Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HadZSEdgfsrzsWSbWuTPJbpEXvTSAVat4mgWt9tCHLdD/1/3137302e3235342e38302e302f32322d3234203d3e20323635313030.roa
File:                     3137302e3235342e38302e302f32322d3234203d3e20323635313030.roa (raw, json)
Hash identifier:          3cJ6i4eVfePj/znbhXPN+EEU/pcnQn4cPiUP8LWIC6M=
Subject key identifier:   6F:20:21:A7:52:C9:3D:77:2E:75:17:75:BA:5C:4E:49:E5:E3:F4:60
Certificate issuer:       /CN=B5FC5F08B8C4864013DC3A4CA47C2200B3C2B819
Certificate serial:       633CC66188728DDC158E698373DADCDEF79A7A3B
Authority key identifier: B5:FC:5F:08:B8:C4:86:40:13:DC:3A:4C:A4:7C:22:00:B3:C2:B8:19
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5FC5F08B8C4864013DC3A4CA47C2200B3C2B819.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HadZSEdgfsrzsWSbWuTPJbpEXvTSAVat4mgWt9tCHLdD/1/3137302e3235342e38302e302f32322d3234203d3e20323635313030.roa
Signing time:             Wed 05 Mar 2025 19:00:24 +0000
ROA not before:           Wed 05 Mar 2025 18:55:24 +0000
ROA not after:            Wed 04 Mar 2026 19:00:24 +0000
asID:                     265100
IP address blocks:        170.254.80.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:3c:c6:61:88:72:8d:dc:15:8e:69:83:73:da:dc:de:f7:9a:7a:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B5FC5F08B8C4864013DC3A4CA47C2200B3C2B819
        Validity
            Not Before: Mar  5 18:55:24 2025 GMT
            Not After : Mar  4 19:00:24 2026 GMT
        Subject: CN=6F2021A752C93D772E751775BA5C4E49E5E3F460
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:79:64:92:2f:93:c9:cf:94:c5:46:01:17:c4:
                    c0:f7:23:1f:b4:14:7a:df:d0:0d:87:75:e0:57:96:
                    0a:03:cb:e5:ff:16:59:58:32:e8:bb:92:bd:31:9b:
                    10:b3:16:b9:e7:3f:05:5f:ff:83:c5:df:e6:00:dd:
                    1d:5a:c4:2e:5e:28:5c:0e:7a:f2:94:81:11:7f:6c:
                    80:f0:25:62:d8:81:0c:c9:1e:83:5a:07:9b:27:5c:
                    c3:77:ab:fa:0e:30:6b:b3:27:0e:b6:f7:89:f3:df:
                    11:29:a7:0f:25:e5:dc:0a:64:d7:48:d9:b4:62:8c:
                    92:50:03:52:4b:ba:de:ca:7a:b0:4b:12:e9:dd:bd:
                    60:07:db:08:95:d8:ba:ce:ad:39:97:01:e3:d1:9e:
                    1f:0c:e9:65:e0:12:72:6d:d9:83:79:5b:e3:cc:d5:
                    91:1f:bf:d2:93:e7:98:a1:cf:fb:26:75:36:98:16:
                    34:ed:16:0d:fc:3b:f7:e5:78:41:21:f5:66:e4:41:
                    b4:58:cb:2a:32:5f:f9:42:af:d6:49:ca:62:4b:14:
                    46:aa:83:e5:72:25:c2:7a:d0:5b:27:ea:85:43:14:
                    f7:b8:52:5d:10:c2:d3:e4:75:cc:de:18:3e:c5:7e:
                    0c:9e:91:b3:ab:28:cb:25:60:e3:95:92:95:9e:12:
                    c9:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:20:21:A7:52:C9:3D:77:2E:75:17:75:BA:5C:4E:49:E5:E3:F4:60
            X509v3 Authority Key Identifier:
                keyid:B5:FC:5F:08:B8:C4:86:40:13:DC:3A:4C:A4:7C:22:00:B3:C2:B8:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HadZSEdgfsrzsWSbWuTPJbpEXvTSAVat4mgWt9tCHLdD/1/B5FC5F08B8C4864013DC3A4CA47C2200B3C2B819.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5FC5F08B8C4864013DC3A4CA47C2200B3C2B819.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HadZSEdgfsrzsWSbWuTPJbpEXvTSAVat4mgWt9tCHLdD/1/3137302e3235342e38302e302f32322d3234203d3e20323635313030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.254.80.0/22

    Signature Algorithm: sha256WithRSAEncryption
         88:18:c7:41:57:03:38:ae:8f:d3:14:4e:5f:d2:a6:50:6c:01:
         34:19:81:0e:77:a4:63:1d:11:3d:79:da:3c:6d:65:d2:8a:c9:
         12:7e:5d:b3:6f:3b:b3:49:bb:69:8c:66:06:ff:f4:4e:4d:05:
         f5:e2:e2:64:60:a1:8e:61:20:e8:6e:75:e4:ee:34:50:76:98:
         f7:51:f3:c8:09:cd:2b:05:45:2c:d1:e9:e0:23:7c:82:21:bc:
         e1:e7:c8:05:c8:c9:ee:1d:63:6c:49:b8:10:e5:46:0a:d7:03:
         cc:bc:cd:ed:5b:fa:37:60:4b:14:20:55:47:61:0e:73:7c:2a:
         6a:8f:56:3e:19:12:e4:bc:33:53:6c:ff:a8:62:07:82:25:57:
         f7:1d:b2:02:e9:cc:5c:a4:32:4e:7c:4b:66:cb:18:f4:7d:b6:
         54:7c:6a:cf:8a:52:8b:5d:6d:8c:e0:3f:eb:60:21:ba:e6:4d:
         f4:af:2d:ce:7b:26:8c:b3:40:9d:fc:54:69:bb:e3:56:89:cd:
         64:b6:a5:88:44:3d:fa:7c:fa:b6:f4:9f:3b:9f:15:ce:20:72:
         da:b7:e9:2d:b4:2b:b0:b5:7f:f1:f3:c9:b1:1c:eb:50:22:a3:
         23:6d:9f:a4:d6:ad:d0:20:ed:00:2c:e8:24:56:72:38:a1:14:
         5b:d0:11:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 08:12:33 2025 by rpki-client