Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GExKcyzNRFswk7q7G1stpL6LCmKD9rRW5yKeGogH6r26/0/3137302e3235342e3139342e302f32332d3233203d3e20323635313131.roa
File:                     3137302e3235342e3139342e302f32332d3233203d3e20323635313131.roa (raw, json)
Hash identifier:          vjtNBnyrEUiDrE4C6ZhGzlYWLERI9MhvUA2No0mWsNA=
Subject key identifier:   58:42:E9:BB:05:33:21:10:9B:61:CE:E4:98:E4:E5:DC:DE:5E:2F:9D
Certificate issuer:       /CN=03D0BB3196FA38806A8E301A208B9222BAE61FDB
Certificate serial:       106DDD15452D43EA260824770FB21DFE0E3538F5
Authority key identifier: 03:D0:BB:31:96:FA:38:80:6A:8E:30:1A:20:8B:92:22:BA:E6:1F:DB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/03D0BB3196FA38806A8E301A208B9222BAE61FDB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GExKcyzNRFswk7q7G1stpL6LCmKD9rRW5yKeGogH6r26/0/3137302e3235342e3139342e302f32332d3233203d3e20323635313131.roa
Signing time:             Mon 03 Apr 2023 17:41:43 +0000
ROA not before:           Mon 03 Apr 2023 17:36:43 +0000
ROA not after:            Mon 01 Apr 2024 17:41:43 +0000
asID:                     265111
IP address blocks:        170.254.194.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:6d:dd:15:45:2d:43:ea:26:08:24:77:0f:b2:1d:fe:0e:35:38:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03D0BB3196FA38806A8E301A208B9222BAE61FDB
        Validity
            Not Before: Apr  3 17:36:43 2023 GMT
            Not After : Apr  1 17:41:43 2024 GMT
        Subject: CN=5842E9BB053321109B61CEE498E4E5DCDE5E2F9D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:58:87:c0:15:e0:cb:b7:7c:a1:22:e3:93:c1:
                    8f:ad:c1:50:f2:f1:30:bc:43:f3:4d:58:60:22:9e:
                    aa:da:33:74:5e:ac:d1:eb:fd:ce:fd:3a:12:04:78:
                    5e:42:00:60:c9:c0:a0:ce:9a:d6:57:a5:81:71:bb:
                    3e:2f:53:fc:3a:ac:91:c4:02:c7:19:cd:39:b5:e3:
                    ce:8b:57:1e:61:bb:38:3e:1a:9d:46:59:ca:d9:ed:
                    a2:ff:7f:2e:df:3a:ae:7a:19:af:61:a1:1a:f7:3b:
                    cb:4c:29:ef:d6:26:7e:b6:3d:20:01:58:ee:79:26:
                    bd:2e:a8:28:be:9b:e8:50:6b:50:71:4f:e8:db:5e:
                    06:47:f9:bd:ab:ad:f0:48:f9:e4:3a:db:7f:5a:49:
                    60:b1:d6:4d:ea:b2:28:e9:10:7b:13:0d:2c:15:9a:
                    01:f3:3c:0c:00:4d:09:d8:65:fd:39:20:78:43:55:
                    37:14:91:38:2c:d2:36:89:91:38:37:82:fb:60:c8:
                    da:dc:58:03:3b:79:d1:e5:5d:92:3b:12:67:10:09:
                    0b:b0:96:8d:e6:40:00:82:e3:0f:d0:35:13:88:c8:
                    c9:a3:9a:ba:47:24:1b:c9:e2:ef:ec:c0:19:26:00:
                    51:85:ed:47:bc:4f:99:aa:d6:89:cc:f6:29:22:e4:
                    02:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:42:E9:BB:05:33:21:10:9B:61:CE:E4:98:E4:E5:DC:DE:5E:2F:9D
            X509v3 Authority Key Identifier:
                keyid:03:D0:BB:31:96:FA:38:80:6A:8E:30:1A:20:8B:92:22:BA:E6:1F:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GExKcyzNRFswk7q7G1stpL6LCmKD9rRW5yKeGogH6r26/0/03D0BB3196FA38806A8E301A208B9222BAE61FDB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/03D0BB3196FA38806A8E301A208B9222BAE61FDB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GExKcyzNRFswk7q7G1stpL6LCmKD9rRW5yKeGogH6r26/0/3137302e3235342e3139342e302f32332d3233203d3e20323635313131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.254.194.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2d:ac:48:48:fa:dd:99:39:9e:e8:dc:e1:e8:80:31:6c:24:79:
         fb:32:21:d2:5f:77:47:f0:05:cd:81:37:e3:5a:24:70:f7:0f:
         cf:b0:75:95:53:de:b3:2a:3e:54:8d:19:48:60:62:de:82:f5:
         92:55:b7:12:80:fd:4b:98:5b:09:5e:78:e3:a3:67:cf:1c:c5:
         72:9d:8c:32:0b:36:be:06:dc:82:42:14:92:d0:ae:c0:46:1f:
         e7:e0:10:99:d6:37:60:28:bb:d7:08:cc:11:be:40:47:d1:8c:
         6b:06:a3:b2:b2:89:91:97:1e:87:da:0c:2d:ff:4a:ef:0b:df:
         ca:c4:5a:d8:ff:cf:8a:03:10:d4:29:a1:69:68:11:57:37:44:
         21:a8:93:ea:1b:a4:c2:dd:20:51:d5:9d:ad:0e:a3:10:a5:75:
         36:52:bb:98:42:ba:f1:94:cf:ae:9a:c1:98:69:8f:be:ab:c6:
         0d:9d:4c:33:48:a3:b4:5b:5e:8b:44:63:e5:f5:a2:b0:47:d2:
         d2:9d:92:53:e7:6b:11:44:2c:e7:7c:02:53:b5:4e:03:28:9a:
         03:f0:e7:69:05:bb:a9:d2:df:ee:fb:51:71:44:74:a6:9e:8e:
         02:7b:cb:56:91:66:31:dc:70:c6:df:8c:e4:17:f9:71:a8:35:
         b9:7e:ac:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:44:04 2025 by rpki-client