Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HoGUiRUbHqX6QgNfT6g4CGLa4sYk8HXFuYgqPiJ6bDgf/0/3137302e3235342e3235342e302f32342d3234203d3e203532353834.roa
File:                     3137302e3235342e3235342e302f32342d3234203d3e203532353834.roa (raw, json)
Hash identifier:          q4woumYD1LTDgRmwp8jHQvDFrv3+leKyiJt91IA7JGc=
Subject key identifier:   D4:5D:47:BF:B2:E5:EC:E2:44:CB:90:45:D5:CF:13:70:BE:0F:F5:9C
Certificate issuer:       /CN=47BA6BB953DA3A2A66142690DBB7E840D669B5F3
Certificate serial:       37F961F3DDC9D4A189AFE18C6A818542E3F7DB8A
Authority key identifier: 47:BA:6B:B9:53:DA:3A:2A:66:14:26:90:DB:B7:E8:40:D6:69:B5:F3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/47BA6BB953DA3A2A66142690DBB7E840D669B5F3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HoGUiRUbHqX6QgNfT6g4CGLa4sYk8HXFuYgqPiJ6bDgf/0/3137302e3235342e3235342e302f32342d3234203d3e203532353834.roa
Signing time:             Thu 15 Feb 2024 20:44:45 +0000
ROA not before:           Thu 15 Feb 2024 20:39:45 +0000
ROA not after:            Thu 13 Feb 2025 20:44:45 +0000
asID:                     52584
IP address blocks:        170.254.254.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:f9:61:f3:dd:c9:d4:a1:89:af:e1:8c:6a:81:85:42:e3:f7:db:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=47BA6BB953DA3A2A66142690DBB7E840D669B5F3
        Validity
            Not Before: Feb 15 20:39:45 2024 GMT
            Not After : Feb 13 20:44:45 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:0e:67:58:e7:a7:98:ae:53:fd:58:51:2a:3b:
                    22:95:48:8b:da:d9:1b:e6:5a:36:08:30:d4:fb:aa:
                    fa:c5:6c:14:b7:a6:7e:6b:1a:7f:8c:5b:ba:23:13:
                    c0:b3:f3:e5:81:61:fc:6c:f3:51:28:f5:e1:dd:17:
                    8c:7d:3c:2c:03:17:ba:3c:12:16:2c:10:62:1a:f7:
                    30:a2:0f:d6:f1:33:34:66:a6:6e:f6:4b:c1:08:0b:
                    d6:5f:5a:95:d9:cb:76:2f:de:c1:f2:8a:87:ac:2a:
                    45:dd:41:ea:96:f4:cf:7b:06:65:73:05:31:0d:90:
                    5a:0c:cc:7a:7a:92:7d:fd:66:d2:1c:11:05:61:95:
                    da:56:38:89:eb:ae:a4:a3:5d:bd:99:19:ae:03:e0:
                    20:50:23:09:73:f9:01:12:d9:b8:6a:df:80:f5:d9:
                    c9:88:d8:98:4d:f2:87:4e:33:9b:77:97:f2:3b:10:
                    d6:37:e7:c1:d1:d2:c9:61:3f:05:27:ff:aa:cf:78:
                    c9:b3:f2:97:21:3d:31:7c:f6:91:30:4c:7e:16:b8:
                    53:46:0b:3c:28:10:9e:99:28:3a:74:9d:f7:08:b4:
                    f1:eb:04:df:ca:ca:a0:8a:92:05:73:b2:4e:3d:de:
                    d2:16:f6:1f:9b:8f:09:6b:8f:11:99:c5:c1:c3:0d:
                    69:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:5D:47:BF:B2:E5:EC:E2:44:CB:90:45:D5:CF:13:70:BE:0F:F5:9C
            X509v3 Authority Key Identifier:
                keyid:47:BA:6B:B9:53:DA:3A:2A:66:14:26:90:DB:B7:E8:40:D6:69:B5:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HoGUiRUbHqX6QgNfT6g4CGLa4sYk8HXFuYgqPiJ6bDgf/0/47BA6BB953DA3A2A66142690DBB7E840D669B5F3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/47BA6BB953DA3A2A66142690DBB7E840D669B5F3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HoGUiRUbHqX6QgNfT6g4CGLa4sYk8HXFuYgqPiJ6bDgf/0/3137302e3235342e3235342e302f32342d3234203d3e203532353834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.254.254.0/24

    Signature Algorithm: sha256WithRSAEncryption
         97:20:e2:64:4a:2c:70:61:80:44:81:52:24:d8:3f:dd:79:5b:
         b6:8a:03:ea:48:c2:87:65:5b:2d:d3:2d:a2:52:fa:ca:8a:47:
         60:dc:fe:36:8b:9f:75:1f:11:5a:71:39:6a:57:04:a3:a7:18:
         2d:c5:eb:75:19:4f:01:6e:d3:1e:83:31:e7:f7:89:1f:3f:f6:
         f4:78:19:f5:a4:b7:81:d9:ce:43:d8:c6:17:87:37:6f:a7:0e:
         75:3b:28:7b:06:20:49:e7:19:19:25:61:7c:10:2b:ab:38:1b:
         26:88:71:93:8c:76:97:aa:dd:2b:88:a7:71:07:a7:60:45:82:
         8f:54:28:03:46:a7:e4:da:e7:76:7f:15:54:0a:e8:35:1c:c3:
         d1:f4:e6:92:91:4e:df:07:ff:0b:af:5d:b9:ab:de:15:55:42:
         9a:c3:51:36:5e:7d:b4:e8:0c:24:04:ca:30:c4:83:f6:1b:a3:
         01:eb:f0:95:b1:af:5c:89:f8:0e:22:50:3c:a1:16:20:04:69:
         12:c5:ae:d9:5a:7e:5b:f1:0b:a5:5e:06:3f:0a:3b:f0:4b:49:
         d7:dc:04:f7:e5:24:0b:5c:0d:5b:fd:08:98:fb:bd:63:96:91:
         91:4a:9a:4f:85:99:c9:6d:93:e5:8e:89:e6:46:c3:15:bf:49:
         93:a4:da:52
-----BEGIN CERTIFICATE-----
MIIHQzCCBiugAwIBAgIUN/lh893J1KGJr+GMaoGFQuP324owDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDdCQTZCQjk1M0RBM0EyQTY2MTQyNjkwREJCN0U4NDBE
NjY5QjVGMzAeFw0yNDAyMTUyMDM5NDVaFw0yNTAyMTMyMDQ0NDVaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwRDEwRTY3NThFN0E3OThBRTUz
RkQ1ODUxMkEzQjIyOTU0ODhCREFEOTFCRTY1QTM2MDgzMEQ0RkJBQUZBQzU2QzE0
QjdBNjdFNkIxQTdGOEM1QkJBMjMxM0MwQjNGM0U1ODE2MUZDNkNGMzUxMjhGNUUx
REQxNzhDN0QzQzJDMDMxN0JBM0MxMjE2MkMxMDYyMUFGNzMwQTIwRkQ2RjEzMzM0
NjZBNjZFRjY0QkMxMDgwQkQ2NUY1QTk1RDlDQjc2MkZERUMxRjI4QTg3QUMyQTQ1
REQ0MUVBOTZGNENGN0IwNjY1NzMwNTMxMEQ5MDVBMENDQzdBN0E5MjdERkQ2NkQy
MUMxMTA1NjE5NURBNTYzODg5RUJBRUE0QTM1REJEOTkxOUFFMDNFMDIwNTAyMzA5
NzNGOTAxMTJEOUI4NkFERjgwRjVEOUM5ODhEODk4NERGMjg3NEUzMzlCNzc5N0Yy
M0IxMEQ2MzdFN0MxRDFEMkM5NjEzRjA1MjdGRkFBQ0Y3OEM5QjNGMjk3MjEzRDMx
N0NGNjkxMzA0QzdFMTZCODUzNDYwQjNDMjgxMDlFOTkyODNBNzQ5REY3MDhCNEYx
RUIwNERGQ0FDQUEwOEE5MjA1NzNCMjRFM0RERUQyMTZGNjFGOUI4RjA5NkI4RjEx
OTlDNUMxQzMwRDY5M0IwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEA0Q5nWOenmK5T/VhRKjsilUiL2tkb5lo2CDDU+6r6xWwUt6Z+axp/
jFu6IxPAs/PlgWH8bPNRKPXh3ReMfTwsAxe6PBIWLBBiGvcwog/W8TM0ZqZu9kvB
CAvWX1qV2ct2L97B8oqHrCpF3UHqlvTPewZlcwUxDZBaDMx6epJ9/WbSHBEFYZXa
VjiJ666ko129mRmuA+AgUCMJc/kBEtm4at+A9dnJiNiYTfKHTjObd5fyOxDWN+fB
0dLJYT8FJ/+qz3jJs/KXIT0xfPaRMEx+FrhTRgs8KBCemSg6dJ33CLTx6wTfysqg
ipIFc7JOPd7SFvYfm48Ja48RmcXBww1pOwIDAQABo4ICUTCCAk0wHQYDVR0OBBYE
FNRdR7+y5eziRMuQRdXPE3C+D/WcMB8GA1UdIwQYMBaAFEe6a7lT2joqZhQmkNu3
6EDWabXzMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0hvR1VpUlViSHFYNlFn
TmZUNmc0Q0dMYTRzWWs4SFhGdVlncVBpSjZiRGdmLzAvNDdCQTZCQjk1M0RBM0Ey
QTY2MTQyNjkwREJCN0U4NDBENjY5QjVGMy5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC80N0JBNkJCOTUzREEzQTJBNjYxNDI2OTBEQkI3RTg0MEQ2NjlC
NUYzLmNlcjCBrgYIKwYBBQUHAQsEgaEwgZ4wgZsGCCsGAQUFBzALhoGOcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9Ib0dVaVJVYkhxWDZRZ05mVDZn
NENHTGE0c1lrOEhYRnVZZ3FQaUo2YkRnZi8wLzMxMzczMDJlMzIzNTM0MmUzMjM1
MzQyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNTMyMzUzODM0LnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA
qv7+MA0GCSqGSIb3DQEBCwUAA4IBAQCXIOJkSixwYYBEgVIk2D/deVu2igPqSMKH
ZVst0y2iUvrKikdg3P42i591HxFacTlqVwSjpxgtxet1GU8BbtMegzHn94kfP/b0
eBn1pLeB2c5D2MYXhzdvpw51Oyh7BiBJ5xkZJWF8ECurOBsmiHGTjHaXqt0riKdx
B6dgRYKPVCgDRqfk2ud2fxVUCug1HMPR9OaSkU7fB/8Lr125q94VVUKaw1E2Xn20
6AwkBMowxIP2G6MB6/CVsa9cifgOIlA8oRYgBGkSxa7ZWn5b8QulXgY/CjvwS0nX
3AT35SQLXA1b/QiY+71jlpGRSppPhZnJbZPljonmRsMVv0mTpNpS
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:30:08 2025 by rpki-client