Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/73G9tTfFvoxH9TgBH99kDti77jaLq9vZTCxkhgxaarWV/0/3137302e3235342e3133322e302f32322d3234203d3e20323635313036.roa
File:                     3137302e3235342e3133322e302f32322d3234203d3e20323635313036.roa (raw, json)
Hash identifier:          NtT2cr8X8NcW9Gg0+s2EfTnhcuYFek0am7rESguG9sg=
Subject key identifier:   CB:B8:A1:1E:8F:D9:5C:FB:C8:7E:BA:4D:3F:18:00:2C:1D:07:5D:C5
Certificate issuer:       /CN=C2F1DA4EE3B756E0D26DBF50748F6F6A3EA89585
Certificate serial:       4007DE12A1337EE711DD0084E65A77B6CAFAA889
Authority key identifier: C2:F1:DA:4E:E3:B7:56:E0:D2:6D:BF:50:74:8F:6F:6A:3E:A8:95:85
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C2F1DA4EE3B756E0D26DBF50748F6F6A3EA89585.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/73G9tTfFvoxH9TgBH99kDti77jaLq9vZTCxkhgxaarWV/0/3137302e3235342e3133322e302f32322d3234203d3e20323635313036.roa
Signing time:             Tue 30 Jan 2024 20:00:00 +0000
ROA not before:           Tue 30 Jan 2024 19:55:00 +0000
ROA not after:            Tue 28 Jan 2025 20:00:00 +0000
asID:                     265106
IP address blocks:        170.254.132.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:07:de:12:a1:33:7e:e7:11:dd:00:84:e6:5a:77:b6:ca:fa:a8:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C2F1DA4EE3B756E0D26DBF50748F6F6A3EA89585
        Validity
            Not Before: Jan 30 19:55:00 2024 GMT
            Not After : Jan 28 20:00:00 2025 GMT
        Subject: CN=CBB8A11E8FD95CFBC87EBA4D3F18002C1D075DC5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:25:08:83:69:bd:38:ec:29:ae:c5:88:dc:9b:
                    c9:0f:2e:e9:34:6f:23:81:f4:50:e5:b5:82:85:e2:
                    b8:a1:8a:d6:dc:b0:d4:3a:89:75:7a:99:43:f8:1c:
                    31:58:3a:f9:a1:c7:8e:a1:70:23:48:e2:b6:25:09:
                    5e:fa:01:97:09:e3:03:3e:2c:72:84:20:8f:bc:c6:
                    ca:f8:ce:3c:2e:9d:54:b6:23:7a:36:9a:5a:2f:b4:
                    fc:88:52:95:70:87:f2:8c:bf:61:34:c8:c8:bd:18:
                    40:77:33:a3:ef:4e:24:b4:8c:0c:de:43:c6:07:cb:
                    84:6b:98:70:15:cc:d2:e9:16:69:e8:29:15:be:81:
                    2c:56:61:76:10:47:db:12:7d:89:1c:94:f6:77:ab:
                    76:79:27:b2:d8:f7:82:5b:d2:1b:36:e3:0d:a3:a2:
                    6c:30:21:70:95:d4:aa:b2:95:fe:33:52:d2:22:ff:
                    6b:e9:0e:6d:6f:f8:a7:cc:a6:bc:5f:9a:20:d4:cf:
                    df:ef:b3:45:ab:89:e6:9d:21:74:01:b2:46:6a:70:
                    90:f2:f9:2a:b3:70:9d:11:bc:31:e7:98:1e:28:27:
                    7e:19:79:9f:af:df:87:ae:46:de:eb:ea:92:51:6b:
                    ec:56:d6:a6:4f:cf:3a:2a:4c:aa:3f:fe:fb:14:b5:
                    da:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:B8:A1:1E:8F:D9:5C:FB:C8:7E:BA:4D:3F:18:00:2C:1D:07:5D:C5
            X509v3 Authority Key Identifier:
                keyid:C2:F1:DA:4E:E3:B7:56:E0:D2:6D:BF:50:74:8F:6F:6A:3E:A8:95:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/73G9tTfFvoxH9TgBH99kDti77jaLq9vZTCxkhgxaarWV/0/C2F1DA4EE3B756E0D26DBF50748F6F6A3EA89585.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C2F1DA4EE3B756E0D26DBF50748F6F6A3EA89585.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/73G9tTfFvoxH9TgBH99kDti77jaLq9vZTCxkhgxaarWV/0/3137302e3235342e3133322e302f32322d3234203d3e20323635313036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.254.132.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8e:d7:8d:b3:90:9e:7c:62:4b:87:24:79:83:cc:95:df:cf:68:
         4d:d2:34:15:27:83:30:fe:af:f1:d7:8b:3e:5a:61:8d:e8:11:
         99:53:87:62:22:65:b7:d3:9f:ed:df:06:6c:73:a4:0e:97:b6:
         d0:76:1f:85:46:d2:3c:25:78:bc:68:67:f5:40:7f:c2:b4:1a:
         76:7d:f0:51:0b:c3:20:28:48:c4:12:d3:b4:18:76:3a:12:3f:
         4b:18:e6:ff:e5:42:24:21:05:b5:8c:d1:8c:b0:6e:f4:5a:40:
         50:90:50:bc:18:35:57:65:b2:83:19:b9:e4:37:24:3e:16:db:
         a9:e7:8c:7a:66:0c:e8:16:ce:b1:6d:b9:fa:66:df:4b:e9:ad:
         c2:00:70:f6:25:96:5a:9e:a0:a3:f9:04:f9:4e:37:db:a5:85:
         93:a7:8e:66:80:56:5f:24:e0:4b:08:91:e5:01:02:b6:7d:9c:
         db:a4:da:b1:61:25:95:fa:54:7b:a7:0c:e6:d2:b8:c2:ae:d4:
         a2:5b:12:1e:5d:f6:96:93:9f:57:41:ca:d9:b3:27:9f:b0:b8:
         95:a5:ec:51:91:03:b8:1a:25:48:38:cd:08:4d:2a:a1:3b:c8:
         3d:f1:81:b0:f2:0f:99:fc:7c:85:4c:78:ce:7e:20:31:d9:4e:
         03:3a:38:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 16:05:35 2025 by rpki-client