Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CWGEwbDANqF75dLCtyAFGHf7C83mX7FBQZ7Uh95i4c5v/0/3137302e3233392e38302e302f32322d3232203d3e20323636333432.roa
File:                     3137302e3233392e38302e302f32322d3232203d3e20323636333432.roa (raw, json)
Hash identifier:          OiesPiObHu9+g2qCJ8c+CZgt2L5RfgtZlhKIJ0CQbLs=
Subject key identifier:   BA:E9:2C:3E:2C:68:18:39:94:AD:A5:DF:9F:CC:0E:48:9C:E6:8A:03
Certificate issuer:       /CN=F6088D67AA9EAECE20D46E4D20E46A3447420A58
Certificate serial:       5E4AFACAF4CF8B8FE49A7B8DABE13693D8B9BD5B
Authority key identifier: F6:08:8D:67:AA:9E:AE:CE:20:D4:6E:4D:20:E4:6A:34:47:42:0A:58
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F6088D67AA9EAECE20D46E4D20E46A3447420A58.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CWGEwbDANqF75dLCtyAFGHf7C83mX7FBQZ7Uh95i4c5v/0/3137302e3233392e38302e302f32322d3232203d3e20323636333432.roa
Signing time:             Wed 21 May 2025 19:42:26 +0000
ROA not before:           Wed 21 May 2025 19:37:26 +0000
ROA not after:            Wed 20 May 2026 19:42:26 +0000
asID:                     266342
IP address blocks:        170.239.80.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:4a:fa:ca:f4:cf:8b:8f:e4:9a:7b:8d:ab:e1:36:93:d8:b9:bd:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F6088D67AA9EAECE20D46E4D20E46A3447420A58
        Validity
            Not Before: May 21 19:37:26 2025 GMT
            Not After : May 20 19:42:26 2026 GMT
        Subject: CN=BAE92C3E2C68183994ADA5DF9FCC0E489CE68A03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:21:2c:84:e0:bb:20:44:48:da:c9:c4:6e:84:
                    94:28:53:c6:fe:b2:e8:8d:e7:5c:20:a8:ea:62:73:
                    e0:86:41:a6:a7:b5:97:7f:8f:a3:14:c7:88:76:d9:
                    06:d3:fe:60:cd:b3:80:5b:04:93:6f:4c:bf:48:c9:
                    ec:32:32:1a:c0:71:3c:38:af:86:37:1f:4c:e0:7f:
                    36:66:70:7e:e4:f5:d8:5f:f8:5d:73:68:6a:fe:39:
                    1b:9f:4f:6f:36:15:86:c9:00:8d:db:23:0b:8f:5c:
                    90:35:d5:66:27:04:bf:6b:4c:b8:78:9b:48:6d:d5:
                    28:8c:8b:3d:d8:1f:96:d1:2e:63:c2:42:32:23:93:
                    f9:ac:cd:1f:a0:0d:9d:67:44:96:b3:5b:53:32:6e:
                    98:43:1c:4d:20:57:ad:30:3c:16:81:d2:0b:26:a6:
                    25:7e:d6:ec:ac:38:4e:08:03:dd:67:4e:63:e8:37:
                    7a:80:22:5a:fd:7e:c0:9f:ef:d4:c2:61:0c:1b:85:
                    9b:15:46:a9:5f:d1:20:20:bf:30:ec:88:48:bc:b2:
                    cc:d1:e3:fe:07:c4:53:78:d4:45:5e:a2:d0:12:7d:
                    5c:34:ed:a4:34:ae:9b:16:f1:12:e7:b9:76:ba:c3:
                    11:e9:71:e2:87:3d:b0:2f:3e:16:8c:9c:a0:45:d4:
                    b9:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:E9:2C:3E:2C:68:18:39:94:AD:A5:DF:9F:CC:0E:48:9C:E6:8A:03
            X509v3 Authority Key Identifier:
                keyid:F6:08:8D:67:AA:9E:AE:CE:20:D4:6E:4D:20:E4:6A:34:47:42:0A:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CWGEwbDANqF75dLCtyAFGHf7C83mX7FBQZ7Uh95i4c5v/0/F6088D67AA9EAECE20D46E4D20E46A3447420A58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F6088D67AA9EAECE20D46E4D20E46A3447420A58.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CWGEwbDANqF75dLCtyAFGHf7C83mX7FBQZ7Uh95i4c5v/0/3137302e3233392e38302e302f32322d3232203d3e20323636333432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.239.80.0/22

    Signature Algorithm: sha256WithRSAEncryption
         36:3f:54:7a:0b:58:49:bb:f0:b7:94:7d:31:4a:6a:98:49:f8:
         02:77:3c:1f:5a:97:ee:b0:a6:44:7a:87:80:b7:85:09:57:4d:
         c2:f6:11:be:cc:be:da:8a:0f:a3:72:56:f0:17:41:0d:96:e5:
         f2:1e:7e:24:cf:25:5c:0a:36:66:aa:1e:3e:97:f9:bc:c4:89:
         fc:d0:63:36:68:8b:b8:8a:10:4c:3e:6b:9e:e8:aa:21:b3:08:
         7f:57:a9:d7:2a:84:1c:2f:91:d2:e8:aa:5a:de:89:f3:8d:03:
         8d:39:50:19:d0:23:51:b8:fe:1e:5b:50:19:b6:bf:54:27:14:
         c6:de:85:f3:c0:c2:cc:1b:9a:11:98:32:d8:da:a0:17:e9:5d:
         71:8c:d8:b3:50:ca:1a:00:4d:bd:fe:d8:05:72:83:10:15:ae:
         94:60:a6:05:28:58:2c:19:75:06:f1:df:e9:63:44:40:18:56:
         27:a9:ea:f4:21:e0:4d:b5:02:5a:37:a6:b4:f7:94:c5:f6:18:
         7c:b1:34:7b:fe:2d:df:fe:6f:eb:02:27:ac:0c:ad:25:82:f2:
         cf:e7:8c:72:08:bb:0c:d3:18:53:ef:e3:eb:91:d5:2a:c8:06:
         bb:54:82:a5:90:30:1b:37:73:60:d3:8f:65:e2:dd:2b:f2:d3:
         b4:f9:b9:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 11:21:45 2025 by rpki-client