Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fsjjm6QSV9ecHJyqvHR7uwf4ECdAZ84SMikunf8rZsmA/0/3137302e3233382e3231322e302f32332d3233203d3e20323733353638.roa
File:                     3137302e3233382e3231322e302f32332d3233203d3e20323733353638.roa (raw, json)
Hash identifier:          rPvqEzWiyTKYuWBmAfvK9T1Xyxw9BcVwhD6VulNLczo=
Subject key identifier:   7A:00:A3:B2:54:5B:5F:B5:9D:AA:52:1E:0B:1B:DE:DE:5A:8B:B1:75
Certificate issuer:       /CN=6F4A647AFA002C03109D6A323355E36ABA9C7284
Certificate serial:       7C7FA9908420E605FA713960FD8F8F1F02633FA7
Authority key identifier: 6F:4A:64:7A:FA:00:2C:03:10:9D:6A:32:33:55:E3:6A:BA:9C:72:84
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6F4A647AFA002C03109D6A323355E36ABA9C7284.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fsjjm6QSV9ecHJyqvHR7uwf4ECdAZ84SMikunf8rZsmA/0/3137302e3233382e3231322e302f32332d3233203d3e20323733353638.roa
Signing time:             Tue 31 Oct 2023 18:38:56 +0000
ROA not before:           Tue 31 Oct 2023 18:33:56 +0000
ROA not after:            Tue 29 Oct 2024 18:38:56 +0000
asID:                     273568
IP address blocks:        170.238.212.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:7f:a9:90:84:20:e6:05:fa:71:39:60:fd:8f:8f:1f:02:63:3f:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6F4A647AFA002C03109D6A323355E36ABA9C7284
        Validity
            Not Before: Oct 31 18:33:56 2023 GMT
            Not After : Oct 29 18:38:56 2024 GMT
        Subject: CN=7A00A3B2545B5FB59DAA521E0B1BDEDE5A8BB175
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:c5:66:a0:4c:3e:83:ee:e0:a7:0f:ea:a3:b8:
                    a4:70:b7:af:23:3c:59:86:88:5f:e3:f6:b0:72:ef:
                    19:a2:ba:3d:e8:64:1e:48:a7:72:f6:aa:82:6b:bf:
                    15:08:31:06:63:77:99:68:4f:84:01:4c:68:22:37:
                    23:b8:47:8b:27:67:4e:78:fb:67:bc:65:08:0a:1d:
                    99:09:af:36:45:98:af:84:c1:0b:75:90:de:20:b7:
                    35:ef:36:5f:0f:cf:06:6b:1a:0f:a5:e0:f2:1f:17:
                    32:2c:8c:42:99:90:00:7d:4c:57:fa:cd:ce:3f:40:
                    00:56:b3:9d:a9:3a:67:3b:fc:d5:55:ee:07:d8:a3:
                    2d:96:fc:43:0a:7a:59:53:25:b2:cf:53:fd:ea:2b:
                    26:6f:6b:45:09:e1:08:56:f0:df:a8:8e:6a:64:73:
                    fa:69:73:6e:36:b9:5a:45:b3:a7:06:66:dc:e1:2d:
                    4e:ea:82:85:78:0b:8f:8e:07:bb:74:b9:92:fe:2f:
                    b9:11:8f:4b:92:c7:d0:34:8f:ee:d7:c8:52:67:92:
                    eb:3d:f8:64:2f:40:8d:fd:27:03:ce:e1:3f:81:3f:
                    29:22:43:33:a8:04:ce:c4:1d:d6:b7:ab:6f:8c:29:
                    b8:3e:11:ba:c9:87:5d:44:27:25:be:1b:bf:6f:b7:
                    59:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:00:A3:B2:54:5B:5F:B5:9D:AA:52:1E:0B:1B:DE:DE:5A:8B:B1:75
            X509v3 Authority Key Identifier:
                keyid:6F:4A:64:7A:FA:00:2C:03:10:9D:6A:32:33:55:E3:6A:BA:9C:72:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fsjjm6QSV9ecHJyqvHR7uwf4ECdAZ84SMikunf8rZsmA/0/6F4A647AFA002C03109D6A323355E36ABA9C7284.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6F4A647AFA002C03109D6A323355E36ABA9C7284.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fsjjm6QSV9ecHJyqvHR7uwf4ECdAZ84SMikunf8rZsmA/0/3137302e3233382e3231322e302f32332d3233203d3e20323733353638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.238.212.0/23

    Signature Algorithm: sha256WithRSAEncryption
         91:59:90:a0:9c:b9:5f:89:d7:dc:f6:02:13:25:34:10:4f:c5:
         69:c8:cf:be:67:a1:0d:27:75:ef:48:05:0e:45:59:8f:d6:76:
         12:f1:21:3d:96:d2:41:1d:80:37:57:e7:b0:82:cd:f6:c8:31:
         7b:e8:16:26:fa:0b:f0:b0:35:ff:fc:5f:aa:c7:61:fb:ed:3b:
         4b:e8:e1:29:0f:88:fb:64:e4:9d:80:36:35:7b:91:b0:db:d4:
         c5:cb:f1:3f:e5:1b:87:08:93:b7:a3:b6:51:ff:4e:3c:03:e1:
         51:62:2e:6b:51:da:93:53:b4:20:af:6c:1a:32:a8:ff:86:a7:
         35:96:99:1d:52:fb:f5:84:c6:d4:60:34:1c:0e:ea:12:2e:48:
         ab:c8:8d:21:fd:88:a6:61:77:b7:95:a0:2f:69:3e:8e:e7:31:
         40:21:3d:8b:b2:c3:0a:44:8f:c1:39:91:e5:71:23:08:b1:91:
         48:72:05:43:77:95:bc:c5:14:28:6a:04:f8:e9:29:b3:31:cb:
         54:0f:5c:0e:31:c8:d3:49:df:1d:53:66:c7:cd:12:32:fa:31:
         cf:ab:0d:95:7c:e5:b9:52:bb:4e:8b:6c:d4:18:54:14:b4:ee:
         bc:8d:dc:56:3f:4b:b0:a7:23:42:5e:f8:b4:5c:e4:08:09:9c:
         d3:81:15:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:36:34 2025 by rpki-client