Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BDDvo5BkhaCHkeUU72wa1nkFMAKw6ci2oEGMQEGUeDxf/0/3137302e38322e35322e302f32322d3234203d3e20323636343334.roa
File:                     3137302e38322e35322e302f32322d3234203d3e20323636343334.roa (raw, json)
Hash identifier:          XkhD46x2THV+svDJXIroCrViRsJLHaZsNrS6OViE/b8=
Subject key identifier:   13:41:5B:6A:C9:1E:93:7E:4C:94:11:54:1C:AE:85:54:C5:ED:09:71
Certificate issuer:       /CN=B4B7AC267E61DBA66D85BBEAA7D66C4823CA8CD1
Certificate serial:       4149BE7D8B10409D8FC5090A4CF7826913697676
Authority key identifier: B4:B7:AC:26:7E:61:DB:A6:6D:85:BB:EA:A7:D6:6C:48:23:CA:8C:D1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B4B7AC267E61DBA66D85BBEAA7D66C4823CA8CD1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BDDvo5BkhaCHkeUU72wa1nkFMAKw6ci2oEGMQEGUeDxf/0/3137302e38322e35322e302f32322d3234203d3e20323636343334.roa
Signing time:             Wed 03 Apr 2024 18:22:30 +0000
ROA not before:           Wed 03 Apr 2024 18:17:30 +0000
ROA not after:            Wed 02 Apr 2025 18:22:30 +0000
asID:                     266434
IP address blocks:        170.82.52.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:49:be:7d:8b:10:40:9d:8f:c5:09:0a:4c:f7:82:69:13:69:76:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B4B7AC267E61DBA66D85BBEAA7D66C4823CA8CD1
        Validity
            Not Before: Apr  3 18:17:30 2024 GMT
            Not After : Apr  2 18:22:30 2025 GMT
        Subject: CN=13415B6AC91E937E4C9411541CAE8554C5ED0971
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:a9:97:03:43:79:d5:f4:98:7c:45:e3:33:0e:
                    63:8f:44:c3:2e:84:58:03:35:53:a6:42:69:21:91:
                    19:cf:cf:b1:b1:be:62:f6:95:7e:4c:4b:37:9e:66:
                    49:94:64:ab:57:5a:03:e3:c3:f6:e5:e4:68:24:8d:
                    e7:71:33:9d:11:83:4e:01:37:2c:93:26:89:8b:da:
                    8d:cc:b4:df:cb:ba:15:aa:77:fa:0b:2a:e8:ba:42:
                    c5:10:e9:12:99:7b:8b:7f:6e:1a:a3:22:68:e6:32:
                    8d:9d:8a:59:19:71:5a:81:3a:49:b9:db:14:d5:27:
                    1b:28:07:ae:8d:00:94:23:23:e7:37:ea:e3:1b:e4:
                    2b:12:2c:83:2a:ae:b7:10:dd:d8:8c:4a:7d:0f:8a:
                    4d:23:ed:61:5b:21:3a:ee:bd:ad:b9:41:e1:0b:ea:
                    19:b8:cb:ab:b3:34:53:b8:9b:3b:32:eb:1a:3b:ac:
                    19:65:db:fb:3a:d6:5e:9e:ad:6c:05:fe:44:a2:00:
                    f0:74:ea:f5:bc:66:1f:dc:f6:c7:bc:73:32:7f:80:
                    e0:6a:72:82:33:00:de:2e:3e:46:8f:d8:b8:75:3c:
                    57:d8:df:e7:10:1c:a2:f6:86:2c:e1:e2:2d:bf:3d:
                    c0:ac:3f:07:c1:36:9a:75:ee:ec:2e:5c:83:d7:be:
                    57:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:41:5B:6A:C9:1E:93:7E:4C:94:11:54:1C:AE:85:54:C5:ED:09:71
            X509v3 Authority Key Identifier:
                keyid:B4:B7:AC:26:7E:61:DB:A6:6D:85:BB:EA:A7:D6:6C:48:23:CA:8C:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BDDvo5BkhaCHkeUU72wa1nkFMAKw6ci2oEGMQEGUeDxf/0/B4B7AC267E61DBA66D85BBEAA7D66C4823CA8CD1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B4B7AC267E61DBA66D85BBEAA7D66C4823CA8CD1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BDDvo5BkhaCHkeUU72wa1nkFMAKw6ci2oEGMQEGUeDxf/0/3137302e38322e35322e302f32322d3234203d3e20323636343334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.82.52.0/22

    Signature Algorithm: sha256WithRSAEncryption
         c1:4b:7f:ec:dd:2f:ca:c4:d6:18:3a:68:ac:18:b2:78:15:ca:
         21:12:c3:98:3a:78:04:53:a0:dc:cc:f8:87:79:9c:e8:b9:29:
         e0:0c:b5:51:a3:4e:c9:05:b2:6d:88:49:38:2c:ab:43:34:d6:
         a6:44:a1:ac:98:e1:f9:f8:83:6a:1f:ee:30:37:f3:b4:f6:e8:
         1c:7a:7f:ca:1a:df:5b:9e:ca:db:d2:3a:b5:63:47:d6:80:f5:
         41:81:9e:ba:e1:9e:95:52:c0:4f:cf:82:9c:13:9b:94:c7:cb:
         b7:0b:ed:3b:6e:a7:63:6f:82:70:f4:2f:03:d0:5f:7c:8d:1a:
         2c:1d:92:9f:71:36:c8:0a:03:9b:40:fd:72:59:4a:84:31:b9:
         db:63:1d:49:de:09:9d:89:f5:0b:e1:3f:75:8e:67:22:f5:01:
         7d:96:6b:a0:d4:05:c7:92:c0:65:56:07:38:f4:11:21:59:bc:
         73:8d:99:61:29:55:31:b8:ed:5d:91:59:4a:a4:fa:c8:85:e7:
         2a:6e:46:da:93:22:f6:68:2b:c4:3a:af:0f:04:9d:3b:bb:ae:
         d1:bc:31:11:d1:8e:ff:d0:88:9e:91:d5:64:75:2f:fe:9e:09:
         0c:f6:ba:f9:2f:b9:10:28:06:cd:10:28:e8:b6:7f:04:23:e6:
         3e:c8:a0:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 03:28:50 2025 by rpki-client