Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EmnRjasb6GbVw57qDqCDcdDvCv5XeXhuFJgi43rNbDdB/0/3137302e38332e36382e302f32322d3234203d3e203631373534.roa
File:                     3137302e38332e36382e302f32322d3234203d3e203631373534.roa (raw, json)
Hash identifier:          UAViOZHYAoqmIxNKYvvWTTI4hS1u2OfuBGJkRtC9mgM=
Subject key identifier:   28:D6:1D:4F:01:76:33:5A:CA:14:3C:BB:BE:6D:A4:19:5F:CE:95:1B
Certificate issuer:       /CN=107B680E5B5FB305DB89311B48605A8468508948
Certificate serial:       115AD18FFE90B1D9E0D78A450A3669F09E9EE4DE
Authority key identifier: 10:7B:68:0E:5B:5F:B3:05:DB:89:31:1B:48:60:5A:84:68:50:89:48
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/107B680E5B5FB305DB89311B48605A8468508948.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EmnRjasb6GbVw57qDqCDcdDvCv5XeXhuFJgi43rNbDdB/0/3137302e38332e36382e302f32322d3234203d3e203631373534.roa
Signing time:             Fri 16 Feb 2024 23:09:25 +0000
ROA not before:           Fri 16 Feb 2024 23:04:25 +0000
ROA not after:            Fri 14 Feb 2025 23:09:25 +0000
asID:                     61754
IP address blocks:        170.83.68.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:5a:d1:8f:fe:90:b1:d9:e0:d7:8a:45:0a:36:69:f0:9e:9e:e4:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=107B680E5B5FB305DB89311B48605A8468508948
        Validity
            Not Before: Feb 16 23:04:25 2024 GMT
            Not After : Feb 14 23:09:25 2025 GMT
        Subject: CN=28D61D4F0176335ACA143CBBBE6DA4195FCE951B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:f8:1e:b6:08:6f:f1:24:ba:9b:af:59:e7:59:
                    b7:2a:ea:60:c0:fa:20:27:70:bb:d6:cb:2a:11:5b:
                    75:b8:b4:e4:b1:39:94:db:ac:2c:92:98:dc:2c:b8:
                    19:30:27:f4:f6:49:b4:75:6e:f4:09:18:d4:f0:98:
                    5f:f8:ed:af:c7:f5:05:43:e1:72:e3:50:f0:e8:4e:
                    a9:fb:6f:a4:b7:58:59:b7:5b:6c:f8:bb:55:66:3c:
                    46:eb:55:47:c5:cf:3f:a8:c9:a7:62:29:c5:e5:ef:
                    4a:21:68:5c:69:65:89:25:2a:fe:5e:40:da:2b:f5:
                    9b:91:b2:23:49:4b:94:ce:d5:cb:45:62:f9:3e:7e:
                    d6:35:24:66:bf:32:d8:19:91:51:01:b3:d5:66:47:
                    15:8c:06:86:2e:57:f0:85:e4:0f:f9:26:c6:bb:45:
                    c6:ba:a3:7b:f1:b6:24:94:38:59:ad:ce:7f:0b:81:
                    04:0a:97:cf:c0:54:a7:28:6b:50:e7:d7:3c:17:46:
                    93:35:76:fc:c4:03:a8:ac:ac:60:23:6b:31:14:1c:
                    6c:35:28:88:01:83:88:f9:e3:3a:bd:80:74:fb:57:
                    81:31:92:f4:ce:e4:69:ca:3e:2b:f5:5c:98:f0:72:
                    6c:9f:5f:ac:8c:ab:c0:4e:bf:3f:85:c2:4d:fd:c5:
                    42:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:D6:1D:4F:01:76:33:5A:CA:14:3C:BB:BE:6D:A4:19:5F:CE:95:1B
            X509v3 Authority Key Identifier:
                keyid:10:7B:68:0E:5B:5F:B3:05:DB:89:31:1B:48:60:5A:84:68:50:89:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EmnRjasb6GbVw57qDqCDcdDvCv5XeXhuFJgi43rNbDdB/0/107B680E5B5FB305DB89311B48605A8468508948.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/107B680E5B5FB305DB89311B48605A8468508948.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EmnRjasb6GbVw57qDqCDcdDvCv5XeXhuFJgi43rNbDdB/0/3137302e38332e36382e302f32322d3234203d3e203631373534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.83.68.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b3:ca:2f:17:0a:d2:da:a7:03:ba:f7:76:9c:96:c0:92:3f:de:
         bd:53:75:65:93:93:f0:34:d7:a1:31:95:19:4a:40:82:e6:a2:
         3b:21:35:4d:7c:1d:ad:fe:10:73:11:ac:61:32:d0:04:5e:e4:
         44:69:15:07:74:93:57:43:17:99:bf:35:4f:46:1b:67:64:dd:
         21:18:ef:b3:d9:7d:c3:03:0f:96:97:7d:24:f8:4b:48:3a:b1:
         fe:1b:2a:92:06:e3:a7:c7:1f:34:f3:55:dd:62:26:3f:35:40:
         50:9e:5b:5d:35:24:d0:c9:76:64:6b:bb:0c:53:fb:3e:21:60:
         96:2a:92:41:60:83:d9:6e:1e:43:6b:bf:13:78:6f:30:c6:71:
         1c:21:68:dc:0a:db:23:bc:58:e9:56:0c:48:b4:ae:a7:f0:ac:
         01:7c:82:4a:7a:d8:6b:74:30:9f:04:bb:57:ec:f8:4e:5c:6c:
         cb:a0:ad:e1:b2:12:de:ba:e1:13:a0:45:21:da:42:59:f0:f5:
         6c:a0:72:09:d1:27:0d:86:37:40:82:26:51:f7:7e:d5:ac:7d:
         3c:ab:0f:82:b4:f3:31:2d:2e:27:c9:d8:d4:fa:eb:a6:71:3d:
         fa:92:50:8e:4c:11:51:fb:8f:ac:71:39:98:c6:2d:e7:24:93:
         98:76:58:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:58:42 2025 by rpki-client