Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/0/3137302e3234342e39362e302f32342d3234203d3e20323633303733.roa
File:                     3137302e3234342e39362e302f32342d3234203d3e20323633303733.roa (raw, json)
Hash identifier:          9Iv79W7/8rC5fuGbOcBA0w511va5TDN76bftAaqCCRU=
Subject key identifier:   79:19:56:AD:A9:86:53:E4:F3:D7:06:3A:E5:7F:3A:A5:2C:67:0E:68
Certificate issuer:       /CN=AD86B2A3E3ADB80A9FD084644564B388C98D93E9
Certificate serial:       6BC0C165F64528C80C21B33F80BC9CA3F3EF7398
Authority key identifier: AD:86:B2:A3:E3:AD:B8:0A:9F:D0:84:64:45:64:B3:88:C9:8D:93:E9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AD86B2A3E3ADB80A9FD084644564B388C98D93E9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/0/3137302e3234342e39362e302f32342d3234203d3e20323633303733.roa
Signing time:             Mon 24 Apr 2023 21:59:01 +0000
ROA not before:           Mon 24 Apr 2023 21:54:01 +0000
ROA not after:            Mon 22 Apr 2024 21:59:01 +0000
asID:                     263073
IP address blocks:        170.244.96.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:c0:c1:65:f6:45:28:c8:0c:21:b3:3f:80:bc:9c:a3:f3:ef:73:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AD86B2A3E3ADB80A9FD084644564B388C98D93E9
        Validity
            Not Before: Apr 24 21:54:01 2023 GMT
            Not After : Apr 22 21:59:01 2024 GMT
        Subject: CN=791956ADA98653E4F3D7063AE57F3AA52C670E68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:9a:2b:95:5a:74:4e:48:00:5d:44:fe:45:3b:
                    d5:20:82:40:92:5e:28:ee:6c:1b:26:18:f1:8d:06:
                    3e:3a:88:68:4f:b0:5c:27:63:a2:2e:e3:1e:55:fe:
                    66:25:bd:4b:cf:f1:86:58:a8:87:5f:b9:a6:06:d0:
                    1d:eb:79:f2:18:f6:82:c6:b3:69:0b:24:92:c0:fa:
                    22:ac:a0:2a:4e:4b:80:c9:72:c4:0d:28:12:30:1e:
                    21:24:d6:79:36:f8:f9:93:7d:0e:7a:67:d0:c5:b0:
                    ef:b0:cd:76:7f:84:55:6e:36:cd:f9:83:8b:9c:a3:
                    89:2c:a5:94:52:29:05:65:cf:c4:1e:c3:5e:93:2a:
                    68:97:b7:4a:be:a2:92:4c:fe:3b:90:8e:5f:b1:af:
                    6f:7e:f2:52:31:84:da:de:3b:70:40:4a:01:eb:d0:
                    cc:9f:96:a7:c3:f6:f5:e9:c2:a8:46:96:06:90:45:
                    ff:74:8f:07:8b:02:f2:db:c2:86:e4:7e:e3:28:d4:
                    a3:5e:c8:60:c0:75:09:f8:43:fa:68:8a:1e:3b:3e:
                    86:5d:b2:8d:b4:f4:62:9a:95:40:8f:3a:19:6d:1b:
                    c3:8b:bb:bd:71:b3:38:aa:07:62:d7:e6:00:29:8d:
                    91:4c:7b:c9:55:ea:0d:15:89:69:82:e5:38:cb:36:
                    65:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:19:56:AD:A9:86:53:E4:F3:D7:06:3A:E5:7F:3A:A5:2C:67:0E:68
            X509v3 Authority Key Identifier:
                keyid:AD:86:B2:A3:E3:AD:B8:0A:9F:D0:84:64:45:64:B3:88:C9:8D:93:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/0/AD86B2A3E3ADB80A9FD084644564B388C98D93E9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AD86B2A3E3ADB80A9FD084644564B388C98D93E9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/0/3137302e3234342e39362e302f32342d3234203d3e20323633303733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.244.96.0/24

    Signature Algorithm: sha256WithRSAEncryption
         26:6c:a0:6f:a9:94:59:76:57:09:30:12:b6:e8:56:77:a0:d3:
         51:a9:97:99:66:49:28:04:eb:e4:c4:db:4c:9a:5c:c0:7c:da:
         bb:58:01:75:48:b9:98:44:c3:8d:da:e1:29:ca:e6:6e:6b:18:
         89:35:be:87:61:33:6d:1b:96:bc:d1:18:27:f0:b7:67:85:04:
         ee:03:23:09:55:13:87:4a:cf:48:0e:e4:27:00:e7:c9:35:b8:
         73:1a:d9:c1:46:a0:ee:c6:5a:f3:2d:3f:27:06:04:1a:bc:71:
         36:c4:5c:cd:ac:c6:c9:db:1e:c2:f6:de:31:18:1c:9d:ec:16:
         8b:49:42:cd:06:96:bc:00:07:9c:b6:33:79:91:fd:0b:cd:ff:
         cf:6f:f4:be:a9:df:a2:30:41:ea:f9:3e:19:a4:4c:62:64:1a:
         61:6d:8d:57:35:85:04:82:42:8e:46:8f:0e:a7:4d:da:09:34:
         21:66:af:ac:c4:53:a6:26:cb:62:3a:54:40:68:67:6f:db:6a:
         ed:2f:7a:e5:48:2c:77:62:eb:11:2c:32:1f:66:d8:79:91:90:
         8d:e2:cb:05:42:ee:30:29:30:dd:7f:19:c3:c2:d8:57:90:37:
         01:24:f0:b5:66:13:de:ff:4d:94:1e:3c:bb:d2:7d:f5:6b:70:
         da:6a:94:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:10:43 2025 by rpki-client