Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Hyvr8kdMTNrgG9XbP7xo4k35WAdCcZP6D31eKCbPyq1c/0/3137302e3235342e38342e302f32332d3233203d3e20323635313132.roa
File:                     3137302e3235342e38342e302f32332d3233203d3e20323635313132.roa (raw, json)
Hash identifier:          ECd9HrBxOhiRMGW0VUbVj37EkuYYf96gcr9A3e3tidI=
Subject key identifier:   A3:2A:0C:AB:B2:14:2B:F8:29:00:EB:A0:C4:45:2E:5C:76:13:31:7C
Certificate issuer:       /CN=B7326415BE734D8A751207ED27CE3E324C6FA9BE
Certificate serial:       3A3EE9F935880CAFE01F1E416F7F0526BF188C6A
Authority key identifier: B7:32:64:15:BE:73:4D:8A:75:12:07:ED:27:CE:3E:32:4C:6F:A9:BE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B7326415BE734D8A751207ED27CE3E324C6FA9BE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Hyvr8kdMTNrgG9XbP7xo4k35WAdCcZP6D31eKCbPyq1c/0/3137302e3235342e38342e302f32332d3233203d3e20323635313132.roa
Signing time:             Tue 19 Dec 2023 18:49:27 +0000
ROA not before:           Tue 19 Dec 2023 18:44:27 +0000
ROA not after:            Tue 17 Dec 2024 18:49:27 +0000
asID:                     265112
IP address blocks:        170.254.84.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:3e:e9:f9:35:88:0c:af:e0:1f:1e:41:6f:7f:05:26:bf:18:8c:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B7326415BE734D8A751207ED27CE3E324C6FA9BE
        Validity
            Not Before: Dec 19 18:44:27 2023 GMT
            Not After : Dec 17 18:49:27 2024 GMT
        Subject: CN=A32A0CABB2142BF82900EBA0C4452E5C7613317C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:b5:45:f2:e8:af:5c:6d:10:b2:c9:7e:34:fd:
                    40:4f:d1:f3:0f:2a:cc:d1:e6:66:eb:8d:d9:b4:ab:
                    12:2b:d5:2b:9d:a4:2c:fa:91:05:a1:a1:bd:45:42:
                    71:be:49:9d:ad:8d:55:37:60:3a:00:b7:78:a0:8c:
                    2d:b9:ad:d5:b2:8a:94:1d:6e:66:8a:4c:4c:18:7d:
                    4b:1a:fe:0a:d0:dd:bb:2f:25:14:25:93:ff:53:5c:
                    01:2e:f6:d6:bd:67:eb:dd:65:ce:c4:73:69:e1:1a:
                    10:9e:26:16:bc:81:63:2f:12:d9:8f:3c:50:b6:d4:
                    ad:07:fa:d0:bf:65:d2:2a:db:00:5f:44:b7:b9:02:
                    f5:4f:b9:f0:6e:e0:2d:d1:5b:a0:c2:1e:c9:f0:18:
                    97:c2:e3:8a:c8:b9:53:d6:9a:08:d0:63:0d:63:4b:
                    bc:30:34:1f:d7:54:c6:53:13:7f:8b:77:97:20:2e:
                    32:61:04:d0:4e:87:9e:0a:47:c1:a6:c4:78:47:ee:
                    98:a2:be:9a:67:2e:d6:ef:6f:a3:f5:f1:a0:5a:2c:
                    8e:1b:5e:14:a0:3f:4a:52:0e:46:a9:83:54:ba:56:
                    70:c4:f5:46:c7:31:1e:2f:dc:99:7d:bb:f8:e8:66:
                    f1:8b:84:11:a2:c5:03:f4:4a:a3:18:1e:25:dc:e9:
                    2e:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:2A:0C:AB:B2:14:2B:F8:29:00:EB:A0:C4:45:2E:5C:76:13:31:7C
            X509v3 Authority Key Identifier:
                keyid:B7:32:64:15:BE:73:4D:8A:75:12:07:ED:27:CE:3E:32:4C:6F:A9:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Hyvr8kdMTNrgG9XbP7xo4k35WAdCcZP6D31eKCbPyq1c/0/B7326415BE734D8A751207ED27CE3E324C6FA9BE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B7326415BE734D8A751207ED27CE3E324C6FA9BE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Hyvr8kdMTNrgG9XbP7xo4k35WAdCcZP6D31eKCbPyq1c/0/3137302e3235342e38342e302f32332d3233203d3e20323635313132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.254.84.0/23

    Signature Algorithm: sha256WithRSAEncryption
         18:28:19:4f:31:4c:93:dc:4e:2e:9c:10:d3:d8:c3:a5:a1:34:
         8b:01:1d:47:10:3a:76:43:c3:9e:dc:07:93:53:16:55:73:4d:
         46:8b:5d:25:bf:b5:dd:54:73:4b:c0:d8:98:fe:cd:53:a1:be:
         0e:4e:f0:b3:a8:32:d4:e6:7c:b0:90:6f:d6:e1:d9:7f:02:67:
         b1:85:09:3e:0b:8b:b3:ec:75:cb:8a:01:d1:42:dd:44:4b:23:
         f2:a1:c6:93:43:e8:52:b0:12:c2:23:04:11:81:a3:66:99:f7:
         77:35:45:1a:9a:01:16:12:cf:98:58:bc:11:d2:b0:ec:09:30:
         88:6f:df:6c:4e:fc:a4:ac:1e:2a:00:60:04:56:a2:c5:2e:2e:
         fc:ef:1a:59:93:c7:d2:f1:8d:45:01:a2:23:f7:3a:f2:be:bc:
         d5:14:25:ab:ec:8d:ca:31:b4:6c:32:25:0a:e7:a4:30:9a:e2:
         53:d4:a6:08:a5:ff:90:a0:f6:28:62:20:71:1d:1c:44:0e:80:
         6d:c3:06:ff:ad:8b:0a:3f:98:0c:03:33:c7:78:ed:86:81:24:
         8e:25:b7:de:3e:38:2a:c8:75:5e:e4:6e:53:4e:36:6a:bb:47:
         01:d1:4f:90:1e:23:17:45:c3:6e:8e:16:ab:64:30:c6:7c:26:
         4b:49:10:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 02:13:52 2025 by rpki-client