Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/25WGeMUgekHJd873ZgHdcJ99sWDnYQzVmJyUrNPPtD9S/0/3137302e3234352e3132302e302f32322d3332203d3e20323633393830.roa
File:                     3137302e3234352e3132302e302f32322d3332203d3e20323633393830.roa (raw, json)
Hash identifier:          zy3eKnfR9WuoVUTGr+9Vsj9ryLe6M8MwPYoL1nOTcME=
Subject key identifier:   A3:56:01:4B:57:CC:7B:31:7C:1C:D4:18:67:0B:24:BC:12:5C:23:F2
Certificate issuer:       /CN=B12447B85424C8CE3169B0E67CABACBC33124F16
Certificate serial:       6DE662AE60505551F8F70DC12225B9E0185D1DF2
Authority key identifier: B1:24:47:B8:54:24:C8:CE:31:69:B0:E6:7C:AB:AC:BC:33:12:4F:16
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B12447B85424C8CE3169B0E67CABACBC33124F16.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/25WGeMUgekHJd873ZgHdcJ99sWDnYQzVmJyUrNPPtD9S/0/3137302e3234352e3132302e302f32322d3332203d3e20323633393830.roa
Signing time:             Thu 16 Jan 2025 12:22:18 +0000
ROA not before:           Thu 16 Jan 2025 12:17:18 +0000
ROA not after:            Thu 15 Jan 2026 12:22:18 +0000
asID:                     263980
IP address blocks:        170.245.120.0/22 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:e6:62:ae:60:50:55:51:f8:f7:0d:c1:22:25:b9:e0:18:5d:1d:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B12447B85424C8CE3169B0E67CABACBC33124F16
        Validity
            Not Before: Jan 16 12:17:18 2025 GMT
            Not After : Jan 15 12:22:18 2026 GMT
        Subject: CN=A356014B57CC7B317C1CD418670B24BC125C23F2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:86:a6:6f:67:5c:de:51:87:bb:7e:81:b4:47:
                    ca:90:2d:8d:b2:5d:05:ce:1b:fd:dd:ac:19:7b:e7:
                    ca:2e:5b:d8:9d:a9:eb:21:93:c1:05:69:f6:1b:ea:
                    fb:38:30:ac:dd:58:38:2c:ab:6a:c0:33:71:2a:94:
                    44:13:63:22:6a:f1:c3:17:31:ad:39:f3:fd:c2:cb:
                    4c:94:a7:fd:24:dd:0a:4e:f0:21:00:1b:aa:27:7b:
                    00:7f:a9:ed:32:9e:5f:9f:c0:c5:ae:0a:f6:8b:6b:
                    02:63:08:04:b5:6a:3f:18:be:75:47:34:f4:49:d0:
                    e3:48:52:90:fa:d4:be:3a:c1:4f:8f:b0:61:c6:1c:
                    e9:55:ce:b6:99:f7:e6:a8:da:6b:0e:a4:d5:c7:21:
                    1c:11:94:26:a7:f8:60:6c:04:bd:1d:63:9b:b5:4e:
                    33:32:dd:5d:70:11:19:67:89:ab:37:2c:1b:a6:43:
                    11:36:2a:f7:a1:73:47:0a:4f:f4:87:06:7f:d2:ce:
                    15:4f:31:7e:8c:99:82:f6:e6:94:ee:0e:4b:c2:ee:
                    0e:9f:af:8b:0f:4e:dd:04:ca:30:8e:07:da:79:49:
                    e5:4e:51:44:76:be:04:b5:4a:81:cd:d1:76:49:a4:
                    a4:cb:b6:48:8a:a4:a6:2b:7d:ac:1e:d4:6c:3a:d1:
                    65:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:56:01:4B:57:CC:7B:31:7C:1C:D4:18:67:0B:24:BC:12:5C:23:F2
            X509v3 Authority Key Identifier:
                keyid:B1:24:47:B8:54:24:C8:CE:31:69:B0:E6:7C:AB:AC:BC:33:12:4F:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/25WGeMUgekHJd873ZgHdcJ99sWDnYQzVmJyUrNPPtD9S/0/B12447B85424C8CE3169B0E67CABACBC33124F16.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B12447B85424C8CE3169B0E67CABACBC33124F16.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/25WGeMUgekHJd873ZgHdcJ99sWDnYQzVmJyUrNPPtD9S/0/3137302e3234352e3132302e302f32322d3332203d3e20323633393830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.245.120.0/22

    Signature Algorithm: sha256WithRSAEncryption
         79:9f:3f:65:06:3f:ec:2a:0c:19:47:24:20:15:83:00:46:43:
         93:99:39:41:91:14:e5:38:47:ac:a3:61:f8:7c:7f:47:88:d4:
         2e:30:0e:f4:88:a2:0c:62:f1:b5:62:73:82:eb:d8:5f:bb:f1:
         dc:50:54:6e:c8:5a:00:7c:e3:78:25:2a:ac:72:c3:7e:01:7c:
         f2:40:a1:6f:70:46:c8:9a:d7:7d:79:41:90:25:9c:ea:01:64:
         f6:00:9d:ca:a4:c8:83:13:fe:1e:32:dc:b2:1b:d7:92:48:1d:
         5a:0b:b5:aa:10:2e:73:48:91:d6:32:45:50:68:a0:9b:ba:4b:
         19:bd:54:28:3d:b6:8a:98:1e:f0:f5:49:4d:e4:e1:97:b4:5a:
         c7:23:0e:b1:7e:ea:41:9e:c4:4d:24:b4:87:e4:8e:08:ef:68:
         e7:1c:ca:4c:11:39:6c:79:95:86:d2:0c:5a:57:b1:55:9d:0e:
         3a:10:c8:b2:fc:41:9b:1f:8e:69:17:ae:67:b1:69:f0:66:54:
         bf:7c:51:35:66:f6:12:d3:1c:cf:9f:1e:4d:89:4a:10:0e:4f:
         c4:9e:fc:9e:b7:75:67:8b:fd:ca:ef:70:33:db:4f:84:ee:66:
         4b:3b:be:27:fe:90:3e:c5:53:70:47:c9:65:f0:67:37:c7:44:
         56:ca:3a:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 19:21:26 2025 by rpki-client