Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HMiyUemoaAzP4phLuu8rsS37nAW2fQLY9vbqow6tHjQf/1/3137302e38322e3134382e302f32322d3234203d3e20323633363439.roa
File:                     3137302e38322e3134382e302f32322d3234203d3e20323633363439.roa (raw, json)
Hash identifier:          Y2Q5vP/y6P2iV71GDikiL22QuBKiQr5w29aIH2cxSNk=
Subject key identifier:   B6:D8:22:44:44:DB:E6:4E:21:35:64:E3:F1:D1:94:84:3E:13:76:21
Certificate issuer:       /CN=6A5BFCEB0ED15D457469EC7FA1ED3CB54AFEC53B
Certificate serial:       475D90700B611F85AFF443583C9ABE078590D124
Authority key identifier: 6A:5B:FC:EB:0E:D1:5D:45:74:69:EC:7F:A1:ED:3C:B5:4A:FE:C5:3B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6A5BFCEB0ED15D457469EC7FA1ED3CB54AFEC53B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HMiyUemoaAzP4phLuu8rsS37nAW2fQLY9vbqow6tHjQf/1/3137302e38322e3134382e302f32322d3234203d3e20323633363439.roa
Signing time:             Wed 05 Mar 2025 21:04:32 +0000
ROA not before:           Wed 05 Mar 2025 20:59:32 +0000
ROA not after:            Wed 04 Mar 2026 21:04:32 +0000
asID:                     263649
IP address blocks:        170.82.148.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:5d:90:70:0b:61:1f:85:af:f4:43:58:3c:9a:be:07:85:90:d1:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6A5BFCEB0ED15D457469EC7FA1ED3CB54AFEC53B
        Validity
            Not Before: Mar  5 20:59:32 2025 GMT
            Not After : Mar  4 21:04:32 2026 GMT
        Subject: CN=B6D8224444DBE64E213564E3F1D194843E137621
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:a4:d5:b1:eb:f0:86:bf:25:11:7c:19:24:f8:
                    19:0a:c3:e0:bc:5b:02:0a:01:31:6b:0c:d9:79:54:
                    50:51:fc:66:b6:3d:01:e6:61:96:22:78:bc:2b:70:
                    3d:85:49:8e:fe:a4:22:f7:ce:86:78:f3:42:5d:6b:
                    e8:8b:35:e7:46:bb:0a:44:a9:19:f9:72:ed:5e:20:
                    1d:a5:5a:ac:08:7d:2a:71:83:25:cd:86:4c:cf:ac:
                    60:2f:3a:62:37:41:3c:4e:d7:2d:fd:12:95:09:f6:
                    23:bb:23:e4:c1:86:00:bd:9d:3b:c1:c3:d2:80:b7:
                    24:9b:35:fa:bb:e7:62:0b:3c:52:19:fa:4f:5c:9f:
                    25:13:0b:78:35:5a:01:eb:71:08:61:ed:a9:f4:55:
                    b2:6d:fe:4b:62:b5:26:ea:37:54:b6:38:15:39:b8:
                    90:39:4c:82:b4:0e:a2:c6:ab:4d:bb:74:ea:ef:75:
                    2b:e4:4b:09:9f:be:e1:5c:e6:be:90:ff:f5:db:3d:
                    cc:a3:ad:5c:b7:b5:48:02:f1:e3:50:f8:77:6f:9e:
                    f7:2e:21:c9:27:1a:9b:0f:39:6a:7f:eb:f9:c5:7c:
                    4f:8e:2e:0d:ea:82:ca:cc:b2:2f:50:be:32:17:70:
                    b3:29:f8:4e:1a:18:9f:c8:03:0e:8d:81:bb:b2:22:
                    1e:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:D8:22:44:44:DB:E6:4E:21:35:64:E3:F1:D1:94:84:3E:13:76:21
            X509v3 Authority Key Identifier:
                keyid:6A:5B:FC:EB:0E:D1:5D:45:74:69:EC:7F:A1:ED:3C:B5:4A:FE:C5:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HMiyUemoaAzP4phLuu8rsS37nAW2fQLY9vbqow6tHjQf/1/6A5BFCEB0ED15D457469EC7FA1ED3CB54AFEC53B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6A5BFCEB0ED15D457469EC7FA1ED3CB54AFEC53B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HMiyUemoaAzP4phLuu8rsS37nAW2fQLY9vbqow6tHjQf/1/3137302e38322e3134382e302f32322d3234203d3e20323633363439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.82.148.0/22

    Signature Algorithm: sha256WithRSAEncryption
         32:1e:89:59:ab:b1:d0:40:87:af:e4:ff:3a:27:d8:04:c4:ac:
         06:08:b2:8a:ee:d5:50:e6:5c:13:d0:ff:c9:d5:97:f0:bc:47:
         ee:38:12:af:12:58:c2:e7:8d:be:af:c4:0e:c1:ff:9f:25:6c:
         e6:47:2d:6b:4c:c7:29:15:ef:62:8a:af:63:80:3c:53:f0:b9:
         af:80:a9:98:ad:9c:0e:ae:e9:db:8c:eb:05:aa:ea:a6:20:a1:
         f7:4a:cf:50:c5:9f:d2:88:48:eb:5e:70:bb:03:4e:13:f7:95:
         48:a9:86:91:b0:7f:da:54:34:17:6f:67:29:de:6d:6d:f1:49:
         03:e3:00:a9:6a:f4:69:58:ed:d0:cf:e9:ef:30:11:39:8f:1a:
         f3:e1:4f:7c:ac:e9:53:8c:49:bb:f8:d2:c2:55:6d:dd:16:6c:
         d7:0d:e0:04:29:24:56:dd:9c:99:10:dd:55:4f:b2:0b:62:cb:
         24:0b:61:3a:4a:83:49:00:28:6b:e8:db:1d:cd:0d:32:10:81:
         db:cd:0a:c7:44:ab:d8:66:da:bc:c3:46:7d:51:ee:b5:15:c0:
         5a:03:b4:1a:a3:d1:bb:c2:d5:02:2c:a8:4c:25:49:a5:63:d3:
         db:50:90:03:f8:41:66:7d:8e:fd:55:5e:0a:ca:88:54:9b:a8:
         20:e3:e5:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:19:33 2025 by rpki-client