Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2o4paBoq6LzvHAs31rV7xtet2Hzi7TKLjBWpoMv7wDcQ/0/3137302e3233312e3133332e302f32342d3234203d3e20323635303639.roa
File:                     3137302e3233312e3133332e302f32342d3234203d3e20323635303639.roa (raw, json)
Hash identifier:          xH9+GwnnntxLMEkH3VhUqAPNIZCHZijGo7ZvRhJR5+0=
Subject key identifier:   49:F6:18:E7:DD:1B:80:F5:64:DA:FE:CE:7F:BA:E0:A1:BE:6A:C0:AB
Certificate issuer:       /CN=17C70EDD5F8146F1E1E21940FCFB346A62CA5E41
Certificate serial:       044B838F713A7AA8F5C619BD84AB71E4565F5D72
Authority key identifier: 17:C7:0E:DD:5F:81:46:F1:E1:E2:19:40:FC:FB:34:6A:62:CA:5E:41
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/17C70EDD5F8146F1E1E21940FCFB346A62CA5E41.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2o4paBoq6LzvHAs31rV7xtet2Hzi7TKLjBWpoMv7wDcQ/0/3137302e3233312e3133332e302f32342d3234203d3e20323635303639.roa
Signing time:             Sat 26 Feb 2022 14:55:11 +0000
ROA not before:           Sat 26 Feb 2022 14:50:11 +0000
ROA not after:            Sat 25 Feb 2023 14:55:11 +0000
asID:                     265069
IP address blocks:        170.231.133.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:4b:83:8f:71:3a:7a:a8:f5:c6:19:bd:84:ab:71:e4:56:5f:5d:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=17C70EDD5F8146F1E1E21940FCFB346A62CA5E41
        Validity
            Not Before: Feb 26 14:50:11 2022 GMT
            Not After : Feb 25 14:55:11 2023 GMT
        Subject: CN=49F618E7DD1B80F564DAFECE7FBAE0A1BE6AC0AB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:a2:8a:2f:ae:ae:8c:e3:a6:e8:6e:73:70:d2:
                    e8:43:9e:d9:f5:d8:81:59:f4:2c:a0:73:e2:04:a6:
                    01:50:62:7b:4a:02:a9:91:ad:9a:45:2d:a8:2f:38:
                    78:8f:dc:75:07:cf:4e:ad:29:c5:39:67:5f:dc:21:
                    f3:6f:4f:95:a6:82:d0:6e:79:88:84:f7:58:57:74:
                    7b:0e:c0:3c:7a:65:f5:3a:08:72:c9:42:eb:24:30:
                    82:28:0a:e9:8e:24:d3:f2:ab:44:b3:84:f8:28:4e:
                    fe:27:cc:58:0e:57:83:79:aa:67:4d:eb:b4:71:36:
                    cb:8a:58:0b:b3:b9:f2:57:92:b0:62:ae:0c:cf:7e:
                    be:b0:5f:bb:d9:e3:a8:cc:69:95:1c:b0:3b:53:d8:
                    2a:e9:06:74:f9:59:d1:f4:c5:ed:40:9b:37:aa:62:
                    08:a2:91:d1:1e:d7:33:b5:ba:52:d3:a4:3c:98:3f:
                    a1:79:22:b4:2a:e1:01:ed:eb:88:03:90:d7:63:58:
                    78:4d:92:b6:d6:68:88:3b:b8:fd:f1:7b:7c:ec:7e:
                    81:50:f6:dc:79:47:65:6d:c0:43:7a:df:f2:f9:eb:
                    e0:b6:cb:76:16:b3:5f:48:d4:22:4a:f0:06:60:fc:
                    b2:da:93:13:e8:f9:df:a8:37:ed:90:49:81:44:8d:
                    b5:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:F6:18:E7:DD:1B:80:F5:64:DA:FE:CE:7F:BA:E0:A1:BE:6A:C0:AB
            X509v3 Authority Key Identifier:
                keyid:17:C7:0E:DD:5F:81:46:F1:E1:E2:19:40:FC:FB:34:6A:62:CA:5E:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2o4paBoq6LzvHAs31rV7xtet2Hzi7TKLjBWpoMv7wDcQ/0/17C70EDD5F8146F1E1E21940FCFB346A62CA5E41.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/17C70EDD5F8146F1E1E21940FCFB346A62CA5E41.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2o4paBoq6LzvHAs31rV7xtet2Hzi7TKLjBWpoMv7wDcQ/0/3137302e3233312e3133332e302f32342d3234203d3e20323635303639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.231.133.0/24

    Signature Algorithm: sha256WithRSAEncryption
         15:56:87:87:48:e6:00:06:57:0c:ab:97:2c:2d:6f:d5:a4:29:
         29:2d:f8:60:97:08:ba:d1:4c:88:28:e4:8e:f5:3f:af:c1:49:
         c1:20:d4:c2:4b:fa:50:fe:8a:ec:5f:da:b4:09:30:3c:49:f7:
         0c:87:10:2e:27:33:4e:9b:31:24:c8:cc:08:7b:b9:5d:56:05:
         f3:9b:63:a8:99:c3:e0:ba:b6:9c:3e:88:f1:73:90:19:16:2b:
         8a:55:9c:e3:65:6c:1c:4c:db:94:c8:f6:3c:19:97:6a:df:32:
         5c:f7:38:86:a0:d5:47:a2:2a:55:4d:f2:94:09:78:d5:09:22:
         32:ee:48:5c:22:7b:c9:ff:f3:9c:99:39:bd:14:9f:a2:68:b2:
         ae:79:c5:70:c5:46:23:aa:08:14:5b:13:4c:f8:0c:34:b0:26:
         b6:72:06:75:da:7c:f2:81:c5:35:e4:f7:c1:3b:a3:f4:46:b9:
         7e:96:ba:28:2d:17:0a:1b:1b:c9:9b:19:12:d6:4b:38:8a:69:
         52:db:96:26:6d:04:6b:2c:38:cc:2e:29:04:90:e8:5b:3e:89:
         d5:bf:5e:dc:cf:6d:0f:e3:73:1e:83:2c:a5:ba:03:f2:5b:26:
         fa:a1:7c:9d:92:a7:a9:6f:66:20:94:54:68:2e:4c:4e:1c:ea:
         39:5f:19:35
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUBEuDj3E6eqj1xhm9hKtx5FZfXXIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTdDNzBFREQ1RjgxNDZGMUUxRTIxOTQwRkNGQjM0NkE2
MkNBNUU0MTAeFw0yMjAyMjYxNDUwMTFaFw0yMzAyMjUxNDU1MTFaMDMxMTAvBgNV
BAMTKDQ5RjYxOEU3REQxQjgwRjU2NERBRkVDRTdGQkFFMEExQkU2QUMwQUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsooovrq6M46bobnNw0uhDntn1
2IFZ9Cygc+IEpgFQYntKAqmRrZpFLagvOHiP3HUHz06tKcU5Z1/cIfNvT5WmgtBu
eYiE91hXdHsOwDx6ZfU6CHLJQuskMIIoCumOJNPyq0SzhPgoTv4nzFgOV4N5qmdN
67RxNsuKWAuzufJXkrBirgzPfr6wX7vZ46jMaZUcsDtT2CrpBnT5WdH0xe1Amzeq
YgiikdEe1zO1ulLTpDyYP6F5IrQq4QHt64gDkNdjWHhNkrbWaIg7uP3xe3zsfoFQ
9tx5R2VtwEN63/L56+C2y3YWs19I1CJK8AZg/LLakxPo+d+oN+2QSYFEjbUjAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUSfYY590bgPVk2v7Of7rgob5qwKswHwYDVR0j
BBgwFoAUF8cO3V+BRvHh4hlA/Ps0amLKXkEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMm80cGFCb3E2THp2SEFzMzFyVjd4dGV0Mkh6aTdUS0xqQldwb012N3dE
Y1EvMC8xN0M3MEVERDVGODE0NkYxRTFFMjE5NDBGQ0ZCMzQ2QTYyQ0E1RTQxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzE3QzcwRURENUY4MTQ2RjFF
MUUyMTk0MEZDRkIzNDZBNjJDQTVFNDEuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJvNHBhQm9xNkx6dkhBczMxclY3eHRldDJIemk3VEtMakJXcG9Ndjd3RGNRLzAv
MzEzNzMwMmUzMjMzMzEyZTMxMzMzMzJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzYzNTMwMzYzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAKrnhTANBgkqhkiG9w0BAQsFAAOCAQEAFVaH
h0jmAAZXDKuXLC1v1aQpKS34YJcIutFMiCjkjvU/r8FJwSDUwkv6UP6K7F/atAkw
PEn3DIcQLiczTpsxJMjMCHu5XVYF85tjqJnD4Lq2nD6I8XOQGRYrilWc42VsHEzb
lMj2PBmXat8yXPc4hqDVR6IqVU3ylAl41QkiMu5IXCJ7yf/znJk5vRSfomiyrnnF
cMVGI6oIFFsTTPgMNLAmtnIGddp88oHFNeT3wTuj9Ea5fpa6KC0XChsbyZsZEtZL
OIppUtuWJm0Eayw4zC4pBJDoWz6J1b9e3M9tD+NzHoMspboD8lsm+qF8nZKnqW9m
IJRUaC5MThzqOV8ZNQ==
-----END CERTIFICATE-----
Generated at Tue Jun 10 14:43:56 2025 by rpki-client