Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AACY62Xqj4HnNXtvG2wfW4qZM3ANso7SVj9MRLY5yZ5a/0/3137302e3234352e33392e302f32342d3234203d3e20323636303231.roa
File:                     3137302e3234352e33392e302f32342d3234203d3e20323636303231.roa (raw, json)
Hash identifier:          dkqlLuMSbNhYXA4X2YGFUP2w2r8bA+OED0UvI+GXRU0=
Subject key identifier:   73:25:C1:C4:F8:05:6D:F3:D9:4B:48:A2:A5:2C:FA:3C:64:05:9E:A1
Certificate issuer:       /CN=4D50CC6156147AA39474DCFF014FE478639F7DD3
Certificate serial:       7A88D5DBCEAF0FF0FB43D333BB36012C1F19750A
Authority key identifier: 4D:50:CC:61:56:14:7A:A3:94:74:DC:FF:01:4F:E4:78:63:9F:7D:D3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4D50CC6156147AA39474DCFF014FE478639F7DD3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AACY62Xqj4HnNXtvG2wfW4qZM3ANso7SVj9MRLY5yZ5a/0/3137302e3234352e33392e302f32342d3234203d3e20323636303231.roa
Signing time:             Tue 08 Jul 2025 13:48:10 +0000
ROA not before:           Tue 08 Jul 2025 13:43:10 +0000
ROA not after:            Tue 07 Jul 2026 13:48:10 +0000
asID:                     266021
IP address blocks:        170.245.39.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:88:d5:db:ce:af:0f:f0:fb:43:d3:33:bb:36:01:2c:1f:19:75:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4D50CC6156147AA39474DCFF014FE478639F7DD3
        Validity
            Not Before: Jul  8 13:43:10 2025 GMT
            Not After : Jul  7 13:48:10 2026 GMT
        Subject: CN=7325C1C4F8056DF3D94B48A2A52CFA3C64059EA1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:24:b7:da:60:2a:26:20:6e:94:21:e0:42:3b:
                    ec:57:71:7f:86:2c:e0:e4:23:c6:1a:e3:eb:14:a1:
                    95:38:29:38:e9:15:54:80:cc:66:ad:64:ee:25:69:
                    1c:0e:ca:4b:75:77:8b:48:6c:be:dc:94:bc:e7:b2:
                    36:0a:df:56:73:e4:39:65:fa:46:ee:54:8b:4d:0d:
                    af:00:b2:aa:01:90:50:d4:bb:55:f1:c3:66:a9:9d:
                    1e:cc:21:cf:f2:da:5e:6a:a5:1d:17:fe:54:58:1e:
                    e3:3f:11:e2:e0:1c:43:59:75:b1:9e:2a:6b:65:47:
                    3b:76:7d:6f:3b:01:98:66:4a:5b:3f:3b:9d:3f:e9:
                    07:2e:8e:b2:a2:b5:87:19:01:c8:94:9d:d0:42:33:
                    c6:cc:20:e5:e1:85:b5:44:5e:bf:d3:73:6d:96:89:
                    81:ea:55:d6:a7:21:ce:75:5b:9d:e8:b0:b2:a0:2e:
                    00:91:93:ec:3d:74:d2:5a:b1:27:98:2c:72:a5:15:
                    ce:a0:fe:08:76:86:7a:3d:d2:e8:53:ee:ae:9a:e8:
                    89:4a:b4:ad:c6:7b:e9:73:5e:b5:d0:0d:b0:ae:6b:
                    4f:10:28:54:9f:35:90:b7:9c:bd:67:76:ac:6f:e8:
                    c6:c7:40:01:58:33:b5:a0:43:11:d6:ca:91:77:40:
                    4d:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:25:C1:C4:F8:05:6D:F3:D9:4B:48:A2:A5:2C:FA:3C:64:05:9E:A1
            X509v3 Authority Key Identifier:
                keyid:4D:50:CC:61:56:14:7A:A3:94:74:DC:FF:01:4F:E4:78:63:9F:7D:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AACY62Xqj4HnNXtvG2wfW4qZM3ANso7SVj9MRLY5yZ5a/0/4D50CC6156147AA39474DCFF014FE478639F7DD3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4D50CC6156147AA39474DCFF014FE478639F7DD3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AACY62Xqj4HnNXtvG2wfW4qZM3ANso7SVj9MRLY5yZ5a/0/3137302e3234352e33392e302f32342d3234203d3e20323636303231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.245.39.0/24

    Signature Algorithm: sha256WithRSAEncryption
         22:b1:bd:1d:9b:b7:a2:20:cc:21:1b:f8:b2:16:9b:91:af:09:
         3d:ae:d2:8a:11:c7:4c:1c:d2:69:af:c1:35:79:d1:44:52:d7:
         80:15:a0:e5:99:89:06:26:2c:96:07:1a:21:c1:17:cc:a5:d9:
         a2:31:a0:ca:18:fe:bf:61:ad:1d:56:bb:70:2b:9e:8f:71:60:
         63:c7:2d:61:a8:38:df:c8:2d:8e:52:bd:ee:ed:e8:8c:f4:fe:
         e8:d5:40:87:e1:eb:fd:bb:31:48:f9:a8:de:7d:76:26:6b:6c:
         73:8f:40:1b:63:40:19:d8:18:d9:3c:ce:52:42:8a:ed:f4:5f:
         87:3a:81:85:80:c4:64:e2:b1:f2:ed:94:2e:73:3d:3a:b0:c1:
         2d:1c:1e:12:0f:76:6a:ea:8a:75:58:d8:53:49:5f:41:ad:a9:
         d7:a2:d2:70:0d:b8:84:e8:33:87:c9:2a:92:95:29:14:44:79:
         25:df:59:c0:08:07:3e:79:7b:13:52:2c:a9:95:7f:cc:4a:b4:
         7f:9e:d6:72:11:62:0d:7f:fd:45:98:a4:de:61:96:1a:93:1c:
         01:11:30:69:8b:b7:2b:91:52:73:cb:2d:67:25:89:8c:fb:c5:
         e2:6f:5b:d8:c4:52:31:a8:7f:25:75:08:c5:74:ba:cb:17:2f:
         b9:ad:7d:c8
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUeojV286vD/D7Q9MzuzYBLB8ZdQowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNEQ1MENDNjE1NjE0N0FBMzk0NzREQ0ZGMDE0RkU0Nzg2
MzlGN0REMzAeFw0yNTA3MDgxMzQzMTBaFw0yNjA3MDcxMzQ4MTBaMDMxMTAvBgNV
BAMTKDczMjVDMUM0RjgwNTZERjNEOTRCNDhBMkE1MkNGQTNDNjQwNTlFQTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtJLfaYComIG6UIeBCO+xXcX+G
LODkI8Ya4+sUoZU4KTjpFVSAzGatZO4laRwOykt1d4tIbL7clLznsjYK31Zz5Dll
+kbuVItNDa8AsqoBkFDUu1Xxw2apnR7MIc/y2l5qpR0X/lRYHuM/EeLgHENZdbGe
KmtlRzt2fW87AZhmSls/O50/6QcujrKitYcZAciUndBCM8bMIOXhhbVEXr/Tc22W
iYHqVdanIc51W53osLKgLgCRk+w9dNJasSeYLHKlFc6g/gh2hno90uhT7q6a6IlK
tK3Ge+lzXrXQDbCua08QKFSfNZC3nL1ndqxv6MbHQAFYM7WgQxHWypF3QE3RAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUcyXBxPgFbfPZS0iipSz6PGQFnqEwHwYDVR0j
BBgwFoAUTVDMYVYUeqOUdNz/AU/keGOffdMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQUFDWTYyWHFqNEhuTlh0dkcyd2ZXNHFaTTNBTnNvN1NWajlNUkxZNXla
NWEvMC80RDUwQ0M2MTU2MTQ3QUEzOTQ3NERDRkYwMTRGRTQ3ODYzOUY3REQzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzRENTBDQzYxNTYxNDdBQTM5
NDc0RENGRjAxNEZFNDc4NjM5RjdERDMuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0FBQ1k2MlhxajRIbk5YdHZHMndmVzRxWk0zQU5zbzdTVmo5TVJMWTV5WjVhLzAv
MzEzNzMwMmUzMjM0MzUyZTMzMzkyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzYzMDMyMzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBACq9ScwDQYJKoZIhvcNAQELBQADggEBACKxvR2b
t6IgzCEb+LIWm5GvCT2u0ooRx0wc0mmvwTV50URS14AVoOWZiQYmLJYHGiHBF8yl
2aIxoMoY/r9hrR1Wu3Arno9xYGPHLWGoON/ILY5Sve7t6Iz0/ujVQIfh6/27MUj5
qN59diZrbHOPQBtjQBnYGNk8zlJCiu30X4c6gYWAxGTisfLtlC5zPTqwwS0cHhIP
dmrqinVY2FNJX0Gtqdei0nANuIToM4fJKpKVKRREeSXfWcAIBz55exNSLKmVf8xK
tH+e1nIRYg1//UWYpN5hlhqTHAERMGmLtyuRUnPLLWcliYz7xeJvW9jEUjGofyV1
CMV0ussXL7mtfcg=
-----END CERTIFICATE-----
Generated at Sat Jul 26 15:17:31 2025 by rpki-client