Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HadZSEdgfsrzsWSbWuTPJbpEXvTSAVat4mgWt9tCHLdD/0/3137302e3235342e38302e302f32342d3234203d3e20323635313030.roa
File:                     3137302e3235342e38302e302f32342d3234203d3e20323635313030.roa (raw, json)
Hash identifier:          SG8HXsbWG5RRqf9kZOdvYDTI2/i6aBWG7x4q7C26n0o=
Subject key identifier:   A4:B2:21:12:4B:EB:32:10:05:CC:32:10:CB:3C:A3:F8:36:AB:7A:AA
Certificate issuer:       /CN=BECF4D77E2B91192575E2DE0DC91F109BDB0DA93
Certificate serial:       08B6B83ADAD6EB38D9D59B1ECD659CCD05760772
Authority key identifier: BE:CF:4D:77:E2:B9:11:92:57:5E:2D:E0:DC:91:F1:09:BD:B0:DA:93
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BECF4D77E2B91192575E2DE0DC91F109BDB0DA93.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HadZSEdgfsrzsWSbWuTPJbpEXvTSAVat4mgWt9tCHLdD/0/3137302e3235342e38302e302f32342d3234203d3e20323635313030.roa
Signing time:             Tue 21 Mar 2023 15:00:00 +0000
ROA not before:           Tue 21 Mar 2023 14:55:00 +0000
ROA not after:            Tue 19 Mar 2024 15:00:00 +0000
asID:                     265100
IP address blocks:        170.254.80.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:b6:b8:3a:da:d6:eb:38:d9:d5:9b:1e:cd:65:9c:cd:05:76:07:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BECF4D77E2B91192575E2DE0DC91F109BDB0DA93
        Validity
            Not Before: Mar 21 14:55:00 2023 GMT
            Not After : Mar 19 15:00:00 2024 GMT
        Subject: CN=A4B221124BEB321005CC3210CB3CA3F836AB7AAA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:2d:3f:4f:90:4c:53:0b:c2:cd:5c:5a:50:fc:
                    65:ef:37:bf:15:5d:e4:0f:64:58:f8:4e:39:7a:c3:
                    92:3d:ad:d3:a1:a5:76:1b:c2:79:38:04:02:db:31:
                    19:9c:cb:5e:aa:80:f9:10:e8:1d:1d:85:be:40:68:
                    d6:b2:ad:cf:9b:00:a4:c1:a9:57:fa:8c:fe:2f:e5:
                    09:db:a7:73:93:21:4d:fe:ee:9d:e7:8b:11:c3:dc:
                    60:ef:0b:58:db:de:d0:6f:98:fe:95:22:54:a0:d1:
                    ad:b6:ad:40:67:06:38:12:6b:70:df:21:8a:a9:c9:
                    8e:c9:64:41:d9:94:e3:d3:34:fd:2e:c9:08:b0:ed:
                    5e:d8:af:a4:e8:b0:9c:7a:4f:2a:94:5f:84:77:b2:
                    61:39:20:f6:4b:38:7e:f9:dd:06:01:30:f8:be:2f:
                    cb:b0:38:dc:b6:71:b3:36:d2:fa:8e:76:03:74:c2:
                    0f:a2:5a:1c:fc:4e:4e:6a:e4:35:18:6d:8b:d1:0f:
                    9b:d2:0d:11:02:bb:49:cb:b7:ef:d1:fc:d8:d5:28:
                    c1:ed:11:a9:96:10:53:87:48:d8:77:b3:92:b2:09:
                    c6:7c:81:4b:b7:51:d7:2f:1a:40:40:de:7c:fd:ba:
                    fd:3d:a2:89:52:bd:2f:b4:c9:e3:58:1d:bf:2a:f6:
                    33:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:B2:21:12:4B:EB:32:10:05:CC:32:10:CB:3C:A3:F8:36:AB:7A:AA
            X509v3 Authority Key Identifier:
                keyid:BE:CF:4D:77:E2:B9:11:92:57:5E:2D:E0:DC:91:F1:09:BD:B0:DA:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HadZSEdgfsrzsWSbWuTPJbpEXvTSAVat4mgWt9tCHLdD/0/BECF4D77E2B91192575E2DE0DC91F109BDB0DA93.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BECF4D77E2B91192575E2DE0DC91F109BDB0DA93.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HadZSEdgfsrzsWSbWuTPJbpEXvTSAVat4mgWt9tCHLdD/0/3137302e3235342e38302e302f32342d3234203d3e20323635313030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.254.80.0/24

    Signature Algorithm: sha256WithRSAEncryption
         90:5d:ae:ed:5a:9c:f9:d5:87:9d:7d:66:83:b8:67:e3:13:1b:
         68:65:5d:48:b3:09:ad:81:9e:71:d6:0f:59:d4:77:8a:9a:69:
         ce:e5:98:5f:24:30:e1:54:f8:37:7f:ec:fd:be:b4:58:9f:2b:
         84:40:25:d3:51:57:66:5d:87:d8:f8:ca:15:11:1c:4c:fc:60:
         2f:95:4d:95:3d:0b:df:cc:bb:98:62:7e:ee:f1:4e:d0:f7:d0:
         fd:42:77:28:ed:5e:8d:8c:6c:ce:3e:da:18:d8:00:fa:43:ff:
         91:8e:a6:aa:42:47:c3:6f:60:6f:75:f0:c6:80:a5:ef:dc:5d:
         b8:ac:38:31:08:fd:86:98:f9:9e:4a:14:cd:24:f7:29:87:be:
         f2:5c:8f:43:f8:2a:33:40:a3:11:22:18:a5:12:f4:e9:a8:e2:
         18:25:fa:3e:4d:c5:89:5d:a6:06:33:f7:8b:bf:5b:e0:ec:56:
         e1:be:b8:88:02:55:48:5e:e6:e6:d5:12:4b:26:f7:da:e4:73:
         78:ec:ee:99:61:af:c4:ac:4c:8d:3d:75:87:c7:16:ce:84:9c:
         94:eb:5d:3d:b6:9c:b9:56:4b:d2:ef:ce:31:6b:27:85:4e:b1:
         58:1f:98:8b:45:12:0a:ad:57:25:a8:89:79:d2:13:ca:75:aa:
         a8:cd:a4:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:32:03 2025 by rpki-client