Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FwQW8Fp2n17RQF2tmhNjY9KdLyGDFezWDC2fphRUqxYa/0/3137302e38312e38362e302f32342d3234203d3e20323636333935.roa
File:                     3137302e38312e38362e302f32342d3234203d3e20323636333935.roa (raw, json)
Hash identifier:          9/DZYcxZWL1LaEgeN8fgsgkSI/pTyoT5vAH7AzXeUb8=
Subject key identifier:   DE:80:35:16:5D:C9:14:00:04:3C:DF:33:2E:2F:19:F6:DA:E4:6E:04
Certificate issuer:       /CN=19664A43D08FC5C1667B502608579B90F5D7A2EF
Certificate serial:       185F44D352189DDED9A9A61ACD17ACEC8F8DB5DE
Authority key identifier: 19:66:4A:43:D0:8F:C5:C1:66:7B:50:26:08:57:9B:90:F5:D7:A2:EF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/19664A43D08FC5C1667B502608579B90F5D7A2EF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FwQW8Fp2n17RQF2tmhNjY9KdLyGDFezWDC2fphRUqxYa/0/3137302e38312e38362e302f32342d3234203d3e20323636333935.roa
Signing time:             Fri 14 Jan 2022 23:41:39 +0000
ROA not before:           Fri 14 Jan 2022 23:36:39 +0000
ROA not after:            Fri 13 Jan 2023 23:41:39 +0000
asID:                     266395
IP address blocks:        170.81.86.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:5f:44:d3:52:18:9d:de:d9:a9:a6:1a:cd:17:ac:ec:8f:8d:b5:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19664A43D08FC5C1667B502608579B90F5D7A2EF
        Validity
            Not Before: Jan 14 23:36:39 2022 GMT
            Not After : Jan 13 23:41:39 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:82:d2:2a:73:36:44:7c:13:df:5b:2e:6c:78:
                    c3:56:01:e5:b4:73:e4:9f:1f:70:b4:82:84:19:48:
                    3d:a3:ba:49:72:93:b8:f4:f6:c5:17:43:d8:f9:6b:
                    6f:71:8e:62:92:00:0c:5d:03:95:ff:b6:50:c6:8b:
                    49:94:2f:f3:e4:cc:94:7f:9e:3d:55:98:90:e3:aa:
                    d6:7a:6d:6c:e1:8f:25:da:08:28:42:1c:c2:61:87:
                    bb:da:6a:17:15:43:d6:27:60:77:27:3b:a8:d4:e0:
                    44:03:4d:3a:b2:b1:50:26:cb:d4:5d:d5:08:b6:38:
                    5d:fc:f1:f7:cd:e0:62:87:b3:08:9b:4e:6c:cc:70:
                    6e:66:2b:4a:26:79:57:db:c2:87:20:94:6a:c6:6b:
                    d7:34:c1:db:0a:ee:0c:d2:33:43:0a:50:98:b8:1b:
                    4f:e8:bc:7a:b0:db:d3:3b:d1:4f:fc:b3:11:5f:95:
                    32:62:81:39:85:47:65:ef:60:2c:8c:e4:bc:ad:e6:
                    84:c6:22:ca:91:12:e6:5e:d2:82:ad:27:82:de:ac:
                    a3:bc:02:d4:e2:69:e4:c6:46:e1:e0:46:2a:95:2d:
                    6c:15:a1:f9:84:9a:12:df:00:bf:a5:cc:97:0a:f1:
                    ca:e2:fb:bb:4f:17:58:89:d9:05:bb:06:a0:fd:f4:
                    30:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:80:35:16:5D:C9:14:00:04:3C:DF:33:2E:2F:19:F6:DA:E4:6E:04
            X509v3 Authority Key Identifier:
                keyid:19:66:4A:43:D0:8F:C5:C1:66:7B:50:26:08:57:9B:90:F5:D7:A2:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FwQW8Fp2n17RQF2tmhNjY9KdLyGDFezWDC2fphRUqxYa/0/19664A43D08FC5C1667B502608579B90F5D7A2EF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/19664A43D08FC5C1667B502608579B90F5D7A2EF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FwQW8Fp2n17RQF2tmhNjY9KdLyGDFezWDC2fphRUqxYa/0/3137302e38312e38362e302f32342d3234203d3e20323636333935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.81.86.0/24

    Signature Algorithm: sha256WithRSAEncryption
         91:54:ce:30:5c:82:72:ba:a4:3d:6f:44:b7:1b:f1:1a:d8:db:
         7a:41:75:32:83:74:50:1f:8c:81:d2:00:39:2d:f9:5a:57:ed:
         d3:5a:87:fc:01:71:cb:b1:43:71:5b:17:20:13:85:f2:39:b0:
         97:24:a2:aa:53:54:c4:5c:fa:6f:66:32:38:4f:0f:47:75:42:
         ca:f8:e4:5c:50:82:a2:ff:5e:e1:ff:9c:6d:1d:7d:72:8b:6f:
         08:3e:d2:a1:81:0f:48:72:16:a4:6d:9f:00:bf:88:91:ec:0c:
         42:21:06:e7:8e:15:3f:f2:c9:d0:23:ea:e7:bd:f7:6c:87:ad:
         87:6c:e8:8a:bf:d1:44:3c:da:af:2a:b8:e3:68:b6:f1:f9:93:
         f8:34:6e:12:22:93:61:96:0e:e2:9e:ed:d5:7d:c4:b7:ec:04:
         cc:71:a9:f8:82:38:7b:37:2b:cf:37:f3:5f:d3:65:ce:da:34:
         04:69:74:d9:be:5c:31:08:65:f9:88:70:12:79:f5:9c:45:05:
         44:ba:21:6f:f3:5f:8f:7d:f6:9e:6d:3d:09:78:83:c6:f7:fd:
         5a:17:a9:e8:01:c2:dc:79:a4:b6:92:41:1b:fd:ae:fa:ff:9d:
         59:ac:c0:a8:4f:3b:4d:ed:27:bf:94:7b:53:68:f9:01:b2:ea:
         07:84:2a:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 22:10:27 2025 by rpki-client