Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J4hsUgRH8mocXDA5BwSH2TTpDvsBdwqST43BEBJgEqj2/0/37322e34342e31362e302f32322d3232203d3e20323636313635.roa
File:                     37322e34342e31362e302f32322d3232203d3e20323636313635.roa (raw, json)
Hash identifier:          pfVdOHZRuuMBsd2JamYNGh0//PC9jJ1cpa/ko3wmoPo=
Subject key identifier:   49:F3:71:7A:E4:DF:5C:F7:28:16:89:06:14:75:BC:CA:A5:19:BB:33
Certificate issuer:       /CN=DFB165A55B30AAC4E32CEC8FE9B4386EF0EA8D3C
Certificate serial:       64A76FCB69E39B8C7CD493C6D42F8ABDDBE6D259
Authority key identifier: DF:B1:65:A5:5B:30:AA:C4:E3:2C:EC:8F:E9:B4:38:6E:F0:EA:8D:3C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DFB165A55B30AAC4E32CEC8FE9B4386EF0EA8D3C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J4hsUgRH8mocXDA5BwSH2TTpDvsBdwqST43BEBJgEqj2/0/37322e34342e31362e302f32322d3232203d3e20323636313635.roa
Signing time:             Mon 03 Mar 2025 23:54:29 +0000
ROA not before:           Mon 03 Mar 2025 23:49:29 +0000
ROA not after:            Mon 02 Mar 2026 23:54:29 +0000
asID:                     266165
IP address blocks:        72.44.16.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:a7:6f:cb:69:e3:9b:8c:7c:d4:93:c6:d4:2f:8a:bd:db:e6:d2:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DFB165A55B30AAC4E32CEC8FE9B4386EF0EA8D3C
        Validity
            Not Before: Mar  3 23:49:29 2025 GMT
            Not After : Mar  2 23:54:29 2026 GMT
        Subject: CN=49F3717AE4DF5CF7281689061475BCCAA519BB33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:98:76:8d:83:62:e0:b0:2d:ef:82:d1:e7:43:
                    fe:96:0e:41:93:96:2b:47:d4:6d:75:1c:0d:5e:a5:
                    7d:2d:0f:0c:fb:98:27:4b:73:f3:33:8e:34:c6:11:
                    bd:fa:9b:80:06:f4:63:1e:eb:56:33:54:9b:af:8d:
                    f4:ca:09:5c:dd:f9:0f:a0:a6:b7:66:ed:4a:93:c8:
                    fe:6d:55:f0:da:9b:06:3d:cb:af:7c:56:82:20:e6:
                    59:fb:2a:f6:ed:2d:f3:87:6a:fd:52:04:7d:5b:7a:
                    c3:2a:05:f5:a4:ab:17:a3:bb:78:df:90:36:76:28:
                    57:07:b3:a2:c6:7d:7a:7b:2f:f4:c5:f1:61:bf:ef:
                    8e:3e:66:0b:95:77:70:1f:29:b2:ef:f3:89:98:89:
                    33:f2:c3:77:5f:1f:58:36:cd:60:44:c1:37:95:76:
                    7a:af:dc:7e:82:99:d0:fc:cd:b6:38:79:d5:37:5b:
                    1a:d3:68:34:28:7a:7b:fd:b7:5b:0c:38:06:09:9c:
                    e3:b3:46:85:0d:cd:b7:19:1d:6c:ee:77:1d:30:8d:
                    2d:bb:6e:0c:99:f5:8a:85:e9:86:7b:20:7b:dd:01:
                    d0:95:25:ed:af:72:c3:cb:54:3f:5e:06:05:52:dc:
                    08:80:bb:e6:d0:a9:d5:0d:2c:b8:ac:bb:a8:3f:2a:
                    31:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:F3:71:7A:E4:DF:5C:F7:28:16:89:06:14:75:BC:CA:A5:19:BB:33
            X509v3 Authority Key Identifier:
                keyid:DF:B1:65:A5:5B:30:AA:C4:E3:2C:EC:8F:E9:B4:38:6E:F0:EA:8D:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J4hsUgRH8mocXDA5BwSH2TTpDvsBdwqST43BEBJgEqj2/0/DFB165A55B30AAC4E32CEC8FE9B4386EF0EA8D3C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DFB165A55B30AAC4E32CEC8FE9B4386EF0EA8D3C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J4hsUgRH8mocXDA5BwSH2TTpDvsBdwqST43BEBJgEqj2/0/37322e34342e31362e302f32322d3232203d3e20323636313635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.44.16.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a4:dd:0c:42:30:b8:cf:ec:3f:fd:3f:a2:22:6f:65:ec:74:e5:
         1d:37:cc:7c:93:7b:7b:ea:a8:71:9a:ed:9b:f6:56:56:a2:2a:
         28:8d:e4:b8:0f:8d:97:80:d8:ab:60:dd:c8:fa:ed:4e:13:2f:
         55:9e:44:8e:e8:e1:76:d8:4e:22:d3:82:71:f9:f8:3f:73:c7:
         fb:f0:63:36:57:4a:e9:99:d2:1e:25:e0:98:33:9d:0c:49:14:
         2b:22:68:47:ac:d5:9e:e4:4e:4c:0c:e8:dd:f1:ac:1c:cc:f6:
         12:c2:c1:62:d6:fb:a6:6b:56:c7:20:e5:bc:26:ab:e3:e6:13:
         88:5c:9a:b2:6b:b4:f3:72:ff:16:3b:8c:c0:b7:7f:84:8e:3a:
         09:d0:c8:2d:38:a1:92:15:1e:d5:9e:d7:30:d7:db:1b:84:7f:
         c2:c3:e5:fc:5c:0a:13:97:81:e0:93:59:37:45:a8:b0:99:bc:
         d3:88:32:8b:f2:44:fc:88:5e:0b:10:9a:79:11:48:de:0c:70:
         e7:ea:37:a6:b7:36:c1:6f:05:ba:a3:66:18:48:ae:3a:76:e7:
         32:db:1c:21:dd:b5:07:99:1d:b9:54:91:fe:5a:91:ee:7f:09:
         0a:12:66:15:45:8e:f9:51:18:79:bc:00:2a:9d:b9:67:ee:d9:
         4d:b9:e6:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 01:09:42 2025 by rpki-client