Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GxS1HkbMUJ74HqafsjbKn3WrRLrnUmMb2aPfDQ1Gx6PY/0/3137302e38332e3230322e302f32342d3234203d3e20323633343730.roa
File:                     3137302e38332e3230322e302f32342d3234203d3e20323633343730.roa (raw, json)
Hash identifier:          JGoIh1SpiFOvRE6W8H8JYi/dqkcOMgPGR4yRzpbUifM=
Subject key identifier:   68:6C:88:34:AF:99:CF:99:5D:72:15:3C:14:78:9A:66:66:2A:01:D8
Certificate issuer:       /CN=AEB737F52DA6273E23A0E1C8BBB9EC1DC8F446A4
Certificate serial:       6C8D96217A468600BC1197D9EEA68793ADED3E59
Authority key identifier: AE:B7:37:F5:2D:A6:27:3E:23:A0:E1:C8:BB:B9:EC:1D:C8:F4:46:A4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AEB737F52DA6273E23A0E1C8BBB9EC1DC8F446A4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GxS1HkbMUJ74HqafsjbKn3WrRLrnUmMb2aPfDQ1Gx6PY/0/3137302e38332e3230322e302f32342d3234203d3e20323633343730.roa
Signing time:             Mon 16 Dec 2024 20:59:13 +0000
ROA not before:           Mon 16 Dec 2024 20:54:13 +0000
ROA not after:            Mon 15 Dec 2025 20:59:13 +0000
asID:                     263470
IP address blocks:        170.83.202.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:8d:96:21:7a:46:86:00:bc:11:97:d9:ee:a6:87:93:ad:ed:3e:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AEB737F52DA6273E23A0E1C8BBB9EC1DC8F446A4
        Validity
            Not Before: Dec 16 20:54:13 2024 GMT
            Not After : Dec 15 20:59:13 2025 GMT
        Subject: CN=686C8834AF99CF995D72153C14789A66662A01D8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:18:a4:c3:20:04:96:1d:3f:18:b0:2b:ff:07:
                    09:85:56:7c:14:ba:b0:59:36:5a:75:e6:cc:c7:b2:
                    0e:84:e1:5e:28:1c:de:76:1d:5d:5e:f5:db:0d:06:
                    d8:14:c6:f5:c1:d0:58:af:b6:c3:e3:6f:44:7c:e8:
                    f8:99:e4:34:02:25:77:41:ff:1b:1c:60:1d:4b:49:
                    94:7e:e8:7d:4d:26:fc:e6:c5:bb:58:d3:21:c4:e7:
                    f0:90:ee:90:2d:64:a9:9d:5d:f9:cd:69:67:dd:c8:
                    f2:ec:f0:ec:86:70:59:0d:21:23:55:44:60:51:17:
                    c3:cb:2f:89:00:a2:87:52:0e:c7:b9:93:11:9d:27:
                    53:59:22:74:e8:dd:41:90:3c:fa:40:22:42:45:cb:
                    a0:d5:e8:2e:f6:b3:a5:0d:26:97:17:2c:49:4c:cf:
                    32:a0:13:3d:22:26:b6:ef:e0:56:1f:17:51:c7:b6:
                    d7:e8:bc:14:89:27:12:60:13:32:44:08:b6:06:d7:
                    98:65:fa:21:a0:20:b7:d4:1c:ea:5d:17:40:a1:3a:
                    eb:3a:51:a6:68:9a:7f:ed:b7:49:6c:a1:fc:93:73:
                    4a:f4:e0:5d:1b:72:b0:93:2c:c3:a3:5f:a7:f8:8a:
                    fc:f6:b2:2c:ab:a9:5a:24:e0:09:97:74:5e:d0:b8:
                    95:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:6C:88:34:AF:99:CF:99:5D:72:15:3C:14:78:9A:66:66:2A:01:D8
            X509v3 Authority Key Identifier:
                keyid:AE:B7:37:F5:2D:A6:27:3E:23:A0:E1:C8:BB:B9:EC:1D:C8:F4:46:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GxS1HkbMUJ74HqafsjbKn3WrRLrnUmMb2aPfDQ1Gx6PY/0/AEB737F52DA6273E23A0E1C8BBB9EC1DC8F446A4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AEB737F52DA6273E23A0E1C8BBB9EC1DC8F446A4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GxS1HkbMUJ74HqafsjbKn3WrRLrnUmMb2aPfDQ1Gx6PY/0/3137302e38332e3230322e302f32342d3234203d3e20323633343730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.83.202.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bd:2f:72:74:0f:4b:09:ab:76:d1:a8:3b:30:5a:da:c5:48:f1:
         28:35:83:e1:b4:17:e0:aa:f8:34:3e:1a:0a:d0:32:2b:f7:bb:
         14:3b:8c:23:33:c4:99:d0:2d:42:89:1a:9a:24:53:3d:fb:a8:
         43:42:bd:ed:bc:0f:7c:9a:13:50:9b:3d:51:e0:cb:14:a3:32:
         fe:6a:14:5a:fc:b5:46:fb:51:ad:bc:d9:9f:a6:c6:86:d2:56:
         5d:5e:f8:73:91:b9:ff:36:da:89:24:58:e1:f6:67:22:be:d6:
         33:1b:b7:34:f3:54:e3:8a:7a:e0:e6:e6:61:cf:20:c9:25:8c:
         d5:b0:28:b6:8f:dc:11:90:ff:13:ae:9e:bd:cb:c2:a1:4a:5f:
         a1:af:36:90:17:04:bb:85:ba:7d:2b:e8:6d:2c:2e:a9:35:08:
         08:14:03:db:25:43:41:1a:6b:d7:b1:0a:55:50:cf:74:d1:01:
         c8:e9:1e:5e:b2:1c:07:6a:fb:4b:97:38:b5:dc:20:4c:df:be:
         78:ad:c1:16:f1:1b:e7:60:13:c4:0d:2f:17:7d:c8:96:eb:15:
         a7:11:29:1e:6e:1c:84:76:91:d3:77:23:ce:54:0a:59:8f:6a:
         b0:6b:f2:66:16:cb:8e:14:ef:85:c8:c8:93:af:37:15:60:70:
         ad:42:be:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 09:11:44 2025 by rpki-client