Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/RZvY2SqjHmXdaekeTuVbpqQoYpvMDFrYWCPrcPgsjWD/0/3137302e37392e3139362e302f32322d3232203d3e20323636333130.roa
File:                     3137302e37392e3139362e302f32322d3232203d3e20323636333130.roa (raw, json)
Hash identifier:          oETLqgGWyffzH6MdlVajxwDoMB3/P6er+z+ioyq/YqA=
Subject key identifier:   9D:F0:A5:25:68:A1:9D:7A:64:89:4B:74:50:5C:6F:42:AB:B2:A0:6D
Certificate issuer:       /CN=4314A8D7EDCECD2C467E1EF8634BDC6275077A86
Certificate serial:       2A90005035D0DC05301E62D3387003EBB065ACC1
Authority key identifier: 43:14:A8:D7:ED:CE:CD:2C:46:7E:1E:F8:63:4B:DC:62:75:07:7A:86
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4314A8D7EDCECD2C467E1EF8634BDC6275077A86.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/RZvY2SqjHmXdaekeTuVbpqQoYpvMDFrYWCPrcPgsjWD/0/3137302e37392e3139362e302f32322d3232203d3e20323636333130.roa
Signing time:             Mon 18 Dec 2023 17:55:10 +0000
ROA not before:           Mon 18 Dec 2023 17:50:10 +0000
ROA not after:            Mon 16 Dec 2024 17:55:10 +0000
asID:                     266310
IP address blocks:        170.79.196.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:90:00:50:35:d0:dc:05:30:1e:62:d3:38:70:03:eb:b0:65:ac:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4314A8D7EDCECD2C467E1EF8634BDC6275077A86
        Validity
            Not Before: Dec 18 17:50:10 2023 GMT
            Not After : Dec 16 17:55:10 2024 GMT
        Subject: CN=9DF0A52568A19D7A64894B74505C6F42ABB2A06D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:ef:0a:62:24:21:99:66:ca:0d:6d:5a:d6:35:
                    e8:3f:41:5a:44:30:07:47:aa:c4:c6:4f:e4:7b:bf:
                    de:23:7f:e9:4b:11:a6:0a:60:fc:fa:b9:03:dc:ff:
                    a5:14:67:51:1e:20:24:d5:ab:84:ae:e6:03:77:72:
                    07:94:ca:4a:21:d3:29:c7:96:77:09:83:82:71:39:
                    a7:9d:43:04:ad:8f:5e:d7:dc:79:d7:96:18:d5:77:
                    fa:24:2e:14:2e:53:9e:c4:0e:af:7d:23:9c:29:cd:
                    ca:c8:f5:40:8f:c9:fe:24:9c:ab:bc:a8:7c:68:d2:
                    98:dc:72:c5:e7:2a:f8:70:5a:22:4e:49:16:f9:85:
                    ac:f2:73:f3:1a:fe:02:91:26:6f:c3:0d:06:28:65:
                    ba:a3:15:51:0c:45:8e:29:d6:04:91:42:a0:7d:ea:
                    45:8b:31:4b:c4:2d:b3:9f:42:ed:8a:e6:12:fd:5e:
                    23:6e:6c:e5:78:ce:b5:e3:55:a9:a4:de:c1:e1:44:
                    4b:01:b2:8e:0b:d4:8b:42:eb:e7:87:8c:19:3a:ab:
                    27:0b:b9:1c:f9:14:a6:06:3d:82:f2:54:65:46:38:
                    11:7a:f9:e0:48:14:46:66:30:8a:62:ce:49:6d:59:
                    ec:ad:c1:95:19:20:d0:64:78:76:32:69:d6:87:95:
                    85:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:F0:A5:25:68:A1:9D:7A:64:89:4B:74:50:5C:6F:42:AB:B2:A0:6D
            X509v3 Authority Key Identifier:
                keyid:43:14:A8:D7:ED:CE:CD:2C:46:7E:1E:F8:63:4B:DC:62:75:07:7A:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/RZvY2SqjHmXdaekeTuVbpqQoYpvMDFrYWCPrcPgsjWD/0/4314A8D7EDCECD2C467E1EF8634BDC6275077A86.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4314A8D7EDCECD2C467E1EF8634BDC6275077A86.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/RZvY2SqjHmXdaekeTuVbpqQoYpvMDFrYWCPrcPgsjWD/0/3137302e37392e3139362e302f32322d3232203d3e20323636333130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.79.196.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0e:c3:84:5a:19:26:99:96:ab:d2:b7:e1:f1:bf:3e:95:23:da:
         92:7a:9a:54:32:31:cb:7d:3d:f3:f2:57:71:b3:ed:12:81:20:
         44:2c:d2:31:2b:96:7a:6f:32:4a:f5:90:7c:2b:0f:2c:c3:f0:
         1a:15:0f:84:8c:de:f3:cf:c8:f0:13:3b:6e:99:f0:e5:ff:ad:
         91:7f:b8:7e:4a:1f:a4:db:b6:19:70:06:78:0c:2e:4d:5f:5e:
         0c:f7:aa:b7:f1:12:81:11:08:67:1d:d0:6c:93:f1:82:cf:2a:
         90:28:4e:ae:e7:dd:5d:ab:8a:9f:16:9d:bc:6e:e1:d0:7b:0c:
         34:95:b6:7d:42:d5:4e:6b:75:de:8a:7f:af:b5:5f:5b:6e:aa:
         e9:1c:49:3f:79:ae:59:1f:82:d5:c1:00:49:60:f1:6d:b7:21:
         28:b9:92:94:33:a6:e8:ed:4e:86:49:82:4d:07:96:58:56:cc:
         ae:59:1a:01:d4:72:15:98:70:06:65:41:32:eb:9e:a4:74:bb:
         ae:6d:39:71:38:a6:71:8c:06:2d:8f:85:78:c6:ae:cd:2b:23:
         f2:96:e9:9e:c7:3b:4c:48:b7:cc:1e:10:2a:1f:a0:a6:8d:77:
         ee:1e:4f:26:4f:35:c3:e7:ec:b1:c1:21:bd:70:20:e7:49:20:
         fc:be:b2:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:31:25 2025 by rpki-client