Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5HEYRL8ykWxA5aM2vjn7jY25Xv3bqvmy9tigFBNqRkN8/1/3137302e38322e3131392e302f32342d3332203d3e20323632313832.roa
File:                     3137302e38322e3131392e302f32342d3332203d3e20323632313832.roa (raw, json)
Hash identifier:          uj3HnWuhPG5nnUf2mdmthp+6Zzv0WcCpMhk890GPnRo=
Subject key identifier:   F0:52:AC:1B:DE:CB:1E:ED:E7:B3:F1:E8:46:39:CB:FF:FC:BB:5F:FC
Certificate issuer:       /CN=7CA1E2D818532F6321B3C9E6EE790B2AFE560E21
Certificate serial:       2D007D79CDE4D0BE97D150668EE9CB2FD7214BEB
Authority key identifier: 7C:A1:E2:D8:18:53:2F:63:21:B3:C9:E6:EE:79:0B:2A:FE:56:0E:21
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7CA1E2D818532F6321B3C9E6EE790B2AFE560E21.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5HEYRL8ykWxA5aM2vjn7jY25Xv3bqvmy9tigFBNqRkN8/1/3137302e38322e3131392e302f32342d3332203d3e20323632313832.roa
Signing time:             Sat 15 Feb 2025 22:36:53 +0000
ROA not before:           Sat 15 Feb 2025 22:31:53 +0000
ROA not after:            Sat 14 Feb 2026 22:36:53 +0000
asID:                     262182
IP address blocks:        170.82.119.0/24 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:00:7d:79:cd:e4:d0:be:97:d1:50:66:8e:e9:cb:2f:d7:21:4b:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7CA1E2D818532F6321B3C9E6EE790B2AFE560E21
        Validity
            Not Before: Feb 15 22:31:53 2025 GMT
            Not After : Feb 14 22:36:53 2026 GMT
        Subject: CN=F052AC1BDECB1EEDE7B3F1E84639CBFFFCBB5FFC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:5f:9f:d0:4d:e3:5c:c7:da:40:f6:b7:11:2d:
                    16:21:fc:d3:6d:d3:3b:9f:0d:51:82:97:b1:8c:6a:
                    e9:6a:13:5d:68:57:ff:ab:f8:c5:c8:31:e0:44:c1:
                    10:87:9c:b1:12:dc:e1:27:30:4e:95:b1:5e:f4:13:
                    23:e7:e1:e4:a5:a2:03:30:b4:88:b6:56:58:07:74:
                    d2:e5:da:87:58:8f:ba:80:1e:29:5e:4e:5d:93:f5:
                    79:c7:c0:97:d7:bb:2e:73:ec:a0:8c:47:be:6a:dc:
                    58:2a:c1:f2:87:59:bf:78:a4:23:09:ad:ab:94:5a:
                    80:42:36:ac:59:3e:81:bf:af:ab:a5:15:c3:b5:0a:
                    1b:09:69:1b:7e:08:38:cc:d8:ab:c9:6b:6c:1b:0e:
                    33:09:21:b7:5a:50:d4:d7:e7:59:af:6e:ca:e5:0e:
                    44:e7:2a:e1:2d:fc:c0:32:c7:58:f0:87:64:4a:37:
                    0d:85:fe:db:14:60:f4:9c:7f:7d:30:c3:3d:b0:70:
                    42:93:55:6a:e4:f1:23:69:41:34:b6:dd:74:dc:db:
                    89:1f:b4:3f:2a:55:43:c1:c6:a0:43:0f:1e:c6:26:
                    63:53:43:51:93:03:f9:df:d7:a2:6e:04:eb:c5:49:
                    c2:31:56:db:69:3d:b2:27:df:0f:6a:60:a1:58:f7:
                    df:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:52:AC:1B:DE:CB:1E:ED:E7:B3:F1:E8:46:39:CB:FF:FC:BB:5F:FC
            X509v3 Authority Key Identifier:
                keyid:7C:A1:E2:D8:18:53:2F:63:21:B3:C9:E6:EE:79:0B:2A:FE:56:0E:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5HEYRL8ykWxA5aM2vjn7jY25Xv3bqvmy9tigFBNqRkN8/1/7CA1E2D818532F6321B3C9E6EE790B2AFE560E21.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7CA1E2D818532F6321B3C9E6EE790B2AFE560E21.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5HEYRL8ykWxA5aM2vjn7jY25Xv3bqvmy9tigFBNqRkN8/1/3137302e38322e3131392e302f32342d3332203d3e20323632313832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.82.119.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5d:3f:3c:81:38:94:2c:d6:fc:1f:74:ad:97:da:a0:be:c1:ec:
         33:32:4e:d9:56:6b:92:e1:84:0c:7b:61:d5:45:b6:0f:e4:86:
         ef:4e:b2:ef:58:00:73:46:b4:79:be:b2:06:1c:14:a8:78:98:
         b0:05:80:45:6d:90:2e:e4:0a:bb:9c:63:a8:88:6e:7f:06:15:
         e4:a3:71:1b:61:af:bb:cd:f5:d1:c1:a4:70:f2:fe:02:4f:c3:
         3f:46:07:20:25:bb:02:ea:3f:6d:59:23:e5:d6:8b:2d:78:48:
         9b:32:34:2a:05:7b:82:f1:d2:12:fe:52:84:d2:43:4d:59:de:
         e6:d2:be:cb:da:24:42:46:34:c4:17:a2:24:f4:2f:ce:29:23:
         f4:d8:6f:50:ec:2d:5e:fe:47:5d:1d:b2:2a:50:89:2e:48:4b:
         11:8e:cc:88:d1:7a:1e:be:58:2b:6a:fa:aa:74:0a:36:e1:11:
         0c:80:c3:27:bf:0f:f2:63:29:4b:db:8e:cc:c6:8b:fa:8d:9b:
         51:f6:e3:ff:1d:38:81:f7:2d:95:74:83:af:27:93:20:25:06:
         14:60:46:c9:a4:37:c8:3c:9f:d5:f3:7c:4f:8e:4f:7c:7d:76:
         b6:4c:e1:d3:b7:99:c0:d4:45:1a:63:28:34:a8:05:ef:de:37:
         d6:a1:96:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 21:44:47 2025 by rpki-client