Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/51GJZoQNBVGZEsco76LGi9MkpjMB9DViSQfvG4fpRid/0/3137302e38302e3230372e302f32342d3234203d3e20323733353134.roa
File:                     3137302e38302e3230372e302f32342d3234203d3e20323733353134.roa (raw, json)
Hash identifier:          VuvjKwG4CMXYlgjomPPdIhS8Ipl2PY1i4HHnwQ8w3Ak=
Subject key identifier:   51:3B:E4:5E:74:BE:A1:38:64:5E:3F:42:AD:31:CC:96:A4:1C:18:73
Certificate issuer:       /CN=E43FC22F53F1011D8D213F6EB00C5A472E9235D9
Certificate serial:       5498EB9576D221BE525F01C2BA32B2B5AE00F441
Authority key identifier: E4:3F:C2:2F:53:F1:01:1D:8D:21:3F:6E:B0:0C:5A:47:2E:92:35:D9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E43FC22F53F1011D8D213F6EB00C5A472E9235D9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/51GJZoQNBVGZEsco76LGi9MkpjMB9DViSQfvG4fpRid/0/3137302e38302e3230372e302f32342d3234203d3e20323733353134.roa
Signing time:             Mon 17 Feb 2025 14:43:32 +0000
ROA not before:           Mon 17 Feb 2025 14:38:32 +0000
ROA not after:            Mon 16 Feb 2026 14:43:32 +0000
asID:                     273514
IP address blocks:        170.80.207.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:98:eb:95:76:d2:21:be:52:5f:01:c2:ba:32:b2:b5:ae:00:f4:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E43FC22F53F1011D8D213F6EB00C5A472E9235D9
        Validity
            Not Before: Feb 17 14:38:32 2025 GMT
            Not After : Feb 16 14:43:32 2026 GMT
        Subject: CN=513BE45E74BEA138645E3F42AD31CC96A41C1873
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:18:18:db:e0:67:ca:c7:4d:17:62:32:76:4c:
                    ac:4d:a6:28:8f:1d:b6:96:59:5a:04:24:e3:dc:d0:
                    6a:df:5d:d6:89:cd:65:79:78:c9:c3:09:16:d6:5a:
                    a6:09:cc:66:c2:22:0e:66:d7:57:41:3a:bc:c2:1d:
                    96:97:73:ef:13:f6:02:98:65:bf:0b:98:de:3b:2b:
                    74:41:62:34:e8:7d:00:d1:36:ec:01:50:5a:ef:14:
                    9b:7e:48:d1:4f:85:76:22:63:ff:95:11:ae:cb:6a:
                    5e:b0:67:21:6c:1e:47:20:fe:4a:9f:e3:dc:19:68:
                    60:f9:d4:5f:48:25:c6:bd:c6:02:ae:92:64:e2:0c:
                    b0:3c:4b:16:3c:72:37:be:c0:1f:fe:cd:85:c2:92:
                    f7:22:f4:47:f6:b3:82:f7:5c:1f:04:b0:89:32:19:
                    c2:50:c8:70:55:bb:7f:ce:c6:37:bc:5a:c3:eb:d4:
                    eb:c0:d3:27:cb:f5:f9:92:3b:eb:9f:48:ab:3d:c6:
                    dd:61:75:e0:a9:2d:1e:ba:6b:3a:18:de:e5:f2:44:
                    c4:0d:38:3b:ba:01:24:36:1a:0f:82:9f:00:33:b4:
                    e0:15:c4:b6:c6:8c:25:97:24:ed:38:c1:9e:9b:18:
                    77:e8:9c:8e:8a:97:33:5c:2c:e8:f1:44:96:72:9c:
                    2e:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:3B:E4:5E:74:BE:A1:38:64:5E:3F:42:AD:31:CC:96:A4:1C:18:73
            X509v3 Authority Key Identifier:
                keyid:E4:3F:C2:2F:53:F1:01:1D:8D:21:3F:6E:B0:0C:5A:47:2E:92:35:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/51GJZoQNBVGZEsco76LGi9MkpjMB9DViSQfvG4fpRid/0/E43FC22F53F1011D8D213F6EB00C5A472E9235D9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E43FC22F53F1011D8D213F6EB00C5A472E9235D9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/51GJZoQNBVGZEsco76LGi9MkpjMB9DViSQfvG4fpRid/0/3137302e38302e3230372e302f32342d3234203d3e20323733353134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.80.207.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9e:4b:a2:53:e7:d3:1c:1d:ab:a5:24:94:10:1b:c8:8c:b0:30:
         91:f3:ec:72:48:ab:3e:3b:e4:ff:12:56:6a:dc:ae:d4:3f:a4:
         6a:90:23:d0:a4:e0:84:40:85:68:c7:82:25:c3:05:4a:bf:c1:
         f9:1c:e7:1c:f9:6a:0e:04:f0:37:87:84:54:02:31:71:98:00:
         7d:26:e9:f2:5b:e5:10:99:2d:77:de:16:c4:1f:b1:9c:b0:34:
         7f:ee:27:08:5d:a2:4d:f6:b1:7a:24:8a:fc:91:ff:9d:c0:39:
         7a:31:73:07:bc:19:4a:57:f9:2d:11:00:fa:1a:6f:92:a4:99:
         b5:37:0b:ad:e9:5b:6a:fa:27:a1:94:8c:82:dc:83:f1:8a:74:
         aa:1d:d1:0c:d3:9a:f9:d6:81:99:35:74:04:97:02:9c:18:d5:
         b6:83:3d:98:ec:8f:9f:d7:10:c5:1a:07:d8:48:77:8c:7d:ac:
         2e:33:5c:4f:cf:90:0b:82:ec:05:b5:c1:a5:36:73:cd:17:3a:
         0d:e7:be:a1:c6:c1:33:b3:a0:b5:0b:0c:da:10:49:77:62:5e:
         9e:2a:f7:14:25:8e:7b:da:28:d6:4a:ea:fa:70:fe:ae:0a:ac:
         ee:65:a4:1b:87:56:33:9f:4e:a0:37:e0:42:5e:d0:b7:72:16:
         c8:c3:39:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 14:03:59 2025 by rpki-client