Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Gycfu9YetLPNXxaHSd6wJrJdDt6d8UMa9E1ADX1jYPj8/0/3137302e38302e3131322e302f32322d3233203d3e20323636333736.roa
File:                     3137302e38302e3131322e302f32322d3233203d3e20323636333736.roa (raw, json)
Hash identifier:          Ju1Hvvrse37ZVfz7oScxnutYPd1Fn0/HJi5KVJNScxQ=
Subject key identifier:   63:2D:3D:4B:07:FC:22:EB:31:9F:21:C6:25:43:72:48:DA:1A:B6:36
Certificate issuer:       /CN=2FC18E66BC8956CC2B6B8E02F4E8A4DDB7732859
Certificate serial:       2B6A2B2E5FB31AD0A8FEDAFD932FC34604A4C994
Authority key identifier: 2F:C1:8E:66:BC:89:56:CC:2B:6B:8E:02:F4:E8:A4:DD:B7:73:28:59
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2FC18E66BC8956CC2B6B8E02F4E8A4DDB7732859.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Gycfu9YetLPNXxaHSd6wJrJdDt6d8UMa9E1ADX1jYPj8/0/3137302e38302e3131322e302f32322d3233203d3e20323636333736.roa
Signing time:             Sun 02 Feb 2025 14:34:42 +0000
ROA not before:           Sun 02 Feb 2025 14:29:42 +0000
ROA not after:            Sun 01 Feb 2026 14:34:42 +0000
asID:                     266376
IP address blocks:        170.80.112.0/22 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:6a:2b:2e:5f:b3:1a:d0:a8:fe:da:fd:93:2f:c3:46:04:a4:c9:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2FC18E66BC8956CC2B6B8E02F4E8A4DDB7732859
        Validity
            Not Before: Feb  2 14:29:42 2025 GMT
            Not After : Feb  1 14:34:42 2026 GMT
        Subject: CN=632D3D4B07FC22EB319F21C625437248DA1AB636
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:70:20:78:16:b9:44:31:6a:58:c5:6b:41:b3:
                    a0:63:58:af:a8:af:e8:ba:a8:3f:77:d3:3f:25:55:
                    fd:3d:26:4e:42:2a:3a:c5:c2:4c:d4:83:8f:1e:17:
                    f6:2f:0e:bb:c0:02:37:8a:f0:9a:bb:80:a5:9c:3e:
                    ae:f0:21:91:52:a6:04:b9:4f:da:2a:3e:a0:f0:b9:
                    1c:86:38:0c:69:63:94:10:88:6c:f7:f3:85:77:a0:
                    da:37:61:1e:ee:a1:42:9b:c2:b5:82:d7:95:38:e7:
                    59:ab:33:51:c0:32:4a:5f:d1:28:04:11:1f:29:da:
                    d2:f1:56:ec:e7:82:3f:7b:01:08:2c:f9:f2:58:38:
                    14:60:9c:fb:3a:c6:30:41:ca:45:a0:ec:42:35:cb:
                    40:a1:b4:88:f8:76:99:98:7c:94:ae:b5:3a:5e:9d:
                    03:6a:82:c4:76:92:4e:76:ec:4a:aa:cf:b4:d1:57:
                    c6:bc:f8:ef:54:5f:3f:4b:fe:2e:32:e4:85:2e:80:
                    85:3d:8a:44:3c:3d:bc:78:a4:af:f9:14:1d:ad:eb:
                    d1:a1:42:d2:3b:e3:c5:b3:f3:64:77:1b:08:e3:e7:
                    6e:ef:cf:7a:ea:5f:f5:d7:62:ae:f5:24:0d:6b:dd:
                    99:1f:b1:b1:05:2d:94:80:20:92:dd:83:da:2d:ba:
                    dc:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:2D:3D:4B:07:FC:22:EB:31:9F:21:C6:25:43:72:48:DA:1A:B6:36
            X509v3 Authority Key Identifier:
                keyid:2F:C1:8E:66:BC:89:56:CC:2B:6B:8E:02:F4:E8:A4:DD:B7:73:28:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Gycfu9YetLPNXxaHSd6wJrJdDt6d8UMa9E1ADX1jYPj8/0/2FC18E66BC8956CC2B6B8E02F4E8A4DDB7732859.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2FC18E66BC8956CC2B6B8E02F4E8A4DDB7732859.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gycfu9YetLPNXxaHSd6wJrJdDt6d8UMa9E1ADX1jYPj8/0/3137302e38302e3131322e302f32322d3233203d3e20323636333736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.80.112.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4f:f1:0f:27:36:a8:be:6e:70:b1:f1:84:55:0b:b3:43:0e:7b:
         01:df:ae:35:0e:07:38:4d:d9:2f:d4:9c:e9:8e:d5:d7:10:46:
         36:f3:ac:f5:24:1f:4b:5e:b3:b0:75:16:81:d0:55:ca:21:52:
         81:52:27:50:82:a3:69:52:10:f2:ea:20:12:e4:ad:bb:c4:b8:
         bb:5e:94:03:89:cf:7b:c0:2f:3e:dd:07:e0:82:12:26:0b:eb:
         19:29:06:9f:04:2b:dd:3c:49:b1:35:90:8c:a2:00:8f:6b:d3:
         be:d7:d2:1a:8f:91:6e:d3:c7:95:a0:ab:c9:3d:44:2c:a7:d2:
         63:4d:3c:44:69:cd:5b:34:01:8d:00:99:22:e1:3e:99:c2:06:
         26:3c:ae:5e:14:f9:2c:4f:0f:04:f4:2c:4b:55:7c:d1:bf:19:
         c4:18:dd:83:c5:54:17:e6:67:85:39:05:6c:22:8a:e6:b4:77:
         d9:e2:55:c7:a5:4a:54:58:58:e4:ea:99:ba:0c:50:e3:fb:78:
         4d:f7:9e:9d:ae:46:db:44:65:50:60:18:38:18:bc:ee:5c:66:
         d6:6d:14:0c:52:f0:8e:63:e5:20:86:ac:95:19:01:81:96:08:
         e5:9a:58:2e:a3:03:85:86:a5:a9:ba:73:cc:7c:2e:e3:34:7e:
         32:6f:55:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 00:18:32 2025 by rpki-client