Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/WjC2kN2a2kKoSjPCG2YFmwVmaXFEoVPfpEqoAWUnxit/0/3137302e302e37322e302f32322d3234203d3e20323634393736.roa
File:                     3137302e302e37322e302f32322d3234203d3e20323634393736.roa (raw, json)
Hash identifier:          77nitan1ki4Hm9TMTcbn4F5CzMLr1+6C7r5mYp6onvI=
Subject key identifier:   A0:FB:E6:5D:51:3D:D6:B3:04:93:45:AC:C4:88:76:A6:29:29:1F:36
Certificate issuer:       /CN=08E333C06394592EBD88071C54EC6431E2CC2416
Certificate serial:       784295CF16F98CB966C270093BE6FDD18D579DBB
Authority key identifier: 08:E3:33:C0:63:94:59:2E:BD:88:07:1C:54:EC:64:31:E2:CC:24:16
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/08E333C06394592EBD88071C54EC6431E2CC2416.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/WjC2kN2a2kKoSjPCG2YFmwVmaXFEoVPfpEqoAWUnxit/0/3137302e302e37322e302f32322d3234203d3e20323634393736.roa
Signing time:             Tue 16 May 2023 13:43:30 +0000
ROA not before:           Tue 16 May 2023 13:38:30 +0000
ROA not after:            Tue 14 May 2024 13:43:30 +0000
asID:                     264976
IP address blocks:        170.0.72.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:42:95:cf:16:f9:8c:b9:66:c2:70:09:3b:e6:fd:d1:8d:57:9d:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08E333C06394592EBD88071C54EC6431E2CC2416
        Validity
            Not Before: May 16 13:38:30 2023 GMT
            Not After : May 14 13:43:30 2024 GMT
        Subject: CN=A0FBE65D513DD6B3049345ACC48876A629291F36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:d4:27:1a:b4:54:38:84:53:a4:9a:ef:dd:9d:
                    05:5c:ad:f5:4b:24:af:26:2d:44:34:68:83:cf:a0:
                    2e:4d:40:9b:f8:bb:6c:c1:21:2d:19:28:6f:f2:27:
                    74:a4:c3:ea:4c:2b:f9:d0:38:16:28:87:37:1e:6d:
                    e4:5e:d6:77:5d:4c:2e:bb:ca:5e:fd:87:a5:1c:23:
                    a7:90:1b:82:f6:e4:c1:f5:b4:2b:ac:0f:eb:46:54:
                    12:80:57:aa:0d:13:1b:e8:11:23:55:7c:a1:cb:b3:
                    59:77:36:85:b4:70:3d:11:31:b7:31:90:a7:7d:6c:
                    c2:4f:3d:c5:67:ba:82:03:50:cc:90:06:f0:fa:ab:
                    43:64:18:65:fe:16:ab:86:b9:95:34:a1:54:1e:5d:
                    e6:ae:25:ed:60:9c:0c:dd:23:88:a7:6b:b6:56:e8:
                    51:a4:9b:b4:82:a6:38:c1:f2:2f:2b:84:93:71:59:
                    4a:77:d9:ba:61:03:b4:2d:0a:a1:ba:03:d1:81:4e:
                    a9:e4:80:16:81:3c:bf:07:f0:38:50:e7:92:23:66:
                    72:4f:94:80:14:64:60:2b:cd:77:5d:de:a6:80:c5:
                    d2:ad:fb:a4:18:c6:77:f0:52:96:82:a1:eb:d2:a8:
                    61:00:09:f3:eb:13:01:13:9c:d9:37:17:41:e4:50:
                    10:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:FB:E6:5D:51:3D:D6:B3:04:93:45:AC:C4:88:76:A6:29:29:1F:36
            X509v3 Authority Key Identifier:
                keyid:08:E3:33:C0:63:94:59:2E:BD:88:07:1C:54:EC:64:31:E2:CC:24:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/WjC2kN2a2kKoSjPCG2YFmwVmaXFEoVPfpEqoAWUnxit/0/08E333C06394592EBD88071C54EC6431E2CC2416.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/08E333C06394592EBD88071C54EC6431E2CC2416.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/WjC2kN2a2kKoSjPCG2YFmwVmaXFEoVPfpEqoAWUnxit/0/3137302e302e37322e302f32322d3234203d3e20323634393736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.0.72.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5a:90:45:f5:c7:1e:73:86:49:d1:5c:f0:6a:e1:68:1a:29:57:
         6a:46:3b:d9:55:4a:09:a2:82:07:92:b9:32:6b:8a:c7:27:60:
         f2:89:c4:d4:9b:5e:d5:51:46:ce:d7:fd:85:d6:13:b8:c5:3b:
         77:4d:96:d9:5c:ee:d2:c8:22:ba:a7:97:93:b6:ca:35:82:b0:
         77:bf:86:7d:0b:28:1c:b7:8f:7d:48:5c:c1:fa:b1:ea:5e:8c:
         f3:16:ec:77:c0:5b:23:ee:3a:a3:66:5b:5b:8e:34:67:1c:1e:
         b4:bb:1d:11:53:23:1e:e5:8a:01:5f:47:b6:ef:93:f1:55:48:
         0a:fe:01:f9:84:22:47:ee:82:77:68:e7:a3:b6:e9:24:2e:3d:
         4d:32:1d:30:79:f4:d6:ef:8e:96:ec:68:56:25:87:8a:e0:9e:
         8a:52:d7:fa:7d:2d:25:8d:a6:b3:b8:dd:00:aa:03:43:5d:03:
         7b:89:dd:66:77:9e:ea:2f:50:4a:0e:ce:f1:e8:a4:3f:b8:23:
         ca:e2:e2:05:e8:e2:54:a0:6d:74:29:2f:6a:ab:31:55:2f:6b:
         c5:66:e7:92:9d:30:05:95:86:af:d3:3b:22:9e:36:59:47:76:
         11:36:f1:b7:db:48:cc:58:d4:d8:38:a7:d3:83:0f:7e:4d:ce:
         99:aa:71:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 12:16:43 2025 by rpki-client