Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/3137302e3233332e3231322e302f32342d3234203d3e203532373036.roa
File:                     3137302e3233332e3231322e302f32342d3234203d3e203532373036.roa (raw, json)
Hash identifier:          VIvpX6mVbjo2c/mRmwK51/TB13ulx66WOidpWg1Q/ec=
Subject key identifier:   88:A8:25:90:6F:10:19:70:32:FB:E2:80:71:BE:6C:0B:84:B1:A8:24
Certificate issuer:       /CN=E35E54F1D0263B8E903A0929A61313C8C5BE8DA6
Certificate serial:       56D69BF9F7ED4EEB54802E0CA601762AD62F0910
Authority key identifier: E3:5E:54:F1:D0:26:3B:8E:90:3A:09:29:A6:13:13:C8:C5:BE:8D:A6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E35E54F1D0263B8E903A0929A61313C8C5BE8DA6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/3137302e3233332e3231322e302f32342d3234203d3e203532373036.roa
Signing time:             Thu 06 Mar 2025 02:31:44 +0000
ROA not before:           Thu 06 Mar 2025 02:26:44 +0000
ROA not after:            Thu 05 Mar 2026 02:31:44 +0000
asID:                     52706
IP address blocks:        170.233.212.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:d6:9b:f9:f7:ed:4e:eb:54:80:2e:0c:a6:01:76:2a:d6:2f:09:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E35E54F1D0263B8E903A0929A61313C8C5BE8DA6
        Validity
            Not Before: Mar  6 02:26:44 2025 GMT
            Not After : Mar  5 02:31:44 2026 GMT
        Subject: CN=88A825906F10197032FBE28071BE6C0B84B1A824
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:d3:30:ee:ac:a6:93:83:2f:98:07:fd:07:57:
                    21:14:bd:1a:59:c5:f7:19:9c:3f:9f:cc:f4:a2:32:
                    81:8b:41:b3:d2:f6:82:c8:f4:d4:66:82:ee:4c:63:
                    84:5d:71:8e:e9:ec:5e:fb:e2:9f:60:73:fc:7d:8b:
                    4d:0d:10:5f:eb:bd:a6:73:a6:87:d1:02:a4:87:37:
                    9a:23:20:1d:20:9b:e5:01:34:da:aa:a3:66:95:2b:
                    d2:2c:0f:75:b7:4a:fb:07:81:3f:48:74:e1:63:11:
                    51:b1:19:02:dd:82:c6:cd:91:d7:85:a8:f3:2a:36:
                    8e:db:8c:6a:39:d9:02:6b:6d:01:23:5a:14:6d:52:
                    83:56:8b:21:44:db:0c:da:91:f5:29:aa:58:6c:68:
                    ab:bb:cd:96:ac:03:d1:8e:72:9c:4b:7b:1c:b4:30:
                    5a:bb:81:f6:e3:38:57:8e:f4:ef:28:8f:6a:19:c6:
                    07:cd:56:4b:c4:6d:87:e3:e0:61:00:b1:4d:38:9d:
                    c4:ed:74:81:7c:23:06:ca:b4:db:59:63:53:e4:7a:
                    6f:c8:59:f2:fd:38:b5:f3:63:0b:5c:67:09:d8:95:
                    55:dc:28:e7:f3:5f:ba:e9:db:2b:9c:ab:d4:89:03:
                    05:61:62:96:bf:2b:fb:22:09:ed:86:4c:ba:e9:d0:
                    f2:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:A8:25:90:6F:10:19:70:32:FB:E2:80:71:BE:6C:0B:84:B1:A8:24
            X509v3 Authority Key Identifier:
                keyid:E3:5E:54:F1:D0:26:3B:8E:90:3A:09:29:A6:13:13:C8:C5:BE:8D:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/E35E54F1D0263B8E903A0929A61313C8C5BE8DA6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E35E54F1D0263B8E903A0929A61313C8C5BE8DA6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/3137302e3233332e3231322e302f32342d3234203d3e203532373036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.233.212.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a5:b6:22:50:d8:de:de:90:80:2f:a0:06:58:6d:83:fa:8b:31:
         ce:cc:a7:02:a9:90:cb:d4:3d:57:4e:3f:0a:1d:b9:50:fe:e2:
         ae:f9:0e:94:36:fc:d3:ac:43:87:3d:7c:d4:f7:fd:a8:9d:1e:
         d0:56:fc:66:7d:61:57:36:f8:38:de:f5:f6:0c:07:02:06:20:
         78:15:87:f2:ec:19:aa:0e:77:fd:13:ba:96:f7:87:e8:98:a2:
         5d:d8:86:9b:06:19:9f:f3:68:6d:07:5c:01:f1:fb:52:54:57:
         0e:b3:d2:b8:9b:a9:ed:cc:68:1c:6b:c6:f8:10:5e:c9:44:e7:
         de:21:a7:6f:e7:46:3a:c2:3e:fd:4d:84:e8:d2:f1:a2:95:f7:
         79:6a:86:de:f1:99:c3:9d:35:fc:19:01:83:c6:d4:fc:9f:dd:
         21:07:97:79:20:e3:d4:a0:8d:e7:ed:49:6f:c6:6c:e9:00:f5:
         27:1b:3b:bb:ab:fe:a7:ce:96:4e:6b:60:66:37:ec:a8:be:36:
         12:10:01:b1:b5:20:39:bb:c8:41:3e:25:ac:46:48:1d:b8:f1:
         86:a0:e1:a3:20:65:01:2f:98:52:3a:a7:14:5a:ee:27:4a:a6:
         41:a9:27:f3:c0:7a:14:12:84:0d:f8:0c:21:cd:db:06:5a:81:
         d5:df:e8:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 21:18:33 2025 by rpki-client