Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3RuRLLauazzqQd75GiZLitNaQZxmdUq6LDJZj8fqeyd2/1/3137392e39362e3230302e302f32312d3234203d3e203532353730.roa
File:                     3137392e39362e3230302e302f32312d3234203d3e203532353730.roa (raw, json)
Hash identifier:          ThFay1lLsaEu2jVa7XfNcUJbNcEHJjS8TO7JyZdIDyo=
Subject key identifier:   F0:8C:D6:F0:20:14:A1:5C:C1:ED:DC:F6:D6:17:62:3B:0A:C0:A9:5F
Certificate issuer:       /CN=5FF5DC22C9F38E4B3A5FFACC7689C6EB52A65DB9
Certificate serial:       6F643075E64B9643E089C074639D459C5269A7D3
Authority key identifier: 5F:F5:DC:22:C9:F3:8E:4B:3A:5F:FA:CC:76:89:C6:EB:52:A6:5D:B9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FF5DC22C9F38E4B3A5FFACC7689C6EB52A65DB9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3RuRLLauazzqQd75GiZLitNaQZxmdUq6LDJZj8fqeyd2/1/3137392e39362e3230302e302f32312d3234203d3e203532353730.roa
Signing time:             Wed 05 Mar 2025 19:55:19 +0000
ROA not before:           Wed 05 Mar 2025 19:50:19 +0000
ROA not after:            Wed 04 Mar 2026 19:55:19 +0000
asID:                     52570
IP address blocks:        179.96.200.0/21 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:64:30:75:e6:4b:96:43:e0:89:c0:74:63:9d:45:9c:52:69:a7:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5FF5DC22C9F38E4B3A5FFACC7689C6EB52A65DB9
        Validity
            Not Before: Mar  5 19:50:19 2025 GMT
            Not After : Mar  4 19:55:19 2026 GMT
        Subject: CN=F08CD6F02014A15CC1EDDCF6D617623B0AC0A95F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:0c:56:b4:cc:a7:4e:28:74:73:03:c4:33:39:
                    b8:8b:f5:4e:1e:13:a9:0f:e5:86:44:35:6e:60:61:
                    96:c4:5b:4d:f3:47:f1:a9:ac:76:18:96:14:b1:16:
                    a6:cc:34:1d:b7:04:f4:79:21:f3:43:b9:4a:35:f1:
                    0c:40:15:5f:83:61:00:7c:64:28:c7:94:45:e5:32:
                    26:ff:09:e2:7c:fc:bc:8e:0d:5d:2c:87:0c:38:33:
                    07:bf:63:ea:d2:39:36:ec:b8:a1:9e:79:4c:cb:3f:
                    11:a4:81:23:11:36:ca:95:c7:72:fa:4e:29:f6:01:
                    2b:fd:ab:4a:3e:e3:f5:2d:4a:7f:a0:ba:f2:02:57:
                    2b:47:fb:92:4f:91:11:04:ab:90:e6:ff:b0:60:20:
                    c6:45:06:b3:8d:0f:9f:3c:40:eb:d9:61:f2:62:5b:
                    0a:74:92:5f:73:c4:0a:09:2b:52:8f:a9:71:fe:6b:
                    96:6a:df:0e:51:41:ad:ba:d9:3a:31:8b:62:02:d9:
                    9c:2b:2e:b4:63:5d:87:8d:bf:38:de:73:94:f6:0b:
                    10:cd:f0:fa:4d:5f:e1:54:a3:04:cc:3e:84:fe:0d:
                    1a:64:22:a5:6e:c6:0a:0d:96:ad:95:d4:8a:d7:be:
                    11:6e:f7:6e:c8:40:e2:c2:12:a0:dd:15:85:80:cb:
                    f7:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:8C:D6:F0:20:14:A1:5C:C1:ED:DC:F6:D6:17:62:3B:0A:C0:A9:5F
            X509v3 Authority Key Identifier:
                keyid:5F:F5:DC:22:C9:F3:8E:4B:3A:5F:FA:CC:76:89:C6:EB:52:A6:5D:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3RuRLLauazzqQd75GiZLitNaQZxmdUq6LDJZj8fqeyd2/1/5FF5DC22C9F38E4B3A5FFACC7689C6EB52A65DB9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FF5DC22C9F38E4B3A5FFACC7689C6EB52A65DB9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3RuRLLauazzqQd75GiZLitNaQZxmdUq6LDJZj8fqeyd2/1/3137392e39362e3230302e302f32312d3234203d3e203532353730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.96.200.0/21

    Signature Algorithm: sha256WithRSAEncryption
         7d:d1:d9:89:bd:b6:70:7e:b4:d5:20:b4:f4:95:73:5c:70:0f:
         eb:da:0c:e4:0b:36:14:0f:9d:22:55:e9:dc:96:16:4b:83:cf:
         d0:ef:e4:6b:91:11:b5:2a:0e:b3:26:e7:41:db:6b:66:06:a5:
         71:02:43:01:cb:06:fc:6d:5f:8e:d7:5e:29:a2:dd:bb:8f:3a:
         6d:2c:34:22:ee:42:5b:21:00:3c:4f:9a:c0:f5:e3:3d:ba:e8:
         64:38:88:0e:ea:be:b4:78:da:51:aa:0d:0e:17:6a:21:04:8c:
         7a:84:7c:5b:c4:d1:b8:e5:ed:b5:17:ce:45:93:9a:76:6a:8a:
         cb:96:89:2d:f6:eb:de:f0:bf:cf:ac:b1:0e:a8:16:87:c3:67:
         2c:fd:af:dc:9e:2d:ea:8b:1f:f0:80:a5:d6:8f:dd:7f:14:59:
         d3:98:1b:96:60:fb:c4:15:c2:93:d7:5e:22:95:eb:37:71:7b:
         1c:de:78:bb:6b:03:ce:dc:11:a8:df:f0:18:0c:ba:9a:8c:0d:
         9e:02:df:f5:fe:39:75:82:2b:06:7e:a2:cf:af:56:ed:e3:cd:
         8f:92:73:66:6c:e8:bc:7d:05:37:a9:91:b5:44:4b:0c:2b:c6:
         27:14:f0:e3:97:aa:44:58:ee:17:91:6f:0c:e1:b4:ed:54:98:
         f4:7b:d0:a6
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUb2QwdeZLlkPgicB0Y51FnFJpp9MwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUZGNURDMjJDOUYzOEU0QjNBNUZGQUNDNzY4OUM2RUI1
MkE2NURCOTAeFw0yNTAzMDUxOTUwMTlaFw0yNjAzMDQxOTU1MTlaMDMxMTAvBgNV
BAMTKEYwOENENkYwMjAxNEExNUNDMUVERENGNkQ2MTc2MjNCMEFDMEE5NUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBDFa0zKdOKHRzA8QzObiL9U4e
E6kP5YZENW5gYZbEW03zR/GprHYYlhSxFqbMNB23BPR5IfNDuUo18QxAFV+DYQB8
ZCjHlEXlMib/CeJ8/LyODV0shww4Mwe/Y+rSOTbsuKGeeUzLPxGkgSMRNsqVx3L6
Tin2ASv9q0o+4/UtSn+guvICVytH+5JPkREEq5Dm/7BgIMZFBrOND588QOvZYfJi
Wwp0kl9zxAoJK1KPqXH+a5Zq3w5RQa262Toxi2IC2ZwrLrRjXYeNvzjec5T2CxDN
8PpNX+FUowTMPoT+DRpkIqVuxgoNlq2V1IrXvhFu927IQOLCEqDdFYWAy/c3AgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQU8IzW8CAUoVzB7dz21hdiOwrAqV8wHwYDVR0j
BBgwFoAUX/XcIsnzjks6X/rMdonG61KmXbkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM1J1UkxMYXVhenpxUWQ3NUdpWkxpdE5hUVp4bWRVcTZMREpaajhmcWV5
ZDIvMS81RkY1REMyMkM5RjM4RTRCM0E1RkZBQ0M3Njg5QzZFQjUyQTY1REI5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzVGRjVEQzIyQzlGMzhFNEIz
QTVGRkFDQzc2ODlDNkVCNTJBNjVEQjkuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNSdVJMTGF1YXp6cVFkNzVHaVpMaXROYVFaeG1kVXE2TERKWmo4ZnFleWQyLzEv
MzEzNzM5MmUzOTM2MmUzMjMwMzAyZTMwMmYzMjMxMmQzMjM0MjAzZDNlMjAzNTMy
MzUzNzMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQDs2DIMA0GCSqGSIb3DQEBCwUAA4IBAQB90dmJvbZw
frTVILT0lXNccA/r2gzkCzYUD50iVenclhZLg8/Q7+RrkRG1Kg6zJudB22tmBqVx
AkMBywb8bV+O114pot27jzptLDQi7kJbIQA8T5rA9eM9uuhkOIgO6r60eNpRqg0O
F2ohBIx6hHxbxNG45e21F85Fk5p2aorLlokt9uve8L/PrLEOqBaHw2cs/a/cni3q
ix/wgKXWj91/FFnTmBuWYPvEFcKT114iles3cXsc3ni7awPO3BGo3/AYDLqajA2e
At/1/jl1gisGfqLPr1bt482PknNmbOi8fQU3qZG1REsMK8YnFPDjl6pEWO4XkW8M
4bTtVJj0e9Cm
-----END CERTIFICATE-----
Generated at Mon Apr 7 03:02:50 2025 by rpki-client