Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/WjC2kN2a2kKoSjPCG2YFmwVmaXFEoVPfpEqoAWUnxit/0/3137302e302e37322e302f32322d3232203d3e20323634393736.roa
File:                     3137302e302e37322e302f32322d3232203d3e20323634393736.roa (raw, json)
Hash identifier:          uTpOJvM0bjzlutJW+q6WabH2h1mVj1mDglo5GdlIHFs=
Subject key identifier:   C5:A8:35:68:E5:3C:22:F8:23:41:0E:0F:48:9D:34:6B:E7:DE:B6:D2
Certificate issuer:       /CN=7B1C504FB51A90CCE88AF689D913ED200F45BAB4
Certificate serial:       7F96130B5FDCD86FC24018BCE4CFFAF6C1E56AFC
Authority key identifier: 7B:1C:50:4F:B5:1A:90:CC:E8:8A:F6:89:D9:13:ED:20:0F:45:BA:B4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7B1C504FB51A90CCE88AF689D913ED200F45BAB4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/WjC2kN2a2kKoSjPCG2YFmwVmaXFEoVPfpEqoAWUnxit/0/3137302e302e37322e302f32322d3232203d3e20323634393736.roa
Signing time:             Tue 09 Nov 2021 15:00:00 +0000
ROA not before:           Tue 09 Nov 2021 14:55:00 +0000
ROA not after:            Wed 09 Nov 2022 15:00:00 +0000
asID:                     264976
IP address blocks:        170.0.72.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:96:13:0b:5f:dc:d8:6f:c2:40:18:bc:e4:cf:fa:f6:c1:e5:6a:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7B1C504FB51A90CCE88AF689D913ED200F45BAB4
        Validity
            Not Before: Nov  9 14:55:00 2021 GMT
            Not After : Nov  9 15:00:00 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:97:f4:73:ee:03:7d:da:aa:d7:a0:10:b9:c5:
                    1e:81:49:21:dc:bf:bb:e2:a2:26:2f:ea:39:d6:f9:
                    71:f9:31:f0:78:f5:65:67:e7:29:50:5f:4b:a0:44:
                    59:ab:be:4a:b0:85:fd:67:94:46:f2:79:99:32:e6:
                    50:7c:a3:d4:c4:35:c5:5f:f5:9e:09:b5:01:20:a1:
                    f5:d0:0d:23:36:e1:bf:a4:f6:ae:79:c4:8b:e0:df:
                    e4:6d:04:4c:32:ce:92:bf:e2:21:a1:75:e1:b4:47:
                    2a:6a:78:8a:2e:ed:80:b7:30:e0:35:3d:87:86:b0:
                    74:fb:79:26:b5:b3:9f:5a:76:a7:b4:5d:c6:f8:40:
                    25:f1:74:ea:16:36:2b:c8:61:a7:8b:b3:51:ad:70:
                    24:9f:05:3c:41:b7:98:6c:43:67:46:82:56:69:89:
                    b8:f3:6b:1e:8d:de:de:ca:2e:31:16:a0:02:80:be:
                    55:65:27:81:db:43:dc:71:a6:01:1a:f7:20:aa:d3:
                    44:30:24:0c:7f:9a:6b:06:df:a6:60:5f:0e:11:9b:
                    3b:3c:3d:c8:de:34:a5:06:5e:1d:3e:9b:76:22:29:
                    c7:0d:a9:39:6d:ca:d1:2b:e4:be:fb:be:dc:54:20:
                    21:9e:63:c5:e8:95:1b:cc:89:c9:9c:69:d3:f7:93:
                    6f:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:A8:35:68:E5:3C:22:F8:23:41:0E:0F:48:9D:34:6B:E7:DE:B6:D2
            X509v3 Authority Key Identifier:
                keyid:7B:1C:50:4F:B5:1A:90:CC:E8:8A:F6:89:D9:13:ED:20:0F:45:BA:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/WjC2kN2a2kKoSjPCG2YFmwVmaXFEoVPfpEqoAWUnxit/0/7B1C504FB51A90CCE88AF689D913ED200F45BAB4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7B1C504FB51A90CCE88AF689D913ED200F45BAB4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/WjC2kN2a2kKoSjPCG2YFmwVmaXFEoVPfpEqoAWUnxit/0/3137302e302e37322e302f32322d3232203d3e20323634393736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.0.72.0/22

    Signature Algorithm: sha256WithRSAEncryption
         cb:12:d2:d3:3c:15:45:a0:2c:2c:71:82:0a:b9:06:d9:e0:c5:
         68:a8:7b:e0:e9:55:70:03:13:36:4c:d3:f5:a6:64:68:63:cd:
         66:6b:82:4a:1d:77:78:97:76:40:5f:92:36:cb:d2:a0:5f:d5:
         7d:b3:81:ca:cc:8a:6f:a0:31:ff:35:c7:3d:90:cc:49:40:ba:
         ae:bc:18:0d:fa:e1:5a:c9:3c:9d:9c:ba:0b:34:9d:9e:3e:aa:
         7a:3b:e0:19:65:a7:f3:e2:4b:27:d1:77:ab:51:8a:b8:07:38:
         93:f9:bb:43:ff:cc:83:ff:e8:61:6e:3d:1b:67:74:15:e7:6d:
         9c:1e:28:ed:3c:37:28:78:51:b2:0f:e0:e2:90:8d:a4:d2:c7:
         c2:a0:12:ea:29:87:e9:be:e8:24:8e:d7:a5:12:c3:97:5a:ff:
         37:09:38:27:88:c3:8f:d5:ea:f2:55:f2:33:74:85:a2:01:18:
         87:14:cb:68:a3:b0:19:2e:d0:81:a0:9e:5f:ca:10:99:5d:a0:
         9f:e8:22:00:b7:fb:79:e7:0e:a6:9f:52:d7:fa:ae:c3:6d:23:
         55:27:aa:e4:04:a6:33:10:6c:1b:df:f3:09:d2:98:92:6e:d9:
         09:a2:93:58:63:99:f5:6c:d2:a1:b5:d2:b1:f3:bd:f0:c5:6a:
         b4:60:12:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 02:16:33 2025 by rpki-client