Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/3137302e38302e3137372e302f32342d3234203d3e20323632323933.roa
File:                     3137302e38302e3137372e302f32342d3234203d3e20323632323933.roa (raw, json)
Hash identifier:          70+j3XA1ML9DEAWEAGKTdDHu+JCvPImoQJJq0OucNHM=
Subject key identifier:   2A:76:29:19:4E:53:F3:E8:40:02:AC:88:21:DE:B0:DB:47:40:4F:C1
Certificate issuer:       /CN=1A01AD3383BFA38B76F1CA139958102A17AF0391
Certificate serial:       7D28D8C20A6B4F9BD17E356818A31F6E78F80CDF
Authority key identifier: 1A:01:AD:33:83:BF:A3:8B:76:F1:CA:13:99:58:10:2A:17:AF:03:91
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1A01AD3383BFA38B76F1CA139958102A17AF0391.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/3137302e38302e3137372e302f32342d3234203d3e20323632323933.roa
Signing time:             Tue 02 Jan 2024 21:16:41 +0000
ROA not before:           Tue 02 Jan 2024 21:11:41 +0000
ROA not after:            Tue 31 Dec 2024 21:16:41 +0000
asID:                     262293
IP address blocks:        170.80.177.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:28:d8:c2:0a:6b:4f:9b:d1:7e:35:68:18:a3:1f:6e:78:f8:0c:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1A01AD3383BFA38B76F1CA139958102A17AF0391
        Validity
            Not Before: Jan  2 21:11:41 2024 GMT
            Not After : Dec 31 21:16:41 2024 GMT
        Subject: CN=2A7629194E53F3E84002AC8821DEB0DB47404FC1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:19:a7:f1:34:90:62:58:2d:bb:d8:d2:e2:9c:
                    71:9c:4e:0c:76:b6:11:e3:b8:b6:5f:0d:c8:2e:cd:
                    60:bb:49:be:b3:09:51:0e:69:29:3f:56:14:3d:e2:
                    2a:77:b3:b3:2c:d9:cc:18:f3:9a:03:d6:46:25:56:
                    38:5c:db:3d:3f:bb:1d:37:5a:7b:a9:50:07:fa:6c:
                    23:7b:4a:09:74:cc:18:76:e1:0c:01:8e:e1:22:07:
                    da:aa:e6:c5:b5:6a:b0:cf:29:86:7a:cd:b9:21:0e:
                    89:0d:14:ce:c8:2c:38:6d:f7:10:5a:6a:de:a6:47:
                    00:8d:1f:a2:38:05:18:98:2d:15:7a:58:1e:58:d4:
                    d7:95:cf:ff:9a:40:5c:06:ae:96:33:96:04:11:cf:
                    fb:1c:6a:f5:be:05:34:fd:71:4f:2b:18:6e:ea:63:
                    d7:07:66:5a:ba:9b:73:2e:76:77:ef:a2:bc:d8:b1:
                    9e:4a:f5:1a:6a:53:7a:a6:7a:64:bc:4f:c8:8e:44:
                    2f:e8:97:4a:65:c3:38:d7:44:a5:52:42:65:94:30:
                    c0:3b:35:f3:10:b3:69:e9:2a:d3:df:fc:de:15:ee:
                    13:7c:7e:e4:66:7a:d0:32:2c:d7:45:a7:a4:9b:0d:
                    c4:07:23:9f:23:c9:47:c9:1f:05:d4:8f:a6:10:4c:
                    98:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:76:29:19:4E:53:F3:E8:40:02:AC:88:21:DE:B0:DB:47:40:4F:C1
            X509v3 Authority Key Identifier:
                keyid:1A:01:AD:33:83:BF:A3:8B:76:F1:CA:13:99:58:10:2A:17:AF:03:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/1A01AD3383BFA38B76F1CA139958102A17AF0391.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1A01AD3383BFA38B76F1CA139958102A17AF0391.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/3137302e38302e3137372e302f32342d3234203d3e20323632323933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.80.177.0/24

    Signature Algorithm: sha256WithRSAEncryption
         16:02:f4:4d:97:15:cc:cd:86:a3:40:45:65:bf:6e:fa:a6:54:
         dc:53:16:5e:76:f6:96:1a:84:89:5d:98:d7:64:14:80:c8:e3:
         5a:50:5d:20:77:96:3f:07:b7:fc:13:47:1e:c8:49:04:fd:96:
         75:e4:52:3d:1c:73:ea:d1:3d:11:a5:23:4f:23:fa:30:7c:54:
         24:10:ef:1e:a4:10:34:81:5a:4a:27:22:92:11:d7:a8:b8:65:
         d2:a4:c2:2f:09:d4:a4:ca:51:42:22:89:d4:fb:ff:79:d7:97:
         e7:3c:29:15:c7:81:01:e3:a0:a6:26:59:55:61:a7:be:f4:59:
         6e:83:88:cc:ec:0e:d8:e6:56:95:b9:a6:18:46:d3:4e:21:9e:
         7b:04:e9:6d:73:9c:90:3d:da:b0:5b:88:53:89:98:51:a3:d3:
         89:bc:df:21:8e:79:9c:8c:f6:bc:a6:50:ae:fd:cd:45:29:8f:
         56:bf:2f:df:6e:71:80:d3:b8:cd:ad:7f:34:ad:c3:2c:1c:47:
         db:f2:c9:c1:65:1d:b1:50:3e:2c:4a:c2:3f:21:7a:d0:fa:10:
         9c:18:3e:0b:63:cd:81:df:83:fe:d1:8b:8b:bc:7f:60:b1:df:
         4e:e9:c2:49:78:a0:d3:8c:b8:59:af:72:58:3e:e1:ba:55:74:
         14:0f:89:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 22:45:42 2025 by rpki-client