Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/73G9tTfFvoxH9TgBH99kDti77jaLq9vZTCxkhgxaarWV/0/3137302e3235342e3133332e302f32342d3234203d3e20323635313036.roa
File:                     3137302e3235342e3133332e302f32342d3234203d3e20323635313036.roa (raw, json)
Hash identifier:          fOU/ynRKyiKcAgGRPbsaXF84byM13K1nol2584ohRN8=
Subject key identifier:   56:28:93:75:7F:76:69:7D:1B:2B:46:5B:6E:EB:F5:2F:3F:C9:22:CB
Certificate issuer:       /CN=8C7C3CED5BDDCC80C0FCDD46A8287514BB682859
Certificate serial:       2CEEE85FEA9E43AFD2E8982F3114F34F6BDFFA3F
Authority key identifier: 8C:7C:3C:ED:5B:DD:CC:80:C0:FC:DD:46:A8:28:75:14:BB:68:28:59
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8C7C3CED5BDDCC80C0FCDD46A8287514BB682859.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/73G9tTfFvoxH9TgBH99kDti77jaLq9vZTCxkhgxaarWV/0/3137302e3235342e3133332e302f32342d3234203d3e20323635313036.roa
Signing time:             Tue 30 Apr 2024 13:12:38 +0000
ROA not before:           Tue 30 Apr 2024 13:07:38 +0000
ROA not after:            Tue 29 Apr 2025 13:12:38 +0000
asID:                     265106
IP address blocks:        170.254.133.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:ee:e8:5f:ea:9e:43:af:d2:e8:98:2f:31:14:f3:4f:6b:df:fa:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8C7C3CED5BDDCC80C0FCDD46A8287514BB682859
        Validity
            Not Before: Apr 30 13:07:38 2024 GMT
            Not After : Apr 29 13:12:38 2025 GMT
        Subject: CN=562893757F76697D1B2B465B6EEBF52F3FC922CB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:64:19:5b:f0:70:a8:b8:4a:3e:32:17:00:c9:
                    59:be:b9:99:3b:f0:1d:d8:e8:d0:c0:d4:e9:7d:84:
                    f3:8a:78:ef:4c:45:71:b7:11:9b:d3:3c:fc:8e:09:
                    92:76:b3:2c:d4:b0:82:c1:08:c2:79:bf:f3:94:1c:
                    4b:09:53:c5:48:0e:b4:3c:05:cd:61:e8:f4:ee:5f:
                    43:30:39:c4:db:74:df:4a:5d:a7:63:a6:04:a4:44:
                    e0:17:87:6a:99:af:bf:30:22:ae:a8:ca:4c:cc:50:
                    12:09:33:d8:93:74:30:43:4f:ee:42:60:d5:cf:be:
                    02:3a:2e:83:76:48:4a:a1:08:3f:04:bf:84:a2:9f:
                    df:92:82:1a:cd:fc:4b:db:e8:4d:d0:80:49:76:4a:
                    e3:1c:db:ef:c3:64:5a:1d:99:2c:43:69:87:7d:06:
                    17:2f:f0:4c:ae:bc:a8:2f:8f:27:be:fa:92:6c:ae:
                    b4:26:c9:63:f6:18:74:dd:6d:c0:52:51:ea:7f:e4:
                    e2:bc:18:54:3f:d4:d7:c2:c6:8f:d7:2f:b6:7e:f9:
                    db:b9:47:7d:54:40:cb:fc:56:ac:91:7e:0f:b8:a4:
                    2c:21:af:0d:86:e4:8d:7b:ee:97:07:35:e9:9b:57:
                    85:96:d1:d4:3b:7d:41:c8:69:28:2f:41:64:08:9e:
                    c5:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:28:93:75:7F:76:69:7D:1B:2B:46:5B:6E:EB:F5:2F:3F:C9:22:CB
            X509v3 Authority Key Identifier:
                keyid:8C:7C:3C:ED:5B:DD:CC:80:C0:FC:DD:46:A8:28:75:14:BB:68:28:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/73G9tTfFvoxH9TgBH99kDti77jaLq9vZTCxkhgxaarWV/0/8C7C3CED5BDDCC80C0FCDD46A8287514BB682859.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8C7C3CED5BDDCC80C0FCDD46A8287514BB682859.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/73G9tTfFvoxH9TgBH99kDti77jaLq9vZTCxkhgxaarWV/0/3137302e3235342e3133332e302f32342d3234203d3e20323635313036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.254.133.0/24

    Signature Algorithm: sha256WithRSAEncryption
         23:6b:3a:e0:f3:39:3c:ec:89:90:92:4c:26:77:65:77:01:a4:
         75:18:bf:2f:6e:39:62:ef:15:08:75:1f:58:8e:f0:67:97:11:
         a5:f4:c0:ee:50:67:6f:b7:1f:5b:fa:c2:b1:b8:b6:6e:c4:d1:
         2c:cf:5b:d6:c5:b3:a9:a5:6b:b3:ad:48:50:64:c2:46:be:ba:
         a8:13:0f:9b:62:81:32:68:20:2b:1a:4e:02:7d:23:c7:50:8c:
         9c:17:78:d4:90:51:9d:36:1b:2b:39:ee:8f:59:22:53:64:91:
         cb:08:5d:87:78:70:90:fc:5e:7b:42:82:06:13:4a:61:6f:86:
         5e:4c:61:0e:4d:70:ba:d4:de:98:dd:d5:27:d8:bc:bb:c4:db:
         a5:ea:8b:a9:7b:ee:57:86:78:a0:76:4f:c4:fd:97:c3:0c:6d:
         aa:e3:e0:34:41:9e:c0:9f:12:a8:16:03:47:2a:75:a8:0a:6d:
         05:8e:8a:64:e7:69:55:18:38:b2:09:9d:aa:c7:4b:a5:1e:d1:
         c2:b9:26:9b:41:89:58:28:b3:8f:2f:b3:c0:0b:e4:ef:83:95:
         1d:47:c8:06:ca:c1:a9:98:06:b7:1b:50:9d:9d:1f:a5:d9:29:
         36:9f:cb:9f:3e:65:f3:e4:1c:a9:a0:a6:2f:c1:e5:3d:d7:3d:
         04:97:df:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 04:03:06 2025 by rpki-client