Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3qiK74NhiX3o3aZ8W8m7SF3ARKmdSdSn1yvD2iM6kqU1/0/32342e3135322e33362e302f32342d3234203d3e20323730353634.roa
File:                     32342e3135322e33362e302f32342d3234203d3e20323730353634.roa (raw, json)
Hash identifier:          XS4WB/uuTYMADmGKYWc6NZhYQQp+Y1Ccz5bohHTCslw=
Subject key identifier:   2C:6F:DD:8F:45:7E:74:42:92:39:D5:6C:E7:26:E9:16:4A:F7:04:C9
Certificate issuer:       /CN=B5A13510DBDC20D878560D32887F24F4B857C080
Certificate serial:       1FD9D4B4EEDC5D55752FA1218A2F2575A22F3BBB
Authority key identifier: B5:A1:35:10:DB:DC:20:D8:78:56:0D:32:88:7F:24:F4:B8:57:C0:80
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5A13510DBDC20D878560D32887F24F4B857C080.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3qiK74NhiX3o3aZ8W8m7SF3ARKmdSdSn1yvD2iM6kqU1/0/32342e3135322e33362e302f32342d3234203d3e20323730353634.roa
Signing time:             Thu 12 Dec 2024 15:27:42 +0000
ROA not before:           Thu 12 Dec 2024 15:22:42 +0000
ROA not after:            Thu 11 Dec 2025 15:27:42 +0000
asID:                     270564
IP address blocks:        24.152.36.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:d9:d4:b4:ee:dc:5d:55:75:2f:a1:21:8a:2f:25:75:a2:2f:3b:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B5A13510DBDC20D878560D32887F24F4B857C080
        Validity
            Not Before: Dec 12 15:22:42 2024 GMT
            Not After : Dec 11 15:27:42 2025 GMT
        Subject: CN=2C6FDD8F457E74429239D56CE726E9164AF704C9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:bb:41:7f:6d:1b:a0:60:c8:5f:fb:d1:18:aa:
                    33:87:cc:16:7b:58:37:59:12:0b:6a:56:9c:fe:33:
                    0f:10:4d:27:58:3d:43:e6:cb:ff:03:99:a4:57:63:
                    88:12:32:63:f0:17:03:f6:80:31:a7:33:a6:ae:4e:
                    d7:61:23:b2:e5:db:8f:43:dc:f7:db:86:95:e0:6f:
                    43:b9:90:a6:f2:9b:88:c1:9f:b6:bd:67:4f:06:8a:
                    c1:b5:37:75:1e:bd:ce:fc:b6:f3:e9:e7:42:92:21:
                    a7:9d:e8:be:d8:44:7b:f3:ed:f8:65:c5:0b:d6:c2:
                    b0:94:c6:d6:24:77:8c:9d:b7:19:fb:0a:3f:a5:95:
                    4f:12:fc:f8:f3:43:61:0f:83:60:24:4e:59:62:d0:
                    56:bf:b8:3c:27:bf:fc:56:61:d2:68:2f:f3:b4:2d:
                    8d:1b:d0:14:8b:07:db:98:b2:d0:09:f8:ef:3d:fd:
                    b5:e5:a1:1a:7c:d7:18:0b:cf:94:53:32:09:3c:5b:
                    f6:62:68:b6:bd:1c:9f:dd:b1:e3:04:e5:39:34:cc:
                    9f:6f:b6:cc:1f:ac:aa:fb:ca:79:2b:2d:10:fb:4a:
                    16:67:6c:29:2a:c3:d5:50:86:39:af:94:b0:a3:16:
                    08:1e:12:68:7a:5b:d7:46:fd:0f:00:f3:1b:99:e5:
                    1a:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:6F:DD:8F:45:7E:74:42:92:39:D5:6C:E7:26:E9:16:4A:F7:04:C9
            X509v3 Authority Key Identifier:
                keyid:B5:A1:35:10:DB:DC:20:D8:78:56:0D:32:88:7F:24:F4:B8:57:C0:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3qiK74NhiX3o3aZ8W8m7SF3ARKmdSdSn1yvD2iM6kqU1/0/B5A13510DBDC20D878560D32887F24F4B857C080.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5A13510DBDC20D878560D32887F24F4B857C080.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3qiK74NhiX3o3aZ8W8m7SF3ARKmdSdSn1yvD2iM6kqU1/0/32342e3135322e33362e302f32342d3234203d3e20323730353634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.152.36.0/24

    Signature Algorithm: sha256WithRSAEncryption
         46:cd:f3:cc:c9:0a:ab:1b:44:09:cc:6c:6e:4f:9d:93:75:4e:
         f5:04:5d:0d:ce:09:b8:af:ed:f2:92:c3:23:34:64:4b:f4:58:
         95:41:e6:e1:e0:9c:df:df:35:87:92:85:15:6a:1b:f1:17:e4:
         0a:40:3e:b0:2f:17:aa:ff:15:4e:87:54:28:b5:0d:42:db:84:
         df:16:59:73:4a:77:98:c7:3f:1d:90:bc:a2:8e:83:ab:52:1c:
         47:89:29:a0:af:8d:29:47:fc:d0:09:4d:27:bd:2d:a9:78:e8:
         bd:9a:1f:9e:48:af:c3:c5:2a:22:c3:8b:c9:8f:9a:a7:64:11:
         5b:92:a6:a7:96:c6:20:b1:da:ff:0b:58:af:05:aa:91:88:ec:
         a2:f2:57:f9:36:3a:25:2e:17:42:58:68:b3:64:84:d9:b6:74:
         ea:8e:ec:f3:6f:99:b0:7f:e1:ec:b5:f5:75:e2:f8:e0:36:ea:
         c0:f3:72:aa:ca:d2:9d:16:c3:10:33:16:e4:91:d4:2d:5c:32:
         57:26:6d:41:26:af:93:f0:72:20:50:ba:cb:7b:98:8f:f0:7d:
         f5:1c:70:85:af:21:9d:62:10:30:cd:a9:3d:c9:76:38:e5:ab:
         07:c4:9c:81:1b:2e:9d:d1:a8:3b:26:5b:76:f4:e0:5e:6f:64:
         18:17:53:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 15:42:34 2025 by rpki-client