Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J4nbx9LwSyxMajjeL8VuyF5ZqTijJZV1nAZqyXnDdmjA/0/3137302e3235342e3231322e302f32322d3332203d3e20323731363930.roa
File:                     3137302e3235342e3231322e302f32322d3332203d3e20323731363930.roa (raw, json)
Hash identifier:          CrYgfL1i0Gp1eBlro6AaiOobusGcVSrmgkZITwC8qUI=
Subject key identifier:   7A:C5:E2:78:85:F4:BB:E1:C7:2E:E8:97:DC:0D:29:6D:05:D9:F8:F8
Certificate issuer:       /CN=802478B6A8D5D89CA197E3FBEB1207E77034E681
Certificate serial:       0765D3FFF4F07E6D831CC623598647493BFF8CF8
Authority key identifier: 80:24:78:B6:A8:D5:D8:9C:A1:97:E3:FB:EB:12:07:E7:70:34:E6:81
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/802478B6A8D5D89CA197E3FBEB1207E77034E681.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J4nbx9LwSyxMajjeL8VuyF5ZqTijJZV1nAZqyXnDdmjA/0/3137302e3235342e3231322e302f32322d3332203d3e20323731363930.roa
Signing time:             Fri 20 Dec 2024 20:30:22 +0000
ROA not before:           Fri 20 Dec 2024 20:25:22 +0000
ROA not after:            Fri 19 Dec 2025 20:30:22 +0000
asID:                     271690
IP address blocks:        170.254.212.0/22 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:65:d3:ff:f4:f0:7e:6d:83:1c:c6:23:59:86:47:49:3b:ff:8c:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=802478B6A8D5D89CA197E3FBEB1207E77034E681
        Validity
            Not Before: Dec 20 20:25:22 2024 GMT
            Not After : Dec 19 20:30:22 2025 GMT
        Subject: CN=7AC5E27885F4BBE1C72EE897DC0D296D05D9F8F8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:e6:23:d4:94:18:ee:52:d8:97:6c:90:c8:d8:
                    8b:d7:69:2a:5d:c4:ab:63:b2:11:4f:14:3a:d4:a9:
                    62:e0:c5:3d:66:ee:e0:48:c1:85:f9:f9:a3:a9:ce:
                    08:e3:a1:53:b4:a2:27:83:74:7b:8e:2c:a8:69:b8:
                    5f:62:6f:72:31:af:5f:91:d2:d3:88:86:de:69:9a:
                    d6:9f:5c:e2:ac:f8:2a:2b:14:dc:1b:01:6f:33:96:
                    18:25:7d:99:e5:9a:39:48:61:2a:35:ca:45:25:e1:
                    6c:b2:9a:83:a3:7e:32:b7:f8:e8:3c:96:1c:02:39:
                    c9:51:52:e8:9f:f0:cf:35:68:d2:f3:5e:80:46:55:
                    7f:c0:fa:36:92:6b:b7:9f:61:18:bc:ec:10:fe:97:
                    d4:a0:65:8a:e7:ab:a6:00:95:b7:92:bd:af:b7:32:
                    24:c9:51:9d:4b:61:02:2b:00:c7:f6:71:cc:0d:b8:
                    be:fe:80:7d:88:f3:eb:0a:a6:d6:6f:e6:14:eb:a4:
                    12:95:21:53:17:a3:b1:0a:0c:0b:1e:06:05:62:3f:
                    4b:44:45:2d:0e:8d:4d:53:f9:5d:ba:fc:fd:2a:a3:
                    10:c6:0b:a0:91:e5:27:3e:fc:bc:0b:54:7b:99:c8:
                    41:e6:4f:29:8b:69:25:96:34:5e:39:da:17:06:db:
                    fc:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:C5:E2:78:85:F4:BB:E1:C7:2E:E8:97:DC:0D:29:6D:05:D9:F8:F8
            X509v3 Authority Key Identifier:
                keyid:80:24:78:B6:A8:D5:D8:9C:A1:97:E3:FB:EB:12:07:E7:70:34:E6:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J4nbx9LwSyxMajjeL8VuyF5ZqTijJZV1nAZqyXnDdmjA/0/802478B6A8D5D89CA197E3FBEB1207E77034E681.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/802478B6A8D5D89CA197E3FBEB1207E77034E681.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J4nbx9LwSyxMajjeL8VuyF5ZqTijJZV1nAZqyXnDdmjA/0/3137302e3235342e3231322e302f32322d3332203d3e20323731363930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.254.212.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7b:a7:46:32:bf:31:d3:03:25:cc:8f:b5:3d:93:c6:34:1c:96:
         27:5d:38:0b:c6:9b:4d:83:c0:28:04:b7:07:1b:e4:6f:91:d3:
         a7:06:ea:cc:f9:4a:dd:4e:0d:89:93:02:fd:f3:9b:7c:2b:43:
         85:53:ec:e1:39:ab:a9:79:b2:c9:8c:d5:fe:b4:f6:16:6b:11:
         f3:85:7b:bf:71:53:2e:f7:81:e0:02:2c:07:a6:b6:e1:ac:80:
         0f:7a:46:cd:f8:f9:df:a8:60:e4:c2:d9:e2:b4:c3:9f:27:5f:
         de:e3:07:67:95:e6:f0:6b:a3:0f:85:07:a0:90:15:dd:ff:26:
         43:c5:ae:c8:34:aa:a9:7c:eb:9d:15:11:ce:d6:81:c4:24:66:
         43:db:4c:22:b5:55:62:a7:f3:6c:cb:9c:08:fd:b8:2b:a2:58:
         89:49:0c:3d:80:eb:d9:f7:aa:20:74:23:ce:91:1c:77:b7:d4:
         fc:eb:a8:e1:1c:35:54:bf:ab:89:93:31:df:ee:6b:0d:e2:2f:
         c0:9a:5c:b4:67:ab:6e:dd:9c:29:0d:74:0c:ec:db:ad:50:28:
         f6:13:17:d3:c2:ff:ce:2c:13:4a:aa:00:81:39:6a:d7:63:06:
         67:74:9f:78:d9:35:df:2c:4e:6b:9e:69:f2:4a:56:c3:26:9f:
         0d:62:a7:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 17:03:22 2025 by rpki-client