Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FJLhJfe6hkNEJAxa6z9tMktNPsBuiYnErLxfhac5fshU/0/3137302e3233312e3132302e302f32322d3234203d3e20323635303535.roa
File:                     3137302e3233312e3132302e302f32322d3234203d3e20323635303535.roa (raw, json)
Hash identifier:          NDOiOZw0Kfrv5vc2iosKox2/5HJiFKhQJS96KlyIgNQ=
Subject key identifier:   47:80:74:29:87:15:E4:5B:47:BE:96:5D:CC:31:B3:92:BC:60:33:D7
Certificate issuer:       /CN=0C7F7C34084C89959F96E797A34F135355A399A8
Certificate serial:       0CD1A5DC95A642F405EDB9759BBDDE87D3D3F58E
Authority key identifier: 0C:7F:7C:34:08:4C:89:95:9F:96:E7:97:A3:4F:13:53:55:A3:99:A8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0C7F7C34084C89959F96E797A34F135355A399A8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FJLhJfe6hkNEJAxa6z9tMktNPsBuiYnErLxfhac5fshU/0/3137302e3233312e3132302e302f32322d3234203d3e20323635303535.roa
Signing time:             Tue 31 Jan 2023 19:29:19 +0000
ROA not before:           Tue 31 Jan 2023 19:24:19 +0000
ROA not after:            Tue 30 Jan 2024 19:29:19 +0000
asID:                     265055
IP address blocks:        170.231.120.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:d1:a5:dc:95:a6:42:f4:05:ed:b9:75:9b:bd:de:87:d3:d3:f5:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0C7F7C34084C89959F96E797A34F135355A399A8
        Validity
            Not Before: Jan 31 19:24:19 2023 GMT
            Not After : Jan 30 19:29:19 2024 GMT
        Subject: CN=478074298715E45B47BE965DCC31B392BC6033D7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:d1:aa:56:31:94:a3:88:8c:e8:3c:42:cb:1a:
                    16:d2:11:74:eb:b4:d7:ae:58:b9:df:8c:fc:f4:31:
                    0e:7e:57:af:7c:8e:61:da:8e:82:13:ef:9b:d8:d2:
                    f8:e8:88:a8:b3:3c:34:5b:6a:fb:4f:3a:b3:0d:3b:
                    14:a5:57:13:bf:d5:25:e6:bc:53:fd:02:8d:72:3f:
                    b3:46:5a:2d:c2:a9:5b:79:d5:88:54:ed:01:96:22:
                    f5:97:68:8d:64:6e:86:ea:94:ab:ce:a0:26:f4:89:
                    23:b7:86:15:19:25:0e:19:31:60:5e:cd:58:bc:8c:
                    3c:5e:5c:df:27:ec:ba:0b:05:1c:2c:68:3c:d5:b2:
                    d8:a8:bf:9b:a8:35:f4:0d:a9:0b:25:81:c9:73:de:
                    b9:94:74:1e:90:b1:43:aa:c0:aa:1d:42:e9:3c:ca:
                    fd:cd:68:31:10:2a:98:b8:21:32:50:02:c0:35:de:
                    01:3e:a1:8b:8e:4a:1d:d9:61:86:cf:87:c4:81:59:
                    29:9c:1b:7a:35:b8:26:21:f2:fb:d3:b9:10:7b:2e:
                    7e:f0:48:31:69:50:6c:95:1f:92:11:8f:e5:7f:f0:
                    6f:9b:1e:31:5e:a4:95:c8:5e:c8:9b:95:35:63:f5:
                    d0:13:a3:0a:dc:03:8b:e2:aa:ba:44:80:56:92:03:
                    b9:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:80:74:29:87:15:E4:5B:47:BE:96:5D:CC:31:B3:92:BC:60:33:D7
            X509v3 Authority Key Identifier:
                keyid:0C:7F:7C:34:08:4C:89:95:9F:96:E7:97:A3:4F:13:53:55:A3:99:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FJLhJfe6hkNEJAxa6z9tMktNPsBuiYnErLxfhac5fshU/0/0C7F7C34084C89959F96E797A34F135355A399A8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0C7F7C34084C89959F96E797A34F135355A399A8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FJLhJfe6hkNEJAxa6z9tMktNPsBuiYnErLxfhac5fshU/0/3137302e3233312e3132302e302f32322d3234203d3e20323635303535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.231.120.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5c:5d:9b:ec:dd:6e:6d:07:bf:15:6c:fc:ee:3c:7f:0c:ac:4f:
         0c:65:89:38:58:65:e8:47:af:a2:fe:8a:ee:a4:c0:bf:9a:dd:
         cc:f5:ef:61:08:6d:f8:8e:df:b4:7d:6a:e6:a5:f6:7e:de:60:
         39:99:84:14:de:eb:50:4f:ae:03:23:bf:a3:68:ab:2e:0a:e0:
         e5:0f:ef:e3:bc:d8:e7:d2:cf:d9:97:df:65:50:a3:ab:95:eb:
         d1:5d:74:12:f6:02:a1:37:95:a5:c0:53:26:07:5f:63:2c:28:
         f5:2c:37:1e:fe:97:73:ff:75:ba:07:fc:63:52:fa:77:24:ae:
         82:56:1f:dc:1a:aa:5d:3a:0f:7e:de:13:88:38:94:34:0d:5f:
         96:ca:0b:30:3e:14:09:e3:0b:cf:13:42:29:76:bb:2a:e5:6c:
         fa:9f:6d:ad:94:24:c5:00:78:54:bb:06:a2:05:67:3d:04:ee:
         a9:59:6d:e3:b9:89:23:95:fc:8c:7f:d1:21:b5:ab:f2:6d:82:
         d3:86:0f:59:2a:3f:f0:12:64:bd:be:2d:c9:48:3d:c1:24:61:
         64:7c:36:17:2d:dd:a8:e4:68:9e:5b:80:c3:59:48:d2:d4:85:
         5d:dd:08:d5:e0:50:7c:c5:ab:ac:1d:ac:03:cc:bd:23:d5:a6:
         73:1e:63:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:55:44 2025 by rpki-client