Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EmnRjasb6GbVw57qDqCDcdDvCv5XeXhuFJgi43rNbDdB/0/3137302e38332e37302e302f32342d3234203d3e203631373534.roa
File:                     3137302e38332e37302e302f32342d3234203d3e203631373534.roa (raw, json)
Hash identifier:          pCpPCmwPmYNjhxNsTIvLQKIZ1Bbd9/w6LURtFSdUvpI=
Subject key identifier:   3C:C6:E1:71:D4:E0:4D:A1:2E:5D:F7:04:4F:48:3C:DF:B3:36:9E:8E
Certificate issuer:       /CN=107B680E5B5FB305DB89311B48605A8468508948
Certificate serial:       466AFAD1A7D3419F9A96FCB87B57BCA69AB645C5
Authority key identifier: 10:7B:68:0E:5B:5F:B3:05:DB:89:31:1B:48:60:5A:84:68:50:89:48
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/107B680E5B5FB305DB89311B48605A8468508948.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EmnRjasb6GbVw57qDqCDcdDvCv5XeXhuFJgi43rNbDdB/0/3137302e38332e37302e302f32342d3234203d3e203631373534.roa
Signing time:             Wed 24 Jan 2024 14:54:08 +0000
ROA not before:           Wed 24 Jan 2024 14:49:08 +0000
ROA not after:            Wed 22 Jan 2025 14:54:08 +0000
asID:                     61754
IP address blocks:        170.83.70.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:6a:fa:d1:a7:d3:41:9f:9a:96:fc:b8:7b:57:bc:a6:9a:b6:45:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=107B680E5B5FB305DB89311B48605A8468508948
        Validity
            Not Before: Jan 24 14:49:08 2024 GMT
            Not After : Jan 22 14:54:08 2025 GMT
        Subject: CN=3CC6E171D4E04DA12E5DF7044F483CDFB3369E8E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:20:28:f5:91:fa:6e:4f:3c:38:08:42:aa:20:
                    f0:db:5f:40:33:d5:14:c7:f1:a4:9c:69:ac:f3:85:
                    97:5a:64:e1:32:e5:68:6b:60:e9:5a:c1:38:19:91:
                    40:03:33:1b:bf:f8:48:8c:79:4c:17:60:9a:50:d7:
                    ac:40:90:bb:7d:b5:0c:99:1d:af:71:90:30:aa:e6:
                    a4:b8:38:87:50:e3:12:24:29:1d:11:43:01:12:54:
                    e0:9c:7d:49:67:a8:bb:39:98:7f:89:03:26:a1:62:
                    36:5f:ad:aa:b4:96:9b:4c:4b:6f:86:e9:87:5f:48:
                    a1:b3:4e:26:2e:d7:16:cb:9d:e6:ac:11:9c:2d:d1:
                    25:49:7d:90:61:9f:c3:80:5b:62:d9:a1:33:02:5d:
                    f0:05:ea:9d:53:b1:93:bd:93:8f:8e:3c:2f:49:57:
                    60:e8:9a:50:d6:67:42:6a:18:96:d2:d2:58:ac:b5:
                    f2:fa:a1:13:f6:90:5f:eb:b9:fd:ca:a9:34:2c:d9:
                    18:e0:d4:32:8b:5b:77:7f:8f:7f:f1:19:b0:c8:bd:
                    02:ac:db:c5:0c:26:dd:f4:3c:ed:41:9b:57:88:62:
                    ac:bf:32:5a:43:45:11:45:a6:19:34:26:e7:65:cc:
                    4a:86:08:c7:7d:7e:d9:2c:fd:eb:85:1c:81:d5:9a:
                    f0:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:C6:E1:71:D4:E0:4D:A1:2E:5D:F7:04:4F:48:3C:DF:B3:36:9E:8E
            X509v3 Authority Key Identifier:
                keyid:10:7B:68:0E:5B:5F:B3:05:DB:89:31:1B:48:60:5A:84:68:50:89:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EmnRjasb6GbVw57qDqCDcdDvCv5XeXhuFJgi43rNbDdB/0/107B680E5B5FB305DB89311B48605A8468508948.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/107B680E5B5FB305DB89311B48605A8468508948.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EmnRjasb6GbVw57qDqCDcdDvCv5XeXhuFJgi43rNbDdB/0/3137302e38332e37302e302f32342d3234203d3e203631373534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.83.70.0/24

    Signature Algorithm: sha256WithRSAEncryption
         80:51:87:77:64:52:47:b8:67:d0:6d:9f:e2:c5:71:74:91:06:
         f9:ea:3b:cf:5c:91:a8:09:19:21:1f:4d:2b:11:9b:0a:53:46:
         b8:a2:11:c0:0c:a1:ca:90:35:72:c4:a0:d1:0b:b6:dd:d9:88:
         88:bc:99:8f:34:ed:e6:3e:4d:ed:2e:e9:25:66:a7:d8:7a:c3:
         e2:33:5e:9d:b5:a5:5d:c4:83:56:7d:b0:b8:e4:52:4d:0c:7b:
         12:3c:4f:e7:55:24:3c:bb:0c:b3:e1:54:35:8e:01:ff:7f:a2:
         a8:bb:eb:ff:38:74:eb:26:36:06:78:14:9e:ed:23:0a:48:80:
         e2:fa:20:70:7b:0b:ee:77:b6:80:c5:6d:a8:1e:91:00:c5:63:
         4d:62:73:09:9b:5f:f8:5b:33:15:8c:08:07:86:68:73:d7:e3:
         9d:ea:0b:ea:48:c8:e5:6a:5b:d0:f6:16:ae:17:d5:92:30:65:
         b1:0d:0c:71:f0:26:11:01:09:2e:6a:14:71:8d:50:46:d0:f6:
         a0:23:26:2d:2b:93:09:ff:51:70:38:4e:e6:ac:f7:86:cb:b2:
         2c:39:cb:ba:f0:c3:8e:03:9d:07:a1:6c:3e:2a:fb:a1:7f:05:
         46:70:2d:c6:48:7b:30:bf:4d:86:50:25:56:d3:ca:14:c1:76:
         48:ba:a2:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:52:49 2025 by rpki-client