Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HwRtKBKxSP5bQFmnC58yZRBNt6G5XLMy1Awm2NQ6dnvN/0/3137302e38312e37322e302f32322d3234203d3e20323632343931.roa
File:                     3137302e38312e37322e302f32322d3234203d3e20323632343931.roa (raw, json)
Hash identifier:          l2EpiAkMRzcfdI0+DlXxf75970FG2oF8OYcjLRNRs7Y=
Subject key identifier:   83:7C:3D:BB:DD:D6:1F:83:C6:B0:88:34:0B:04:FE:E5:CF:4F:45:2D
Certificate issuer:       /CN=DA66142D6014A7DDF12783F088F14F7F1B3AC9DC
Certificate serial:       63C08AE45A21E7A6F74155B8D70E2F13AAA61B64
Authority key identifier: DA:66:14:2D:60:14:A7:DD:F1:27:83:F0:88:F1:4F:7F:1B:3A:C9:DC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DA66142D6014A7DDF12783F088F14F7F1B3AC9DC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HwRtKBKxSP5bQFmnC58yZRBNt6G5XLMy1Awm2NQ6dnvN/0/3137302e38312e37322e302f32322d3234203d3e20323632343931.roa
Signing time:             Sat 30 Mar 2024 14:15:31 +0000
ROA not before:           Sat 30 Mar 2024 14:10:31 +0000
ROA not after:            Sat 29 Mar 2025 14:15:31 +0000
asID:                     262491
IP address blocks:        170.81.72.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:c0:8a:e4:5a:21:e7:a6:f7:41:55:b8:d7:0e:2f:13:aa:a6:1b:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DA66142D6014A7DDF12783F088F14F7F1B3AC9DC
        Validity
            Not Before: Mar 30 14:10:31 2024 GMT
            Not After : Mar 29 14:15:31 2025 GMT
        Subject: CN=837C3DBBDDD61F83C6B088340B04FEE5CF4F452D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:60:72:ad:9a:c3:50:92:00:64:9a:b0:d5:8a:
                    c3:20:7c:20:fa:00:78:de:39:a3:ca:59:5c:3b:9d:
                    7d:ed:7b:88:e5:e8:ce:60:f8:e3:99:59:d9:32:6c:
                    c3:64:c0:93:18:86:70:c5:cc:0d:99:b9:6a:d9:66:
                    a8:32:6f:1f:95:1f:10:4d:d4:6d:77:fb:83:bb:ba:
                    31:78:5f:ee:b7:27:29:19:ae:21:a1:7f:37:0f:97:
                    06:1a:84:a6:b0:8d:52:93:18:b7:9c:1e:9a:92:64:
                    76:9d:b7:eb:5d:4a:0a:38:6f:f1:3a:63:3a:01:56:
                    ab:04:2b:25:88:0d:69:ba:e1:bd:e0:c9:49:89:6f:
                    1c:8d:54:0a:2c:c7:c8:9c:df:87:60:65:b6:f9:4c:
                    ea:3d:e8:e9:90:11:ef:95:c5:43:e4:98:45:68:9e:
                    2c:57:bf:66:28:30:c8:85:50:d1:91:d6:a3:14:08:
                    6a:3e:31:4c:2b:74:de:7e:db:7f:58:87:47:fa:0c:
                    1e:a7:75:3d:c7:c4:55:27:7a:fd:ac:fa:11:f5:78:
                    e5:73:b6:91:49:e2:74:d0:6b:2f:84:98:e9:33:c5:
                    59:e6:e9:21:b0:20:ff:55:85:aa:f6:ae:f1:05:65:
                    a7:e6:da:08:02:ab:91:de:af:e1:0a:30:eb:cc:6a:
                    d9:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:7C:3D:BB:DD:D6:1F:83:C6:B0:88:34:0B:04:FE:E5:CF:4F:45:2D
            X509v3 Authority Key Identifier:
                keyid:DA:66:14:2D:60:14:A7:DD:F1:27:83:F0:88:F1:4F:7F:1B:3A:C9:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HwRtKBKxSP5bQFmnC58yZRBNt6G5XLMy1Awm2NQ6dnvN/0/DA66142D6014A7DDF12783F088F14F7F1B3AC9DC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DA66142D6014A7DDF12783F088F14F7F1B3AC9DC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HwRtKBKxSP5bQFmnC58yZRBNt6G5XLMy1Awm2NQ6dnvN/0/3137302e38312e37322e302f32322d3234203d3e20323632343931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.81.72.0/22

    Signature Algorithm: sha256WithRSAEncryption
         29:4f:aa:2f:f9:4b:55:9d:2b:7c:6d:0a:80:b6:a1:c7:37:96:
         71:ce:93:51:f2:38:48:25:78:91:38:34:ee:40:74:9b:91:08:
         e7:3b:22:73:d4:78:1f:7f:db:ef:ec:04:7a:b0:06:53:ec:88:
         7a:98:cd:84:bb:db:17:31:1b:a8:d1:d5:46:45:b4:de:71:65:
         93:62:31:4a:e9:73:0c:69:f6:7b:2c:f5:9d:7d:3a:7c:99:d5:
         aa:68:d9:ad:65:e2:90:95:ac:ec:2a:9a:5e:2f:33:38:1d:28:
         c3:1d:e9:64:e2:58:73:8e:fb:bc:c6:9d:ae:06:5a:e2:18:86:
         bb:25:38:54:c9:f4:62:30:2b:d6:c3:ea:b5:29:09:c8:a5:26:
         04:c6:32:48:d5:2a:8d:77:2e:fd:d0:2d:01:63:4b:fa:88:a6:
         f4:18:09:af:ed:b5:5a:ad:78:cf:04:71:b2:4d:f1:85:7d:ad:
         f9:cd:96:a5:33:1e:49:b5:07:35:07:83:53:88:3e:72:4c:94:
         32:36:2d:46:ad:40:6e:98:03:cd:05:5b:ab:e8:0d:07:07:9d:
         a6:50:df:39:ac:04:40:61:42:09:94:4d:a4:88:6c:47:29:c8:
         52:19:28:d3:33:49:c7:b5:3b:8b:ba:02:b2:4f:e4:37:17:bb:
         67:e0:74:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:28:39 2025 by rpki-client