Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/51GJZoQNBVGZEsco76LGi9MkpjMB9DViSQfvG4fpRid/0/3137302e38302e3230362e302f32342d3234203d3e20323733353134.roa
File:                     3137302e38302e3230362e302f32342d3234203d3e20323733353134.roa (raw, json)
Hash identifier:          u4HEjYWuHheCkxN+NbwRUZhlhTGZRDtl6m/UU/X5klc=
Subject key identifier:   30:5D:82:A3:20:83:73:3D:49:B0:CD:57:3C:2C:8A:BB:ED:11:AC:F9
Certificate issuer:       /CN=E43FC22F53F1011D8D213F6EB00C5A472E9235D9
Certificate serial:       04E7DCC3CF83F6A920BB44C9C3EEC9718FB9F90B
Authority key identifier: E4:3F:C2:2F:53:F1:01:1D:8D:21:3F:6E:B0:0C:5A:47:2E:92:35:D9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E43FC22F53F1011D8D213F6EB00C5A472E9235D9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/51GJZoQNBVGZEsco76LGi9MkpjMB9DViSQfvG4fpRid/0/3137302e38302e3230362e302f32342d3234203d3e20323733353134.roa
Signing time:             Mon 17 Feb 2025 14:44:43 +0000
ROA not before:           Mon 17 Feb 2025 14:39:43 +0000
ROA not after:            Mon 16 Feb 2026 14:44:43 +0000
asID:                     273514
IP address blocks:        170.80.206.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:e7:dc:c3:cf:83:f6:a9:20:bb:44:c9:c3:ee:c9:71:8f:b9:f9:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E43FC22F53F1011D8D213F6EB00C5A472E9235D9
        Validity
            Not Before: Feb 17 14:39:43 2025 GMT
            Not After : Feb 16 14:44:43 2026 GMT
        Subject: CN=305D82A32083733D49B0CD573C2C8ABBED11ACF9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:3a:bf:8b:31:a0:00:3e:60:56:e3:09:da:9b:
                    bc:5e:63:a7:ec:f9:70:ec:51:53:c5:33:44:9f:35:
                    c2:e9:e6:d6:5b:aa:e8:6e:6b:2d:4a:c5:d9:64:d0:
                    02:04:bc:ac:e6:b1:b2:d2:d6:07:5f:1a:b9:af:ad:
                    a6:a7:32:dd:4c:01:95:23:eb:4e:94:7c:42:6b:3c:
                    2e:70:0d:ee:2c:89:8f:f0:1b:ca:17:70:71:d1:19:
                    9d:98:80:58:72:2b:3b:07:d9:72:2e:3d:e2:e9:a9:
                    2d:32:b1:e3:d8:49:b6:83:cf:dd:d0:c4:16:00:a0:
                    a5:6a:01:ac:9e:19:f9:cb:3d:f5:30:40:f2:c9:fa:
                    54:b7:1e:b6:05:46:ca:5f:07:2b:d7:c1:04:7c:4d:
                    99:49:97:a3:38:33:03:6f:c9:12:ca:91:17:89:c2:
                    f5:22:df:8b:5c:36:55:a1:c0:8c:0b:43:a8:9f:bd:
                    47:02:be:0a:a8:e6:10:72:71:01:89:80:3c:92:ee:
                    7e:cb:f2:ca:e3:90:dd:eb:7c:3e:22:79:7d:c7:47:
                    c5:26:52:c4:aa:0b:b1:03:b0:1c:1e:ce:d4:08:1b:
                    ef:7b:89:19:b8:a6:c2:96:7e:e3:4f:cf:16:11:50:
                    79:bc:25:5c:33:42:20:32:a5:14:97:07:5f:81:a2:
                    ab:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:5D:82:A3:20:83:73:3D:49:B0:CD:57:3C:2C:8A:BB:ED:11:AC:F9
            X509v3 Authority Key Identifier:
                keyid:E4:3F:C2:2F:53:F1:01:1D:8D:21:3F:6E:B0:0C:5A:47:2E:92:35:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/51GJZoQNBVGZEsco76LGi9MkpjMB9DViSQfvG4fpRid/0/E43FC22F53F1011D8D213F6EB00C5A472E9235D9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E43FC22F53F1011D8D213F6EB00C5A472E9235D9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/51GJZoQNBVGZEsco76LGi9MkpjMB9DViSQfvG4fpRid/0/3137302e38302e3230362e302f32342d3234203d3e20323733353134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.80.206.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7f:18:61:be:af:de:86:2a:13:eb:36:31:d5:35:c8:5c:61:dd:
         01:e0:e6:be:14:19:00:20:c7:61:62:20:b7:75:91:ea:de:c1:
         7a:c0:f7:7f:06:9c:39:90:6e:5f:40:38:6f:5b:c7:e4:43:5f:
         75:6d:1e:73:b0:e5:03:63:4c:cd:1b:b9:48:64:6b:f8:73:4f:
         63:c1:94:c3:cf:72:16:c3:3d:8f:5d:0a:62:e3:a8:8d:eb:19:
         df:e6:03:aa:00:90:8a:ec:ea:2c:b8:d7:36:58:95:04:03:9f:
         a8:bd:ca:34:3a:4f:60:c1:85:c6:6c:61:f2:6d:ba:0f:75:cd:
         a2:4c:14:db:be:86:b7:0a:fb:0c:ac:99:71:75:cd:8f:3b:ba:
         69:1d:6d:9e:7f:94:f4:07:ad:22:56:e3:dd:8b:10:cf:d9:10:
         11:cb:54:ba:41:82:cc:55:fa:8d:e4:5e:82:7c:d5:aa:6e:2e:
         81:88:fb:d6:dd:5e:d2:b2:9b:24:19:b5:ca:1b:95:c0:2e:5e:
         a0:94:eb:cb:12:13:fc:77:ea:b1:df:d6:30:d3:de:95:13:a4:
         f6:91:ed:8a:8a:d8:4c:93:17:18:25:b8:60:83:1a:e3:77:cd:
         ff:0e:c7:35:f4:73:78:00:1d:a1:34:0a:7b:e4:98:40:40:48:
         86:22:8e:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 17:26:14 2025 by rpki-client