Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HroozinayaLBW9qaenDxXn281WjCMFe6ufaqyPepni8a/1/3137302e38322e3233362e302f32322d3234203d3e20323636343439.roa
File:                     3137302e38322e3233362e302f32322d3234203d3e20323636343439.roa (raw, json)
Hash identifier:          QhEJsRGWlPB6sjrVhVOCSS+uprOFqOv/IBM4EZ/soHM=
Subject key identifier:   D4:D8:37:6F:1D:9A:71:B6:E0:F0:3A:6C:02:9D:A5:1E:A4:91:1E:FE
Certificate issuer:       /CN=59E6C22F5CC5DEB39566D8D98E82E119BF9C5A4A
Certificate serial:       2F83AFA3DC7FD86112941636F06B6BEF22AAB665
Authority key identifier: 59:E6:C2:2F:5C:C5:DE:B3:95:66:D8:D9:8E:82:E1:19:BF:9C:5A:4A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/59E6C22F5CC5DEB39566D8D98E82E119BF9C5A4A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HroozinayaLBW9qaenDxXn281WjCMFe6ufaqyPepni8a/1/3137302e38322e3233362e302f32322d3234203d3e20323636343439.roa
Signing time:             Thu 06 Mar 2025 04:01:06 +0000
ROA not before:           Thu 06 Mar 2025 03:56:06 +0000
ROA not after:            Thu 05 Mar 2026 04:01:06 +0000
asID:                     266449
IP address blocks:        170.82.236.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:83:af:a3:dc:7f:d8:61:12:94:16:36:f0:6b:6b:ef:22:aa:b6:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59E6C22F5CC5DEB39566D8D98E82E119BF9C5A4A
        Validity
            Not Before: Mar  6 03:56:06 2025 GMT
            Not After : Mar  5 04:01:06 2026 GMT
        Subject: CN=D4D8376F1D9A71B6E0F03A6C029DA51EA4911EFE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:1f:ea:cc:d1:b9:11:17:38:e6:24:6c:66:7b:
                    1e:96:56:8b:88:38:7d:db:2d:96:a5:1f:b4:2a:cc:
                    77:cf:b0:77:6f:e1:6f:ae:02:a0:75:ec:2c:57:19:
                    bc:1c:ab:69:ea:3d:d7:27:cd:a3:33:17:f2:32:06:
                    cc:78:9a:d5:47:36:d0:b5:10:f5:02:a7:3b:fa:db:
                    91:a1:03:91:60:62:76:c4:6a:cc:16:4d:8c:34:2b:
                    03:e6:28:ec:45:29:0b:fe:ca:d5:4a:72:df:1c:47:
                    8e:e2:8c:d7:e8:60:89:d6:a9:6c:b3:0d:44:f3:87:
                    c4:38:56:f5:43:ee:cd:ef:b4:45:77:e2:72:61:06:
                    5e:cd:8d:4c:b0:f7:30:75:2c:3d:7b:da:0a:7a:52:
                    f8:ec:d9:58:d6:67:81:8d:88:8d:77:04:8a:e6:70:
                    1f:a3:a1:2a:6e:f4:73:6c:45:2d:f9:6f:76:94:f0:
                    c1:c5:75:2e:06:1a:7d:fd:54:63:98:da:b0:d8:7f:
                    0f:ad:37:bb:12:3a:1d:50:ba:25:48:81:af:aa:71:
                    f5:66:7a:51:2d:2a:69:71:7f:91:9e:ed:aa:b2:e3:
                    6f:db:a1:0c:df:2d:0f:db:40:d3:70:65:5f:13:81:
                    ad:3c:9d:84:06:77:69:47:6a:66:bc:12:82:08:6c:
                    a0:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:D8:37:6F:1D:9A:71:B6:E0:F0:3A:6C:02:9D:A5:1E:A4:91:1E:FE
            X509v3 Authority Key Identifier:
                keyid:59:E6:C2:2F:5C:C5:DE:B3:95:66:D8:D9:8E:82:E1:19:BF:9C:5A:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HroozinayaLBW9qaenDxXn281WjCMFe6ufaqyPepni8a/1/59E6C22F5CC5DEB39566D8D98E82E119BF9C5A4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/59E6C22F5CC5DEB39566D8D98E82E119BF9C5A4A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HroozinayaLBW9qaenDxXn281WjCMFe6ufaqyPepni8a/1/3137302e38322e3233362e302f32322d3234203d3e20323636343439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.82.236.0/22

    Signature Algorithm: sha256WithRSAEncryption
         13:ba:79:a1:dc:47:7d:05:15:c9:6d:62:cd:a8:62:94:25:63:
         a6:2d:47:6e:fb:cb:08:9d:33:2b:c1:13:68:a3:c7:7d:1c:e1:
         c7:2a:4e:ad:37:ea:d2:e3:59:63:5d:18:eb:ed:31:79:eb:c5:
         0d:f7:50:ee:06:5f:fd:ae:26:b9:8d:2d:99:e1:c0:dd:0f:ca:
         40:f7:e5:d8:e3:25:39:10:0f:1b:45:fb:73:cf:b4:50:39:32:
         c6:6f:f6:0d:ba:0b:e5:d6:7f:26:7a:15:50:0b:5f:6d:04:7b:
         9c:46:92:b8:10:8f:67:4c:34:94:8a:61:65:d7:97:51:f3:76:
         57:10:ae:b2:5d:67:24:cb:9f:e9:cd:38:57:a4:c7:6c:eb:6c:
         bc:0b:de:5d:e0:6f:65:0f:45:11:a7:8c:7c:46:f8:db:f2:46:
         a4:bb:75:0d:21:a9:18:e7:83:6e:08:2d:4c:99:6d:99:4a:bc:
         e2:30:05:a4:e6:73:06:18:38:98:06:c5:d0:bd:f3:63:2d:81:
         82:36:35:d4:df:a1:ec:be:61:1a:de:e2:8b:b5:05:2b:96:7a:
         4b:9c:ac:d3:3f:98:ce:5f:a6:45:7e:90:dd:5f:14:49:d9:96:
         ff:fa:54:e0:ec:34:4e:32:73:53:4c:7e:4f:f8:e0:8d:a0:eb:
         df:bb:73:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 01:44:45 2025 by rpki-client