Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3x89Kq9jL1Wodh8sHSBGiPeYgmXTWjRXHwCMNcAGyfDg/0/3137302e38312e3130302e302f32332d3233203d3e20323636343133.roa
File:                     3137302e38312e3130302e302f32332d3233203d3e20323636343133.roa (raw, json)
Hash identifier:          /5MmeycCZQkysxztkeNJQUcgHTesR+pCqpxBMhWQHFI=
Subject key identifier:   2A:89:1D:7A:93:06:E9:54:A5:7C:33:4F:B8:87:36:08:1D:0F:7B:E0
Certificate issuer:       /CN=76BC8672B6C71CBFC423D1106E72877D60284FD6
Certificate serial:       7076F7041F430B1069B1995E299CA61593C561FD
Authority key identifier: 76:BC:86:72:B6:C7:1C:BF:C4:23:D1:10:6E:72:87:7D:60:28:4F:D6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/76BC8672B6C71CBFC423D1106E72877D60284FD6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3x89Kq9jL1Wodh8sHSBGiPeYgmXTWjRXHwCMNcAGyfDg/0/3137302e38312e3130302e302f32332d3233203d3e20323636343133.roa
Signing time:             Thu 04 Jul 2024 02:17:19 +0000
ROA not before:           Thu 04 Jul 2024 02:12:19 +0000
ROA not after:            Thu 03 Jul 2025 02:17:19 +0000
asID:                     266413
IP address blocks:        170.81.100.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:76:f7:04:1f:43:0b:10:69:b1:99:5e:29:9c:a6:15:93:c5:61:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76BC8672B6C71CBFC423D1106E72877D60284FD6
        Validity
            Not Before: Jul  4 02:12:19 2024 GMT
            Not After : Jul  3 02:17:19 2025 GMT
        Subject: CN=2A891D7A9306E954A57C334FB88736081D0F7BE0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:18:2a:c4:25:cf:21:30:c6:eb:b0:d0:45:0e:
                    6e:fb:0a:e7:9a:e2:47:62:8b:1e:ab:d4:e0:69:0c:
                    ea:26:2c:f0:0b:78:4d:a5:0c:3f:c4:46:8e:a2:04:
                    26:e6:4d:b4:5a:fb:a1:61:79:09:96:ff:f7:3b:15:
                    66:1c:82:39:58:4c:70:65:ad:b0:fe:89:2d:df:11:
                    ae:12:8b:73:a4:e1:b5:3a:ae:01:b6:ce:53:4b:96:
                    ae:2a:33:5d:01:86:fc:8a:40:f5:45:29:15:96:73:
                    96:36:09:22:f8:3a:17:28:db:ca:39:5f:15:12:b3:
                    3e:2f:94:ba:ff:e7:0b:0d:de:19:53:fe:e3:03:05:
                    56:40:e0:72:10:ff:f7:6e:4d:7d:75:73:67:83:84:
                    61:c8:09:8b:86:a5:ef:05:be:a9:1a:3f:25:11:1e:
                    28:5e:34:24:a3:b7:37:f3:ab:20:a9:6b:f4:bc:6d:
                    c2:f8:df:72:84:ec:61:74:2b:35:9c:8c:1d:84:33:
                    69:7d:5e:18:98:30:bf:b7:de:09:8f:e8:60:22:e5:
                    71:e3:85:ae:d7:50:d4:be:6e:5e:2b:c2:9b:16:c0:
                    e4:9d:2a:8f:e7:ff:b6:d4:40:61:b3:d9:6a:6a:b9:
                    94:0b:94:29:4e:b4:a3:8a:4d:a6:59:f6:db:18:38:
                    fd:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:89:1D:7A:93:06:E9:54:A5:7C:33:4F:B8:87:36:08:1D:0F:7B:E0
            X509v3 Authority Key Identifier:
                keyid:76:BC:86:72:B6:C7:1C:BF:C4:23:D1:10:6E:72:87:7D:60:28:4F:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3x89Kq9jL1Wodh8sHSBGiPeYgmXTWjRXHwCMNcAGyfDg/0/76BC8672B6C71CBFC423D1106E72877D60284FD6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/76BC8672B6C71CBFC423D1106E72877D60284FD6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3x89Kq9jL1Wodh8sHSBGiPeYgmXTWjRXHwCMNcAGyfDg/0/3137302e38312e3130302e302f32332d3233203d3e20323636343133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.81.100.0/23

    Signature Algorithm: sha256WithRSAEncryption
         92:dc:76:4f:e7:07:89:03:70:71:ce:9a:ee:51:38:b2:90:e2:
         84:bb:ea:37:67:b4:b1:67:b4:45:ec:52:20:2f:8e:e6:60:86:
         b0:c7:bd:48:ab:d6:4a:82:aa:23:26:bc:0a:01:9e:27:4e:7c:
         18:34:97:a3:e9:2e:c1:08:a1:95:ad:c6:0f:63:bb:37:dc:ce:
         9a:13:d3:c4:a5:40:bb:76:a0:91:8e:24:99:fa:92:13:5e:3f:
         6f:fc:40:22:31:35:81:f0:72:ba:9f:7f:9b:64:23:7b:96:f5:
         38:21:f3:b2:68:f9:68:4f:48:a5:ba:2c:c0:17:43:e6:26:8c:
         11:7b:12:6b:55:71:95:33:77:91:60:33:2d:b2:d3:0f:79:5c:
         d3:21:44:0d:0f:a3:92:bb:c3:96:5e:55:3c:77:94:23:dc:f4:
         ad:a0:7e:b1:87:0a:09:eb:c8:d2:b3:97:db:63:f6:59:69:b5:
         0b:e4:54:2b:5e:03:5c:49:7d:80:16:63:75:ce:48:ef:37:24:
         04:d7:42:50:b6:96:b1:f7:4e:e6:87:98:b6:89:a4:b6:f0:7f:
         c7:44:04:0b:f0:6d:f4:83:15:21:07:fa:a6:87:fd:cc:92:1c:
         33:25:e7:5a:00:4d:1c:75:15:84:11:61:23:31:e7:97:61:dd:
         54:e5:ff:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 05:54:33 2025 by rpki-client