Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3qiK74NhiX3o3aZ8W8m7SF3ARKmdSdSn1yvD2iM6kqU1/0/32342e3135322e33392e302f32342d3234203d3e20323730353634.roa
File:                     32342e3135322e33392e302f32342d3234203d3e20323730353634.roa (raw, json)
Hash identifier:          90oAo6JaJvAGn7owb1xdC4CqGetfKue2IiilfTnyXpw=
Subject key identifier:   BA:1D:B0:06:3B:0B:90:F8:E3:E9:AA:CD:98:D3:C4:2D:5D:D9:48:C2
Certificate issuer:       /CN=B5A13510DBDC20D878560D32887F24F4B857C080
Certificate serial:       61698CEDA6E95BAFF2E46E3D13CBFDC79BF80747
Authority key identifier: B5:A1:35:10:DB:DC:20:D8:78:56:0D:32:88:7F:24:F4:B8:57:C0:80
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5A13510DBDC20D878560D32887F24F4B857C080.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3qiK74NhiX3o3aZ8W8m7SF3ARKmdSdSn1yvD2iM6kqU1/0/32342e3135322e33392e302f32342d3234203d3e20323730353634.roa
Signing time:             Thu 12 Dec 2024 15:27:41 +0000
ROA not before:           Thu 12 Dec 2024 15:22:41 +0000
ROA not after:            Thu 11 Dec 2025 15:27:41 +0000
asID:                     270564
IP address blocks:        24.152.39.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:69:8c:ed:a6:e9:5b:af:f2:e4:6e:3d:13:cb:fd:c7:9b:f8:07:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B5A13510DBDC20D878560D32887F24F4B857C080
        Validity
            Not Before: Dec 12 15:22:41 2024 GMT
            Not After : Dec 11 15:27:41 2025 GMT
        Subject: CN=BA1DB0063B0B90F8E3E9AACD98D3C42D5DD948C2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:14:81:e3:0e:53:62:fd:6a:c2:da:1a:66:ba:
                    ce:9b:df:62:9d:45:73:a6:e6:74:eb:fd:15:8f:24:
                    1f:5f:6a:d0:cc:9e:c4:af:00:83:a2:b4:48:b8:d2:
                    f8:c5:37:9d:76:c8:e4:f6:31:44:22:aa:7e:90:55:
                    20:56:55:28:35:38:89:54:31:f7:7b:e3:11:31:d1:
                    da:63:15:d3:c9:2c:96:bc:a2:d8:dc:37:21:db:c0:
                    3d:82:8b:50:95:ad:e4:2c:db:d5:50:07:35:79:a4:
                    2e:5e:69:c8:43:69:f8:8b:cc:0c:78:d4:54:4b:98:
                    94:5e:b0:0a:85:cb:16:77:33:c2:3f:c4:89:b2:76:
                    dd:6a:0e:de:73:12:1a:6d:76:89:39:04:8f:03:91:
                    ef:76:ec:f3:9a:f2:83:cb:b1:48:2c:5f:13:20:a3:
                    62:6c:4b:3a:cc:0c:49:82:54:c8:2b:80:6b:8a:d7:
                    0d:42:9e:e7:a8:18:da:85:59:d5:e6:2e:f7:1a:3e:
                    41:fd:7f:24:dd:3c:b1:12:13:f7:4c:c6:f2:af:28:
                    04:83:8d:de:1f:75:d3:3f:e8:8e:44:6f:3f:77:7e:
                    ea:87:7f:3a:79:8f:fe:39:d5:55:db:fd:cb:ea:17:
                    75:b3:af:29:33:35:22:21:61:a1:4a:96:81:f7:68:
                    f2:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:1D:B0:06:3B:0B:90:F8:E3:E9:AA:CD:98:D3:C4:2D:5D:D9:48:C2
            X509v3 Authority Key Identifier:
                keyid:B5:A1:35:10:DB:DC:20:D8:78:56:0D:32:88:7F:24:F4:B8:57:C0:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3qiK74NhiX3o3aZ8W8m7SF3ARKmdSdSn1yvD2iM6kqU1/0/B5A13510DBDC20D878560D32887F24F4B857C080.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5A13510DBDC20D878560D32887F24F4B857C080.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3qiK74NhiX3o3aZ8W8m7SF3ARKmdSdSn1yvD2iM6kqU1/0/32342e3135322e33392e302f32342d3234203d3e20323730353634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.152.39.0/24

    Signature Algorithm: sha256WithRSAEncryption
         24:22:6e:38:5f:b5:24:ed:37:d7:bd:42:db:f8:56:ab:25:9c:
         fa:20:07:ec:a4:f9:73:29:18:ab:e0:f3:22:bf:75:d1:76:d9:
         5e:58:85:76:98:29:5b:e0:56:5a:bb:b8:52:49:42:c2:1a:1f:
         e9:c1:cf:1b:ad:c4:ac:4b:31:ec:90:8f:e2:3b:7e:d2:e3:d1:
         36:59:56:5f:db:bd:24:1e:80:ce:ad:9a:48:98:ac:d6:be:93:
         90:d2:c5:de:94:2d:da:bb:95:7e:5f:1a:ef:32:39:2b:32:72:
         91:db:6b:90:ff:1d:bb:83:00:d4:0a:2b:52:42:5e:3a:2d:e7:
         34:0c:54:be:42:dd:cc:d2:90:2a:6c:8c:41:44:fe:8d:e2:e9:
         d3:14:5d:41:8b:77:f5:c6:fb:49:e0:9e:8f:2c:48:b7:9a:ef:
         ab:da:53:9c:2d:e2:36:66:c7:45:b2:4e:dd:a8:db:cd:c6:d7:
         b3:15:d7:6b:0f:4b:17:67:15:79:83:1f:10:a7:04:35:13:3f:
         5c:f5:8a:94:52:74:3e:34:df:3c:83:e1:1e:09:d9:72:19:53:
         d7:f1:03:42:64:3c:dd:be:da:d5:03:dd:9d:99:e4:8a:c7:0d:
         d3:23:29:03:55:e0:f2:ae:e4:6f:0a:a5:0e:7f:55:ee:14:9d:
         4d:81:6b:4e
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUYWmM7abpW6/y5G49E8v9x5v4B0cwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjVBMTM1MTBEQkRDMjBEODc4NTYwRDMyODg3RjI0RjRC
ODU3QzA4MDAeFw0yNDEyMTIxNTIyNDFaFw0yNTEyMTExNTI3NDFaMDMxMTAvBgNV
BAMTKEJBMURCMDA2M0IwQjkwRjhFM0U5QUFDRDk4RDNDNDJENUREOTQ4QzIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCTFIHjDlNi/WrC2hpmus6b32Kd
RXOm5nTr/RWPJB9fatDMnsSvAIOitEi40vjFN512yOT2MUQiqn6QVSBWVSg1OIlU
Mfd74xEx0dpjFdPJLJa8otjcNyHbwD2Ci1CVreQs29VQBzV5pC5eachDafiLzAx4
1FRLmJResAqFyxZ3M8I/xImydt1qDt5zEhptdok5BI8Dke927POa8oPLsUgsXxMg
o2JsSzrMDEmCVMgrgGuK1w1CnueoGNqFWdXmLvcaPkH9fyTdPLESE/dMxvKvKASD
jd4fddM/6I5Ebz93fuqHfzp5j/451VXb/cvqF3WzrykzNSIhYaFKloH3aPL9AgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUuh2wBjsLkPjj6arNmNPELV3ZSMIwHwYDVR0j
BBgwFoAUtaE1ENvcINh4Vg0yiH8k9LhXwIAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM3FpSzc0TmhpWDNvM2FaOFc4bTdTRjNBUkttZFNkU24xeXZEMmlNNmtx
VTEvMC9CNUExMzUxMERCREMyMEQ4Nzg1NjBEMzI4ODdGMjRGNEI4NTdDMDgwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0I1QTEzNTEwREJEQzIwRDg3
ODU2MEQzMjg4N0YyNEY0Qjg1N0MwODAuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNxaUs3NE5oaVgzbzNhWjhXOG03U0YzQVJLbWRTZFNuMXl2RDJpTTZrcVUxLzAv
MzIzNDJlMzEzNTMyMmUzMzM5MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNzMw
MzUzNjM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAGJgnMA0GCSqGSIb3DQEBCwUAA4IBAQAkIm44X7Uk
7TfXvULb+FarJZz6IAfspPlzKRir4PMiv3XRdtleWIV2mClb4FZau7hSSULCGh/p
wc8brcSsSzHskI/iO37S49E2WVZf270kHoDOrZpImKzWvpOQ0sXelC3au5V+Xxrv
MjkrMnKR22uQ/x27gwDUCitSQl46Lec0DFS+Qt3M0pAqbIxBRP6N4unTFF1Bi3f1
xvtJ4J6PLEi3mu+r2lOcLeI2ZsdFsk7dqNvNxtezFddrD0sXZxV5gx8QpwQ1Ez9c
9YqUUnQ+NN88g+EeCdlyGVPX8QNCZDzdvtrVA92dmeSKxw3TIykDVeDyruRvCqUO
f1XuFJ1NgWtO
-----END CERTIFICATE-----
Generated at Tue Apr 8 15:42:32 2025 by rpki-client