Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3X5ufx2nrRCkv7seYquPGe1cHUSpjY1VYVoR4BgNCEAi/0/3137302e3234352e3232382e302f32322d3234203d3e203533303438.roa
File:                     3137302e3234352e3232382e302f32322d3234203d3e203533303438.roa (raw, json)
Hash identifier:          wySWIaPp8P/apsFvr8UGe1iAS4IBMMSJLQ0H95Wfao4=
Subject key identifier:   26:03:4A:BA:4A:D9:E6:DD:E5:7F:B5:0E:C5:37:FA:F5:87:87:8E:DF
Certificate issuer:       /CN=A910E04F27510FFF1E8362052070412C903FFD8B
Certificate serial:       400818515D80922F04A44BB6D4FF68D231A7953C
Authority key identifier: A9:10:E0:4F:27:51:0F:FF:1E:83:62:05:20:70:41:2C:90:3F:FD:8B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A910E04F27510FFF1E8362052070412C903FFD8B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3X5ufx2nrRCkv7seYquPGe1cHUSpjY1VYVoR4BgNCEAi/0/3137302e3234352e3232382e302f32322d3234203d3e203533303438.roa
Signing time:             Fri 31 Jan 2025 12:52:09 +0000
ROA not before:           Fri 31 Jan 2025 12:47:09 +0000
ROA not after:            Fri 30 Jan 2026 12:52:09 +0000
asID:                     53048
IP address blocks:        170.245.228.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:08:18:51:5d:80:92:2f:04:a4:4b:b6:d4:ff:68:d2:31:a7:95:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A910E04F27510FFF1E8362052070412C903FFD8B
        Validity
            Not Before: Jan 31 12:47:09 2025 GMT
            Not After : Jan 30 12:52:09 2026 GMT
        Subject: CN=26034ABA4AD9E6DDE57FB50EC537FAF587878EDF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:7e:21:32:07:09:a2:e7:58:96:c5:45:f1:78:
                    30:b4:a7:aa:52:37:21:c1:27:b5:53:50:9f:0b:08:
                    3b:3d:79:10:c7:c2:cb:66:93:08:c1:0a:8c:f0:2d:
                    be:57:58:db:72:da:83:1f:e2:de:c5:7e:7c:b3:ad:
                    81:79:6d:ae:75:a9:1b:1c:ea:f6:71:64:2d:4a:6a:
                    57:36:a0:a4:bb:ea:6e:f3:5e:b0:13:07:f3:8c:6c:
                    eb:21:5b:61:6a:c5:47:4c:48:f9:c4:9b:0b:c1:3e:
                    95:98:5f:8d:ae:97:11:b4:d0:6e:04:c6:18:cc:2a:
                    a0:3d:6a:35:05:7c:4e:b4:c4:d0:93:30:b5:da:a3:
                    18:c8:37:21:8d:70:bd:e3:e3:81:e9:ea:e8:06:2f:
                    e5:fb:ee:9a:ea:02:2a:70:af:95:1e:41:d0:ce:0a:
                    18:a3:f0:c7:68:fa:4e:04:6f:dc:06:e3:23:67:75:
                    04:24:5d:5b:16:11:a7:bb:6a:c3:fe:09:c5:89:bd:
                    33:b0:ef:83:43:b0:c2:7b:ad:3f:60:cb:3a:4d:66:
                    6f:74:2c:43:07:0b:b8:6d:ce:a3:f7:d1:e7:8a:ae:
                    8f:01:3b:ac:21:26:dd:9a:fe:bc:9b:8c:8d:66:74:
                    59:2b:51:89:56:63:84:11:16:32:16:4a:41:3e:67:
                    a2:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:03:4A:BA:4A:D9:E6:DD:E5:7F:B5:0E:C5:37:FA:F5:87:87:8E:DF
            X509v3 Authority Key Identifier:
                keyid:A9:10:E0:4F:27:51:0F:FF:1E:83:62:05:20:70:41:2C:90:3F:FD:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3X5ufx2nrRCkv7seYquPGe1cHUSpjY1VYVoR4BgNCEAi/0/A910E04F27510FFF1E8362052070412C903FFD8B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A910E04F27510FFF1E8362052070412C903FFD8B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3X5ufx2nrRCkv7seYquPGe1cHUSpjY1VYVoR4BgNCEAi/0/3137302e3234352e3232382e302f32322d3234203d3e203533303438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.245.228.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1f:b9:82:97:0b:51:9e:c8:db:63:8d:68:8d:cd:f8:a2:68:58:
         a2:e3:10:00:5e:d2:0a:e3:c2:7d:2a:29:0c:4b:c3:a5:be:0b:
         aa:9f:cb:f5:79:da:5f:c0:bc:b9:55:f7:b1:e9:74:7f:07:46:
         5e:72:4a:13:1c:03:28:d4:bc:31:ca:ec:5c:9d:9e:21:6e:99:
         68:dc:69:d5:c3:22:99:79:e1:6e:57:06:89:ec:32:18:54:f8:
         52:dc:1c:7a:b0:24:89:69:7a:69:cd:a9:9a:4c:eb:bf:90:c6:
         4c:03:0b:d6:fd:86:de:5d:89:ec:9a:bd:31:2d:78:80:4e:5a:
         80:fb:5a:37:99:a4:17:ed:2a:80:b4:c3:7b:27:59:1b:65:49:
         47:f2:bc:f0:1d:48:c8:49:40:78:8e:18:6d:81:de:94:f3:3b:
         07:f7:9b:80:7b:b9:3f:62:4f:f6:3d:2d:8c:4b:59:a2:17:8c:
         bf:f6:ae:ba:d2:c0:56:d9:52:ee:ea:df:2a:20:34:09:66:43:
         38:ad:83:c9:f2:17:1a:69:92:6b:65:47:10:ce:ae:97:d2:29:
         87:7d:1c:0c:ca:44:16:05:e6:d3:2e:e1:1b:48:f4:b7:ff:29:
         80:bc:71:b0:60:53:29:8e:04:de:0f:d7:06:31:43:53:86:fb:
         fc:6f:26:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:01:37 2025 by rpki-client