Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4XmgkWMQSmk967CpBEstX2x1biNU5FYuaiboX6cHMJBi/1/3137302e38322e3136302e302f32322d3234203d3e203533313532.roa
File:                     3137302e38322e3136302e302f32322d3234203d3e203533313532.roa (raw, json)
Hash identifier:          RMU1y8Y17SWl4f6RetPY9tYLNIz2WvMIHY0Hgag9h3Y=
Subject key identifier:   C4:B2:B4:C8:C1:D2:91:5F:AA:EC:9A:65:97:22:2E:E9:F7:09:14:D5
Certificate issuer:       /CN=192F14755AC879D7851EBA5CD1002E9D4B65583F
Certificate serial:       5773A99BBB92DB9109B757734AD2663E8AB8C2DD
Authority key identifier: 19:2F:14:75:5A:C8:79:D7:85:1E:BA:5C:D1:00:2E:9D:4B:65:58:3F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/192F14755AC879D7851EBA5CD1002E9D4B65583F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4XmgkWMQSmk967CpBEstX2x1biNU5FYuaiboX6cHMJBi/1/3137302e38322e3136302e302f32322d3234203d3e203533313532.roa
Signing time:             Thu 06 Mar 2025 05:00:22 +0000
ROA not before:           Thu 06 Mar 2025 04:55:22 +0000
ROA not after:            Thu 05 Mar 2026 05:00:22 +0000
asID:                     53152
IP address blocks:        170.82.160.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:73:a9:9b:bb:92:db:91:09:b7:57:73:4a:d2:66:3e:8a:b8:c2:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=192F14755AC879D7851EBA5CD1002E9D4B65583F
        Validity
            Not Before: Mar  6 04:55:22 2025 GMT
            Not After : Mar  5 05:00:22 2026 GMT
        Subject: CN=C4B2B4C8C1D2915FAAEC9A6597222EE9F70914D5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:be:b7:72:80:ce:dc:2d:7d:74:4f:f5:25:31:
                    a7:ec:f9:62:e3:18:c6:47:c7:ec:15:81:e6:84:8f:
                    49:4f:2d:9b:f4:f3:82:94:7b:57:ff:e9:61:7b:8f:
                    38:6f:eb:4c:d6:ac:3b:4b:18:2c:f6:4e:ae:98:ec:
                    cc:36:1d:b1:a9:6b:2b:86:4d:b4:7d:80:d6:d1:eb:
                    8f:64:46:31:cf:3a:d5:f2:91:2f:78:ea:de:70:d6:
                    6e:5c:87:1f:b7:ef:03:a9:81:e6:ca:c9:d0:92:02:
                    c2:77:10:96:ba:e1:41:f4:4a:04:22:df:8b:13:65:
                    e5:d2:ec:5f:19:0b:3b:b7:39:db:3a:e5:3c:fb:ad:
                    10:31:b6:89:61:82:3e:ec:bb:ba:94:7a:ca:b8:c5:
                    7f:2a:e7:f0:96:18:f4:47:46:9e:7b:d5:36:a9:7d:
                    ec:d5:77:57:27:af:ca:4a:5c:d0:8c:34:3c:ab:73:
                    a0:ec:9e:58:dc:d1:82:87:21:8d:03:e8:83:3d:7f:
                    a1:78:bc:1b:30:0d:01:ca:80:5d:86:94:0d:24:e9:
                    19:92:be:1e:82:c2:f3:2d:0d:8c:67:11:a1:b2:8d:
                    7b:3b:ba:d2:4b:7a:93:d4:3c:77:60:d2:31:43:46:
                    81:c2:cf:27:8c:fc:22:f7:6d:ec:a8:c0:86:6b:c4:
                    79:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:B2:B4:C8:C1:D2:91:5F:AA:EC:9A:65:97:22:2E:E9:F7:09:14:D5
            X509v3 Authority Key Identifier:
                keyid:19:2F:14:75:5A:C8:79:D7:85:1E:BA:5C:D1:00:2E:9D:4B:65:58:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4XmgkWMQSmk967CpBEstX2x1biNU5FYuaiboX6cHMJBi/1/192F14755AC879D7851EBA5CD1002E9D4B65583F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/192F14755AC879D7851EBA5CD1002E9D4B65583F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4XmgkWMQSmk967CpBEstX2x1biNU5FYuaiboX6cHMJBi/1/3137302e38322e3136302e302f32322d3234203d3e203533313532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.82.160.0/22

    Signature Algorithm: sha256WithRSAEncryption
         81:fd:6f:e1:43:c0:53:de:4f:2a:f5:e2:bb:e9:7b:ca:08:65:
         14:ff:10:78:7e:11:9b:d5:d7:a9:8c:15:2d:a6:28:07:63:b7:
         1e:43:d3:6d:53:e8:43:c2:60:5b:f8:29:f0:ae:e8:60:71:00:
         1e:c2:20:b8:1c:18:8d:fe:2f:b5:78:09:c5:34:f9:70:94:1d:
         db:af:15:bd:ad:68:1d:5d:f6:f2:51:df:e3:b7:3e:1c:28:46:
         45:24:7d:d3:bb:f1:82:4f:0a:65:59:aa:72:31:46:51:16:cf:
         77:86:93:56:ea:ab:24:13:32:43:78:ae:f4:c7:ac:e4:6c:48:
         c6:5f:04:27:fc:6a:b1:53:2f:b1:44:8b:c1:93:7e:c8:d9:80:
         5c:65:03:d8:d6:ad:12:02:f1:ba:9d:b6:ee:4b:0c:32:0a:b2:
         10:af:41:f9:37:94:3a:eb:11:57:ef:06:98:02:a4:47:80:6a:
         af:69:05:b2:ef:55:6a:d7:07:ea:14:cd:8d:fc:32:2e:31:36:
         42:a6:1e:e0:b5:0c:7f:c0:e5:8f:29:45:ff:54:83:0d:83:26:
         ca:59:d8:0e:0c:c7:6c:b3:9a:0a:9c:e6:87:b1:79:4f:ca:36:
         0b:12:63:75:4f:cf:40:53:c5:45:00:4f:12:fc:f4:54:51:df:
         4e:ca:dc:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 12:45:20 2025 by rpki-client