Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/43Qtp5qb8frNXE4oG5XfcQsJRSNrYbUBaUT7RdksT8wa/0/3137302e38322e3139322e302f32342d3234203d3e20323636343436.roa
File:                     3137302e38322e3139322e302f32342d3234203d3e20323636343436.roa (raw, json)
Hash identifier:          EOlboj3wT6mMDAXmwbGfzwxGWbjkRQ7C2jjpeWmWvl0=
Subject key identifier:   C8:14:33:F2:F4:62:28:95:AD:77:9F:D8:0A:C9:82:BD:08:CE:30:8D
Certificate issuer:       /CN=FAAF4A0114705E793040DF20B3E879E5974C7C8D
Certificate serial:       2751EAD1B7261E5294120CBF2E0F43E05D7E4FD6
Authority key identifier: FA:AF:4A:01:14:70:5E:79:30:40:DF:20:B3:E8:79:E5:97:4C:7C:8D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FAAF4A0114705E793040DF20B3E879E5974C7C8D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/43Qtp5qb8frNXE4oG5XfcQsJRSNrYbUBaUT7RdksT8wa/0/3137302e38322e3139322e302f32342d3234203d3e20323636343436.roa
Signing time:             Fri 27 Dec 2024 13:20:31 +0000
ROA not before:           Fri 27 Dec 2024 13:15:31 +0000
ROA not after:            Fri 26 Dec 2025 13:20:31 +0000
asID:                     266446
IP address blocks:        170.82.192.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:51:ea:d1:b7:26:1e:52:94:12:0c:bf:2e:0f:43:e0:5d:7e:4f:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FAAF4A0114705E793040DF20B3E879E5974C7C8D
        Validity
            Not Before: Dec 27 13:15:31 2024 GMT
            Not After : Dec 26 13:20:31 2025 GMT
        Subject: CN=C81433F2F4622895AD779FD80AC982BD08CE308D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:e9:5b:52:dd:89:1c:ae:44:6b:c5:89:22:c2:
                    42:81:91:be:b2:28:3f:67:d4:05:4a:d9:ea:b1:31:
                    1c:77:57:64:31:24:69:a0:27:8e:d1:c3:b2:fb:c9:
                    c7:fd:d4:d3:3d:ce:8d:5c:c7:8f:2b:25:23:ef:c6:
                    6c:2b:6c:1f:e7:cc:dc:2c:97:b2:ae:19:3d:eb:0e:
                    3e:2a:73:0c:23:fe:2a:eb:36:77:14:a5:d9:18:5a:
                    82:7b:93:42:be:71:3e:29:ae:bd:1a:46:4e:b7:d2:
                    5f:47:07:d3:74:c8:f8:bd:2b:83:70:a5:45:50:e2:
                    7a:86:d5:b6:b8:a6:91:78:99:1e:20:57:51:db:cf:
                    6f:41:85:e9:15:69:36:57:43:ac:23:0d:cc:de:f4:
                    3e:02:c2:04:42:b6:6d:0a:82:84:e4:08:19:8b:ef:
                    43:5c:36:cf:30:f1:3e:14:ea:00:1c:e9:e8:4c:88:
                    fe:5a:49:cd:d2:8d:2d:41:be:02:88:15:3c:ae:f5:
                    80:d5:f8:7d:0f:49:8b:75:81:3d:a0:2d:8b:e1:a1:
                    0d:bb:d1:f5:eb:92:70:c0:7c:c5:81:14:fc:2b:9e:
                    03:63:68:ac:40:dc:ba:eb:31:dd:74:32:06:f0:fc:
                    fe:11:bf:40:5b:e0:40:8f:a1:bf:e4:54:55:8b:c6:
                    24:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:14:33:F2:F4:62:28:95:AD:77:9F:D8:0A:C9:82:BD:08:CE:30:8D
            X509v3 Authority Key Identifier:
                keyid:FA:AF:4A:01:14:70:5E:79:30:40:DF:20:B3:E8:79:E5:97:4C:7C:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/43Qtp5qb8frNXE4oG5XfcQsJRSNrYbUBaUT7RdksT8wa/0/FAAF4A0114705E793040DF20B3E879E5974C7C8D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FAAF4A0114705E793040DF20B3E879E5974C7C8D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/43Qtp5qb8frNXE4oG5XfcQsJRSNrYbUBaUT7RdksT8wa/0/3137302e38322e3139322e302f32342d3234203d3e20323636343436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.82.192.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2f:ff:94:41:e4:a1:33:1c:70:ec:1c:66:01:4b:35:d4:e4:b6:
         85:ad:8d:fe:e9:be:d3:c6:bf:7c:ce:ac:27:e9:4b:ef:09:c1:
         72:8c:d4:36:b4:47:88:13:e2:a2:af:df:82:e6:ba:13:4d:83:
         44:cc:b0:51:69:47:0d:ad:30:e6:96:ed:cb:85:ac:50:33:f6:
         be:a5:3c:46:dc:03:c8:86:5d:b5:a6:1a:cf:e7:d1:cf:80:07:
         a4:9a:8c:cc:76:d5:df:f7:f1:8c:d4:53:a6:a6:93:9b:ed:23:
         9e:f9:e3:c1:54:82:0a:55:f4:f5:96:eb:ab:2c:ce:b0:02:3b:
         73:d4:99:fb:e0:05:7d:7a:5f:5c:b9:0a:3c:49:6d:b9:18:0c:
         ab:fd:81:c0:ae:79:a2:51:eb:87:9f:7c:94:b5:10:c5:ff:b4:
         2f:b5:b2:f3:ca:3c:9c:92:9b:57:f5:81:71:03:5a:d1:ed:9e:
         64:87:0e:89:4f:71:30:9e:fa:f4:c5:8b:22:f8:5e:37:2b:1f:
         70:2c:bd:03:74:04:a5:af:06:49:e8:74:dc:eb:c1:49:60:82:
         0b:de:10:4d:f0:62:54:26:c9:3c:f6:ec:54:3d:0a:77:a4:72:
         24:ac:b0:8b:6b:bc:5d:87:91:16:7a:27:9f:07:31:60:12:df:
         97:55:7a:22
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUJ1Hq0bcmHlKUEgy/Lg9D4F1+T9YwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkFBRjRBMDExNDcwNUU3OTMwNDBERjIwQjNFODc5RTU5
NzRDN0M4RDAeFw0yNDEyMjcxMzE1MzFaFw0yNTEyMjYxMzIwMzFaMDMxMTAvBgNV
BAMTKEM4MTQzM0YyRjQ2MjI4OTVBRDc3OUZEODBBQzk4MkJEMDhDRTMwOEQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDN6VtS3YkcrkRrxYkiwkKBkb6y
KD9n1AVK2eqxMRx3V2QxJGmgJ47Rw7L7ycf91NM9zo1cx48rJSPvxmwrbB/nzNws
l7KuGT3rDj4qcwwj/irrNncUpdkYWoJ7k0K+cT4prr0aRk630l9HB9N0yPi9K4Nw
pUVQ4nqG1ba4ppF4mR4gV1Hbz29BhekVaTZXQ6wjDcze9D4CwgRCtm0KgoTkCBmL
70NcNs8w8T4U6gAc6ehMiP5aSc3SjS1BvgKIFTyu9YDV+H0PSYt1gT2gLYvhoQ27
0fXrknDAfMWBFPwrngNjaKxA3LrrMd10Mgbw/P4Rv0Bb4ECPob/kVFWLxiS7AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUyBQz8vRiKJWtd5/YCsmCvQjOMI0wHwYDVR0j
BBgwFoAU+q9KARRwXnkwQN8gs+h55ZdMfI0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNDNRdHA1cWI4ZnJOWEU0b0c1WGZjUXNKUlNOclliVUJhVVQ3UmRrc1Q4
d2EvMC9GQUFGNEEwMTE0NzA1RTc5MzA0MERGMjBCM0U4NzlFNTk3NEM3QzhELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0ZBQUY0QTAxMTQ3MDVFNzkz
MDQwREYyMEIzRTg3OUU1OTc0QzdDOEQuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzQzUXRwNXFiOGZyTlhFNG9HNVhmY1FzSlJTTnJZYlVCYVVUN1Jka3NUOHdhLzAv
MzEzNzMwMmUzODMyMmUzMTM5MzIyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzYzNDM0MzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBACqUsAwDQYJKoZIhvcNAQELBQADggEBAC//lEHk
oTMccOwcZgFLNdTktoWtjf7pvtPGv3zOrCfpS+8JwXKM1Da0R4gT4qKv34LmuhNN
g0TMsFFpRw2tMOaW7cuFrFAz9r6lPEbcA8iGXbWmGs/n0c+AB6SajMx21d/38YzU
U6amk5vtI57548FUggpV9PWW66sszrACO3PUmfvgBX16X1y5CjxJbbkYDKv9gcCu
eaJR64effJS1EMX/tC+1svPKPJySm1f1gXEDWtHtnmSHDolPcTCe+vTFiyL4Xjcr
H3AsvQN0BKWvBknodNzrwUlgggveEE3wYlQmyTz27FQ9CnekciSssItrvF2HkRZ6
J58HMWAS35dVeiI=
-----END CERTIFICATE-----
Generated at Sat Apr 12 08:23:00 2025 by rpki-client