Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2rC2b4pRVSgEqvcauGPe3Eo89e5D5wz2Pyn764wLAnKF/4/3137302e38302e36352e302f32342d3234203d3e20323632353134.roa
File:                     3137302e38302e36352e302f32342d3234203d3e20323632353134.roa (raw, json)
Hash identifier:          gVZrRzHLV59zSOzFh7RTChZWFaF0Vf3AUeU7DWylPPQ=
Subject key identifier:   95:25:11:1E:73:63:DC:0F:4A:5D:E6:2A:7A:2A:52:A5:3F:94:E7:E8
Certificate issuer:       /CN=E603E9E9CBA4E18AF6D5A9489E1A922EC2BCA36D
Certificate serial:       30BD1EB0DFE835D6D542706D445FB1D80DDCA8E5
Authority key identifier: E6:03:E9:E9:CB:A4:E1:8A:F6:D5:A9:48:9E:1A:92:2E:C2:BC:A3:6D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E603E9E9CBA4E18AF6D5A9489E1A922EC2BCA36D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2rC2b4pRVSgEqvcauGPe3Eo89e5D5wz2Pyn764wLAnKF/4/3137302e38302e36352e302f32342d3234203d3e20323632353134.roa
Signing time:             Mon 17 Oct 2022 20:40:17 +0000
ROA not before:           Mon 17 Oct 2022 20:35:17 +0000
ROA not after:            Mon 16 Oct 2023 20:40:17 +0000
asID:                     262514
IP address blocks:        170.80.65.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:bd:1e:b0:df:e8:35:d6:d5:42:70:6d:44:5f:b1:d8:0d:dc:a8:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E603E9E9CBA4E18AF6D5A9489E1A922EC2BCA36D
        Validity
            Not Before: Oct 17 20:35:17 2022 GMT
            Not After : Oct 16 20:40:17 2023 GMT
        Subject: CN=9525111E7363DC0F4A5DE62A7A2A52A53F94E7E8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:82:c5:0e:c4:7e:e2:7e:98:b3:ea:d6:2b:8f:
                    dc:f1:d7:58:27:78:91:ff:ea:03:2e:1b:cc:58:25:
                    bd:2b:14:0e:83:bf:fe:59:19:ef:cd:ed:65:29:c8:
                    18:fb:9a:de:7d:a0:21:eb:e2:f9:9a:19:40:f8:b7:
                    ce:09:65:68:ba:99:a4:d0:90:e2:3f:20:e2:78:b2:
                    56:4e:0d:3c:49:0a:09:78:dc:f4:3c:6d:50:6c:56:
                    dd:3c:67:b3:56:ec:4d:b0:9a:72:4a:0a:cb:15:00:
                    85:09:04:22:dd:90:42:15:f7:f2:b3:87:c6:6c:4f:
                    fe:48:2a:c4:13:6b:c5:7b:3c:57:d8:00:da:fb:cb:
                    e2:02:0f:3c:fd:e3:bf:88:0c:c7:3b:ca:6f:e6:c2:
                    65:1f:57:af:45:55:5d:2a:fc:30:97:9f:a6:4f:b3:
                    14:ab:c4:0e:87:61:fd:63:ed:d4:9e:36:7c:d4:d0:
                    86:52:b9:b4:ec:79:e0:1b:94:be:e5:dc:58:fe:b7:
                    dd:f2:49:55:1d:a4:d0:37:46:a8:e5:2e:42:1c:7b:
                    50:7b:b3:48:28:80:29:56:f2:2b:71:4c:71:46:cd:
                    55:e2:4d:a0:64:30:79:be:dd:30:5f:d0:55:be:fa:
                    7e:1e:4d:31:59:3c:09:11:4f:72:d6:6c:12:78:90:
                    b1:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:25:11:1E:73:63:DC:0F:4A:5D:E6:2A:7A:2A:52:A5:3F:94:E7:E8
            X509v3 Authority Key Identifier:
                keyid:E6:03:E9:E9:CB:A4:E1:8A:F6:D5:A9:48:9E:1A:92:2E:C2:BC:A3:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2rC2b4pRVSgEqvcauGPe3Eo89e5D5wz2Pyn764wLAnKF/4/E603E9E9CBA4E18AF6D5A9489E1A922EC2BCA36D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E603E9E9CBA4E18AF6D5A9489E1A922EC2BCA36D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2rC2b4pRVSgEqvcauGPe3Eo89e5D5wz2Pyn764wLAnKF/4/3137302e38302e36352e302f32342d3234203d3e20323632353134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.80.65.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7b:80:8f:87:54:8b:af:09:5b:d0:ad:32:a2:16:39:45:c0:05:
         fe:ff:6d:3a:99:e6:16:99:ae:eb:f1:e4:41:48:75:cd:29:ef:
         98:fe:7f:db:5f:5c:ff:ab:0e:ee:47:ad:96:63:5c:42:4a:a8:
         be:5e:23:90:69:51:31:3c:20:70:4c:52:f3:9d:11:fc:2a:d6:
         3e:87:67:cf:5f:e3:ca:e1:6d:f8:5e:0a:2b:1a:d4:9c:69:d6:
         1b:bb:c0:a9:8c:b0:03:6b:27:36:89:e6:ad:77:d3:71:f0:68:
         94:bc:3f:14:34:df:20:c8:ec:0d:3f:cc:e7:94:5c:6e:6a:3c:
         95:a7:f4:fb:ad:a7:88:77:3e:45:dd:f8:31:80:a5:5f:bc:01:
         e4:a1:de:09:e9:6e:e1:5e:bf:fb:fc:b5:c6:73:59:80:cf:08:
         f4:62:f5:b9:11:c7:e0:e2:86:55:1a:cd:6b:70:2e:7b:83:46:
         44:0d:22:e6:18:88:22:14:e6:56:b7:66:76:f3:0e:8d:30:ef:
         cb:14:ba:a2:ca:e9:42:e5:9f:df:e6:10:87:50:3e:16:f3:2f:
         ab:c2:50:84:df:54:68:87:12:44:52:1f:a6:80:f1:a0:65:8a:
         cc:54:57:b7:2e:b7:a6:46:27:e5:ef:54:08:88:7a:dd:ef:f2:
         47:67:fd:c9
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUML0esN/oNdbVQnBtRF+x2A3cqOUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTYwM0U5RTlDQkE0RTE4QUY2RDVBOTQ4OUUxQTkyMkVD
MkJDQTM2RDAeFw0yMjEwMTcyMDM1MTdaFw0yMzEwMTYyMDQwMTdaMDMxMTAvBgNV
BAMTKDk1MjUxMTFFNzM2M0RDMEY0QTVERTYyQTdBMkE1MkE1M0Y5NEU3RTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDqgsUOxH7ifpiz6tYrj9zx11gn
eJH/6gMuG8xYJb0rFA6Dv/5ZGe/N7WUpyBj7mt59oCHr4vmaGUD4t84JZWi6maTQ
kOI/IOJ4slZODTxJCgl43PQ8bVBsVt08Z7NW7E2wmnJKCssVAIUJBCLdkEIV9/Kz
h8ZsT/5IKsQTa8V7PFfYANr7y+ICDzz947+IDMc7ym/mwmUfV69FVV0q/DCXn6ZP
sxSrxA6HYf1j7dSeNnzU0IZSubTseeAblL7l3Fj+t93ySVUdpNA3RqjlLkIce1B7
s0gogClW8itxTHFGzVXiTaBkMHm+3TBf0FW++n4eTTFZPAkRT3LWbBJ4kLHjAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUlSURHnNj3A9KXeYqeipSpT+U5+gwHwYDVR0j
BBgwFoAU5gPp6cuk4Yr21alInhqSLsK8o20wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMnJDMmI0cFJWU2dFcXZjYXVHUGUzRW84OWU1RDV3ejJQeW43NjR3TEFu
S0YvNC9FNjAzRTlFOUNCQTRFMThBRjZENUE5NDg5RTFBOTIyRUMyQkNBMzZELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0U2MDNFOUU5Q0JBNEUxOEFG
NkQ1QTk0ODlFMUE5MjJFQzJCQ0EzNkQuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJyQzJiNHBSVlNnRXF2Y2F1R1BlM0VvODllNUQ1d3oyUHluNzY0d0xBbktGLzQv
MzEzNzMwMmUzODMwMmUzNjM1MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjMy
MzUzMTM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAqlBBMA0GCSqGSIb3DQEBCwUAA4IBAQB7gI+HVIuv
CVvQrTKiFjlFwAX+/206meYWma7r8eRBSHXNKe+Y/n/bX1z/qw7uR62WY1xCSqi+
XiOQaVExPCBwTFLznRH8KtY+h2fPX+PK4W34XgorGtScadYbu8CpjLADayc2ieat
d9Nx8GiUvD8UNN8gyOwNP8znlFxuajyVp/T7raeIdz5F3fgxgKVfvAHkod4J6W7h
Xr/7/LXGc1mAzwj0YvW5Ecfg4oZVGs1rcC57g0ZEDSLmGIgiFOZWt2Z28w6NMO/L
FLqiyulC5Z/f5hCHUD4W8y+rwlCE31RohxJEUh+mgPGgZYrMVFe3LremRifl71QI
iHrd7/JHZ/3J
-----END CERTIFICATE-----
Generated at Fri Mar 14 01:55:43 2025 by rpki-client