Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HoUJRVyveN99V1tAEjiagXn1hk1WVFSKn3ZW61oSxY7C/0/3137302e3233382e3136342e302f32322d3332203d3e203533303035.roa
File:                     3137302e3233382e3136342e302f32322d3332203d3e203533303035.roa (raw, json)
Hash identifier:          asTKsMeIhkQZxR0hbVrfW/BCnnukAmAA0qS5ioLUYQs=
Subject key identifier:   F0:B6:F6:A5:4A:39:BD:5B:A4:65:AF:ED:FC:2D:29:B1:AC:C9:90:C0
Certificate issuer:       /CN=41BC6FEA40F58F61DD81236BE0F6C43D9D807D15
Certificate serial:       2E7A5BF0C0567B501AF5B22DA6F4BB93CB806A13
Authority key identifier: 41:BC:6F:EA:40:F5:8F:61:DD:81:23:6B:E0:F6:C4:3D:9D:80:7D:15
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/41BC6FEA40F58F61DD81236BE0F6C43D9D807D15.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HoUJRVyveN99V1tAEjiagXn1hk1WVFSKn3ZW61oSxY7C/0/3137302e3233382e3136342e302f32322d3332203d3e203533303035.roa
Signing time:             Tue 16 May 2023 11:47:21 +0000
ROA not before:           Tue 16 May 2023 11:42:21 +0000
ROA not after:            Tue 14 May 2024 11:47:21 +0000
asID:                     53005
IP address blocks:        170.238.164.0/22 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:7a:5b:f0:c0:56:7b:50:1a:f5:b2:2d:a6:f4:bb:93:cb:80:6a:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41BC6FEA40F58F61DD81236BE0F6C43D9D807D15
        Validity
            Not Before: May 16 11:42:21 2023 GMT
            Not After : May 14 11:47:21 2024 GMT
        Subject: CN=F0B6F6A54A39BD5BA465AFEDFC2D29B1ACC990C0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:d1:cd:fa:81:7b:84:af:ca:34:b6:5c:bd:fe:
                    bc:89:b5:5e:fd:79:26:a5:70:d2:a9:c6:c2:ff:0c:
                    f6:f9:5f:b1:ca:a8:c1:2c:b9:22:7f:a4:fe:e6:fb:
                    8f:0b:96:7c:52:5f:6e:53:eb:7f:30:56:01:c2:0d:
                    d0:49:8f:7a:ec:4b:44:91:95:d9:3b:23:67:cb:b2:
                    4a:44:a5:c5:f7:25:7e:cf:57:27:bc:4f:25:c3:7e:
                    99:19:23:17:fa:dd:88:b2:78:fe:4a:d2:1f:63:6f:
                    22:bb:11:7e:a6:d1:4a:d7:48:e7:d0:f6:35:af:3a:
                    3a:79:6f:b1:93:c4:b7:b4:c5:b7:b5:00:66:0e:5e:
                    ff:e3:80:e2:2f:b5:ce:cc:9c:17:39:df:2a:15:57:
                    be:19:6c:a2:65:74:7c:44:eb:8a:db:a4:49:9f:76:
                    e4:d5:83:ee:16:c5:a8:8a:97:24:dc:13:25:34:8f:
                    05:9b:fc:25:84:fc:cd:a4:2d:70:0b:96:2e:f4:91:
                    34:c9:60:00:46:18:06:72:c6:3d:e3:9a:d7:29:23:
                    b3:72:6c:f4:f3:2f:5e:6f:9c:a2:e9:0d:c4:ba:81:
                    05:bc:7e:5d:be:ea:2e:b4:c4:36:03:2a:64:d6:18:
                    9d:53:31:f2:23:63:9a:e2:96:46:67:57:3e:61:7e:
                    71:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:B6:F6:A5:4A:39:BD:5B:A4:65:AF:ED:FC:2D:29:B1:AC:C9:90:C0
            X509v3 Authority Key Identifier:
                keyid:41:BC:6F:EA:40:F5:8F:61:DD:81:23:6B:E0:F6:C4:3D:9D:80:7D:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HoUJRVyveN99V1tAEjiagXn1hk1WVFSKn3ZW61oSxY7C/0/41BC6FEA40F58F61DD81236BE0F6C43D9D807D15.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/41BC6FEA40F58F61DD81236BE0F6C43D9D807D15.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HoUJRVyveN99V1tAEjiagXn1hk1WVFSKn3ZW61oSxY7C/0/3137302e3233382e3136342e302f32322d3332203d3e203533303035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.238.164.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6f:bc:88:c9:70:69:c8:80:ec:0e:92:d6:c3:a1:d0:82:e4:83:
         43:8f:51:07:8b:55:0a:92:db:0f:d5:ee:e4:5d:6e:04:14:59:
         18:ce:c1:d3:ac:14:8f:ff:60:9d:7a:b6:9d:36:f1:5f:e3:a7:
         e7:b0:2b:0e:f2:5f:ac:4f:08:fb:ee:a9:48:7b:f1:13:ef:db:
         ad:51:52:44:92:98:01:64:11:aa:a0:b0:79:32:67:d1:ab:e9:
         23:11:d1:5e:cf:42:e1:fa:f9:e8:35:1c:cc:a9:32:13:d4:b0:
         8e:fc:eb:c5:65:0c:15:0a:ad:a1:98:fc:90:b3:3d:d1:39:9d:
         ab:8e:0a:44:2c:89:76:5a:b2:8a:e7:5a:36:ff:1c:e9:0d:35:
         72:39:75:d5:32:69:72:ac:47:6e:8a:a6:9b:43:54:12:dd:b3:
         9c:a8:ac:32:d6:0f:b2:3c:88:de:5f:c6:ba:7c:f8:8a:97:61:
         b5:ee:e3:62:c1:1a:74:e7:46:e8:ad:a7:c3:47:12:2c:6f:0d:
         e8:78:a0:64:a7:80:94:92:49:0a:56:88:42:80:d8:60:08:28:
         1b:59:3e:dc:0a:6a:61:bd:ca:a7:83:68:43:e2:28:33:44:36:
         5b:1f:86:3c:3d:dc:91:55:e0:3b:b1:fb:0a:c2:14:b2:65:ec:
         ed:32:a6:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:29:25 2025 by rpki-client