Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/73G9tTfFvoxH9TgBH99kDti77jaLq9vZTCxkhgxaarWV/0/3137302e3235342e3133342e302f32342d3234203d3e20323635313036.roa
File:                     3137302e3235342e3133342e302f32342d3234203d3e20323635313036.roa (raw, json)
Hash identifier:          hjIYqZADWUUgrUq8YOouSu0FIAXbBojma7K6QqsVPOQ=
Subject key identifier:   4A:73:40:B0:7B:CB:0B:FF:07:A2:D3:E6:05:B7:ED:36:60:F1:08:E0
Certificate issuer:       /CN=8C7C3CED5BDDCC80C0FCDD46A8287514BB682859
Certificate serial:       625FAC012BC15C0220C67B92FBD18F21C9C6B739
Authority key identifier: 8C:7C:3C:ED:5B:DD:CC:80:C0:FC:DD:46:A8:28:75:14:BB:68:28:59
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8C7C3CED5BDDCC80C0FCDD46A8287514BB682859.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/73G9tTfFvoxH9TgBH99kDti77jaLq9vZTCxkhgxaarWV/0/3137302e3235342e3133342e302f32342d3234203d3e20323635313036.roa
Signing time:             Tue 30 Apr 2024 13:12:40 +0000
ROA not before:           Tue 30 Apr 2024 13:07:40 +0000
ROA not after:            Tue 29 Apr 2025 13:12:40 +0000
asID:                     265106
IP address blocks:        170.254.134.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:5f:ac:01:2b:c1:5c:02:20:c6:7b:92:fb:d1:8f:21:c9:c6:b7:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8C7C3CED5BDDCC80C0FCDD46A8287514BB682859
        Validity
            Not Before: Apr 30 13:07:40 2024 GMT
            Not After : Apr 29 13:12:40 2025 GMT
        Subject: CN=4A7340B07BCB0BFF07A2D3E605B7ED3660F108E0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:ba:92:c5:f7:a3:37:cd:53:74:c3:b3:4d:d6:
                    db:c7:d3:ab:7a:96:3b:54:92:fa:8f:27:20:bf:aa:
                    56:d9:ad:7d:f3:cf:42:33:ba:87:c8:38:55:41:ba:
                    c8:c6:ae:d1:95:73:81:d7:19:89:da:b5:d1:fa:06:
                    6c:f6:e4:b6:cd:48:80:28:5b:62:2f:95:ba:4f:39:
                    5b:68:1b:29:bd:88:57:80:29:57:80:3b:72:62:bc:
                    ef:19:2b:08:48:65:61:1e:d6:05:58:f3:dc:15:4a:
                    31:0c:e8:4f:48:4d:c6:ff:fe:51:78:64:66:57:54:
                    62:20:df:26:81:49:73:92:bb:58:92:2f:28:47:b7:
                    25:78:f9:13:29:42:6f:6f:9e:00:33:db:63:4f:be:
                    3d:e6:c8:bc:f8:e6:80:6e:fb:da:5d:f1:88:3d:10:
                    8b:da:33:a5:93:01:45:77:c9:2e:ed:f8:3d:6b:50:
                    5f:51:f9:67:54:23:85:cc:a6:0d:28:75:a1:0d:15:
                    48:78:f9:2b:16:87:16:52:e2:c1:df:80:39:d3:95:
                    6e:5e:b7:e6:30:b6:fa:49:71:95:04:86:1e:59:be:
                    c6:89:c5:80:3c:10:d0:fe:c1:64:99:f1:5f:05:58:
                    e2:6f:92:1d:a9:a3:6b:ad:3f:d7:2e:93:43:e5:f7:
                    84:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:73:40:B0:7B:CB:0B:FF:07:A2:D3:E6:05:B7:ED:36:60:F1:08:E0
            X509v3 Authority Key Identifier:
                keyid:8C:7C:3C:ED:5B:DD:CC:80:C0:FC:DD:46:A8:28:75:14:BB:68:28:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/73G9tTfFvoxH9TgBH99kDti77jaLq9vZTCxkhgxaarWV/0/8C7C3CED5BDDCC80C0FCDD46A8287514BB682859.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8C7C3CED5BDDCC80C0FCDD46A8287514BB682859.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/73G9tTfFvoxH9TgBH99kDti77jaLq9vZTCxkhgxaarWV/0/3137302e3235342e3133342e302f32342d3234203d3e20323635313036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.254.134.0/24

    Signature Algorithm: sha256WithRSAEncryption
         79:b3:ba:30:fc:7d:29:c0:0f:72:e9:b7:9c:04:54:2f:fe:eb:
         10:c9:fd:d5:f6:ed:dc:6b:bd:54:cb:1c:9e:b1:b5:8b:3b:06:
         12:f7:6f:5a:d2:8e:fe:10:cb:e6:f6:04:63:29:24:8c:3f:0f:
         2d:e7:ab:96:d0:41:51:3c:7d:79:de:be:04:16:ae:29:c9:a5:
         60:ee:eb:bd:f4:b8:3b:1c:0d:22:03:1a:76:99:2f:c6:f5:dc:
         d9:0e:1a:9c:c7:e5:1f:7b:a8:11:59:ad:e2:33:8e:b6:c9:ad:
         0c:04:a6:38:f7:50:97:c4:02:e2:c3:49:2e:e1:d3:8e:37:3c:
         bd:17:20:4c:87:31:85:e3:9a:78:ec:ed:91:6f:5d:cc:cc:de:
         ca:41:28:c8:43:34:88:9a:3a:1b:4f:fb:ff:75:ac:f9:2c:d1:
         e0:26:1e:25:cf:fd:68:9a:94:de:f3:e2:cf:1f:6a:bd:a6:47:
         2c:21:a6:73:97:1b:c0:8f:10:c5:22:c0:c2:85:bb:e3:11:58:
         32:b2:67:8b:f5:7d:e1:d8:98:2d:60:f7:ca:85:e7:37:d9:bc:
         db:44:6c:eb:c3:e8:a9:1c:88:0e:9a:20:d2:fc:1e:d0:87:dc:
         f6:17:a9:05:08:67:6c:3e:03:44:d6:33:53:dc:cd:2c:22:04:
         48:66:1f:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 04:05:44 2025 by rpki-client