Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/51GJZoQNBVGZEsco76LGi9MkpjMB9DViSQfvG4fpRid/0/3137302e38302e3230362e302f32332d3233203d3e20323733353134.roa
File:                     3137302e38302e3230362e302f32332d3233203d3e20323733353134.roa (raw, json)
Hash identifier:          +Qj/E1R3/Q5K47rm9AQI0CT6YZ6lCfu5+gxnkqOVJMk=
Subject key identifier:   6D:AD:A4:11:DE:CE:A7:63:33:DF:79:12:3D:92:38:D6:5B:49:3D:C1
Certificate issuer:       /CN=E43FC22F53F1011D8D213F6EB00C5A472E9235D9
Certificate serial:       15545DBA637326B863632EC013D730CA6108F717
Authority key identifier: E4:3F:C2:2F:53:F1:01:1D:8D:21:3F:6E:B0:0C:5A:47:2E:92:35:D9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E43FC22F53F1011D8D213F6EB00C5A472E9235D9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/51GJZoQNBVGZEsco76LGi9MkpjMB9DViSQfvG4fpRid/0/3137302e38302e3230362e302f32332d3233203d3e20323733353134.roa
Signing time:             Mon 17 Feb 2025 14:43:18 +0000
ROA not before:           Mon 17 Feb 2025 14:38:18 +0000
ROA not after:            Mon 16 Feb 2026 14:43:18 +0000
asID:                     273514
IP address blocks:        170.80.206.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:54:5d:ba:63:73:26:b8:63:63:2e:c0:13:d7:30:ca:61:08:f7:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E43FC22F53F1011D8D213F6EB00C5A472E9235D9
        Validity
            Not Before: Feb 17 14:38:18 2025 GMT
            Not After : Feb 16 14:43:18 2026 GMT
        Subject: CN=6DADA411DECEA76333DF79123D9238D65B493DC1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:74:32:ce:7e:f2:fc:94:0d:06:e6:89:4c:c9:
                    1b:1e:a2:c6:9c:d2:79:ac:37:49:9e:ed:a7:07:91:
                    07:a2:f1:47:d7:3a:56:47:19:52:b1:b0:03:8e:2f:
                    b8:9e:ce:71:36:54:33:12:16:b3:86:30:b3:d1:78:
                    93:22:3b:75:ca:87:93:46:10:d2:da:f2:fe:23:c9:
                    74:be:44:d2:e2:ff:29:0d:f4:d7:2a:fe:c2:58:9e:
                    40:dd:de:5a:e8:a4:2c:25:13:ba:8a:71:80:e2:3b:
                    60:6e:28:fb:73:1b:41:96:45:4d:7e:0d:4f:af:e6:
                    be:85:6a:ce:e3:8c:64:5e:2c:b5:c5:ea:b6:be:23:
                    3f:a7:3a:59:26:3d:aa:94:5f:fc:d9:be:57:4a:11:
                    67:a8:81:2a:69:e5:92:71:93:39:c3:c0:fd:46:03:
                    f6:8d:41:2f:33:7c:72:11:4d:f0:ed:06:13:18:a5:
                    d9:3f:fb:2a:75:63:b8:48:1f:70:a8:32:4b:b3:93:
                    0a:4c:74:91:f5:61:21:e7:dd:6e:00:5c:9a:ae:f7:
                    34:f9:34:4e:f1:72:85:77:5d:7f:a7:4b:4e:dc:5e:
                    a8:4a:4c:34:d8:bb:cd:6a:d4:50:6a:c3:4f:10:5a:
                    b2:9d:50:22:6b:bb:e9:49:76:bd:a1:f0:50:e3:ad:
                    f8:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:AD:A4:11:DE:CE:A7:63:33:DF:79:12:3D:92:38:D6:5B:49:3D:C1
            X509v3 Authority Key Identifier:
                keyid:E4:3F:C2:2F:53:F1:01:1D:8D:21:3F:6E:B0:0C:5A:47:2E:92:35:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/51GJZoQNBVGZEsco76LGi9MkpjMB9DViSQfvG4fpRid/0/E43FC22F53F1011D8D213F6EB00C5A472E9235D9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E43FC22F53F1011D8D213F6EB00C5A472E9235D9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/51GJZoQNBVGZEsco76LGi9MkpjMB9DViSQfvG4fpRid/0/3137302e38302e3230362e302f32332d3233203d3e20323733353134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.80.206.0/23

    Signature Algorithm: sha256WithRSAEncryption
         35:aa:18:f9:f1:5b:3c:54:a4:f5:b3:55:f4:14:2b:26:13:81:
         28:11:e8:2f:bc:01:86:f2:e0:d4:c8:3a:0b:38:6b:df:ed:86:
         9d:5b:68:50:12:00:aa:22:b7:c6:11:44:2c:e4:83:01:63:9a:
         58:63:c6:29:ba:54:d1:96:7d:89:db:71:df:dc:2d:61:39:8d:
         65:07:5f:ad:68:06:9f:f9:f7:ff:85:e2:21:cf:53:0c:24:a7:
         3c:59:11:00:0c:20:48:29:3b:fa:80:8f:9a:05:03:2e:79:dd:
         74:18:42:8c:73:39:c5:a9:d9:a8:7e:c3:a8:ff:fb:80:55:61:
         3a:65:d6:44:bb:d1:6e:4e:07:01:8d:e6:c9:f7:a8:d4:87:f2:
         90:fb:de:31:43:4c:3f:37:76:27:19:58:af:bc:be:50:45:b2:
         25:d1:8d:5b:e4:4e:c7:84:ca:83:f8:73:fc:04:97:46:cd:d5:
         c8:ad:8c:61:b0:b7:ac:c8:72:c2:d5:65:6a:79:36:23:0f:0a:
         1d:5c:22:3c:cd:8b:f7:8c:33:e9:23:66:63:1d:3d:1b:30:5a:
         9d:52:34:87:9a:1f:aa:ae:45:13:ce:96:49:c8:31:78:8f:e8:
         bc:18:11:a0:8b:89:33:52:6a:21:81:ce:9a:c8:e7:79:12:08:
         7e:46:3f:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 07:49:42 2025 by rpki-client