Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2UDdFBPRLT4owx99QheiQdCqUxoMPHTfgJxhcLmUpt5Q/0/3137302e3233332e3233362e302f32342d3234203d3e20323635303938.roa
File:                     3137302e3233332e3233362e302f32342d3234203d3e20323635303938.roa (raw, json)
Hash identifier:          wOR1ic3k2E0w0QmBMRkZFM2vWRGN6iHaD8ieeHE/G0s=
Subject key identifier:   FC:68:FB:11:42:F1:80:8A:0E:66:0A:7C:A2:D4:2E:4E:09:1E:EE:5C
Certificate issuer:       /CN=E9BD4A328B09F70063C93430A11B2332DB5EE4BB
Certificate serial:       459919265DD0293034D96BCC3451BC245FC6FECD
Authority key identifier: E9:BD:4A:32:8B:09:F7:00:63:C9:34:30:A1:1B:23:32:DB:5E:E4:BB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E9BD4A328B09F70063C93430A11B2332DB5EE4BB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2UDdFBPRLT4owx99QheiQdCqUxoMPHTfgJxhcLmUpt5Q/0/3137302e3233332e3233362e302f32342d3234203d3e20323635303938.roa
Signing time:             Thu 09 Jan 2025 18:31:13 +0000
ROA not before:           Thu 09 Jan 2025 18:26:13 +0000
ROA not after:            Thu 08 Jan 2026 18:31:13 +0000
asID:                     265098
IP address blocks:        170.233.236.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:99:19:26:5d:d0:29:30:34:d9:6b:cc:34:51:bc:24:5f:c6:fe:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E9BD4A328B09F70063C93430A11B2332DB5EE4BB
        Validity
            Not Before: Jan  9 18:26:13 2025 GMT
            Not After : Jan  8 18:31:13 2026 GMT
        Subject: CN=FC68FB1142F1808A0E660A7CA2D42E4E091EEE5C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:ec:f9:a1:cd:c8:17:c2:d8:12:8e:7b:d5:be:
                    c2:e6:11:d0:1c:e2:b2:99:aa:6f:1d:8c:b3:8a:07:
                    a2:f6:71:dd:09:52:e5:50:d9:14:6d:22:15:88:79:
                    55:d9:96:59:9c:57:3e:72:95:ef:ba:12:f5:57:4a:
                    b1:c2:63:5b:1f:4f:a6:5f:21:57:46:16:5c:f2:de:
                    d6:10:a2:49:73:8d:04:c1:55:41:df:06:69:7f:ed:
                    23:68:5f:14:0d:db:7e:f1:1a:6a:d8:cc:44:70:9d:
                    35:e5:81:e1:5f:3e:8e:47:2e:88:f8:6c:d9:a7:c2:
                    e5:c3:2d:0d:34:d9:6c:23:1b:de:68:1e:3f:3c:55:
                    29:28:4b:c6:bf:f6:f6:ab:d7:6d:c4:09:cb:3d:6d:
                    f4:fa:f9:0d:5d:88:ac:31:d7:91:58:61:22:f5:25:
                    d0:8f:22:68:72:f9:1f:7d:3a:7f:e8:33:2b:f8:00:
                    c2:80:55:aa:d5:37:d4:fb:54:53:77:70:99:ea:8e:
                    2e:e8:11:8d:2a:58:b7:84:b9:7f:40:c2:c2:b9:53:
                    bd:5e:43:5c:a4:d3:af:7d:88:38:26:a9:de:32:be:
                    3a:e0:ce:31:3c:e2:cb:34:9e:0c:e1:48:d1:23:ab:
                    f8:5d:08:e8:2a:67:d8:04:b4:f2:7b:90:07:d1:0a:
                    42:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:68:FB:11:42:F1:80:8A:0E:66:0A:7C:A2:D4:2E:4E:09:1E:EE:5C
            X509v3 Authority Key Identifier:
                keyid:E9:BD:4A:32:8B:09:F7:00:63:C9:34:30:A1:1B:23:32:DB:5E:E4:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2UDdFBPRLT4owx99QheiQdCqUxoMPHTfgJxhcLmUpt5Q/0/E9BD4A328B09F70063C93430A11B2332DB5EE4BB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E9BD4A328B09F70063C93430A11B2332DB5EE4BB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2UDdFBPRLT4owx99QheiQdCqUxoMPHTfgJxhcLmUpt5Q/0/3137302e3233332e3233362e302f32342d3234203d3e20323635303938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.233.236.0/24

    Signature Algorithm: sha256WithRSAEncryption
         10:05:3d:01:5c:11:f0:66:1d:71:16:c9:d4:c4:de:be:6a:6f:
         c8:ce:ba:de:44:97:65:ad:51:3a:aa:9f:cb:12:49:89:54:e3:
         14:a2:b3:f6:f0:94:43:7c:00:5c:de:68:ff:e4:60:c9:02:e6:
         e5:60:14:78:93:df:b8:93:ed:ad:6a:c0:a9:b9:5f:6c:8f:ce:
         a6:e2:c5:99:23:3a:4b:2f:b7:99:82:0c:9e:72:d3:26:b1:73:
         06:94:93:1c:23:33:59:3f:d2:e6:0d:c7:42:2a:df:1b:aa:28:
         1d:a3:0e:5d:84:86:48:5a:ec:83:42:07:2e:7d:7a:a5:f5:2e:
         70:28:0c:0a:ec:2d:a7:0a:54:b5:de:41:eb:61:3b:ff:34:96:
         56:e1:ce:45:29:27:99:c8:ba:24:2f:77:6b:7d:97:5f:b4:e3:
         95:2d:74:06:eb:3d:fe:aa:10:1d:8e:a1:77:c1:c3:6c:8e:fd:
         ab:4a:8a:88:bb:56:34:e5:a2:0c:eb:67:eb:da:2f:cb:7a:ff:
         61:48:af:3b:11:6f:f0:e3:72:ba:e0:3c:71:c5:1a:56:36:6c:
         51:9d:60:9b:38:2b:45:65:ab:69:26:8b:2f:54:0c:55:26:4f:
         13:90:0f:f0:01:4f:e3:53:61:bb:5e:38:6a:9a:11:2c:ee:2f:
         74:d8:37:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 17:05:28 2025 by rpki-client