Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HoUJRVyveN99V1tAEjiagXn1hk1WVFSKn3ZW61oSxY7C/0/3137302e3233382e3136342e302f32322d3234203d3e203533303035.roa
File:                     3137302e3233382e3136342e302f32322d3234203d3e203533303035.roa (raw, json)
Hash identifier:          Ga05+OBN2+CqRdIwUMt/wkmItdnGqeO+AHUeq5Ps+Pw=
Subject key identifier:   BC:93:E1:EE:0A:CE:06:CC:9F:9B:C9:42:0D:5F:30:16:BC:E6:30:19
Certificate issuer:       /CN=7EB806F082666E29BA49287EB0A2DD4E03FCB7F5
Certificate serial:       3027DBA6803E637994E182C2970FE8F64704784C
Authority key identifier: 7E:B8:06:F0:82:66:6E:29:BA:49:28:7E:B0:A2:DD:4E:03:FC:B7:F5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7EB806F082666E29BA49287EB0A2DD4E03FCB7F5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HoUJRVyveN99V1tAEjiagXn1hk1WVFSKn3ZW61oSxY7C/0/3137302e3233382e3136342e302f32322d3234203d3e203533303035.roa
Signing time:             Sat 10 Feb 2024 12:59:13 +0000
ROA not before:           Sat 10 Feb 2024 12:54:13 +0000
ROA not after:            Sat 08 Feb 2025 12:59:13 +0000
asID:                     53005
IP address blocks:        170.238.164.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:27:db:a6:80:3e:63:79:94:e1:82:c2:97:0f:e8:f6:47:04:78:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7EB806F082666E29BA49287EB0A2DD4E03FCB7F5
        Validity
            Not Before: Feb 10 12:54:13 2024 GMT
            Not After : Feb  8 12:59:13 2025 GMT
        Subject: CN=BC93E1EE0ACE06CC9F9BC9420D5F3016BCE63019
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:5c:70:3f:2d:99:c9:ee:97:cd:ac:61:8a:fb:
                    cd:bb:1a:c5:0b:f5:c3:28:0e:10:56:c3:45:59:0e:
                    d8:f4:0d:e2:95:8a:87:54:16:65:42:33:ac:4b:94:
                    1c:94:fb:33:51:65:64:5a:de:b4:01:cc:7a:82:ed:
                    0b:ae:b1:11:53:52:f3:ab:1e:c8:84:08:db:ae:ee:
                    ca:e6:d5:d8:0d:fa:8e:da:e7:ee:2e:cd:e7:e9:92:
                    96:8b:eb:d2:d1:fc:7c:47:b6:42:f4:e7:fd:82:cc:
                    2c:bf:3f:48:2f:cb:5d:64:8a:7f:c7:4b:7f:9d:a1:
                    e3:16:cb:49:b7:26:75:c0:0a:17:33:97:b4:19:e4:
                    ab:6c:e2:8b:e2:02:d3:28:99:2b:08:a6:33:6e:31:
                    26:4b:6e:f4:2b:2c:30:43:98:7c:28:83:ab:6d:48:
                    c6:18:05:85:5c:da:19:ba:d3:18:1a:9f:49:5c:00:
                    14:33:d2:c7:a4:3e:55:6c:57:fc:57:f4:e1:bf:3c:
                    b8:70:86:5d:8c:62:02:aa:61:03:8d:fa:36:90:b6:
                    b3:f7:54:c9:ba:3e:a7:7c:f9:96:0b:ed:2d:92:43:
                    f9:c7:48:35:79:ea:1d:e5:aa:44:67:e6:0b:ca:c2:
                    f3:fc:3a:f9:74:bf:20:7f:4a:dd:50:f0:9b:00:69:
                    ae:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:93:E1:EE:0A:CE:06:CC:9F:9B:C9:42:0D:5F:30:16:BC:E6:30:19
            X509v3 Authority Key Identifier:
                keyid:7E:B8:06:F0:82:66:6E:29:BA:49:28:7E:B0:A2:DD:4E:03:FC:B7:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HoUJRVyveN99V1tAEjiagXn1hk1WVFSKn3ZW61oSxY7C/0/7EB806F082666E29BA49287EB0A2DD4E03FCB7F5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7EB806F082666E29BA49287EB0A2DD4E03FCB7F5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HoUJRVyveN99V1tAEjiagXn1hk1WVFSKn3ZW61oSxY7C/0/3137302e3233382e3136342e302f32322d3234203d3e203533303035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.238.164.0/22

    Signature Algorithm: sha256WithRSAEncryption
         44:5b:c5:dc:26:32:64:f2:08:d5:34:2e:a8:ee:ef:c4:71:22:
         f1:4e:2b:a9:d2:4f:bc:00:c1:c4:f1:57:cd:41:31:07:2f:d1:
         4c:be:04:fb:25:78:75:84:50:1c:0a:64:23:7a:3a:5b:52:af:
         08:29:48:09:5c:b4:0f:27:4a:b7:7a:21:ac:fd:01:18:67:67:
         ce:92:81:40:17:bf:41:ec:b7:b9:68:3b:81:28:50:00:69:62:
         01:4a:0c:df:cd:69:3a:81:bf:a4:ed:e3:0f:7d:14:8d:aa:18:
         c9:20:05:f1:60:d3:64:87:34:42:8e:25:95:ce:5d:79:70:1f:
         0e:fa:93:af:48:36:ca:75:58:bd:59:d5:85:02:b6:e4:11:d9:
         d9:19:15:76:d3:06:bb:18:ea:97:48:a4:4b:c6:b9:5b:02:e9:
         ab:70:12:9b:8f:14:bb:3b:5f:94:10:99:9a:2c:44:42:d5:d8:
         a8:54:bd:0d:b6:e0:15:53:6b:10:a8:98:1a:b7:de:91:2c:24:
         cf:f8:e2:9f:33:e9:4b:6c:a2:6a:fd:3f:09:ef:2a:57:b6:b9:
         87:3f:bc:24:2f:ba:cd:f0:58:4a:bc:79:87:cb:5f:16:43:f6:
         24:25:f1:e3:95:ce:ca:8d:80:9c:e4:99:85:d0:84:61:18:61:
         e8:9a:2d:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 01:15:05 2025 by rpki-client