Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3qiK74NhiX3o3aZ8W8m7SF3ARKmdSdSn1yvD2iM6kqU1/0/32342e3135322e33382e302f32342d3234203d3e20323730353634.roa
File:                     32342e3135322e33382e302f32342d3234203d3e20323730353634.roa (raw, json)
Hash identifier:          8Nf7AqPh1OQxptWaLxsqX9SF3PC4J7Mzx/bchMNGj/k=
Subject key identifier:   5F:CE:DA:EC:A3:8D:E9:77:2F:F3:7F:84:F6:46:39:24:54:97:F6:62
Certificate issuer:       /CN=B5A13510DBDC20D878560D32887F24F4B857C080
Certificate serial:       787988FE71BE04F51219E35E8BCCD14407217584
Authority key identifier: B5:A1:35:10:DB:DC:20:D8:78:56:0D:32:88:7F:24:F4:B8:57:C0:80
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5A13510DBDC20D878560D32887F24F4B857C080.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3qiK74NhiX3o3aZ8W8m7SF3ARKmdSdSn1yvD2iM6kqU1/0/32342e3135322e33382e302f32342d3234203d3e20323730353634.roa
Signing time:             Thu 12 Dec 2024 15:27:41 +0000
ROA not before:           Thu 12 Dec 2024 15:22:41 +0000
ROA not after:            Thu 11 Dec 2025 15:27:41 +0000
asID:                     270564
IP address blocks:        24.152.38.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:79:88:fe:71:be:04:f5:12:19:e3:5e:8b:cc:d1:44:07:21:75:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B5A13510DBDC20D878560D32887F24F4B857C080
        Validity
            Not Before: Dec 12 15:22:41 2024 GMT
            Not After : Dec 11 15:27:41 2025 GMT
        Subject: CN=5FCEDAECA38DE9772FF37F84F64639245497F662
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:89:5f:9a:f7:f8:5b:b9:61:0f:c2:a8:bf:5e:
                    41:73:6d:2e:96:a5:d3:51:3c:4d:94:c5:1b:53:e3:
                    f2:87:2f:66:6c:a7:01:9c:c4:10:14:87:24:79:55:
                    e2:e1:72:af:d9:ca:e5:be:58:e7:8e:2b:b9:6e:45:
                    57:bf:7d:f4:a0:f5:5d:c6:7f:11:24:df:42:f8:6d:
                    7e:10:42:ca:d9:f5:c7:fb:8e:f1:03:6a:07:05:0c:
                    ad:82:b3:d8:8d:0a:bc:6f:a2:7c:be:1e:82:8c:f5:
                    19:24:7a:50:51:db:a8:00:c8:a7:f8:e9:d5:bc:ff:
                    26:ba:5d:e8:ec:ce:98:b9:67:51:fa:25:4b:ca:e5:
                    9a:28:34:cb:7e:c7:9d:d7:9d:ac:9e:fd:c7:d9:27:
                    e3:8b:c3:c2:8a:3b:63:8c:5d:9f:01:9a:37:7e:ba:
                    89:83:4f:6e:26:13:d1:a5:0e:aa:a7:0c:36:e3:c7:
                    66:20:ee:2a:6a:35:5a:6b:1b:a5:2c:94:56:8e:51:
                    17:a4:c5:95:08:13:7b:46:18:c3:dc:4a:8c:b1:91:
                    17:51:d4:5e:cd:55:50:b0:ed:a0:8b:d3:fb:8f:d4:
                    e5:d2:b2:c9:60:b5:a0:80:87:2f:f9:7f:c1:db:61:
                    61:62:cb:71:93:35:80:91:8f:67:7e:94:46:fa:9b:
                    b3:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:CE:DA:EC:A3:8D:E9:77:2F:F3:7F:84:F6:46:39:24:54:97:F6:62
            X509v3 Authority Key Identifier:
                keyid:B5:A1:35:10:DB:DC:20:D8:78:56:0D:32:88:7F:24:F4:B8:57:C0:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3qiK74NhiX3o3aZ8W8m7SF3ARKmdSdSn1yvD2iM6kqU1/0/B5A13510DBDC20D878560D32887F24F4B857C080.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5A13510DBDC20D878560D32887F24F4B857C080.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3qiK74NhiX3o3aZ8W8m7SF3ARKmdSdSn1yvD2iM6kqU1/0/32342e3135322e33382e302f32342d3234203d3e20323730353634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.152.38.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7f:89:13:c2:c3:aa:b3:2c:37:9a:96:5c:99:61:e6:96:ee:eb:
         1d:8d:55:aa:ff:c6:d4:10:71:1d:c3:c8:2a:d1:b9:89:cf:8b:
         6c:90:37:6e:16:87:c6:e1:1e:cb:bb:69:f6:16:5a:af:9a:d9:
         f0:a4:59:df:a5:10:62:e4:26:f8:de:e1:b1:d6:8b:7f:ce:06:
         0c:f8:d8:fa:7a:b9:89:b8:79:43:cc:59:75:21:de:c3:92:8c:
         a9:f8:18:7f:1b:80:1a:98:fa:b5:cc:0d:40:39:17:37:c1:f8:
         99:42:88:b3:fc:76:58:95:19:12:f3:25:de:02:c9:23:bd:13:
         39:50:24:ae:4f:a1:f4:98:c4:26:ae:f9:6d:da:06:f1:c9:ab:
         03:9d:51:7f:8f:e3:c5:76:1f:c8:61:61:80:4c:48:76:c2:09:
         f6:ee:34:d4:39:06:50:78:46:0c:08:f4:1f:3c:5d:f8:a7:44:
         84:ec:31:17:30:c8:fb:cf:04:ea:14:0a:a9:2e:0f:ca:cc:42:
         7b:71:12:2e:37:4e:7e:c2:d5:03:37:2e:83:77:61:40:02:97:
         a1:b4:01:85:ef:5d:63:ab:ba:a0:a9:1c:d1:f4:89:a9:6a:28:
         da:41:29:76:e4:6a:6b:c0:c6:43:c2:cb:47:2e:83:57:b4:0b:
         5d:61:d2:39
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUeHmI/nG+BPUSGeNei8zRRAchdYQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjVBMTM1MTBEQkRDMjBEODc4NTYwRDMyODg3RjI0RjRC
ODU3QzA4MDAeFw0yNDEyMTIxNTIyNDFaFw0yNTEyMTExNTI3NDFaMDMxMTAvBgNV
BAMTKDVGQ0VEQUVDQTM4REU5NzcyRkYzN0Y4NEY2NDYzOTI0NTQ5N0Y2NjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoiV+a9/hbuWEPwqi/XkFzbS6W
pdNRPE2UxRtT4/KHL2ZspwGcxBAUhyR5VeLhcq/ZyuW+WOeOK7luRVe/ffSg9V3G
fxEk30L4bX4QQsrZ9cf7jvEDagcFDK2Cs9iNCrxvony+HoKM9RkkelBR26gAyKf4
6dW8/ya6Xejszpi5Z1H6JUvK5ZooNMt+x53Xnaye/cfZJ+OLw8KKO2OMXZ8Bmjd+
uomDT24mE9GlDqqnDDbjx2Yg7ipqNVprG6UslFaOURekxZUIE3tGGMPcSoyxkRdR
1F7NVVCw7aCL0/uP1OXSsslgtaCAhy/5f8HbYWFiy3GTNYCRj2d+lEb6m7PrAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUX87a7KON6Xcv83+E9kY5JFSX9mIwHwYDVR0j
BBgwFoAUtaE1ENvcINh4Vg0yiH8k9LhXwIAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM3FpSzc0TmhpWDNvM2FaOFc4bTdTRjNBUkttZFNkU24xeXZEMmlNNmtx
VTEvMC9CNUExMzUxMERCREMyMEQ4Nzg1NjBEMzI4ODdGMjRGNEI4NTdDMDgwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0I1QTEzNTEwREJEQzIwRDg3
ODU2MEQzMjg4N0YyNEY0Qjg1N0MwODAuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNxaUs3NE5oaVgzbzNhWjhXOG03U0YzQVJLbWRTZFNuMXl2RDJpTTZrcVUxLzAv
MzIzNDJlMzEzNTMyMmUzMzM4MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNzMw
MzUzNjM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAGJgmMA0GCSqGSIb3DQEBCwUAA4IBAQB/iRPCw6qz
LDeallyZYeaW7usdjVWq/8bUEHEdw8gq0bmJz4tskDduFofG4R7Lu2n2Flqvmtnw
pFnfpRBi5Cb43uGx1ot/zgYM+Nj6ermJuHlDzFl1Id7Dkoyp+Bh/G4AamPq1zA1A
ORc3wfiZQoiz/HZYlRkS8yXeAskjvRM5UCSuT6H0mMQmrvlt2gbxyasDnVF/j+PF
dh/IYWGATEh2wgn27jTUOQZQeEYMCPQfPF34p0SE7DEXMMj7zwTqFAqpLg/KzEJ7
cRIuN05+wtUDNy6Dd2FAApehtAGF711jq7qgqRzR9ImpaijaQSl25GprwMZDwstH
LoNXtAtdYdI5
-----END CERTIFICATE-----
Generated at Tue Apr 8 21:46:09 2025 by rpki-client