Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/syjY7itV6Q1ivBqZPV9GFeEyEhphfNoH1ZoE4KunWY9/0/3137302e3235342e3132362e302f32342d3234203d3e203533303632.roa
File:                     3137302e3235342e3132362e302f32342d3234203d3e203533303632.roa (raw, json)
Hash identifier:          kJ1/OtIbdSTvG2ELnXYpyKlE11ZW+djB618sAVSxQkM=
Subject key identifier:   92:1D:46:03:F6:D1:54:E6:83:AD:31:DC:B6:1B:FD:D9:A9:A6:69:F8
Certificate issuer:       /CN=4EED9818567EF67A561AEB24FB9C960FF884B0BB
Certificate serial:       2145E8CE14375F26AAA293B42E457FAA03734D6E
Authority key identifier: 4E:ED:98:18:56:7E:F6:7A:56:1A:EB:24:FB:9C:96:0F:F8:84:B0:BB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4EED9818567EF67A561AEB24FB9C960FF884B0BB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/syjY7itV6Q1ivBqZPV9GFeEyEhphfNoH1ZoE4KunWY9/0/3137302e3235342e3132362e302f32342d3234203d3e203533303632.roa
Signing time:             Tue 14 Jan 2025 16:11:59 +0000
ROA not before:           Tue 14 Jan 2025 16:06:59 +0000
ROA not after:            Tue 13 Jan 2026 16:11:59 +0000
asID:                     53062
IP address blocks:        170.254.126.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:45:e8:ce:14:37:5f:26:aa:a2:93:b4:2e:45:7f:aa:03:73:4d:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4EED9818567EF67A561AEB24FB9C960FF884B0BB
        Validity
            Not Before: Jan 14 16:06:59 2025 GMT
            Not After : Jan 13 16:11:59 2026 GMT
        Subject: CN=921D4603F6D154E683AD31DCB61BFDD9A9A669F8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:bc:f0:f4:b1:9b:5e:57:78:6a:2f:9a:44:c4:
                    71:e8:da:08:82:1c:58:c7:57:58:38:6a:5a:6b:1f:
                    a8:2b:9c:d0:45:fd:6d:5f:15:3c:94:45:c3:72:76:
                    9a:70:6f:92:54:3c:29:0a:cb:9b:a5:4f:84:8a:8a:
                    cf:bc:f1:95:17:c8:81:e9:b4:f3:8b:64:4a:a6:52:
                    9a:e8:21:91:61:d4:7f:51:9f:23:77:ef:95:89:8d:
                    33:60:f7:02:71:89:7f:ad:4c:06:a9:7c:57:59:fb:
                    02:b0:89:5d:85:28:83:ea:8b:e4:7b:fd:8d:c6:4f:
                    d7:de:a4:f3:bf:01:67:4f:23:67:83:6c:37:c0:e6:
                    6c:8c:cc:35:9b:63:71:5d:fc:35:96:c4:7d:e3:4d:
                    8e:43:d9:20:af:8a:b2:e3:eb:47:5f:e1:23:74:6d:
                    6f:6b:eb:3d:cb:90:76:3c:66:7e:3c:b4:65:fe:9e:
                    ff:4a:90:1d:4a:d1:bc:db:f1:16:87:21:ea:c9:4c:
                    f1:6a:bd:3b:d6:dc:d9:18:bd:a5:6f:fc:cb:16:36:
                    66:f9:c1:08:61:8d:70:fb:7f:20:85:1b:4c:24:06:
                    22:d4:b6:a5:a0:d4:fb:95:01:e7:18:39:c6:b9:aa:
                    3b:c1:a3:b2:b2:18:04:99:4a:4c:e3:0c:b7:c2:21:
                    3b:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:1D:46:03:F6:D1:54:E6:83:AD:31:DC:B6:1B:FD:D9:A9:A6:69:F8
            X509v3 Authority Key Identifier:
                keyid:4E:ED:98:18:56:7E:F6:7A:56:1A:EB:24:FB:9C:96:0F:F8:84:B0:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/syjY7itV6Q1ivBqZPV9GFeEyEhphfNoH1ZoE4KunWY9/0/4EED9818567EF67A561AEB24FB9C960FF884B0BB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4EED9818567EF67A561AEB24FB9C960FF884B0BB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/syjY7itV6Q1ivBqZPV9GFeEyEhphfNoH1ZoE4KunWY9/0/3137302e3235342e3132362e302f32342d3234203d3e203533303632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.254.126.0/24

    Signature Algorithm: sha256WithRSAEncryption
         45:f7:9b:b4:1a:2e:cd:4c:47:00:2a:85:81:0d:bb:53:2c:51:
         e5:7c:6a:6e:eb:23:43:97:fe:09:1b:2c:47:a8:8d:c7:09:d8:
         7c:48:45:e0:75:b8:cc:2c:80:da:1a:46:ae:4d:97:51:86:67:
         5f:77:43:0d:4e:b8:dc:e4:62:59:79:11:b7:78:ca:ab:ab:48:
         fe:98:64:f3:a2:93:fd:23:f4:7d:fb:d1:17:ee:73:7c:e8:ab:
         0a:6c:e4:f1:1d:14:f7:5b:3a:ca:29:c4:76:ed:c4:59:ef:f3:
         72:6f:d7:08:45:4b:8f:0c:15:8e:99:82:93:4b:47:2f:dd:e0:
         8a:6f:0d:0e:8b:b9:48:9a:e9:18:7b:b8:17:b7:57:f8:f4:cf:
         a2:14:2f:56:94:05:3c:93:3a:31:20:61:fa:00:64:5d:03:8f:
         b1:65:a7:4f:1a:55:7f:cf:9a:d5:28:fe:31:b8:25:25:3f:90:
         7a:50:bc:33:7a:3e:8a:b9:6e:04:e0:29:be:fe:55:ba:cf:c6:
         69:56:77:db:54:22:2c:f8:49:83:fb:ea:94:cb:f9:8d:0e:29:
         13:60:a4:ff:8f:7b:b8:5d:db:39:b0:31:e3:88:a8:46:49:d4:
         02:d6:5c:86:c0:5d:5a:c5:8c:d0:14:b0:14:1a:fb:53:83:fc:
         8c:a1:5e:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 06:14:56 2025 by rpki-client