Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EFKEnx9WWdpy6bfnULB87wKJLDYsxmQK5JRhfahZqNWM/0/3137302e3234342e3230302e302f32332d3234203d3e20323636303133.roa
File:                     3137302e3234342e3230302e302f32332d3234203d3e20323636303133.roa (raw, json)
Hash identifier:          QzRZ9yXSMiyyvFaZaJHDnxI+Y9iIx8d7khVueeAyYv8=
Subject key identifier:   42:A9:9F:15:54:C5:DC:83:90:C2:1D:C1:5F:23:4B:EF:90:10:04:93
Certificate issuer:       /CN=3E391CDC3CC1BDEEC274362D8C82DA54383DDA7B
Certificate serial:       13B6573E68FF3AE329DFD7300AE2642B0C56B639
Authority key identifier: 3E:39:1C:DC:3C:C1:BD:EE:C2:74:36:2D:8C:82:DA:54:38:3D:DA:7B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3E391CDC3CC1BDEEC274362D8C82DA54383DDA7B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EFKEnx9WWdpy6bfnULB87wKJLDYsxmQK5JRhfahZqNWM/0/3137302e3234342e3230302e302f32332d3234203d3e20323636303133.roa
Signing time:             Tue 26 Jul 2022 14:48:55 +0000
ROA not before:           Tue 26 Jul 2022 14:43:55 +0000
ROA not after:            Tue 25 Jul 2023 14:48:55 +0000
asID:                     266013
IP address blocks:        170.244.200.0/23 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:b6:57:3e:68:ff:3a:e3:29:df:d7:30:0a:e2:64:2b:0c:56:b6:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3E391CDC3CC1BDEEC274362D8C82DA54383DDA7B
        Validity
            Not Before: Jul 26 14:43:55 2022 GMT
            Not After : Jul 25 14:48:55 2023 GMT
        Subject: CN=42A99F1554C5DC8390C21DC15F234BEF90100493
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:2c:78:36:a4:6d:ef:94:c6:45:ad:04:80:e2:
                    5f:19:51:fd:6d:96:0e:70:42:f4:ce:d1:f6:0c:83:
                    b9:f7:87:92:de:35:bf:13:e4:15:d5:c7:e0:96:26:
                    8c:42:66:82:8c:75:a5:26:5f:63:d5:ff:8d:6a:7e:
                    80:85:43:34:b2:6c:07:9e:ad:2f:d4:60:0a:fd:53:
                    ea:2e:2b:1f:cc:77:99:01:36:48:46:05:1d:55:3e:
                    76:86:77:33:cf:93:95:13:1e:a3:6f:d8:33:5f:f4:
                    d4:14:49:47:92:90:5a:77:a6:57:37:1a:a6:eb:4b:
                    18:34:64:8d:53:fc:8b:e1:9e:c5:a3:be:8b:a2:6a:
                    59:b3:1e:61:67:71:57:4c:5b:31:85:8f:9a:73:97:
                    2f:ed:83:bb:70:f2:80:e6:16:34:68:8f:2b:f8:20:
                    0a:be:8e:ed:75:30:f8:51:4d:3b:ec:91:06:84:1e:
                    20:ea:28:d7:ab:0e:7c:28:91:2d:51:49:4a:85:46:
                    97:8d:ce:27:8e:a3:41:df:6f:b6:00:49:c1:85:32:
                    f5:91:fc:cc:31:77:44:09:c0:08:02:94:9c:bf:8e:
                    bf:f4:5a:04:b7:3f:0b:c8:87:23:c6:a0:38:1a:5b:
                    12:a6:a3:25:9a:6a:3e:01:68:6d:cb:10:84:5e:03:
                    8d:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:A9:9F:15:54:C5:DC:83:90:C2:1D:C1:5F:23:4B:EF:90:10:04:93
            X509v3 Authority Key Identifier:
                keyid:3E:39:1C:DC:3C:C1:BD:EE:C2:74:36:2D:8C:82:DA:54:38:3D:DA:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EFKEnx9WWdpy6bfnULB87wKJLDYsxmQK5JRhfahZqNWM/0/3E391CDC3CC1BDEEC274362D8C82DA54383DDA7B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3E391CDC3CC1BDEEC274362D8C82DA54383DDA7B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EFKEnx9WWdpy6bfnULB87wKJLDYsxmQK5JRhfahZqNWM/0/3137302e3234342e3230302e302f32332d3234203d3e20323636303133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.244.200.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2c:4b:06:58:c6:7d:69:89:57:1a:2a:e3:39:a6:76:df:bd:ac:
         7e:83:6c:51:9c:64:a4:ee:66:43:f8:b1:f4:26:17:3b:94:92:
         9e:23:e5:14:04:4c:79:99:b2:ea:c4:fe:12:d4:dd:f5:b4:9d:
         c6:8b:98:26:30:70:03:e8:3b:28:b9:ed:45:56:78:ed:c2:6e:
         86:66:55:d0:eb:c7:95:77:d6:94:e2:71:6e:f7:10:39:b9:68:
         18:6b:5d:d8:3c:89:1a:e4:8a:3a:cc:01:95:1a:59:60:34:92:
         bc:7b:31:ad:3c:2a:c5:42:74:25:4b:d9:d1:1a:24:3c:fe:0e:
         13:92:2b:d0:3d:d9:ad:1c:e1:4b:8a:6a:e7:c9:64:b0:bb:19:
         6b:10:a4:7a:fc:46:7e:3b:68:94:20:37:3b:28:f3:0a:8a:99:
         96:5d:67:c6:8e:14:1a:fe:88:50:18:7f:5a:00:2d:43:0f:6e:
         a1:58:bc:f3:f6:18:03:45:79:95:c9:e4:ef:31:43:06:72:94:
         5a:46:90:f2:02:6f:0a:68:5e:09:65:1d:59:a9:8b:0c:a3:79:
         d7:e6:c5:5e:1d:d0:39:a3:52:22:fb:a9:3f:2c:e3:20:e6:c2:
         4c:51:74:11:aa:ef:b7:b5:31:1a:f2:45:98:52:a1:c0:08:8d:
         f4:fd:c3:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 19:35:44 2025 by rpki-client