Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/PrF8WEgUmzu5e63DZTcTWnxGjDmbe8HXTBrorxuK7ff/1/3137302e3234352e3136302e302f32322d3234203d3e20323635303433.roa
File:                     3137302e3234352e3136302e302f32322d3234203d3e20323635303433.roa (raw, json)
Hash identifier:          n2rLUYku5feE4NPklpn/OZfYHMWsT3P4nYLH70LzlY8=
Subject key identifier:   13:D3:74:8C:DA:6B:A0:BB:C9:71:93:92:A6:07:DC:43:87:14:68:43
Certificate issuer:       /CN=8F7C897DFF70774947A63DAC93567C79586D1B6C
Certificate serial:       264DF020166DFD3D97CB439BD16D68F4D9FA2EBC
Authority key identifier: 8F:7C:89:7D:FF:70:77:49:47:A6:3D:AC:93:56:7C:79:58:6D:1B:6C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8F7C897DFF70774947A63DAC93567C79586D1B6C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/PrF8WEgUmzu5e63DZTcTWnxGjDmbe8HXTBrorxuK7ff/1/3137302e3234352e3136302e302f32322d3234203d3e20323635303433.roa
Signing time:             Thu 06 Mar 2025 03:45:37 +0000
ROA not before:           Thu 06 Mar 2025 03:40:37 +0000
ROA not after:            Thu 05 Mar 2026 03:45:37 +0000
asID:                     265043
IP address blocks:        170.245.160.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:4d:f0:20:16:6d:fd:3d:97:cb:43:9b:d1:6d:68:f4:d9:fa:2e:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8F7C897DFF70774947A63DAC93567C79586D1B6C
        Validity
            Not Before: Mar  6 03:40:37 2025 GMT
            Not After : Mar  5 03:45:37 2026 GMT
        Subject: CN=13D3748CDA6BA0BBC9719392A607DC4387146843
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:73:4e:d3:68:3d:bc:58:cb:a6:5d:c0:1d:0d:
                    c1:92:c2:f5:d6:9b:ba:97:49:2b:7d:ee:97:02:ab:
                    cb:ca:fd:09:ae:ab:6b:0b:be:40:b9:d3:e4:03:a4:
                    84:26:55:35:41:22:20:a2:e1:1d:8b:e0:27:5f:65:
                    37:af:6d:3f:77:68:bc:ca:1a:ad:82:24:8c:4f:36:
                    67:5a:91:59:f3:08:f5:12:ad:99:b6:f9:18:ad:ca:
                    97:6d:a2:60:c3:db:13:5f:9d:56:21:76:e2:c6:9b:
                    0e:10:34:38:0a:e8:28:70:e0:bb:a5:6c:f3:8d:45:
                    1f:4b:39:4a:0a:7d:0e:3f:12:66:96:1a:f0:64:75:
                    26:2c:c7:81:f3:e5:93:4f:9c:69:4a:10:57:d6:c4:
                    e4:9c:74:f2:9a:27:3a:b1:b3:55:b8:06:2f:2c:a8:
                    b7:af:93:dc:3b:8b:9f:e6:7c:65:38:a8:f2:93:7b:
                    17:c8:d5:95:cc:02:c7:ba:d9:c3:a7:81:63:f0:d1:
                    a6:8d:47:81:bb:01:d9:23:dc:19:7a:fc:4d:14:ba:
                    7a:d5:93:75:ec:bf:99:72:4f:89:26:c5:60:77:ec:
                    69:3e:df:4f:bd:c5:77:b8:9d:50:a8:31:32:d8:6b:
                    d1:dd:24:73:ad:8c:76:48:87:47:6d:be:f6:96:ae:
                    c8:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:D3:74:8C:DA:6B:A0:BB:C9:71:93:92:A6:07:DC:43:87:14:68:43
            X509v3 Authority Key Identifier:
                keyid:8F:7C:89:7D:FF:70:77:49:47:A6:3D:AC:93:56:7C:79:58:6D:1B:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/PrF8WEgUmzu5e63DZTcTWnxGjDmbe8HXTBrorxuK7ff/1/8F7C897DFF70774947A63DAC93567C79586D1B6C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8F7C897DFF70774947A63DAC93567C79586D1B6C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/PrF8WEgUmzu5e63DZTcTWnxGjDmbe8HXTBrorxuK7ff/1/3137302e3234352e3136302e302f32322d3234203d3e20323635303433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.245.160.0/22

    Signature Algorithm: sha256WithRSAEncryption
         91:3f:0b:d5:0c:ee:d9:60:7a:c2:a6:2d:ed:b7:55:8c:28:f4:
         c8:a9:33:fc:13:16:df:e9:f0:51:7a:f9:1a:68:d9:76:e9:08:
         0f:06:26:71:33:3d:94:f0:91:b8:aa:d6:42:bf:90:a9:bd:ca:
         6c:02:fe:c6:e0:32:a5:87:f7:9f:f1:95:2b:49:d6:6e:65:b2:
         67:fa:65:c2:d9:83:4e:ce:c0:da:c0:a4:40:a8:a1:85:d5:8a:
         46:87:0d:c3:07:53:3c:87:f4:a7:50:f9:01:ec:8f:37:28:ef:
         23:a5:a5:d7:97:f2:17:cb:4c:fb:08:6c:01:7e:52:e8:49:cd:
         af:f9:43:15:d4:ae:84:cd:65:58:90:55:4a:1b:7b:3d:84:a0:
         bf:34:11:7d:85:a7:cd:29:ae:68:91:d0:68:80:f7:b7:74:2d:
         fc:65:9f:b8:77:d3:1b:67:9c:42:ca:52:42:b7:5d:8a:25:de:
         b6:2f:76:25:c5:3e:19:46:2f:b2:1f:35:fb:62:2a:75:35:35:
         31:6e:ed:02:fe:8a:3d:4a:e2:3e:3a:f7:13:af:e1:6c:4b:25:
         51:9b:e5:ae:43:5b:01:26:4f:33:74:08:f5:b3:bf:cc:fb:06:
         3c:05:69:73:3d:95:d4:a5:c8:f6:6d:ea:4d:3b:bf:bc:bf:c9:
         01:06:fa:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 06:05:31 2025 by rpki-client