Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3qiK74NhiX3o3aZ8W8m7SF3ARKmdSdSn1yvD2iM6kqU1/0/32342e3135322e33372e302f32342d3234203d3e20323730353634.roa
File:                     32342e3135322e33372e302f32342d3234203d3e20323730353634.roa (raw, json)
Hash identifier:          7MYeDdsBvO3NPRamBrSqnUGLeWghlCBce2t+LKa+NNQ=
Subject key identifier:   C9:C7:F6:18:7A:33:7F:56:AA:86:06:AB:50:9F:1C:D2:72:13:52:4F
Certificate issuer:       /CN=B5A13510DBDC20D878560D32887F24F4B857C080
Certificate serial:       1D355E30F298CE9DB0C1D864AF1974A540625905
Authority key identifier: B5:A1:35:10:DB:DC:20:D8:78:56:0D:32:88:7F:24:F4:B8:57:C0:80
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5A13510DBDC20D878560D32887F24F4B857C080.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3qiK74NhiX3o3aZ8W8m7SF3ARKmdSdSn1yvD2iM6kqU1/0/32342e3135322e33372e302f32342d3234203d3e20323730353634.roa
Signing time:             Thu 12 Dec 2024 15:27:41 +0000
ROA not before:           Thu 12 Dec 2024 15:22:41 +0000
ROA not after:            Thu 11 Dec 2025 15:27:41 +0000
asID:                     270564
IP address blocks:        24.152.37.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:35:5e:30:f2:98:ce:9d:b0:c1:d8:64:af:19:74:a5:40:62:59:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B5A13510DBDC20D878560D32887F24F4B857C080
        Validity
            Not Before: Dec 12 15:22:41 2024 GMT
            Not After : Dec 11 15:27:41 2025 GMT
        Subject: CN=C9C7F6187A337F56AA8606AB509F1CD27213524F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:77:0a:4b:60:0f:8a:b1:0c:8d:44:86:f1:78:
                    c4:fd:3e:6e:29:17:59:73:7f:4a:a0:82:27:66:8d:
                    17:c3:ea:6e:cf:5e:21:ed:29:19:a1:04:00:2e:c9:
                    a7:3c:42:00:3d:cd:e7:fd:64:e0:e4:73:67:1d:8b:
                    9a:8b:4b:1d:4b:f5:3d:15:dd:d8:b8:8a:2d:b9:f0:
                    8b:f9:56:eb:6b:53:5d:3d:00:5d:fe:e0:28:ed:08:
                    71:33:18:cc:c8:f3:a2:ac:e0:ff:17:15:32:5a:aa:
                    9a:b0:18:86:09:5f:e3:fc:49:7b:98:69:f8:20:91:
                    b9:bf:6d:94:26:45:dd:44:f2:7a:54:79:f7:b5:af:
                    4c:18:70:c0:92:ef:05:e3:c8:08:85:4e:02:4b:e9:
                    b0:3d:41:71:67:3d:00:b2:70:75:1e:fa:21:9a:c4:
                    e6:9f:6b:a6:8f:18:be:82:b7:21:7a:cd:f7:12:e2:
                    84:2e:06:cc:de:87:ff:6e:26:62:7c:eb:5e:78:7b:
                    51:c6:bc:82:69:a1:84:ae:cb:1a:8e:b3:ed:ce:b7:
                    cb:a6:39:76:87:b1:68:44:e6:af:ab:40:89:be:60:
                    00:4f:a0:7a:2b:ca:0a:af:64:45:05:32:b0:b3:dd:
                    92:97:2d:a2:41:7f:22:31:98:92:10:a2:b3:fc:56:
                    eb:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:C7:F6:18:7A:33:7F:56:AA:86:06:AB:50:9F:1C:D2:72:13:52:4F
            X509v3 Authority Key Identifier:
                keyid:B5:A1:35:10:DB:DC:20:D8:78:56:0D:32:88:7F:24:F4:B8:57:C0:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3qiK74NhiX3o3aZ8W8m7SF3ARKmdSdSn1yvD2iM6kqU1/0/B5A13510DBDC20D878560D32887F24F4B857C080.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5A13510DBDC20D878560D32887F24F4B857C080.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3qiK74NhiX3o3aZ8W8m7SF3ARKmdSdSn1yvD2iM6kqU1/0/32342e3135322e33372e302f32342d3234203d3e20323730353634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.152.37.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bd:cc:3e:8f:73:31:6a:60:9b:94:0f:e1:76:4c:82:a1:cb:e3:
         21:56:aa:4e:30:30:01:67:7b:3c:11:44:e6:ef:6b:49:27:63:
         1b:16:0c:2f:f2:f2:2c:91:8c:64:83:e6:9c:3b:3a:59:18:4f:
         f1:a2:3d:8e:6a:0a:33:34:07:64:8b:10:42:48:b3:a5:6f:5f:
         c0:fc:e1:71:8b:b0:f7:5b:a4:77:5e:a5:14:d6:17:b8:86:11:
         9f:cd:a5:da:91:a8:22:ca:cd:95:d4:b6:48:00:57:60:7c:7b:
         dd:9d:e2:5f:69:35:2f:e0:27:ec:01:e6:48:71:1c:41:72:a8:
         f7:40:40:0e:e3:17:28:b8:b2:d3:77:65:34:19:30:5f:79:fb:
         7a:32:2d:11:59:5b:ec:47:5c:26:a5:7f:68:fa:68:4b:47:dd:
         5c:68:d5:37:71:ed:8c:10:f0:49:71:71:0c:d9:24:05:34:d0:
         d6:26:eb:c7:0e:6c:71:19:de:ce:2f:75:f9:8f:82:4e:59:26:
         9c:29:dc:5c:f3:02:72:aa:60:66:df:df:6b:10:93:66:df:32:
         2b:b9:23:8d:4e:18:4c:5a:49:66:cd:e3:4a:b3:12:02:57:72:
         d4:45:66:32:bc:a0:3b:30:06:7b:58:77:cf:af:27:5e:02:b9:
         97:1c:6e:d5
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUHTVeMPKYzp2wwdhkrxl0pUBiWQUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjVBMTM1MTBEQkRDMjBEODc4NTYwRDMyODg3RjI0RjRC
ODU3QzA4MDAeFw0yNDEyMTIxNTIyNDFaFw0yNTEyMTExNTI3NDFaMDMxMTAvBgNV
BAMTKEM5QzdGNjE4N0EzMzdGNTZBQTg2MDZBQjUwOUYxQ0QyNzIxMzUyNEYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgdwpLYA+KsQyNRIbxeMT9Pm4p
F1lzf0qggidmjRfD6m7PXiHtKRmhBAAuyac8QgA9zef9ZODkc2cdi5qLSx1L9T0V
3di4ii258Iv5VutrU109AF3+4CjtCHEzGMzI86Ks4P8XFTJaqpqwGIYJX+P8SXuY
afggkbm/bZQmRd1E8npUefe1r0wYcMCS7wXjyAiFTgJL6bA9QXFnPQCycHUe+iGa
xOafa6aPGL6CtyF6zfcS4oQuBszeh/9uJmJ86154e1HGvIJpoYSuyxqOs+3Ot8um
OXaHsWhE5q+rQIm+YABPoHorygqvZEUFMrCz3ZKXLaJBfyIxmJIQorP8VuvDAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUycf2GHozf1aqhgarUJ8c0nITUk8wHwYDVR0j
BBgwFoAUtaE1ENvcINh4Vg0yiH8k9LhXwIAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM3FpSzc0TmhpWDNvM2FaOFc4bTdTRjNBUkttZFNkU24xeXZEMmlNNmtx
VTEvMC9CNUExMzUxMERCREMyMEQ4Nzg1NjBEMzI4ODdGMjRGNEI4NTdDMDgwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0I1QTEzNTEwREJEQzIwRDg3
ODU2MEQzMjg4N0YyNEY0Qjg1N0MwODAuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNxaUs3NE5oaVgzbzNhWjhXOG03U0YzQVJLbWRTZFNuMXl2RDJpTTZrcVUxLzAv
MzIzNDJlMzEzNTMyMmUzMzM3MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNzMw
MzUzNjM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAGJglMA0GCSqGSIb3DQEBCwUAA4IBAQC9zD6PczFq
YJuUD+F2TIKhy+MhVqpOMDABZ3s8EUTm72tJJ2MbFgwv8vIskYxkg+acOzpZGE/x
oj2OagozNAdkixBCSLOlb1/A/OFxi7D3W6R3XqUU1he4hhGfzaXakagiys2V1LZI
AFdgfHvdneJfaTUv4CfsAeZIcRxBcqj3QEAO4xcouLLTd2U0GTBfeft6Mi0RWVvs
R1wmpX9o+mhLR91caNU3ce2MEPBJcXEM2SQFNNDWJuvHDmxxGd7OL3X5j4JOWSac
Kdxc8wJyqmBm399rEJNm3zIruSONThhMWklmzeNKsxICV3LURWYyvKA7MAZ7WHfP
rydeArmXHG7V
-----END CERTIFICATE-----
Generated at Sun Apr 13 19:13:12 2025 by rpki-client