Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/0/3137302e3233312e3132382e302f32322d3234203d3e203238313832.roa
File:                     3137302e3233312e3132382e302f32322d3234203d3e203238313832.roa (raw, json)
Hash identifier:          U3/wp6UbqyPtqICuvsN/4x3EWVcLt8ocbXO/XCMd4OA=
Subject key identifier:   38:CD:8F:62:F6:12:CA:3A:79:B2:FB:EF:11:39:95:BE:0E:CD:8C:44
Certificate issuer:       /CN=214830E53E884DA5FC21A586B90AB77FE89D064D
Certificate serial:       6178CB14711252C99CC57BD78FEE874454BF7647
Authority key identifier: 21:48:30:E5:3E:88:4D:A5:FC:21:A5:86:B9:0A:B7:7F:E8:9D:06:4D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/214830E53E884DA5FC21A586B90AB77FE89D064D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/0/3137302e3233312e3132382e302f32322d3234203d3e203238313832.roa
Signing time:             Wed 01 Feb 2023 22:00:00 +0000
ROA not before:           Wed 01 Feb 2023 21:55:00 +0000
ROA not after:            Wed 31 Jan 2024 22:00:00 +0000
asID:                     28182
IP address blocks:        170.231.128.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:78:cb:14:71:12:52:c9:9c:c5:7b:d7:8f:ee:87:44:54:bf:76:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=214830E53E884DA5FC21A586B90AB77FE89D064D
        Validity
            Not Before: Feb  1 21:55:00 2023 GMT
            Not After : Jan 31 22:00:00 2024 GMT
        Subject: CN=38CD8F62F612CA3A79B2FBEF113995BE0ECD8C44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:e7:41:c6:b2:fa:7f:2a:0f:f8:f8:8a:2c:8b:
                    97:91:f9:a4:47:8d:5d:6c:a4:17:a3:af:1a:08:13:
                    b4:72:74:79:9e:16:b2:fb:7d:a4:5f:7a:c9:63:8f:
                    ed:b8:ef:4d:9c:34:09:c0:89:8d:1e:f2:01:b4:53:
                    2f:6d:b1:1a:0a:1c:8e:e9:69:c9:5e:50:f6:ad:f8:
                    1b:d4:f0:d7:27:b1:29:f1:ba:e7:ea:12:14:c7:8f:
                    e6:b8:f7:5e:f2:24:ac:22:7c:81:b2:6c:d8:58:30:
                    cc:a7:cc:bd:bf:4d:e3:bf:bc:fc:ca:2f:dc:ce:bc:
                    f8:d7:50:1f:ec:af:d6:1e:d4:1b:35:ac:8b:ba:59:
                    00:69:85:2d:79:55:da:df:25:7e:51:65:ab:ef:40:
                    b0:e9:7f:ed:74:3b:2d:10:67:d6:6e:57:b2:aa:13:
                    69:a6:a6:95:52:50:0b:5e:e9:7e:3b:66:54:f2:86:
                    53:b0:e3:e1:93:e9:68:73:63:0d:29:10:58:9d:ea:
                    27:53:d8:76:49:4e:df:27:d6:ef:19:04:66:2f:a6:
                    ec:fd:04:a6:dc:0f:5a:15:dc:73:fa:d6:25:99:f2:
                    23:72:3b:3d:c1:0a:70:39:5f:07:c3:b9:4d:c2:66:
                    ea:c0:51:bc:13:2e:6f:41:12:f6:22:b9:65:0a:9e:
                    a4:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:CD:8F:62:F6:12:CA:3A:79:B2:FB:EF:11:39:95:BE:0E:CD:8C:44
            X509v3 Authority Key Identifier:
                keyid:21:48:30:E5:3E:88:4D:A5:FC:21:A5:86:B9:0A:B7:7F:E8:9D:06:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/0/214830E53E884DA5FC21A586B90AB77FE89D064D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/214830E53E884DA5FC21A586B90AB77FE89D064D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/0/3137302e3233312e3132382e302f32322d3234203d3e203238313832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.231.128.0/22

    Signature Algorithm: sha256WithRSAEncryption
         24:24:2c:2d:e7:5a:f2:33:e4:00:91:1b:03:75:0e:fb:57:36:
         db:68:70:ef:f8:0d:91:67:11:56:9d:73:fd:31:ef:c8:d2:ee:
         c4:46:6f:f2:8b:10:5f:f0:0a:10:06:eb:b6:34:ba:f4:df:df:
         e2:6a:f6:2d:b3:f3:aa:44:5a:99:52:a0:26:68:1a:52:1c:08:
         b8:90:97:c9:d2:d4:d5:a8:86:e4:0d:36:8f:d0:97:3c:ba:85:
         c3:92:bb:60:b8:a6:99:d7:b6:65:66:47:4d:3d:a0:2e:28:2d:
         fb:ff:5f:eb:e9:94:42:b1:5e:b1:d4:30:5e:08:c6:ee:b1:18:
         de:7b:01:e3:dd:a6:03:8c:8c:e6:d7:0b:cf:29:ff:0c:b2:c4:
         97:43:cd:6f:17:9e:84:18:1a:e5:fe:73:cc:a7:ea:1f:a7:c0:
         cb:c5:96:3c:21:0c:49:62:bb:ec:c1:32:a0:cf:72:ae:10:45:
         d0:e4:3f:f2:18:8c:7e:fd:65:da:83:ec:c0:69:d3:d7:ff:68:
         91:fc:45:a3:cb:37:2b:5b:16:e2:b7:07:15:39:3c:6b:d9:2f:
         a2:cc:15:c0:16:2c:e5:7e:71:2d:27:63:e9:45:f7:fb:12:ba:
         09:1e:10:41:55:bc:4c:d4:1e:d6:ce:76:50:f7:a8:2a:9c:b1:
         d3:78:bc:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 04:01:39 2025 by rpki-client