Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3PY3oimPZrDoQfBGhmZBhdeTjTuYZha8PyTm3yM6njNp/0/3137302e3233392e3134302e302f32342d3234203d3e20323636333533.roa
File:                     3137302e3233392e3134302e302f32342d3234203d3e20323636333533.roa (raw, json)
Hash identifier:          GKsn3xDwSndMF8iIHlFh7UhrRFQZFTsM4hons/MEUUs=
Subject key identifier:   4F:29:C2:9E:7C:00:6D:48:DD:31:BD:C3:4B:19:11:FC:7E:74:24:31
Certificate issuer:       /CN=4397BA36879D0CCC02611CE4E0C4F1812A3EC108
Certificate serial:       3379C38EF2B471B6D2AE4FD0AFD3F93265AC7922
Authority key identifier: 43:97:BA:36:87:9D:0C:CC:02:61:1C:E4:E0:C4:F1:81:2A:3E:C1:08
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4397BA36879D0CCC02611CE4E0C4F1812A3EC108.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3PY3oimPZrDoQfBGhmZBhdeTjTuYZha8PyTm3yM6njNp/0/3137302e3233392e3134302e302f32342d3234203d3e20323636333533.roa
Signing time:             Wed 27 Mar 2024 21:00:00 +0000
ROA not before:           Wed 27 Mar 2024 20:55:00 +0000
ROA not after:            Wed 26 Mar 2025 21:00:00 +0000
asID:                     266353
IP address blocks:        170.239.140.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:79:c3:8e:f2:b4:71:b6:d2:ae:4f:d0:af:d3:f9:32:65:ac:79:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4397BA36879D0CCC02611CE4E0C4F1812A3EC108
        Validity
            Not Before: Mar 27 20:55:00 2024 GMT
            Not After : Mar 26 21:00:00 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:92:ef:65:92:2e:7e:48:1b:46:e0:7e:ba:d2:
                    f8:f8:c9:a3:04:39:3b:2e:e2:ed:a5:e8:d9:6e:56:
                    2a:a7:b6:7c:e6:55:ce:49:fe:71:01:da:c6:91:ae:
                    34:63:27:28:71:77:b5:6c:a0:d3:75:f6:2d:60:e2:
                    0e:a6:0a:fb:8e:b8:e1:a3:45:74:e0:15:a5:50:7e:
                    52:de:7d:a1:db:f1:de:b7:62:2b:08:b3:f2:52:7a:
                    71:1b:40:90:7e:c1:87:00:45:29:54:37:6f:28:11:
                    9b:27:fe:d1:22:fc:80:b4:00:6b:1f:a7:d5:0d:e5:
                    10:41:ba:ae:50:97:9c:0c:9e:67:64:fe:87:7c:da:
                    63:56:4e:17:60:69:e4:63:7e:f0:82:72:76:7e:4c:
                    d2:5d:3b:ca:81:de:d1:b9:68:b3:a8:df:de:e7:f2:
                    f4:6e:79:f0:fa:87:cf:74:16:18:aa:75:ac:ea:b7:
                    5f:dc:97:46:9c:7b:fc:80:b8:fa:0b:ac:54:87:f3:
                    5a:3a:4a:69:cd:08:e6:cc:d1:e1:ec:df:85:ca:c1:
                    54:4d:68:91:96:56:80:64:85:0a:55:37:c6:a7:97:
                    ba:c4:f6:dc:3d:9a:b8:34:b6:b9:4a:65:af:3e:01:
                    cc:16:dc:7b:4a:22:3b:36:d9:a2:90:54:48:12:b9:
                    d3:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:29:C2:9E:7C:00:6D:48:DD:31:BD:C3:4B:19:11:FC:7E:74:24:31
            X509v3 Authority Key Identifier:
                keyid:43:97:BA:36:87:9D:0C:CC:02:61:1C:E4:E0:C4:F1:81:2A:3E:C1:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3PY3oimPZrDoQfBGhmZBhdeTjTuYZha8PyTm3yM6njNp/0/4397BA36879D0CCC02611CE4E0C4F1812A3EC108.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4397BA36879D0CCC02611CE4E0C4F1812A3EC108.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3PY3oimPZrDoQfBGhmZBhdeTjTuYZha8PyTm3yM6njNp/0/3137302e3233392e3134302e302f32342d3234203d3e20323636333533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.239.140.0/24

    Signature Algorithm: sha256WithRSAEncryption
         34:23:5d:47:8e:3d:0e:8b:78:93:b1:d7:06:41:44:47:6c:3a:
         b6:9e:da:9a:9d:51:84:66:22:70:48:9d:b9:1c:c5:47:2a:4a:
         15:01:b7:7d:bd:15:7f:8d:e7:a1:2e:16:3c:07:1f:0a:c7:b8:
         a9:94:0d:fa:43:75:3e:67:5b:92:2b:73:db:b6:8b:cf:38:8b:
         f5:56:1a:f5:c8:d2:c8:cb:dd:a6:52:8f:71:75:ce:33:10:26:
         ba:28:c6:27:45:9d:fd:46:ec:cb:23:ba:95:93:79:8f:dc:62:
         0b:51:33:ef:36:85:b4:19:f3:b5:d0:fe:7e:03:d8:0e:6b:13:
         b6:d1:6c:e2:fe:b8:ac:fe:eb:e5:90:2e:5b:a1:5e:89:29:34:
         94:66:1c:82:19:f8:d8:5a:47:dc:9c:12:4a:15:0b:9d:43:5c:
         a9:3b:f6:01:a0:26:6c:a6:ae:a7:37:3d:03:9b:4f:c4:4c:fc:
         85:f8:92:64:36:09:a1:42:86:76:b4:40:40:63:b4:27:b5:6b:
         8d:bd:6c:0a:39:e2:1b:2e:c5:b9:93:43:a6:93:3f:5f:2a:06:
         44:5d:94:49:e0:b5:c0:ed:02:0d:7f:d6:4f:de:ef:80:88:4b:
         02:0a:e3:01:bb:9b:6f:67:58:7f:39:e8:ab:73:9b:66:a4:67:
         2c:0a:ba:9f
-----BEGIN CERTIFICATE-----
MIIHRTCCBi2gAwIBAgIUM3nDjvK0cbbSrk/Qr9P5MmWseSIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDM5N0JBMzY4NzlEMENDQzAyNjExQ0U0RTBDNEYxODEy
QTNFQzEwODAeFw0yNDAzMjcyMDU1MDBaFw0yNTAzMjYyMTAwMDBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQzE5MkVGNjU5MjJFN0U0ODFC
NDZFMDdFQkFEMkY4RjhDOUEzMDQzOTNCMkVFMkVEQTVFOEQ5NkU1NjJBQTdCNjdD
RTY1NUNFNDlGRTcxMDFEQUM2OTFBRTM0NjMyNzI4NzE3N0I1NkNBMEQzNzVGNjJE
NjBFMjBFQTYwQUZCOEVCOEUxQTM0NTc0RTAxNUE1NTA3RTUyREU3REExREJGMURF
Qjc2MjJCMDhCM0YyNTI3QTcxMUI0MDkwN0VDMTg3MDA0NTI5NTQzNzZGMjgxMTlC
MjdGRUQxMjJGQzgwQjQwMDZCMUZBN0Q1MERFNTEwNDFCQUFFNTA5NzlDMEM5RTY3
NjRGRTg3N0NEQTYzNTY0RTE3NjA2OUU0NjM3RUYwODI3Mjc2N0U0Q0QyNUQzQkNB
ODFERUQxQjk2OEIzQThERkRFRTdGMkY0NkU3OUYwRkE4N0NGNzQxNjE4QUE3NUFD
RUFCNzVGREM5NzQ2OUM3QkZDODBCOEZBMEJBQzU0ODdGMzVBM0E0QTY5Q0QwOEU2
Q0NEMUUxRUNERjg1Q0FDMTU0NEQ2ODkxOTY1NjgwNjQ4NTBBNTUzN0M2QTc5N0JB
QzRGNkRDM0Q5QUI4MzRCNkI5NEE2NUFGM0UwMUNDMTZEQzdCNEEyMjNCMzZEOUEy
OTA1NDQ4MTJCOUQzMjcwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAwZLvZZIufkgbRuB+utL4+MmjBDk7LuLtpejZblYqp7Z85lXOSf5x
AdrGka40YycocXe1bKDTdfYtYOIOpgr7jrjho0V04BWlUH5S3n2h2/Het2IrCLPy
UnpxG0CQfsGHAEUpVDdvKBGbJ/7RIvyAtABrH6fVDeUQQbquUJecDJ5nZP6HfNpj
Vk4XYGnkY37wgnJ2fkzSXTvKgd7RuWizqN/e5/L0bnnw+ofPdBYYqnWs6rdf3JdG
nHv8gLj6C6xUh/NaOkppzQjmzNHh7N+FysFUTWiRllaAZIUKVTfGp5e6xPbcPZq4
NLa5SmWvPgHMFtx7SiI7NtmikFRIErnTJwIDAQABo4ICUzCCAk8wHQYDVR0OBBYE
FE8pwp58AG1I3TG9w0sZEfx+dCQxMB8GA1UdIwQYMBaAFEOXujaHnQzMAmEc5ODE
8YEqPsEIMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzNQWTNvaW1QWnJEb1Fm
QkdobVpCaGRlVGpUdVlaaGE4UHlUbTN5TTZuak5wLzAvNDM5N0JBMzY4NzlEMEND
QzAyNjExQ0U0RTBDNEYxODEyQTNFQzEwOC5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC80Mzk3QkEzNjg3OUQwQ0NDMDI2MTFDRTRFMEM0RjE4MTJBM0VD
MTA4LmNlcjCBsAYIKwYBBQUHAQsEgaMwgaAwgZ0GCCsGAQUFBzALhoGQcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby8zUFkzb2ltUFpyRG9RZkJHaG1a
QmhkZVRqVHVZWmhhOFB5VG0zeU02bmpOcC8wLzMxMzczMDJlMzIzMzM5MmUzMTM0
MzAyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2MzYzMzM1MzMucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BACq74wwDQYJKoZIhvcNAQELBQADggEBADQjXUeOPQ6LeJOx1wZBREdsOrae2pqd
UYRmInBInbkcxUcqShUBt329FX+N56EuFjwHHwrHuKmUDfpDdT5nW5Irc9u2i884
i/VWGvXI0sjL3aZSj3F1zjMQJrooxidFnf1G7MsjupWTeY/cYgtRM+82hbQZ87XQ
/n4D2A5rE7bRbOL+uKz+6+WQLluhXokpNJRmHIIZ+NhaR9ycEkoVC51DXKk79gGg
Jmymrqc3PQObT8RM/IX4kmQ2CaFChna0QEBjtCe1a429bAo54hsuxbmTQ6aTP18q
BkRdlEngtcDtAg1/1k/e74CISwIK4wG7m29nWH856Ktzm2akZywKup8=
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:22:44 2025 by rpki-client