Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/F58Vor2eSQ1f18YGaqhimNdjyYoHnQKyKv8Wjyn68F76/0/3137302e38302e35342e302f32332d3233203d3e20323636333735.roa
File:                     3137302e38302e35342e302f32332d3233203d3e20323636333735.roa (raw, json)
Hash identifier:          Nqa7guodX/7m4MjGFGMTr6/IFii6D9n6TrMMAyMFMmM=
Subject key identifier:   4F:FB:6B:78:C4:CC:AF:6C:09:ED:36:98:5C:59:AB:5A:9C:32:AE:9E
Certificate issuer:       /CN=191C80ED60706578C5B838B1955F974B67CB4E4D
Certificate serial:       60FC866DEEA45579279838D2FB9B0777DBB0F64B
Authority key identifier: 19:1C:80:ED:60:70:65:78:C5:B8:38:B1:95:5F:97:4B:67:CB:4E:4D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/191C80ED60706578C5B838B1955F974B67CB4E4D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F58Vor2eSQ1f18YGaqhimNdjyYoHnQKyKv8Wjyn68F76/0/3137302e38302e35342e302f32332d3233203d3e20323636333735.roa
Signing time:             Tue 11 Feb 2025 13:58:38 +0000
ROA not before:           Tue 11 Feb 2025 13:53:38 +0000
ROA not after:            Tue 10 Feb 2026 13:58:38 +0000
asID:                     266375
IP address blocks:        170.80.54.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:fc:86:6d:ee:a4:55:79:27:98:38:d2:fb:9b:07:77:db:b0:f6:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=191C80ED60706578C5B838B1955F974B67CB4E4D
        Validity
            Not Before: Feb 11 13:53:38 2025 GMT
            Not After : Feb 10 13:58:38 2026 GMT
        Subject: CN=4FFB6B78C4CCAF6C09ED36985C59AB5A9C32AE9E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:2d:ac:76:83:7f:b3:0b:36:63:81:9d:43:cd:
                    0c:ac:a0:10:37:4f:0c:34:2c:83:f8:78:28:7d:ba:
                    99:39:2d:80:32:18:47:a2:b9:f9:f6:17:4f:54:3f:
                    1d:43:81:b3:69:66:15:e9:ff:00:eb:5a:4f:a6:41:
                    03:f4:b3:b0:40:89:52:b4:c8:70:24:ae:1e:13:21:
                    17:62:ff:59:83:a4:b6:1f:2c:1a:fb:de:99:59:65:
                    04:d2:e5:af:f0:06:a3:d9:30:85:f7:2a:06:a5:f4:
                    d5:2f:5c:60:3c:fc:40:9d:4b:91:43:30:92:0b:8e:
                    e6:f9:51:cb:83:dc:23:f6:29:1b:11:f4:f2:27:a6:
                    5c:96:e0:b5:d7:d6:ff:d8:f8:61:9f:20:cc:6d:0d:
                    b6:4b:5f:40:14:7c:bf:5b:94:e6:f9:77:8a:84:5e:
                    11:8a:d9:2a:ce:c5:eb:31:4d:51:a7:ef:eb:92:c6:
                    97:93:a6:64:b9:96:15:79:7f:f7:da:95:91:44:e4:
                    99:5c:ff:5e:27:39:76:23:14:93:30:ed:34:e5:56:
                    4c:23:3c:f0:91:80:89:ce:cf:29:1a:68:8b:af:13:
                    de:fa:d9:07:03:ba:1e:1b:53:57:a1:d2:e7:ea:96:
                    5f:dd:e5:14:85:9e:d2:25:83:f9:00:65:81:13:27:
                    a5:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:FB:6B:78:C4:CC:AF:6C:09:ED:36:98:5C:59:AB:5A:9C:32:AE:9E
            X509v3 Authority Key Identifier:
                keyid:19:1C:80:ED:60:70:65:78:C5:B8:38:B1:95:5F:97:4B:67:CB:4E:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F58Vor2eSQ1f18YGaqhimNdjyYoHnQKyKv8Wjyn68F76/0/191C80ED60706578C5B838B1955F974B67CB4E4D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/191C80ED60706578C5B838B1955F974B67CB4E4D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F58Vor2eSQ1f18YGaqhimNdjyYoHnQKyKv8Wjyn68F76/0/3137302e38302e35342e302f32332d3233203d3e20323636333735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.80.54.0/23

    Signature Algorithm: sha256WithRSAEncryption
         52:dc:51:75:fe:07:aa:10:3c:21:70:02:4f:08:63:0c:6e:52:
         c2:2b:68:8c:e8:5b:f8:32:81:73:65:05:53:52:2d:99:ae:9d:
         19:3f:8d:03:ef:98:07:98:31:34:15:25:25:68:c4:c3:03:e8:
         5f:a5:ae:1e:a9:74:cf:b2:45:c4:a8:91:3d:2d:91:43:a1:5b:
         2f:69:16:2c:47:25:c2:09:1d:cf:07:ab:ff:72:3f:23:46:0b:
         6a:60:08:ec:fc:f1:7d:b3:18:f9:10:fb:1c:61:ff:64:7f:34:
         09:dd:94:01:6c:77:f4:41:14:b1:f5:a7:fc:f2:22:9a:4c:b9:
         e9:91:cf:8d:07:1d:35:3a:23:69:33:e5:b5:06:c4:c8:86:df:
         b0:ce:ab:66:55:c4:29:3c:5a:5b:f7:37:9b:53:62:fe:12:dc:
         64:00:c6:8e:83:b1:13:bf:84:5a:9a:c3:2a:87:ad:01:b6:94:
         82:26:44:d6:3d:c5:67:06:e9:25:c9:02:f3:f8:b1:b8:66:92:
         46:12:35:c4:b5:12:b1:24:af:29:d3:1c:bd:86:f1:d3:32:60:
         df:8b:0e:37:37:3f:a3:0a:56:a2:f7:cb:ad:7d:b1:7a:bd:94:
         ef:e5:a7:b8:de:30:fc:c2:1f:1b:fc:df:d5:9c:5a:9e:6c:be:
         e9:33:5a:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 11:03:55 2025 by rpki-client