Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8GseMLAAXtyeQHYWNvLBCgtRJUFyosWc4TnWxTFBHtrL/0/3137302e302e3233362e302f32322d3332203d3e20323634393833.roa
File:                     3137302e302e3233362e302f32322d3332203d3e20323634393833.roa (raw, json)
Hash identifier:          5+E7ZCDw0k9yCWgj3bL8R8A1F4HZURMin4WMV/OqlQc=
Subject key identifier:   C7:3F:2E:F8:11:E8:1D:CC:4B:E8:DD:3B:54:3D:D5:30:85:0A:57:18
Certificate issuer:       /CN=E54F21ACD06F5B26659FC1A192F97F5439D48FCD
Certificate serial:       6F85E9FB5A2FD1BDCEE6A29A34C98DDE0DE6B8C0
Authority key identifier: E5:4F:21:AC:D0:6F:5B:26:65:9F:C1:A1:92:F9:7F:54:39:D4:8F:CD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E54F21ACD06F5B26659FC1A192F97F5439D48FCD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8GseMLAAXtyeQHYWNvLBCgtRJUFyosWc4TnWxTFBHtrL/0/3137302e302e3233362e302f32322d3332203d3e20323634393833.roa
Signing time:             Wed 19 Feb 2025 16:38:41 +0000
ROA not before:           Wed 19 Feb 2025 16:33:41 +0000
ROA not after:            Wed 18 Feb 2026 16:38:41 +0000
asID:                     264983
IP address blocks:        170.0.236.0/22 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:85:e9:fb:5a:2f:d1:bd:ce:e6:a2:9a:34:c9:8d:de:0d:e6:b8:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E54F21ACD06F5B26659FC1A192F97F5439D48FCD
        Validity
            Not Before: Feb 19 16:33:41 2025 GMT
            Not After : Feb 18 16:38:41 2026 GMT
        Subject: CN=C73F2EF811E81DCC4BE8DD3B543DD530850A5718
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:6c:c2:85:5c:dc:a3:4e:6e:32:69:4b:fc:26:
                    04:95:ad:3c:97:a3:38:25:ce:0f:a7:3a:66:2b:f7:
                    4a:c6:94:a7:e4:32:e1:63:26:19:32:88:84:0c:0a:
                    fa:84:14:06:56:a6:de:41:af:80:01:f4:de:c1:df:
                    7d:db:7e:52:74:59:92:b0:90:f6:17:4d:c6:58:dd:
                    66:dd:1b:e0:c6:bf:77:71:b8:9a:9c:92:c1:a1:33:
                    a3:f9:10:d9:f0:41:f5:14:c7:5a:74:37:94:af:2f:
                    4e:be:1f:5e:cd:0f:c6:3b:f1:9b:e9:b8:f7:09:d5:
                    34:c3:1d:b8:35:ca:82:4a:67:64:81:92:2a:14:8a:
                    9a:28:04:d0:6d:ef:4d:cb:a7:4d:09:c8:e6:c5:2b:
                    a6:78:70:6d:68:d0:39:8a:68:44:60:b4:c5:c5:4c:
                    a0:06:8c:54:a6:7e:10:c0:d3:fe:0f:64:5a:01:73:
                    09:20:f7:e1:13:b7:d8:76:60:e2:83:b5:2e:98:7f:
                    33:13:6e:22:52:d8:5f:83:90:af:f7:b6:7c:d3:1f:
                    f7:70:45:46:79:33:8a:30:2c:12:c3:c7:53:10:49:
                    8a:b3:b5:00:e5:24:3a:f3:81:d2:4c:01:89:a9:8c:
                    67:b6:b6:6b:a4:39:62:34:b9:c2:04:41:cf:7e:8d:
                    59:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:3F:2E:F8:11:E8:1D:CC:4B:E8:DD:3B:54:3D:D5:30:85:0A:57:18
            X509v3 Authority Key Identifier:
                keyid:E5:4F:21:AC:D0:6F:5B:26:65:9F:C1:A1:92:F9:7F:54:39:D4:8F:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8GseMLAAXtyeQHYWNvLBCgtRJUFyosWc4TnWxTFBHtrL/0/E54F21ACD06F5B26659FC1A192F97F5439D48FCD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E54F21ACD06F5B26659FC1A192F97F5439D48FCD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8GseMLAAXtyeQHYWNvLBCgtRJUFyosWc4TnWxTFBHtrL/0/3137302e302e3233362e302f32322d3332203d3e20323634393833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.0.236.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1b:95:42:0d:d1:e7:d3:c9:f3:26:38:69:e5:fb:e5:5b:5d:38:
         e8:c7:21:bf:6b:00:ab:ad:12:d8:db:a1:a5:e3:fb:85:89:8e:
         7a:ab:dc:26:fa:fc:6d:a5:99:6f:f7:23:87:89:ee:40:67:a7:
         db:00:75:2a:bd:a7:7c:c3:6d:dd:7a:ae:b1:0e:f5:bc:85:7f:
         63:d6:f7:53:f5:c7:7a:6d:ef:e5:7e:55:86:5b:3d:c0:0b:a4:
         8d:ae:47:a2:0b:30:1f:56:cf:1e:8f:a7:a2:af:df:11:47:e0:
         67:35:a0:cb:74:9a:d1:e4:3e:7e:cc:90:1a:60:04:e0:93:9d:
         d9:5b:7e:8c:38:de:fc:f0:5c:66:4b:28:4c:c5:c1:7d:7a:58:
         bc:c6:0a:af:8f:d8:76:09:4f:74:96:59:5b:34:98:af:92:9d:
         c6:50:46:38:c4:20:75:fb:6d:43:7c:b4:8f:75:f2:ed:d7:f1:
         f1:52:d1:95:18:5f:6f:29:35:11:14:d4:45:5d:33:d1:48:4e:
         99:6e:93:9c:de:1a:ba:6c:3e:6b:82:96:95:8d:c3:09:ef:20:
         cf:f5:9c:1d:eb:06:b1:b0:ec:54:84:c5:80:c2:9e:33:d9:8f:
         51:6b:f1:46:06:49:a2:1e:79:44:c9:b6:c9:d6:2f:50:9a:a6:
         b3:94:3b:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 05:18:12 2025 by rpki-client