Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GmxeCH4MWATqxVw9myA1pQoYNsMuCBfxjrm743CVBX1G/0/3137302e3233382e3136332e302f32342d3234203d3e20323636333237.roa
File:                     3137302e3233382e3136332e302f32342d3234203d3e20323636333237.roa (raw, json)
Hash identifier:          ROsnuifiLDkdhfYU5gp11AZexn7oQg+k1YWbEXQpS3M=
Subject key identifier:   56:39:5B:4F:F3:C4:80:86:68:EB:DE:83:FB:92:BE:44:1F:49:43:CF
Certificate issuer:       /CN=52519D71351C02D14D4BE69A71D2C09F76A4F333
Certificate serial:       24AB882273A403355B1678678884E2CD8685880B
Authority key identifier: 52:51:9D:71:35:1C:02:D1:4D:4B:E6:9A:71:D2:C0:9F:76:A4:F3:33
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/52519D71351C02D14D4BE69A71D2C09F76A4F333.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GmxeCH4MWATqxVw9myA1pQoYNsMuCBfxjrm743CVBX1G/0/3137302e3233382e3136332e302f32342d3234203d3e20323636333237.roa
Signing time:             Mon 27 Jan 2025 19:21:31 +0000
ROA not before:           Mon 27 Jan 2025 19:16:31 +0000
ROA not after:            Mon 26 Jan 2026 19:21:31 +0000
asID:                     266327
IP address blocks:        170.238.163.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:ab:88:22:73:a4:03:35:5b:16:78:67:88:84:e2:cd:86:85:88:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52519D71351C02D14D4BE69A71D2C09F76A4F333
        Validity
            Not Before: Jan 27 19:16:31 2025 GMT
            Not After : Jan 26 19:21:31 2026 GMT
        Subject: CN=56395B4FF3C4808668EBDE83FB92BE441F4943CF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:3c:3e:1f:a1:a7:77:fa:0a:a4:95:84:7a:89:
                    3a:83:c6:3a:76:69:2d:96:79:81:7b:57:7a:2c:04:
                    17:5e:a0:aa:58:84:ef:50:f1:d3:91:c8:6b:67:cb:
                    90:6b:bb:70:f8:1e:0c:1b:9e:64:da:a5:87:74:3e:
                    34:60:ff:b2:11:a7:96:6f:ae:9f:b4:35:21:88:9e:
                    c7:ac:ba:c1:e9:ab:5a:e2:8b:d1:22:d5:91:73:61:
                    f8:1d:10:5d:4d:36:11:6f:56:53:f5:01:d2:4f:3d:
                    55:53:a0:71:c8:24:af:c3:61:e5:ca:62:0a:dd:91:
                    f5:1c:46:f9:c4:85:01:5c:b4:80:47:15:9d:1c:87:
                    59:30:b4:a0:11:65:d5:d0:f9:d5:f8:5e:84:89:c7:
                    ba:63:ed:9b:cf:01:4b:48:0d:78:26:bf:8e:b7:2b:
                    70:76:b5:77:f1:85:60:e6:7b:93:7b:f0:95:8d:99:
                    08:e2:fb:fa:d9:70:f7:4a:b1:fd:db:50:9b:1c:03:
                    36:7e:f9:86:92:8d:c5:7b:65:bf:bf:6e:2c:fb:be:
                    d3:54:f3:58:7b:6e:d1:b4:10:fc:21:fe:6e:f0:8a:
                    49:3e:2a:61:a5:b1:c1:bc:4b:a5:9d:40:6e:97:58:
                    09:3e:2c:f7:3b:1e:b8:df:74:61:a0:86:90:23:9b:
                    10:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:39:5B:4F:F3:C4:80:86:68:EB:DE:83:FB:92:BE:44:1F:49:43:CF
            X509v3 Authority Key Identifier:
                keyid:52:51:9D:71:35:1C:02:D1:4D:4B:E6:9A:71:D2:C0:9F:76:A4:F3:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GmxeCH4MWATqxVw9myA1pQoYNsMuCBfxjrm743CVBX1G/0/52519D71351C02D14D4BE69A71D2C09F76A4F333.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/52519D71351C02D14D4BE69A71D2C09F76A4F333.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GmxeCH4MWATqxVw9myA1pQoYNsMuCBfxjrm743CVBX1G/0/3137302e3233382e3136332e302f32342d3234203d3e20323636333237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.238.163.0/24

    Signature Algorithm: sha256WithRSAEncryption
         89:1e:53:ca:87:86:bc:76:bf:9b:96:39:4f:cf:99:4b:8c:4d:
         dd:2c:c0:54:e1:f1:0a:bd:83:55:62:fa:ec:30:8f:d9:16:d3:
         f0:06:5b:74:3d:7c:d6:55:cb:9d:05:a5:49:f6:92:5a:0a:b5:
         74:a1:fe:5a:a6:ef:f2:2b:5d:be:de:b0:9d:ef:37:d7:9b:c0:
         d8:46:97:aa:9a:e7:d1:bc:a5:d9:74:79:be:ed:47:e3:c2:72:
         f1:ef:64:c8:31:ff:c1:98:b0:2b:eb:00:fd:9e:9c:37:d5:61:
         69:44:c9:7b:fb:0a:f8:de:c8:29:0f:89:0a:37:3f:21:27:1f:
         4a:5c:68:3f:24:0d:a0:e6:f3:42:99:c6:a8:d6:10:2d:17:0c:
         7e:3e:e3:88:43:95:ea:be:81:36:0a:63:f1:df:50:1b:0f:05:
         a4:19:11:8f:73:a3:9b:4e:ca:8c:c8:f0:b5:5f:de:f6:96:b8:
         67:63:5b:fe:ab:37:5f:7e:47:3f:5e:e1:9d:5b:ef:57:b8:7a:
         59:e2:09:dd:36:d6:55:8c:eb:b4:c0:86:44:cb:e0:05:6c:71:
         d5:df:78:a8:37:e7:93:7b:05:1a:ac:c5:a6:6b:3a:32:0c:45:
         c4:09:e4:55:e6:91:56:fc:a6:c5:88:b7:7e:94:b7:c5:6f:e3:
         28:4d:cc:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 14:43:47 2025 by rpki-client