Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GxS1HkbMUJ74HqafsjbKn3WrRLrnUmMb2aPfDQ1Gx6PY/0/3137302e38332e3230302e302f32342d3234203d3e20323633343730.roa
File:                     3137302e38332e3230302e302f32342d3234203d3e20323633343730.roa (raw, json)
Hash identifier:          aLsAJeeBnnj55Y5K2O/Nvp23vIvTXWTlpTUi2W02DsE=
Subject key identifier:   3F:71:36:58:0B:6A:74:04:C0:17:F6:35:0A:97:7C:5B:33:7F:A1:87
Certificate issuer:       /CN=AEB737F52DA6273E23A0E1C8BBB9EC1DC8F446A4
Certificate serial:       3A6A2FA770EE43CF1309D3E3E73DEC193C9A2569
Authority key identifier: AE:B7:37:F5:2D:A6:27:3E:23:A0:E1:C8:BB:B9:EC:1D:C8:F4:46:A4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AEB737F52DA6273E23A0E1C8BBB9EC1DC8F446A4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GxS1HkbMUJ74HqafsjbKn3WrRLrnUmMb2aPfDQ1Gx6PY/0/3137302e38332e3230302e302f32342d3234203d3e20323633343730.roa
Signing time:             Mon 16 Dec 2024 20:59:09 +0000
ROA not before:           Mon 16 Dec 2024 20:54:09 +0000
ROA not after:            Mon 15 Dec 2025 20:59:09 +0000
asID:                     263470
IP address blocks:        170.83.200.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:6a:2f:a7:70:ee:43:cf:13:09:d3:e3:e7:3d:ec:19:3c:9a:25:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AEB737F52DA6273E23A0E1C8BBB9EC1DC8F446A4
        Validity
            Not Before: Dec 16 20:54:09 2024 GMT
            Not After : Dec 15 20:59:09 2025 GMT
        Subject: CN=3F7136580B6A7404C017F6350A977C5B337FA187
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:48:e5:b9:29:9b:47:09:04:1d:a9:e0:cf:33:
                    61:a6:5e:99:86:a9:2b:b4:df:16:b6:f7:df:cf:bc:
                    7b:d5:df:de:51:64:17:a3:30:d6:b4:4a:70:8b:2c:
                    00:b0:e1:e9:3c:c1:21:89:4f:90:75:45:df:0f:95:
                    24:fc:bc:4f:3c:51:91:cb:c2:dd:c0:5a:1b:3a:c6:
                    84:36:e3:8a:03:e9:c3:9d:e1:68:b1:29:91:b2:2d:
                    68:ee:f0:50:c6:71:5b:c0:21:61:2d:dc:f8:5a:5a:
                    70:5e:47:a2:74:d5:95:79:1b:fc:ca:84:8c:d3:d7:
                    ef:b9:46:b8:b8:dd:49:32:7a:79:0f:e0:e7:54:26:
                    6d:38:9b:f5:8e:4f:1a:5c:9e:05:79:49:87:b5:ff:
                    a7:0d:b8:ed:ab:fa:56:76:6d:f5:65:d1:ab:dd:ed:
                    0c:f2:4f:ac:07:1b:9c:43:e4:a4:27:16:98:14:73:
                    91:39:94:a2:cc:0b:ee:e6:64:06:5f:fd:0f:3c:3a:
                    9b:b6:64:f1:0c:2a:ae:0d:a9:7f:70:da:09:0f:4a:
                    fe:ab:82:9d:b2:52:12:f5:71:11:a6:5b:57:7c:08:
                    19:9e:f5:a5:5d:02:ba:f8:ee:b3:6b:92:b5:9a:da:
                    4e:05:f9:16:18:60:48:b3:83:3c:89:09:94:0a:39:
                    0a:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:71:36:58:0B:6A:74:04:C0:17:F6:35:0A:97:7C:5B:33:7F:A1:87
            X509v3 Authority Key Identifier:
                keyid:AE:B7:37:F5:2D:A6:27:3E:23:A0:E1:C8:BB:B9:EC:1D:C8:F4:46:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GxS1HkbMUJ74HqafsjbKn3WrRLrnUmMb2aPfDQ1Gx6PY/0/AEB737F52DA6273E23A0E1C8BBB9EC1DC8F446A4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AEB737F52DA6273E23A0E1C8BBB9EC1DC8F446A4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GxS1HkbMUJ74HqafsjbKn3WrRLrnUmMb2aPfDQ1Gx6PY/0/3137302e38332e3230302e302f32342d3234203d3e20323633343730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.83.200.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5b:9c:01:c9:c7:a3:cd:b3:a7:8d:ef:f8:e9:9b:c6:10:1c:fb:
         ee:3f:0d:f1:67:d8:3e:42:54:0c:90:57:dc:aa:7d:5f:50:89:
         59:c6:ee:7a:ac:21:a3:d9:1d:73:9a:c4:64:4a:56:99:f4:1a:
         7a:95:ee:41:b6:5f:c2:c3:59:6e:0c:b2:25:a8:66:eb:57:29:
         e8:cb:80:65:65:19:61:0c:6b:f2:fa:14:d7:a8:31:1b:cf:e2:
         b6:7e:73:6e:a2:0f:38:e7:ef:b0:44:c3:ff:48:99:68:1c:60:
         d9:f9:cc:1c:ed:ec:0e:b0:ae:6c:18:36:99:b9:3e:09:db:d4:
         46:81:ae:76:00:8f:7b:76:a8:58:0d:35:91:0c:b7:c9:58:c4:
         d0:70:6d:d1:af:78:2a:1d:62:4d:eb:a5:6a:24:f1:d4:03:72:
         66:fe:44:27:84:06:23:42:89:c1:58:69:e8:c6:e5:8d:bf:9d:
         41:9f:55:cf:8a:b6:77:4a:d9:9e:85:0e:1d:ff:0e:25:dd:3d:
         ff:75:d0:a5:0f:13:f7:bc:08:31:b2:90:d3:db:1d:55:62:3b:
         a4:af:0d:00:10:fd:8f:41:db:aa:de:d6:9b:f1:b0:a0:7b:a9:
         28:47:56:85:d5:86:35:d2:4b:27:13:0a:35:73:ba:c7:be:b4:
         3d:86:22:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 00:26:07 2025 by rpki-client