Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GExKcyzNRFswk7q7G1stpL6LCmKD9rRW5yKeGogH6r26/1/3137302e3235342e3139322e302f32322d3234203d3e20323635313131.roa
File:                     3137302e3235342e3139322e302f32322d3234203d3e20323635313131.roa (raw, json)
Hash identifier:          zWmDZdYydyzi9PyFTbcKWk+FD3K/VQIjf9kXaiTkzcQ=
Subject key identifier:   40:DC:BD:6E:96:C1:9A:65:75:62:06:FE:08:1B:CF:CD:78:C5:6F:7D
Certificate issuer:       /CN=4C94A42CCCF281C612C2A002CC0DEB4570D46EDC
Certificate serial:       68D1732B7544DC4B4A78B1ACEA2F2585EF785443
Authority key identifier: 4C:94:A4:2C:CC:F2:81:C6:12:C2:A0:02:CC:0D:EB:45:70:D4:6E:DC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4C94A42CCCF281C612C2A002CC0DEB4570D46EDC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GExKcyzNRFswk7q7G1stpL6LCmKD9rRW5yKeGogH6r26/1/3137302e3235342e3139322e302f32322d3234203d3e20323635313131.roa
Signing time:             Thu 06 Mar 2025 04:01:10 +0000
ROA not before:           Thu 06 Mar 2025 03:56:10 +0000
ROA not after:            Thu 05 Mar 2026 04:01:10 +0000
asID:                     265111
IP address blocks:        170.254.192.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:d1:73:2b:75:44:dc:4b:4a:78:b1:ac:ea:2f:25:85:ef:78:54:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4C94A42CCCF281C612C2A002CC0DEB4570D46EDC
        Validity
            Not Before: Mar  6 03:56:10 2025 GMT
            Not After : Mar  5 04:01:10 2026 GMT
        Subject: CN=40DCBD6E96C19A65756206FE081BCFCD78C56F7D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:0e:f2:94:97:d0:ca:6d:b8:d8:12:aa:f9:a6:
                    d2:b1:af:85:d4:12:3d:d0:f9:32:fb:78:9f:d6:ce:
                    c3:30:30:23:a4:05:8a:50:fd:c1:4f:da:ed:6c:95:
                    f4:86:34:1c:8a:33:f9:29:b9:14:52:ff:b0:e6:09:
                    2f:15:ce:0a:7d:23:4d:8b:07:44:ba:02:0e:a1:45:
                    91:5d:bc:41:0f:15:5d:9c:77:d3:a5:2b:88:17:36:
                    9f:74:63:22:84:c6:b7:6e:04:5f:75:a1:29:a0:79:
                    a9:fd:a3:de:1c:c2:6d:3e:f8:5d:52:5d:48:73:fa:
                    56:35:9b:93:c4:0c:e6:66:1b:c5:c5:4d:c4:0f:a0:
                    de:74:55:e6:df:a6:8b:60:b9:c6:da:57:77:97:bb:
                    4a:d8:fa:55:78:39:de:e4:d1:66:2e:4d:02:ea:bc:
                    79:c6:04:cf:61:26:d8:f1:84:34:6a:8a:cb:ee:6d:
                    af:23:40:31:1f:72:eb:8f:d0:e2:01:97:41:8a:20:
                    27:20:3f:e0:ad:88:53:04:95:ca:e8:f3:41:14:c5:
                    0e:68:20:28:ae:39:9f:39:c9:2e:15:8b:7a:ba:c6:
                    dd:36:08:87:c3:e0:1f:fc:d1:0d:cb:08:3f:42:fe:
                    32:fd:6b:83:38:2e:92:6f:d3:52:c7:6c:9b:ce:bd:
                    7c:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:DC:BD:6E:96:C1:9A:65:75:62:06:FE:08:1B:CF:CD:78:C5:6F:7D
            X509v3 Authority Key Identifier:
                keyid:4C:94:A4:2C:CC:F2:81:C6:12:C2:A0:02:CC:0D:EB:45:70:D4:6E:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GExKcyzNRFswk7q7G1stpL6LCmKD9rRW5yKeGogH6r26/1/4C94A42CCCF281C612C2A002CC0DEB4570D46EDC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4C94A42CCCF281C612C2A002CC0DEB4570D46EDC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GExKcyzNRFswk7q7G1stpL6LCmKD9rRW5yKeGogH6r26/1/3137302e3235342e3139322e302f32322d3234203d3e20323635313131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.254.192.0/22

    Signature Algorithm: sha256WithRSAEncryption
         79:16:e3:53:cf:85:17:91:25:3f:8d:4a:9a:82:50:0d:c3:76:
         d8:f5:52:9a:dc:a7:85:4e:1d:46:a6:dd:59:24:ef:09:0a:33:
         d0:de:df:89:8e:13:ac:9a:f8:fe:36:d5:50:c8:a7:2d:bf:88:
         14:2f:6c:20:d4:6e:b1:62:aa:89:ec:26:b7:c0:40:31:8b:44:
         03:5e:c1:07:fd:0f:79:3b:42:7e:5e:45:77:23:9a:c4:20:27:
         90:4f:93:e0:6c:22:ea:57:bc:20:1e:47:32:84:b3:78:5c:bf:
         d5:d3:10:70:9b:17:54:0d:2d:b4:6d:17:c0:5d:93:e9:55:ca:
         35:d7:52:9e:65:3b:7a:38:12:0c:e5:06:ac:b2:eb:7d:78:b9:
         9d:70:c1:ae:6e:01:f4:ad:0c:d6:e0:64:41:4e:64:6a:5c:4e:
         16:c1:45:5c:8e:a3:19:0c:aa:a9:62:ab:b6:ae:de:3a:86:42:
         a0:d2:74:65:8f:ab:df:7f:85:17:83:0c:6e:79:98:3a:be:8d:
         c6:36:b7:3f:86:c6:69:ce:61:83:9b:59:ae:4e:6e:f5:07:73:
         66:fb:4f:0d:de:7e:11:d3:d8:c9:fb:81:db:be:76:1e:27:bc:
         80:8e:57:25:e7:c8:7f:8e:ea:7a:da:00:02:d8:f2:2d:36:63:
         6d:96:2e:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 17:31:17 2025 by rpki-client