Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HGrcBHeffHMv5Rm8o7F2XJ3dLBtBZ9Jk58Jce1bhfUXd/2/3137302e38342e3136362e302f32342d3234203d3e20323635303136.roa
File:                     3137302e38342e3136362e302f32342d3234203d3e20323635303136.roa (raw, json)
Hash identifier:          SQXN+LyRL3E+03gZkApipjDcOTsIuhYbN/md6P5oowQ=
Subject key identifier:   9C:34:F7:50:26:FF:24:6B:4E:13:CA:E8:F3:CA:48:1D:E0:AF:A8:CC
Certificate issuer:       /CN=EAB884B70823F4FBD6D5A6BC30F24E63D0B0CE56
Certificate serial:       16625DDD2E62AC8BCE6A400D7A124BFF14B451CB
Authority key identifier: EA:B8:84:B7:08:23:F4:FB:D6:D5:A6:BC:30:F2:4E:63:D0:B0:CE:56
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EAB884B70823F4FBD6D5A6BC30F24E63D0B0CE56.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HGrcBHeffHMv5Rm8o7F2XJ3dLBtBZ9Jk58Jce1bhfUXd/2/3137302e38342e3136362e302f32342d3234203d3e20323635303136.roa
Signing time:             Wed 05 Mar 2025 19:00:30 +0000
ROA not before:           Wed 05 Mar 2025 18:55:30 +0000
ROA not after:            Wed 04 Mar 2026 19:00:30 +0000
asID:                     265016
IP address blocks:        170.84.166.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:62:5d:dd:2e:62:ac:8b:ce:6a:40:0d:7a:12:4b:ff:14:b4:51:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EAB884B70823F4FBD6D5A6BC30F24E63D0B0CE56
        Validity
            Not Before: Mar  5 18:55:30 2025 GMT
            Not After : Mar  4 19:00:30 2026 GMT
        Subject: CN=9C34F75026FF246B4E13CAE8F3CA481DE0AFA8CC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:db:13:a8:ef:b9:f6:98:56:d6:52:cc:23:7a:
                    f5:1f:ed:99:9d:ca:51:52:4b:0d:b8:16:5f:fb:89:
                    e6:bf:d8:3d:cb:b5:a4:7b:0b:6c:86:94:6a:a8:ba:
                    86:ef:45:63:af:4c:7d:74:f4:f9:76:9a:84:a1:42:
                    10:2c:78:ec:b1:0f:d9:74:78:64:1d:38:62:b3:d9:
                    4a:6c:82:6d:3c:89:22:88:fa:2f:87:a4:be:00:76:
                    3d:9f:01:09:1b:ae:ba:73:21:4d:b9:5b:16:48:54:
                    b6:96:56:9c:df:be:cb:4b:0c:66:ca:4d:ff:09:bb:
                    14:a7:81:bf:c6:a8:82:78:5c:eb:55:e9:11:46:a6:
                    98:81:74:f7:db:f0:a3:8b:f5:7e:c5:10:48:74:29:
                    0d:29:f1:a0:42:0a:b1:ba:1f:ab:8e:d0:a7:da:81:
                    e9:78:96:a9:ae:8c:a9:5e:d7:72:53:cf:3a:a2:5a:
                    dc:e9:f0:5d:ae:bf:ad:18:06:ef:94:2a:ad:95:a4:
                    19:05:df:31:5e:77:0b:ae:40:aa:c0:79:e1:b1:97:
                    5c:a6:26:cf:f1:b2:c8:0f:a4:78:ab:18:a7:55:f8:
                    17:54:b1:fd:4d:e2:d4:5f:32:85:6a:13:2e:b6:5c:
                    3d:e4:6e:a0:c9:fa:60:5a:63:0f:f4:ea:9e:e6:9b:
                    06:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:34:F7:50:26:FF:24:6B:4E:13:CA:E8:F3:CA:48:1D:E0:AF:A8:CC
            X509v3 Authority Key Identifier:
                keyid:EA:B8:84:B7:08:23:F4:FB:D6:D5:A6:BC:30:F2:4E:63:D0:B0:CE:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HGrcBHeffHMv5Rm8o7F2XJ3dLBtBZ9Jk58Jce1bhfUXd/2/EAB884B70823F4FBD6D5A6BC30F24E63D0B0CE56.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EAB884B70823F4FBD6D5A6BC30F24E63D0B0CE56.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HGrcBHeffHMv5Rm8o7F2XJ3dLBtBZ9Jk58Jce1bhfUXd/2/3137302e38342e3136362e302f32342d3234203d3e20323635303136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.84.166.0/24

    Signature Algorithm: sha256WithRSAEncryption
         13:03:ef:5e:9e:49:7b:88:c9:16:d6:6d:a3:8b:bf:6f:5e:61:
         d4:ef:32:78:ec:7e:c3:17:7f:3c:49:e7:7a:85:02:f2:ce:77:
         b4:d0:72:88:6a:d6:1a:cd:2c:eb:e0:a1:26:4c:a0:ac:b9:35:
         92:16:94:ad:ef:12:cd:45:0c:76:30:8e:34:37:c2:78:88:94:
         a2:31:88:b2:35:ff:8d:55:f6:6b:8d:ea:a4:f2:cc:eb:e8:d5:
         23:23:f2:a6:d4:b5:f2:77:dd:d5:44:2c:e3:82:59:b7:53:2e:
         1d:a3:3e:98:c9:9a:e1:ac:a4:5f:2d:f1:3e:e5:52:11:8d:f0:
         2a:a3:99:f1:3e:b1:e7:df:a9:99:6e:0b:a3:18:03:cd:64:e1:
         cb:ea:e1:d5:26:d2:b4:59:28:21:4b:ad:14:85:f4:00:31:44:
         ab:62:79:65:63:fd:a8:a0:16:30:ee:d4:f1:f9:1e:18:cc:ae:
         c5:ce:5e:1d:f6:3b:db:70:03:04:93:e5:80:fb:64:df:32:a9:
         54:75:54:a3:57:ab:28:92:63:86:9a:54:65:5d:73:8e:28:bf:
         f8:26:2c:0a:5e:00:c4:66:16:db:10:ae:2c:b2:f5:4b:b3:5b:
         c2:a0:6a:ad:a7:49:1e:2c:c1:50:9f:e5:1e:37:19:86:df:32:
         77:ed:9f:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:39:38 2025 by rpki-client