Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GxS1HkbMUJ74HqafsjbKn3WrRLrnUmMb2aPfDQ1Gx6PY/0/3137302e38332e3230302e302f32322d3232203d3e20323633343730.roa
File:                     3137302e38332e3230302e302f32322d3232203d3e20323633343730.roa (raw, json)
Hash identifier:          3iMn0mVA+o6u+OwMoJDOissKJNokK+tnefkqA1WxY+E=
Subject key identifier:   5B:AF:48:B6:69:F6:06:40:C8:FE:3B:CC:7E:E0:FD:7C:C9:3C:74:F3
Certificate issuer:       /CN=AEB737F52DA6273E23A0E1C8BBB9EC1DC8F446A4
Certificate serial:       362577573BF7AE4C903BE0679026B4134B3754DC
Authority key identifier: AE:B7:37:F5:2D:A6:27:3E:23:A0:E1:C8:BB:B9:EC:1D:C8:F4:46:A4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AEB737F52DA6273E23A0E1C8BBB9EC1DC8F446A4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GxS1HkbMUJ74HqafsjbKn3WrRLrnUmMb2aPfDQ1Gx6PY/0/3137302e38332e3230302e302f32322d3232203d3e20323633343730.roa
Signing time:             Mon 16 Dec 2024 20:59:29 +0000
ROA not before:           Mon 16 Dec 2024 20:54:29 +0000
ROA not after:            Mon 15 Dec 2025 20:59:29 +0000
asID:                     263470
IP address blocks:        170.83.200.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:25:77:57:3b:f7:ae:4c:90:3b:e0:67:90:26:b4:13:4b:37:54:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AEB737F52DA6273E23A0E1C8BBB9EC1DC8F446A4
        Validity
            Not Before: Dec 16 20:54:29 2024 GMT
            Not After : Dec 15 20:59:29 2025 GMT
        Subject: CN=5BAF48B669F60640C8FE3BCC7EE0FD7CC93C74F3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:21:65:bb:b7:9c:65:15:3e:46:ff:05:a9:4f:
                    c2:d1:d5:e5:c8:e3:3a:85:94:80:d8:12:72:2a:7b:
                    17:68:c3:03:3d:94:8a:32:08:e6:9d:85:c1:a7:f9:
                    08:b4:cd:de:c2:b4:6f:d5:5e:7d:86:b0:53:e1:86:
                    69:ce:bd:33:9d:df:97:79:52:f1:a5:6c:29:b7:2a:
                    3d:4d:d6:9c:9b:c4:21:6b:5f:12:81:9b:a2:4e:b5:
                    c2:37:62:03:7a:5e:e2:26:6c:05:2d:80:e9:2d:0b:
                    fa:64:76:14:59:0a:67:b5:c3:7e:6f:2f:c7:bf:0c:
                    6a:c8:92:eb:9c:0b:ee:3c:ae:78:0d:61:e8:1e:de:
                    2e:b4:4a:f9:bb:bf:ab:da:a5:46:e6:7f:e4:1d:6a:
                    76:33:2e:33:b2:dc:06:e5:f1:d2:ea:3c:80:17:4d:
                    00:6f:38:f6:05:ac:25:a7:50:d3:9e:26:f7:5d:7f:
                    37:86:c4:7f:68:9a:72:b7:f3:da:a7:42:52:eb:67:
                    89:88:6f:60:22:5b:02:8a:96:56:72:63:60:56:55:
                    72:37:d6:81:ea:fe:c3:06:bf:47:29:77:28:66:e8:
                    d5:ea:7f:65:c5:f3:c3:38:3b:9d:85:8f:d4:82:c6:
                    e9:55:23:13:b3:c5:9d:52:a9:6f:70:07:60:99:aa:
                    93:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:AF:48:B6:69:F6:06:40:C8:FE:3B:CC:7E:E0:FD:7C:C9:3C:74:F3
            X509v3 Authority Key Identifier:
                keyid:AE:B7:37:F5:2D:A6:27:3E:23:A0:E1:C8:BB:B9:EC:1D:C8:F4:46:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GxS1HkbMUJ74HqafsjbKn3WrRLrnUmMb2aPfDQ1Gx6PY/0/AEB737F52DA6273E23A0E1C8BBB9EC1DC8F446A4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AEB737F52DA6273E23A0E1C8BBB9EC1DC8F446A4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GxS1HkbMUJ74HqafsjbKn3WrRLrnUmMb2aPfDQ1Gx6PY/0/3137302e38332e3230302e302f32322d3232203d3e20323633343730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.83.200.0/22

    Signature Algorithm: sha256WithRSAEncryption
         af:d3:43:54:55:ef:b1:d2:58:ff:24:ed:a1:ce:9f:f2:d4:00:
         f5:f2:d9:b3:91:09:df:be:16:06:86:12:2d:4d:73:3c:e8:0e:
         82:b3:42:a7:0e:9c:f7:ee:f4:72:e0:55:ea:22:1e:4d:27:cb:
         82:11:cb:3b:cb:c2:19:9e:c8:9b:6e:68:fb:6b:8e:0d:0d:77:
         52:e3:cf:92:17:67:ec:3d:1c:a3:7c:52:8b:fd:57:d9:7d:c6:
         bb:28:4c:aa:fd:af:74:cc:92:58:09:09:fd:29:7b:18:86:96:
         36:80:8a:37:1f:0b:84:7c:06:44:6b:0f:2b:21:59:90:cf:44:
         05:ad:d5:93:2c:4b:9b:9b:78:b7:88:af:e5:98:e6:33:f4:3d:
         d3:f3:45:c2:e4:2b:71:39:15:01:92:01:8b:a1:ad:4e:60:6c:
         34:99:a4:9b:bd:e7:c2:12:f5:bb:8b:05:22:2c:b4:e9:71:0e:
         a3:54:ce:6b:2c:94:b1:2b:05:4c:1a:03:e0:15:83:19:88:85:
         cb:e6:48:63:74:07:49:92:e4:21:15:e1:dd:6e:6c:c8:3f:20:
         44:d5:56:2f:4b:06:66:15:f1:59:c2:a7:08:95:f4:b4:a1:31:
         1d:a3:03:19:e9:33:33:0f:a6:dd:a9:dc:7b:49:ec:87:7f:c5:
         7e:da:d8:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 18:31:24 2025 by rpki-client