Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9qLRr6NxcxuSfWiL2yWVnXcRNN1e43t8b26z32h7dyvC/1/3137302e3235342e35342e302f32332d3234203d3e203631393031.roa
File:                     3137302e3235342e35342e302f32332d3234203d3e203631393031.roa (raw, json)
Hash identifier:          RYPdPuBNFebz9NMxkrB1ByPS9CO5QwI2mjoViQhhiVY=
Subject key identifier:   75:AD:BA:26:F5:58:D4:A9:47:B4:B1:78:7F:F0:A9:73:7E:AB:B0:1B
Certificate issuer:       /CN=4FEB85108E86A307A90034950C74C7A6630768F6
Certificate serial:       26A502321C7BF4FC6E2C777474FC14128EA18BD2
Authority key identifier: 4F:EB:85:10:8E:86:A3:07:A9:00:34:95:0C:74:C7:A6:63:07:68:F6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4FEB85108E86A307A90034950C74C7A6630768F6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9qLRr6NxcxuSfWiL2yWVnXcRNN1e43t8b26z32h7dyvC/1/3137302e3235342e35342e302f32332d3234203d3e203631393031.roa
Signing time:             Thu 06 Mar 2025 17:33:26 +0000
ROA not before:           Thu 06 Mar 2025 17:28:26 +0000
ROA not after:            Thu 05 Mar 2026 17:33:26 +0000
asID:                     61901
IP address blocks:        170.254.54.0/23 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:a5:02:32:1c:7b:f4:fc:6e:2c:77:74:74:fc:14:12:8e:a1:8b:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4FEB85108E86A307A90034950C74C7A6630768F6
        Validity
            Not Before: Mar  6 17:28:26 2025 GMT
            Not After : Mar  5 17:33:26 2026 GMT
        Subject: CN=75ADBA26F558D4A947B4B1787FF0A9737EABB01B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:e8:f7:ad:7b:6a:d3:a8:f9:5b:a5:a4:0b:91:
                    44:a1:ad:ff:0a:2e:5d:99:65:56:b0:f1:56:aa:89:
                    80:13:e7:b9:bd:68:9f:9e:97:ea:97:65:00:07:e5:
                    e1:fa:4f:42:7b:b7:64:b8:00:29:2b:f3:bc:5c:b1:
                    d7:84:ca:e9:00:f4:d5:bb:20:f6:6a:35:50:da:f7:
                    01:e0:39:5d:98:e4:97:56:7b:0d:d4:87:e0:44:90:
                    14:15:68:c0:37:3f:7f:4d:1e:ca:e5:01:4b:c0:06:
                    c4:0b:47:41:0a:50:27:c7:7b:b3:0f:99:fa:a1:3a:
                    29:07:c2:96:a8:f6:f8:74:bb:c5:c2:ba:76:2f:9e:
                    d1:11:c2:b0:d5:43:22:c7:a7:e0:a3:f7:f6:97:e6:
                    63:a4:b3:cd:c4:f3:94:18:f6:37:ed:ca:12:29:fe:
                    78:cd:d5:01:80:79:d5:0f:ba:19:56:62:1b:60:ac:
                    74:ee:62:08:70:66:06:6f:80:07:69:29:87:63:b4:
                    8e:10:fa:a6:5d:f7:33:41:6f:09:22:a9:c0:c6:1a:
                    6a:7b:88:0c:3a:c8:5c:cc:42:35:e7:22:51:5c:c4:
                    20:c0:8c:37:a7:c6:c9:f8:db:bc:5e:b3:9b:bb:ed:
                    69:94:20:68:e3:95:17:4f:e2:e3:28:fa:1d:e0:96:
                    5d:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:AD:BA:26:F5:58:D4:A9:47:B4:B1:78:7F:F0:A9:73:7E:AB:B0:1B
            X509v3 Authority Key Identifier:
                keyid:4F:EB:85:10:8E:86:A3:07:A9:00:34:95:0C:74:C7:A6:63:07:68:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9qLRr6NxcxuSfWiL2yWVnXcRNN1e43t8b26z32h7dyvC/1/4FEB85108E86A307A90034950C74C7A6630768F6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4FEB85108E86A307A90034950C74C7A6630768F6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9qLRr6NxcxuSfWiL2yWVnXcRNN1e43t8b26z32h7dyvC/1/3137302e3235342e35342e302f32332d3234203d3e203631393031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.254.54.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5d:83:55:5e:a8:44:3c:9f:65:7a:ec:e7:20:dd:a5:6d:6c:e9:
         2a:13:8e:68:08:27:b1:07:e4:0a:e4:73:25:92:52:a4:27:d7:
         26:a4:03:50:bf:99:49:4d:64:09:77:d1:76:a7:c6:61:c9:22:
         e4:9f:79:7e:32:7d:c5:60:3b:26:72:ac:22:40:66:3a:d3:76:
         2e:01:ae:55:5d:9d:d7:37:69:76:ca:96:75:f5:58:c9:65:22:
         ea:fd:7d:ec:7c:23:d6:6b:0e:83:fb:0f:0e:a0:32:88:0b:5f:
         42:b1:1f:b1:44:eb:15:5c:ac:43:d9:ed:0a:2f:20:9b:c9:47:
         55:c3:ec:83:e5:80:38:bb:36:80:92:5f:2b:c8:89:95:da:6e:
         05:e2:6d:93:53:0a:01:bc:d5:9f:6e:e3:11:45:5c:a5:47:19:
         f3:96:1d:c7:d1:bd:1c:1b:4c:79:6c:f1:34:c9:07:91:66:d3:
         97:25:27:6a:0a:28:a6:3c:67:62:83:37:5f:23:d2:a8:f7:e8:
         82:2f:6c:82:a7:34:0b:a2:3c:d3:e2:c7:66:4a:b4:a6:b4:38:
         51:59:1e:00:54:c6:14:2e:5b:3e:1a:a0:2f:3c:b8:79:f2:6b:
         39:d2:c4:5a:5e:10:08:78:5f:f7:22:48:e2:8a:a3:56:d8:49:
         2c:0c:ee:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 11:32:29 2025 by rpki-client