Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GxS1HkbMUJ74HqafsjbKn3WrRLrnUmMb2aPfDQ1Gx6PY/0/3137302e38332e3230332e302f32342d3234203d3e20323633343730.roa
File:                     3137302e38332e3230332e302f32342d3234203d3e20323633343730.roa (raw, json)
Hash identifier:          SELVoWA9i5AqsZlXgl9c+cMOc3ABE24fORCTUyN1rpw=
Subject key identifier:   DE:1B:DE:49:76:72:98:DD:A7:48:39:8E:A8:E9:E5:EF:F3:F9:34:CA
Certificate issuer:       /CN=AEB737F52DA6273E23A0E1C8BBB9EC1DC8F446A4
Certificate serial:       4BCFB6813D4C9A18EEFDBB8048FAD0408CFE9D7B
Authority key identifier: AE:B7:37:F5:2D:A6:27:3E:23:A0:E1:C8:BB:B9:EC:1D:C8:F4:46:A4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AEB737F52DA6273E23A0E1C8BBB9EC1DC8F446A4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GxS1HkbMUJ74HqafsjbKn3WrRLrnUmMb2aPfDQ1Gx6PY/0/3137302e38332e3230332e302f32342d3234203d3e20323633343730.roa
Signing time:             Mon 16 Dec 2024 20:59:31 +0000
ROA not before:           Mon 16 Dec 2024 20:54:31 +0000
ROA not after:            Mon 15 Dec 2025 20:59:31 +0000
asID:                     263470
IP address blocks:        170.83.203.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:cf:b6:81:3d:4c:9a:18:ee:fd:bb:80:48:fa:d0:40:8c:fe:9d:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AEB737F52DA6273E23A0E1C8BBB9EC1DC8F446A4
        Validity
            Not Before: Dec 16 20:54:31 2024 GMT
            Not After : Dec 15 20:59:31 2025 GMT
        Subject: CN=DE1BDE49767298DDA748398EA8E9E5EFF3F934CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:7b:d4:61:05:80:28:a5:a6:4d:01:43:d3:89:
                    4b:b5:0d:f8:bb:2e:81:9a:f0:ba:b0:f3:2f:69:1e:
                    2d:36:7f:4f:0c:20:71:04:81:56:c5:a1:cd:be:1f:
                    c5:e7:29:a8:4a:85:8f:11:d7:a7:c6:d7:eb:19:52:
                    ed:f3:4a:c4:bf:6f:ba:2e:95:c2:65:05:e0:dc:3d:
                    63:4b:e1:40:ba:33:10:99:69:3d:c1:f0:22:54:4c:
                    0d:d3:42:29:3e:d2:33:40:49:7c:34:06:f7:19:91:
                    7f:73:82:24:d1:b8:9b:73:dc:ee:ad:e6:3a:c3:62:
                    38:28:84:1d:1b:bf:a7:d8:5f:8d:3a:70:10:fb:48:
                    2d:57:a8:43:8f:d2:37:02:e2:84:dc:bb:c7:5e:9b:
                    2e:80:c8:b1:0b:30:b1:bc:0e:47:19:d5:16:1b:72:
                    b9:f3:7d:7c:bd:a1:13:05:43:40:2d:a9:76:56:48:
                    ad:c3:e5:07:9a:12:18:60:1d:d0:22:22:32:36:5a:
                    93:83:f8:42:8f:97:9f:e4:80:b3:ca:d3:56:7b:a1:
                    3d:c9:ef:6a:23:c5:e4:71:37:5d:8c:c2:92:96:89:
                    b5:0c:a8:22:14:40:a4:66:76:fd:ba:75:20:2c:62:
                    40:93:e3:f5:31:8c:d2:60:3b:02:1b:4d:12:7d:99:
                    7c:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:1B:DE:49:76:72:98:DD:A7:48:39:8E:A8:E9:E5:EF:F3:F9:34:CA
            X509v3 Authority Key Identifier:
                keyid:AE:B7:37:F5:2D:A6:27:3E:23:A0:E1:C8:BB:B9:EC:1D:C8:F4:46:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GxS1HkbMUJ74HqafsjbKn3WrRLrnUmMb2aPfDQ1Gx6PY/0/AEB737F52DA6273E23A0E1C8BBB9EC1DC8F446A4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AEB737F52DA6273E23A0E1C8BBB9EC1DC8F446A4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GxS1HkbMUJ74HqafsjbKn3WrRLrnUmMb2aPfDQ1Gx6PY/0/3137302e38332e3230332e302f32342d3234203d3e20323633343730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.83.203.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a9:07:9a:b3:d7:04:fb:80:0c:9e:8d:3d:16:11:0d:8d:d5:06:
         af:d0:02:fc:03:e1:91:99:0f:40:48:2d:48:dd:01:1a:5a:c6:
         d6:d9:8c:a3:02:a3:ba:2f:52:eb:e1:d5:b1:bc:2c:55:dc:fc:
         bb:e9:58:3e:64:7d:58:7f:6d:51:0d:30:79:b7:9c:68:ce:78:
         01:60:3c:b4:cf:f5:00:40:44:66:52:17:25:37:9d:5e:da:89:
         4d:2b:7e:f7:19:14:27:41:dd:bd:30:1a:fd:7f:b1:7f:10:0a:
         0b:c2:a9:ca:ea:d6:1b:39:ce:36:e0:b6:e1:80:69:c2:9b:af:
         59:55:0a:d7:1e:53:a0:54:d0:4b:29:ad:ae:20:9f:e1:7c:61:
         2a:50:0d:91:f8:56:ca:1f:85:26:1b:33:2c:6f:e1:98:a9:3a:
         2a:12:e3:00:6d:c5:5e:03:81:2d:8e:aa:96:3f:76:c0:f1:f0:
         9d:88:68:13:47:3a:c6:cf:de:15:29:1e:03:55:da:c5:23:15:
         61:2d:59:a6:33:12:0e:89:04:b2:ec:ff:9d:c4:84:c9:67:1a:
         3b:8a:5d:e0:27:9a:3b:a6:33:aa:77:38:0b:37:1d:b5:69:12:
         6b:08:b5:bc:39:3c:5c:20:e0:a5:10:c5:e9:2a:30:30:80:a2:
         61:08:d0:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 21:23:28 2025 by rpki-client