Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HoWTbUGPXKXs7QPCaDcVXCXXphsvTfsZCmpRiuqZMkY4/1/3137302e38322e32322e302f32332d3332203d3e20323636343430.roa
File:                     3137302e38322e32322e302f32332d3332203d3e20323636343430.roa (raw, json)
Hash identifier:          5649V15Ljk3TniB9lhIalsEFjIQ4g6vzQcc18GPRQSY=
Subject key identifier:   85:CF:75:AD:67:FD:52:E6:CB:77:BC:13:7D:EC:E7:CF:01:36:A5:0F
Certificate issuer:       /CN=173575C0A80D771EAA0F32E222AB0B65E8D87849
Certificate serial:       16B5B05F9870B4918DC95D09037DC3911E105059
Authority key identifier: 17:35:75:C0:A8:0D:77:1E:AA:0F:32:E2:22:AB:0B:65:E8:D8:78:49
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/173575C0A80D771EAA0F32E222AB0B65E8D87849.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HoWTbUGPXKXs7QPCaDcVXCXXphsvTfsZCmpRiuqZMkY4/1/3137302e38322e32322e302f32332d3332203d3e20323636343430.roa
Signing time:             Tue 09 Apr 2024 21:20:18 +0000
ROA not before:           Tue 09 Apr 2024 21:15:18 +0000
ROA not after:            Tue 08 Apr 2025 21:20:18 +0000
asID:                     266440
IP address blocks:        170.82.22.0/23 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:b5:b0:5f:98:70:b4:91:8d:c9:5d:09:03:7d:c3:91:1e:10:50:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=173575C0A80D771EAA0F32E222AB0B65E8D87849
        Validity
            Not Before: Apr  9 21:15:18 2024 GMT
            Not After : Apr  8 21:20:18 2025 GMT
        Subject: CN=85CF75AD67FD52E6CB77BC137DECE7CF0136A50F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:11:23:fd:53:90:0e:c0:d8:d0:ec:b7:ae:e5:
                    7f:c4:8a:30:55:2b:8e:fe:ba:26:5e:46:3c:8f:b9:
                    16:a0:15:76:e5:94:9c:37:8a:e7:be:91:29:e7:24:
                    37:13:df:8a:cd:9a:9e:67:aa:7d:96:d0:1b:88:dc:
                    d1:c1:60:cc:b6:ca:66:ed:6b:7d:04:f3:03:72:ea:
                    92:5d:5a:98:ba:2a:b3:c6:7c:8c:ad:05:e7:fe:2b:
                    62:e7:10:8e:03:2c:9f:36:01:88:5c:b8:ef:6c:03:
                    7c:ff:cd:0e:54:5b:81:9a:04:3c:43:96:7d:fa:bc:
                    b6:2b:e2:cf:b4:db:02:40:f7:42:4f:86:07:f7:ce:
                    67:b9:85:d7:f6:ab:f1:05:49:f9:42:67:77:8f:2b:
                    eb:75:5f:4c:27:1e:87:cb:8c:c5:bb:bd:bf:8b:e2:
                    10:21:95:e2:0f:d7:0e:4f:14:ad:43:56:c8:59:ba:
                    11:f6:8f:38:71:ab:93:7e:dd:b7:99:70:cf:60:af:
                    38:a9:fe:99:30:ca:80:c2:c8:33:ec:2c:ef:86:7a:
                    7b:02:11:54:5d:d1:08:57:17:35:04:30:61:e0:b8:
                    9b:12:3c:74:79:46:88:8a:c9:69:fa:3b:79:30:bb:
                    3c:6e:11:a3:97:06:24:a8:09:08:04:4c:e1:1b:77:
                    3c:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:CF:75:AD:67:FD:52:E6:CB:77:BC:13:7D:EC:E7:CF:01:36:A5:0F
            X509v3 Authority Key Identifier:
                keyid:17:35:75:C0:A8:0D:77:1E:AA:0F:32:E2:22:AB:0B:65:E8:D8:78:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HoWTbUGPXKXs7QPCaDcVXCXXphsvTfsZCmpRiuqZMkY4/1/173575C0A80D771EAA0F32E222AB0B65E8D87849.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/173575C0A80D771EAA0F32E222AB0B65E8D87849.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HoWTbUGPXKXs7QPCaDcVXCXXphsvTfsZCmpRiuqZMkY4/1/3137302e38322e32322e302f32332d3332203d3e20323636343430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.82.22.0/23

    Signature Algorithm: sha256WithRSAEncryption
         70:45:97:89:59:88:0d:b1:e1:92:82:37:fd:d6:01:83:c0:af:
         3a:9b:3d:1a:a1:be:5b:8f:3a:92:9b:6a:29:92:60:20:80:0f:
         f1:fb:00:34:a4:59:c8:a5:bd:1d:76:62:9f:b1:55:0a:d0:01:
         e4:ff:c7:60:55:af:75:43:7f:9f:04:65:5c:cd:3b:c5:4d:fd:
         16:ab:65:0b:c8:d0:40:0b:bf:00:21:00:98:f5:74:be:4f:b1:
         47:fb:70:95:1e:b7:8b:7c:6a:e8:20:6c:4a:9b:be:14:d3:2b:
         02:47:cb:0d:03:e1:a2:13:f9:61:b5:0e:2e:09:d4:c8:b7:80:
         d0:bc:19:7c:d4:83:37:ad:ff:d4:83:18:12:8a:ba:05:08:ec:
         27:5a:41:33:99:cc:a5:58:b2:b6:15:30:a6:2c:7b:47:53:15:
         5c:ac:95:ac:45:29:5a:d9:ce:67:45:05:60:86:c8:3a:2a:85:
         78:99:84:58:38:33:e2:6e:e2:fa:b1:00:68:00:14:61:b2:ca:
         ba:09:7a:40:57:a3:c8:0d:cf:fa:5e:a4:e2:36:78:84:b3:b9:
         ac:6f:e2:2d:cb:86:c7:d8:cf:d4:cf:c1:83:b4:88:83:4e:34:
         6c:0d:4d:ee:13:90:3b:a4:9a:9c:a8:d7:d0:ba:1f:ae:60:c2:
         09:8b:1f:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:44:24 2025 by rpki-client