Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/41zokyXVfAchhiMGucCz98MXiq6N991QjYbV8oGzaiZE/0/3137302e3233392e3130382e302f32342d3234203d3e20323636333438.roa
File:                     3137302e3233392e3130382e302f32342d3234203d3e20323636333438.roa (raw, json)
Hash identifier:          qQK46FIv11NqpRJLvU0niPS/mpJLlZTMZf6bLlhZ87o=
Subject key identifier:   51:2D:0C:35:15:2C:9C:08:AD:A0:E8:84:77:FC:CC:91:67:76:DA:10
Certificate issuer:       /CN=E901C17AB05ABCDB90C5B4B5D981CAC8620C3B3B
Certificate serial:       395AC3FC628620EEFDBC31EBDA0F54A7570970C4
Authority key identifier: E9:01:C1:7A:B0:5A:BC:DB:90:C5:B4:B5:D9:81:CA:C8:62:0C:3B:3B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E901C17AB05ABCDB90C5B4B5D981CAC8620C3B3B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/41zokyXVfAchhiMGucCz98MXiq6N991QjYbV8oGzaiZE/0/3137302e3233392e3130382e302f32342d3234203d3e20323636333438.roa
Signing time:             Fri 19 Jan 2024 15:20:46 +0000
ROA not before:           Fri 19 Jan 2024 15:15:46 +0000
ROA not after:            Fri 17 Jan 2025 15:20:46 +0000
asID:                     266348
IP address blocks:        170.239.108.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:5a:c3:fc:62:86:20:ee:fd:bc:31:eb:da:0f:54:a7:57:09:70:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E901C17AB05ABCDB90C5B4B5D981CAC8620C3B3B
        Validity
            Not Before: Jan 19 15:15:46 2024 GMT
            Not After : Jan 17 15:20:46 2025 GMT
        Subject: CN=512D0C35152C9C08ADA0E88477FCCC916776DA10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:eb:c6:e5:88:12:99:14:47:a4:9c:05:ca:c7:
                    50:c1:77:b7:fa:46:3f:47:26:43:08:2c:3b:9f:40:
                    1e:d2:6b:b3:f6:37:b8:2f:37:ce:04:11:7a:1c:4d:
                    8c:56:b0:fb:c7:f7:01:74:e0:16:1c:b6:61:d9:a2:
                    19:a7:2c:d9:1c:89:57:b2:a1:98:d3:c2:3e:66:a8:
                    87:8d:58:90:52:db:58:7b:f7:00:fd:c9:0d:38:a3:
                    d4:74:ab:2e:6a:ab:11:bb:37:46:17:d6:fb:bf:96:
                    b7:e0:c6:03:dd:62:3d:25:35:59:8d:11:f5:36:e0:
                    48:28:90:1d:09:d9:d1:f6:f7:90:6c:f0:8f:6f:8e:
                    c4:38:39:a8:92:67:11:f0:62:2d:4d:62:b6:49:dc:
                    48:7b:c7:93:dd:6c:d0:99:6c:5a:11:19:77:af:a5:
                    d2:97:42:0c:e1:36:29:88:3d:c3:ec:20:54:68:cc:
                    8f:13:1a:13:54:3d:d9:4c:90:74:e0:3d:14:db:10:
                    83:21:e6:bb:6a:13:63:7a:7f:25:b2:3d:c8:ee:5a:
                    f3:49:1b:24:b5:d0:0e:f2:de:f2:d6:fe:7d:1a:d8:
                    94:78:49:59:15:c3:a3:09:7e:5b:af:22:a0:cf:ba:
                    3e:4c:9e:e1:9e:4e:b6:2a:db:7d:05:ce:e6:56:25:
                    89:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:2D:0C:35:15:2C:9C:08:AD:A0:E8:84:77:FC:CC:91:67:76:DA:10
            X509v3 Authority Key Identifier:
                keyid:E9:01:C1:7A:B0:5A:BC:DB:90:C5:B4:B5:D9:81:CA:C8:62:0C:3B:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/41zokyXVfAchhiMGucCz98MXiq6N991QjYbV8oGzaiZE/0/E901C17AB05ABCDB90C5B4B5D981CAC8620C3B3B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E901C17AB05ABCDB90C5B4B5D981CAC8620C3B3B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/41zokyXVfAchhiMGucCz98MXiq6N991QjYbV8oGzaiZE/0/3137302e3233392e3130382e302f32342d3234203d3e20323636333438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.239.108.0/24

    Signature Algorithm: sha256WithRSAEncryption
         09:5e:fd:e3:9c:3b:7c:84:e1:f8:48:bf:ee:74:2b:2c:53:fc:
         08:f9:e4:b7:b0:d0:a1:d5:48:4a:16:4a:69:67:09:2d:93:09:
         89:e0:f0:9a:55:f1:1d:ed:b8:34:7e:f1:77:ff:b0:7f:c9:ab:
         23:c7:11:48:bb:07:32:65:ef:7a:e1:35:6d:03:ab:b5:87:85:
         f1:47:54:8b:35:79:ee:3e:6d:bc:08:16:4a:61:7d:b4:da:1f:
         10:20:0e:39:b0:19:9e:15:70:ba:6c:0c:08:69:bc:d8:e9:eb:
         b5:9e:c4:6f:73:a0:d8:d2:13:dd:00:b2:43:f7:70:54:3b:9c:
         f5:52:c1:d1:b5:88:bd:57:19:5e:cc:d1:16:83:a8:80:ee:88:
         c8:53:89:fa:8b:1c:84:71:a7:ae:32:d8:ee:8c:15:35:35:e3:
         4c:f8:34:c7:42:1b:58:52:ce:88:16:c0:bd:06:e0:fc:29:95:
         53:bf:e3:25:ba:4a:b8:f8:7c:46:15:69:a0:6e:4b:e9:52:60:
         b4:6a:27:94:35:d0:21:6a:fa:40:d3:d8:ee:df:22:0c:72:b6:
         33:3e:9d:0b:47:e5:84:ff:ea:1f:f5:13:5b:16:9c:7b:ef:e8:
         72:8a:d9:04:c0:6c:8d:24:ca:d9:b8:90:ad:6d:36:0a:0e:7c:
         6e:c5:65:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:12:11 2025 by rpki-client