0/3137302e38342e37362e302f32322d3332203d3e20323634393939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.84.76.0/22

    Signature Algorithm: sha256WithRSAEncryption
         21:77:1e:1e:65:be:06:ff:df:8c:b6:c0:43:a8:e4:15:dc:a9:
         3c:5f:b6:49:ce:b8:24:7d:14:bc:20:7d:01:d3:77:d7:99:be:
         27:d8:29:8f:93:51:4e:c9:48:cc:8f:39:e1:0d:4c:aa:d3:c9:
         75:37:83:c4:a7:0d:56:47:75:d2:73:54:68:0a:04:0d:c5:72:
         99:bb:97:aa:68:11:d9:3b:60:4c:fb:2e:34:65:25:ec:da:6a:
         b9:5c:dc:84:af:c7:80:6c:13:e6:f0:b6:12:a4:e6:8e:a7:60:
         12:2e:2e:96:d5:a2:50:19:5e:36:70:20:6c:7f:ff:38:c3:6d:
         8c:2b:32:15:71:ef:58:9a:ee:94:6a:f7:bb:97:70:37:7a:2d:
         44:a6:72:38:93:e1:eb:5b:15:50:c7:a3:05:e4:c4:0d:65:60:
         d9:87:18:c6:98:2f:a3:de:bd:28:26:37:33:39:e8:07:b7:4f:
         37:23:54:df:c1:4a:65:40:82:b3:b6:45:a0:12:88:e6:ab:5f:
         48:85:f0:3b:bd:3e:3b:87:96:97:d7:82:22:31:53:1d:31:8d:
         9f:da:c3:e2:a0:79:f7:30:25:4a:f6:48:e5:c2:76:84:41:2d:
         f0:f8:7a:98:b2:10:0d:f8:ed:fd:84:48:2c:2e:40:c2:5b:53:
         38:9b:15:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 01:15:39 2025 by rpki-client