Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Hyvr8kdMTNrgG9XbP7xo4k35WAdCcZP6D31eKCbPyq1c/0/3137302e3235342e38352e302f32342d3234203d3e20323635313132.roa
File:                     3137302e3235342e38352e302f32342d3234203d3e20323635313132.roa (raw, json)
Hash identifier:          idD4/HEQ0xuN1zNtfU6WXWKMaYYdeMOC5sfQTnjoP7w=
Subject key identifier:   9B:D5:D6:DC:52:5A:9D:3F:89:F0:6D:E3:EC:0C:1B:AD:87:46:6A:7D
Certificate issuer:       /CN=B7326415BE734D8A751207ED27CE3E324C6FA9BE
Certificate serial:       2C60BB6A0298AE734247BDCD959464B3497E5029
Authority key identifier: B7:32:64:15:BE:73:4D:8A:75:12:07:ED:27:CE:3E:32:4C:6F:A9:BE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B7326415BE734D8A751207ED27CE3E324C6FA9BE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Hyvr8kdMTNrgG9XbP7xo4k35WAdCcZP6D31eKCbPyq1c/0/3137302e3235342e38352e302f32342d3234203d3e20323635313132.roa
Signing time:             Tue 19 Dec 2023 18:49:27 +0000
ROA not before:           Tue 19 Dec 2023 18:44:27 +0000
ROA not after:            Tue 17 Dec 2024 18:49:27 +0000
asID:                     265112
IP address blocks:        170.254.85.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:60:bb:6a:02:98:ae:73:42:47:bd:cd:95:94:64:b3:49:7e:50:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B7326415BE734D8A751207ED27CE3E324C6FA9BE
        Validity
            Not Before: Dec 19 18:44:27 2023 GMT
            Not After : Dec 17 18:49:27 2024 GMT
        Subject: CN=9BD5D6DC525A9D3F89F06DE3EC0C1BAD87466A7D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:32:53:86:81:bc:a9:2e:c1:c5:64:b9:f6:57:
                    a3:a3:7b:13:40:34:6b:f0:4e:f0:a2:53:97:00:9e:
                    8d:4c:69:24:a3:f3:91:ec:95:e5:bb:43:e1:8d:3d:
                    cc:76:b8:7c:87:24:58:bb:e2:f9:5e:a2:59:e6:e9:
                    c7:8c:6f:fd:ef:a8:10:c3:48:f7:04:e8:33:f8:9e:
                    27:d8:c8:5e:84:a3:fb:c4:b7:65:d6:2d:27:52:16:
                    5c:0a:eb:9e:83:c1:55:43:ce:dd:79:e8:5d:bb:52:
                    8c:ab:59:8f:f9:1d:aa:15:59:dc:84:cc:69:23:16:
                    f7:df:f6:4a:23:57:48:78:d1:c3:de:44:75:44:66:
                    87:ca:e4:5d:38:42:d8:88:07:b5:fd:b5:b5:c5:dc:
                    2e:e2:5e:7a:32:15:fe:1c:fb:9f:fd:1a:97:14:e6:
                    38:d1:e0:e9:95:36:43:ad:dd:6c:ca:7c:66:52:fc:
                    aa:78:42:3d:f5:a1:8e:2d:73:88:48:6d:54:bc:17:
                    85:89:e6:8a:b1:b6:88:2e:2d:1a:27:d8:08:db:a4:
                    1d:a5:f7:82:d0:48:6d:6f:36:c4:22:fc:0e:63:12:
                    ba:32:bd:da:46:1b:23:cc:f8:c3:b1:61:45:8d:20:
                    24:99:72:af:24:b0:13:e6:6a:d5:19:b5:89:73:27:
                    4e:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:D5:D6:DC:52:5A:9D:3F:89:F0:6D:E3:EC:0C:1B:AD:87:46:6A:7D
            X509v3 Authority Key Identifier:
                keyid:B7:32:64:15:BE:73:4D:8A:75:12:07:ED:27:CE:3E:32:4C:6F:A9:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Hyvr8kdMTNrgG9XbP7xo4k35WAdCcZP6D31eKCbPyq1c/0/B7326415BE734D8A751207ED27CE3E324C6FA9BE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B7326415BE734D8A751207ED27CE3E324C6FA9BE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Hyvr8kdMTNrgG9XbP7xo4k35WAdCcZP6D31eKCbPyq1c/0/3137302e3235342e38352e302f32342d3234203d3e20323635313132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.254.85.0/24

    Signature Algorithm: sha256WithRSAEncryption
         28:49:7c:c7:0a:b1:1e:3c:f4:2a:e3:83:ed:82:52:18:16:ca:
         d5:c8:fd:91:b8:f9:b3:94:be:29:41:27:ba:dd:1d:ce:b1:3e:
         86:42:56:84:86:cb:41:99:22:10:bb:aa:96:00:95:3c:f9:a8:
         8e:b4:b9:b0:3c:ad:15:48:50:3a:ef:e5:e0:41:f9:ba:20:67:
         cc:a3:28:98:76:90:f1:b6:41:8c:ba:c6:7f:e1:76:bb:f2:60:
         f0:32:92:e3:37:fd:0f:90:71:48:98:7a:e4:35:b8:1b:6e:1e:
         08:2f:05:c3:64:25:59:bc:6c:e0:e8:21:f6:59:1b:c0:a3:f4:
         71:72:0e:3e:6a:af:a1:b7:02:04:6a:32:04:4b:1e:92:ab:d0:
         81:b5:05:ad:d7:31:d0:5e:6a:dd:26:25:e9:5c:be:3c:8c:d0:
         ac:01:54:da:29:c3:a2:61:e7:b8:da:9d:fd:d0:8b:c7:d9:64:
         b1:95:40:e0:a8:1b:fc:2e:e1:97:c1:a6:ee:2d:b0:0e:b0:e8:
         07:8a:a2:d3:b7:6b:36:93:8d:ce:01:f0:09:40:ef:b9:a6:a5:
         69:35:88:1b:2c:7b:c5:f6:d5:5c:00:fa:01:5e:19:58:ef:5d:
         6e:51:8f:d7:8d:d1:5f:86:7e:6e:b6:20:9d:bb:f6:56:ce:b5:
         e1:b5:5a:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 13:12:44 2025 by rpki-client