Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5HEYRL8ykWxA5aM2vjn7jY25Xv3bqvmy9tigFBNqRkN8/1/3137302e38322e3131392e302f32342d3332203d3e20323633343234.roa
File:                     3137302e38322e3131392e302f32342d3332203d3e20323633343234.roa (raw, json)
Hash identifier:          ICGh3b1nGhJYcquEwWx4FjVvwt3xthgzcR3OTzmSiLE=
Subject key identifier:   37:36:FE:67:52:1B:26:60:76:AC:FD:88:32:0D:EB:2A:81:B1:CE:14
Certificate issuer:       /CN=7CA1E2D818532F6321B3C9E6EE790B2AFE560E21
Certificate serial:       1AEBA037261C03969A6EBC515204508BC58ED150
Authority key identifier: 7C:A1:E2:D8:18:53:2F:63:21:B3:C9:E6:EE:79:0B:2A:FE:56:0E:21
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7CA1E2D818532F6321B3C9E6EE790B2AFE560E21.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5HEYRL8ykWxA5aM2vjn7jY25Xv3bqvmy9tigFBNqRkN8/1/3137302e38322e3131392e302f32342d3332203d3e20323633343234.roa
Signing time:             Sat 15 Feb 2025 22:36:48 +0000
ROA not before:           Sat 15 Feb 2025 22:31:48 +0000
ROA not after:            Sat 14 Feb 2026 22:36:48 +0000
asID:                     263424
IP address blocks:        170.82.119.0/24 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:eb:a0:37:26:1c:03:96:9a:6e:bc:51:52:04:50:8b:c5:8e:d1:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7CA1E2D818532F6321B3C9E6EE790B2AFE560E21
        Validity
            Not Before: Feb 15 22:31:48 2025 GMT
            Not After : Feb 14 22:36:48 2026 GMT
        Subject: CN=3736FE67521B266076ACFD88320DEB2A81B1CE14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:40:7d:2b:f1:eb:e9:07:d6:29:26:6d:de:f0:
                    e7:3a:73:c1:81:a2:f7:80:a8:ed:0a:19:ee:08:e8:
                    5f:70:e3:c3:8d:a0:af:8c:df:85:d8:bb:36:be:47:
                    02:90:e9:de:0c:a4:ef:d8:23:bc:a7:f6:70:7e:c2:
                    6d:9a:54:6c:56:40:50:b6:dd:12:1d:5f:02:95:0a:
                    da:e9:a3:fc:3a:93:46:64:84:6a:7b:97:93:dd:1f:
                    a6:2a:90:58:93:29:97:dc:37:51:cd:5d:28:cb:bd:
                    6b:12:e8:a6:d3:5a:57:68:d8:22:f6:d1:d5:ee:d0:
                    f1:09:57:ee:b8:a9:d5:4d:96:b5:b4:cb:07:f5:f8:
                    88:6f:cf:cc:82:9d:32:df:bf:f1:f6:cf:23:d6:33:
                    db:1f:5e:b8:37:88:14:2d:80:ee:ab:83:da:85:3c:
                    52:1b:1f:39:19:f3:92:64:db:f9:80:7d:43:fe:4d:
                    76:e1:7d:1c:7b:23:25:e6:01:9a:a3:d8:bf:b8:09:
                    6a:70:59:d3:67:fa:14:9a:40:34:4b:35:23:1e:4d:
                    3f:38:98:83:da:4a:5a:c0:04:5b:3d:55:6f:29:fd:
                    3e:ee:75:39:57:9a:b2:cc:bf:e0:49:fe:05:8d:0c:
                    eb:87:aa:76:08:fa:73:fe:64:80:ec:95:7c:a9:3d:
                    e4:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:36:FE:67:52:1B:26:60:76:AC:FD:88:32:0D:EB:2A:81:B1:CE:14
            X509v3 Authority Key Identifier:
                keyid:7C:A1:E2:D8:18:53:2F:63:21:B3:C9:E6:EE:79:0B:2A:FE:56:0E:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5HEYRL8ykWxA5aM2vjn7jY25Xv3bqvmy9tigFBNqRkN8/1/7CA1E2D818532F6321B3C9E6EE790B2AFE560E21.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7CA1E2D818532F6321B3C9E6EE790B2AFE560E21.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5HEYRL8ykWxA5aM2vjn7jY25Xv3bqvmy9tigFBNqRkN8/1/3137302e38322e3131392e302f32342d3332203d3e20323633343234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.82.119.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6a:fe:20:53:09:07:14:aa:59:be:e8:0d:ac:a2:09:30:fc:39:
         d4:d9:8a:12:3e:0f:b8:9b:cd:86:fb:ce:47:11:22:93:44:12:
         7b:5d:07:c5:b1:23:72:96:90:c0:fa:d5:0a:23:c2:c1:e2:dd:
         87:fc:cb:a3:5e:89:ba:c7:17:30:02:ff:f1:40:f0:a8:99:f3:
         e4:27:2a:be:45:47:39:e2:c4:a4:3d:44:3d:b6:be:2b:b5:91:
         bf:12:6f:c8:dc:e8:77:2a:f1:b9:12:f0:fc:d3:39:4f:6f:e4:
         53:38:33:0a:71:8f:e5:2f:e7:e4:10:a2:76:bd:79:91:b8:c5:
         57:8a:e5:ea:e4:55:3f:f6:28:55:02:b3:3b:38:6b:d8:17:0e:
         54:a0:ac:53:fe:77:06:87:3e:e9:73:7b:79:1e:3d:62:b9:15:
         f7:20:83:b9:f7:68:d1:08:ab:d0:45:b2:18:cd:64:7d:4e:5e:
         2b:3b:d8:20:ed:7b:05:a6:7c:be:c4:b9:78:fb:29:0f:33:07:
         0e:30:ff:65:c9:4c:7e:89:14:f0:a9:74:79:b6:c7:c1:fc:c3:
         9b:01:57:2c:6b:43:fd:44:22:bd:eb:b6:45:32:ae:45:41:ef:
         ec:05:08:a3:46:d4:97:52:b6:b9:15:d2:3d:06:af:78:78:1c:
         ba:32:24:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 15:42:39 2025 by rpki-client