Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6eX8DagerKdVMfZG3ocDYphnK3dvuNxn9sp2RugoahyP/0/3137302e38322e3231322e302f32322d3332203d3e20323636343536.roa
File:                     3137302e38322e3231322e302f32322d3332203d3e20323636343536.roa (raw, json)
Hash identifier:          1vCNOY06vxR4tSQJx3wnWVe/N9wnWDRT7sn7QVHwztk=
Subject key identifier:   07:3C:C8:8A:27:6A:A3:1F:AE:34:B8:FA:FD:9C:8E:90:AC:44:A2:FA
Certificate issuer:       /CN=1EF349B3A4F741B3BC09C6801C768A6D3028E54E
Certificate serial:       58E5CAE55C61A673FA13944E9A2B36E66EA98E5D
Authority key identifier: 1E:F3:49:B3:A4:F7:41:B3:BC:09:C6:80:1C:76:8A:6D:30:28:E5:4E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1EF349B3A4F741B3BC09C6801C768A6D3028E54E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6eX8DagerKdVMfZG3ocDYphnK3dvuNxn9sp2RugoahyP/0/3137302e38322e3231322e302f32322d3332203d3e20323636343536.roa
Signing time:             Tue 30 Jan 2024 09:25:50 +0000
ROA not before:           Tue 30 Jan 2024 09:20:50 +0000
ROA not after:            Tue 28 Jan 2025 09:25:50 +0000
asID:                     266456
IP address blocks:        170.82.212.0/22 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:e5:ca:e5:5c:61:a6:73:fa:13:94:4e:9a:2b:36:e6:6e:a9:8e:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1EF349B3A4F741B3BC09C6801C768A6D3028E54E
        Validity
            Not Before: Jan 30 09:20:50 2024 GMT
            Not After : Jan 28 09:25:50 2025 GMT
        Subject: CN=073CC88A276AA31FAE34B8FAFD9C8E90AC44A2FA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:45:b5:4b:7f:54:90:79:68:a1:fa:61:3b:b3:
                    18:40:bb:03:ac:4f:87:1c:95:8f:6f:fd:0a:52:03:
                    41:33:a4:75:1b:0f:c1:bd:b4:8f:41:c9:ac:f7:30:
                    66:7e:4c:ba:d3:3c:31:52:d6:27:ac:5e:26:c7:a7:
                    b2:81:05:74:3d:6a:3a:32:ba:64:c9:00:9a:4f:95:
                    25:7d:8e:90:61:74:dd:5f:0e:a4:0c:42:f2:dd:b1:
                    7d:3e:a8:63:6b:18:ee:f2:0c:ad:37:99:b2:49:60:
                    71:c5:12:64:1b:b1:c6:c9:41:f5:33:b1:f5:2e:79:
                    72:dc:12:3e:9a:be:6c:5a:a8:9e:25:0e:17:d9:c1:
                    d3:9e:ae:ce:44:ad:85:87:63:6b:fe:40:7a:09:e7:
                    56:cd:c0:46:64:14:91:3c:d7:2c:6e:fc:97:2b:f5:
                    bd:80:e2:e5:be:99:72:e9:3e:75:f2:a3:ab:a7:9e:
                    e7:71:1d:93:b3:ad:c9:9d:15:f7:f5:12:1e:3c:e5:
                    07:93:a5:8b:fe:06:75:b9:bf:88:b0:18:37:af:e1:
                    e6:f9:23:3a:45:59:85:38:db:eb:4e:65:bd:33:d5:
                    c2:f2:f9:cd:bd:04:49:a2:63:10:45:a1:c3:13:04:
                    96:87:ec:b2:45:b7:5f:70:c2:f7:1c:14:02:d9:d5:
                    4e:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:3C:C8:8A:27:6A:A3:1F:AE:34:B8:FA:FD:9C:8E:90:AC:44:A2:FA
            X509v3 Authority Key Identifier:
                keyid:1E:F3:49:B3:A4:F7:41:B3:BC:09:C6:80:1C:76:8A:6D:30:28:E5:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6eX8DagerKdVMfZG3ocDYphnK3dvuNxn9sp2RugoahyP/0/1EF349B3A4F741B3BC09C6801C768A6D3028E54E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1EF349B3A4F741B3BC09C6801C768A6D3028E54E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6eX8DagerKdVMfZG3ocDYphnK3dvuNxn9sp2RugoahyP/0/3137302e38322e3231322e302f32322d3332203d3e20323636343536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.82.212.0/22

    Signature Algorithm: sha256WithRSAEncryption
         83:aa:eb:52:ff:f9:e0:b6:05:77:07:86:59:8e:4f:8c:63:72:
         18:4f:95:8f:1c:60:e5:36:62:d9:d3:53:92:5a:b6:1a:12:86:
         67:7b:0e:ab:61:cc:e6:f5:e9:87:53:50:86:ec:b8:1c:e6:82:
         39:e2:ab:d4:0a:ac:aa:5a:b9:85:e1:e2:84:43:ce:3d:ce:2e:
         1f:66:c8:f3:f9:eb:e0:e9:1c:b4:17:59:e5:72:6d:77:34:94:
         80:6a:fa:e3:55:fc:be:8b:f0:e8:13:99:df:df:5c:42:6b:04:
         ac:99:2a:d9:b2:6a:be:6d:24:12:ed:eb:7e:8d:ea:53:06:5e:
         fb:d4:82:9b:13:ca:30:82:25:2c:e2:00:24:25:f8:0b:5a:d5:
         ea:26:21:d2:bc:c5:a5:43:fb:96:12:10:2d:d7:73:ce:2b:69:
         fa:2c:54:7a:64:9b:0a:4e:07:6f:cf:27:ff:a8:8d:a1:15:54:
         53:35:ea:7e:4d:4c:bb:ee:03:ff:50:61:08:33:f3:b3:47:dc:
         ef:69:3c:55:82:6f:63:40:6e:62:f1:33:f5:6c:69:83:01:a9:
         66:0f:13:24:89:64:b5:90:d8:0d:a4:85:15:65:6f:f0:21:2f:
         d4:fe:68:4e:c2:d6:1b:fc:47:79:ab:fe:13:ff:49:b9:86:ae:
         05:37:1a:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:28:09 2025 by rpki-client