Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9qLRr6NxcxuSfWiL2yWVnXcRNN1e43t8b26z32h7dyvC/1/3137302e3235342e35322e302f32332d3234203d3e203631393031.roa
File:                     3137302e3235342e35322e302f32332d3234203d3e203631393031.roa (raw, json)
Hash identifier:          1aiUBIBEVZ70l7NdNYgTC7fLaqxFUqe1VBSdTyielnk=
Subject key identifier:   7B:A0:E4:35:EF:3E:75:23:B0:F7:69:B7:58:39:CF:F4:34:AB:01:EF
Certificate issuer:       /CN=4FEB85108E86A307A90034950C74C7A6630768F6
Certificate serial:       7DEB629C98B2E62B5EC685AD3FA3F966E5DA0034
Authority key identifier: 4F:EB:85:10:8E:86:A3:07:A9:00:34:95:0C:74:C7:A6:63:07:68:F6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4FEB85108E86A307A90034950C74C7A6630768F6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9qLRr6NxcxuSfWiL2yWVnXcRNN1e43t8b26z32h7dyvC/1/3137302e3235342e35322e302f32332d3234203d3e203631393031.roa
Signing time:             Thu 06 Mar 2025 17:33:27 +0000
ROA not before:           Thu 06 Mar 2025 17:28:27 +0000
ROA not after:            Thu 05 Mar 2026 17:33:27 +0000
asID:                     61901
IP address blocks:        170.254.52.0/23 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:eb:62:9c:98:b2:e6:2b:5e:c6:85:ad:3f:a3:f9:66:e5:da:00:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4FEB85108E86A307A90034950C74C7A6630768F6
        Validity
            Not Before: Mar  6 17:28:27 2025 GMT
            Not After : Mar  5 17:33:27 2026 GMT
        Subject: CN=7BA0E435EF3E7523B0F769B75839CFF434AB01EF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:b3:50:da:ff:35:02:94:24:8f:d3:da:5f:74:
                    b5:1d:d6:66:46:38:1b:8d:07:34:af:9a:7a:59:75:
                    7d:97:e7:b8:94:17:76:be:cb:62:eb:b8:d2:8d:a1:
                    d6:96:af:54:74:1a:35:89:9c:23:38:4d:9e:5a:f4:
                    cd:55:16:7b:14:9f:fd:c6:aa:a3:04:01:50:19:02:
                    cb:bb:bd:ad:cf:2e:2b:e2:12:e6:09:ef:f6:ca:f4:
                    db:e0:d9:bc:e3:18:f4:26:41:24:06:0e:9d:7e:bf:
                    f5:56:5f:f1:ae:51:ca:0f:24:fe:95:75:0f:2f:d9:
                    e6:8b:b0:8d:9b:1e:b8:dd:5f:dd:75:f1:c5:a8:1e:
                    7e:7a:4e:57:dd:cd:ed:80:48:f4:58:23:b4:47:ae:
                    c7:96:c3:0f:d0:81:31:fb:0b:ea:df:bc:71:71:d8:
                    ce:63:df:78:8b:9d:78:96:c5:2d:1b:1e:d5:d7:a1:
                    72:ec:dd:fa:39:64:3c:7e:e1:0b:3e:58:33:00:27:
                    8f:86:61:76:4b:b4:30:20:cb:d8:87:51:2c:60:ec:
                    29:8a:07:0e:71:f8:f1:66:ce:3f:98:f8:e4:fa:e7:
                    e5:a5:88:f4:7a:4c:07:ca:96:4a:c3:6c:60:05:9e:
                    da:5b:1a:4a:e4:76:78:ef:4d:5c:7d:22:de:90:30:
                    3b:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:A0:E4:35:EF:3E:75:23:B0:F7:69:B7:58:39:CF:F4:34:AB:01:EF
            X509v3 Authority Key Identifier:
                keyid:4F:EB:85:10:8E:86:A3:07:A9:00:34:95:0C:74:C7:A6:63:07:68:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9qLRr6NxcxuSfWiL2yWVnXcRNN1e43t8b26z32h7dyvC/1/4FEB85108E86A307A90034950C74C7A6630768F6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4FEB85108E86A307A90034950C74C7A6630768F6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9qLRr6NxcxuSfWiL2yWVnXcRNN1e43t8b26z32h7dyvC/1/3137302e3235342e35322e302f32332d3234203d3e203631393031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.254.52.0/23

    Signature Algorithm: sha256WithRSAEncryption
         10:ff:e7:14:dc:2f:d7:0d:54:1e:19:9f:cc:3a:99:58:8e:e3:
         1f:25:c1:21:1b:7f:26:49:bf:6d:69:68:c7:25:98:35:bb:07:
         14:32:49:be:a0:e2:46:bc:e0:65:00:ed:69:34:90:50:18:0b:
         fe:ab:7d:4d:52:e3:2c:80:4b:ef:51:10:8b:09:5e:61:01:6f:
         e3:a1:c1:a7:68:68:90:1a:6a:55:1c:67:7b:6a:81:11:5c:68:
         42:ef:51:43:9d:1d:1d:9c:d2:c6:82:f9:3d:15:00:12:e5:26:
         f9:7a:83:e0:b5:f9:d2:41:63:bc:13:ec:ba:6d:c4:9d:ee:92:
         f8:ad:64:c2:d4:6f:9f:b4:b7:5f:ed:21:78:88:f7:32:32:d6:
         69:f9:cb:5f:dc:14:eb:b4:13:15:60:83:07:64:47:b1:80:d7:
         04:52:ad:82:b2:9b:81:a4:d3:3b:4d:48:29:ea:b2:b4:71:65:
         42:13:df:62:dd:80:cd:9a:61:e0:fe:9f:db:98:5a:98:aa:bd:
         7b:c2:72:a3:10:20:bb:44:13:86:3e:5a:e3:34:6a:fc:29:12:
         d0:9d:73:9d:77:0a:6e:10:64:7f:85:01:5a:e7:43:6d:08:aa:
         42:dd:68:ef:22:ab:96:a5:a3:62:2f:8a:d8:1a:53:d2:8d:72:
         13:a6:c8:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 11:32:23 2025 by rpki-client