Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CWGEwbDANqF75dLCtyAFGHf7C83mX7FBQZ7Uh95i4c5v/0/3137302e3233392e38302e302f32322d3233203d3e20323636333432.roa
File:                     3137302e3233392e38302e302f32322d3233203d3e20323636333432.roa (raw, json)
Hash identifier:          cSy2Rw5O1DS57+svAaxx4uFTu2/IMIT4+kUxkC/xQoc=
Subject key identifier:   AD:F8:44:F8:45:8A:3F:3D:81:08:9A:35:71:18:D5:D0:E6:12:9C:A3
Certificate issuer:       /CN=76B785D1904E3CB89DFB1604F9827B970C9528F3
Certificate serial:       52C808B416B49774131AE4FED9DA5C810D79978C
Authority key identifier: 76:B7:85:D1:90:4E:3C:B8:9D:FB:16:04:F9:82:7B:97:0C:95:28:F3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/76B785D1904E3CB89DFB1604F9827B970C9528F3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CWGEwbDANqF75dLCtyAFGHf7C83mX7FBQZ7Uh95i4c5v/0/3137302e3233392e38302e302f32322d3233203d3e20323636333432.roa
Signing time:             Sun 22 Jun 2025 12:19:11 +0000
ROA not before:           Sun 22 Jun 2025 12:14:11 +0000
ROA not after:            Sun 21 Jun 2026 12:19:11 +0000
asID:                     266342
IP address blocks:        170.239.80.0/22 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:c8:08:b4:16:b4:97:74:13:1a:e4:fe:d9:da:5c:81:0d:79:97:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76B785D1904E3CB89DFB1604F9827B970C9528F3
        Validity
            Not Before: Jun 22 12:14:11 2025 GMT
            Not After : Jun 21 12:19:11 2026 GMT
        Subject: CN=ADF844F8458A3F3D81089A357118D5D0E6129CA3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:47:45:16:69:db:cc:5c:65:9f:56:52:91:24:
                    82:4c:bf:4b:32:7c:0a:2c:21:89:ac:0e:c3:dc:53:
                    fe:6d:96:79:38:8b:14:f5:cb:8f:10:52:b1:44:69:
                    08:c5:cb:0e:d8:3f:b7:c3:6d:f6:bc:6c:e6:3d:b3:
                    64:bc:83:3a:e1:da:b1:37:c4:13:7d:f3:74:a9:5e:
                    a1:8e:4a:f5:c6:7f:2c:21:23:bb:55:d8:df:10:36:
                    b3:17:7e:9a:10:05:99:61:b7:09:c1:8c:3e:f1:d0:
                    47:7c:5a:bf:b3:6c:d2:b4:e7:a8:7d:01:a4:2b:66:
                    82:71:4c:7f:9a:74:a5:1d:71:a4:81:08:76:2f:75:
                    cd:45:f3:fa:ea:ed:e4:f3:aa:9f:07:78:54:f0:6b:
                    d7:de:47:88:56:40:31:18:cf:47:ed:7f:47:79:31:
                    e7:2e:64:be:85:d4:1a:c8:eb:86:1d:90:32:76:9b:
                    bc:99:8a:38:f4:6d:69:61:dc:92:96:14:16:a4:1a:
                    8a:73:d2:ba:35:3d:95:cf:4f:b2:43:25:88:47:90:
                    0e:08:4c:e2:f6:0b:62:b4:cf:0e:da:59:cb:8c:7f:
                    36:81:6b:4c:a4:2c:d8:85:33:ac:78:15:86:3f:6b:
                    b7:52:47:ad:8f:07:b5:3a:25:be:d1:3c:ea:22:81:
                    84:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:F8:44:F8:45:8A:3F:3D:81:08:9A:35:71:18:D5:D0:E6:12:9C:A3
            X509v3 Authority Key Identifier:
                keyid:76:B7:85:D1:90:4E:3C:B8:9D:FB:16:04:F9:82:7B:97:0C:95:28:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CWGEwbDANqF75dLCtyAFGHf7C83mX7FBQZ7Uh95i4c5v/0/76B785D1904E3CB89DFB1604F9827B970C9528F3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/76B785D1904E3CB89DFB1604F9827B970C9528F3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CWGEwbDANqF75dLCtyAFGHf7C83mX7FBQZ7Uh95i4c5v/0/3137302e3233392e38302e302f32322d3233203d3e20323636333432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.239.80.0/22

    Signature Algorithm: sha256WithRSAEncryption
         45:42:31:80:1b:7c:62:10:d8:e6:7e:18:f1:17:59:d7:88:57:
         cc:0c:9c:dd:a9:16:8a:e2:10:97:38:f5:64:5b:44:74:51:21:
         80:47:bb:0f:78:15:d1:b5:f2:e5:4e:f4:cf:b2:6a:36:fd:72:
         96:1c:8f:c3:0a:1c:f6:8c:f5:60:3a:e1:b5:7d:f9:05:db:ba:
         2b:a5:c9:2f:ff:7e:52:ec:49:67:c7:73:cf:e4:50:a8:0a:50:
         5f:b9:aa:ed:46:7c:a3:3b:d7:1a:91:ee:6a:0d:40:21:3b:61:
         53:62:65:06:10:d4:64:46:c6:6c:73:1d:1f:2f:c2:35:f8:f1:
         68:bc:be:06:40:51:99:cd:24:d8:3b:fa:20:b4:72:fe:eb:fb:
         0a:ce:4f:28:08:ee:14:ff:cd:db:e7:06:c2:ab:59:2b:08:a5:
         23:3e:b6:39:52:d6:ec:fe:98:46:3e:ce:11:08:80:78:af:77:
         70:a6:fd:c6:d0:e6:a1:a1:66:d7:f4:ed:73:51:16:42:c7:d1:
         0e:3d:ea:89:39:97:67:5a:44:09:c3:d1:9d:45:72:4e:af:e2:
         95:32:9b:c4:5c:f1:da:26:e3:a2:11:a6:05:24:d0:3f:03:16:
         b0:99:19:0a:9b:09:20:a0:00:33:89:b3:b9:2a:d9:71:62:59:
         4a:32:b7:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 12 09:01:30 2025 by rpki-client