Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5Da5tCrfmGs4wxSqvZNThYbBt2afM6qxP6cmbeyyY5qP/0/3137302e3234352e3133352e302f32342d3234203d3e203532373536.roa
File:                     3137302e3234352e3133352e302f32342d3234203d3e203532373536.roa (raw, json)
Hash identifier:          kvDNVG6Sm3WVNouh7IUDSzZvmLzbL0mo2INl+QN0a7I=
Subject key identifier:   DC:82:A7:FC:4A:08:D5:83:CF:3E:2D:66:99:41:48:83:8F:2C:29:BC
Certificate issuer:       /CN=B9CD500DA2BC8C2710486802D7F1C006136FD6B4
Certificate serial:       487B6D2F8DA592EE9C30B430822AB0E44FDD6269
Authority key identifier: B9:CD:50:0D:A2:BC:8C:27:10:48:68:02:D7:F1:C0:06:13:6F:D6:B4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B9CD500DA2BC8C2710486802D7F1C006136FD6B4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5Da5tCrfmGs4wxSqvZNThYbBt2afM6qxP6cmbeyyY5qP/0/3137302e3234352e3133352e302f32342d3234203d3e203532373536.roa
Signing time:             Thu 05 Oct 2023 20:46:56 +0000
ROA not before:           Thu 05 Oct 2023 20:41:56 +0000
ROA not after:            Thu 03 Oct 2024 20:46:56 +0000
asID:                     52756
IP address blocks:        170.245.135.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:7b:6d:2f:8d:a5:92:ee:9c:30:b4:30:82:2a:b0:e4:4f:dd:62:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B9CD500DA2BC8C2710486802D7F1C006136FD6B4
        Validity
            Not Before: Oct  5 20:41:56 2023 GMT
            Not After : Oct  3 20:46:56 2024 GMT
        Subject: CN=DC82A7FC4A08D583CF3E2D66994148838F2C29BC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:81:e0:c6:ad:7f:c5:cf:6b:51:67:47:7b:38:
                    c8:0d:36:df:37:d6:f2:16:15:d5:de:0f:15:33:b8:
                    99:be:92:c9:68:e6:fa:93:8b:d1:ef:fc:b7:36:54:
                    f8:4f:50:5c:9e:71:5f:ee:8e:97:c5:36:58:90:28:
                    ec:5b:0f:8e:6b:0c:34:29:8f:18:4d:4f:ce:35:19:
                    36:f8:f0:3d:db:3c:83:b5:de:9a:ad:05:aa:6a:b0:
                    9b:93:b0:3e:9d:a9:ed:55:c0:f0:5b:08:45:57:cf:
                    dd:94:06:7b:0e:af:a1:5c:1d:28:c2:d4:ee:12:56:
                    75:7b:1a:60:cd:b1:a5:57:c3:db:f6:13:4b:e1:d4:
                    ad:6b:48:8e:56:58:64:43:44:71:ff:11:a1:d7:19:
                    eb:bf:02:d0:31:73:de:41:31:dc:02:79:2d:e7:36:
                    4b:19:02:84:22:f8:9b:df:4f:4b:0d:c6:dd:80:c5:
                    a4:6a:b0:78:e2:94:27:9d:2e:c5:d6:87:e4:32:9f:
                    56:62:e7:c1:07:3b:79:78:09:d6:b9:16:a8:9f:8b:
                    c2:8e:ad:ba:45:96:a9:e4:60:9c:31:48:ea:73:b5:
                    eb:cb:8d:89:ac:98:0e:88:03:28:77:13:86:84:0e:
                    d7:81:22:6f:e4:ad:28:3f:a2:25:66:d5:93:69:08:
                    da:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:82:A7:FC:4A:08:D5:83:CF:3E:2D:66:99:41:48:83:8F:2C:29:BC
            X509v3 Authority Key Identifier:
                keyid:B9:CD:50:0D:A2:BC:8C:27:10:48:68:02:D7:F1:C0:06:13:6F:D6:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5Da5tCrfmGs4wxSqvZNThYbBt2afM6qxP6cmbeyyY5qP/0/B9CD500DA2BC8C2710486802D7F1C006136FD6B4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B9CD500DA2BC8C2710486802D7F1C006136FD6B4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5Da5tCrfmGs4wxSqvZNThYbBt2afM6qxP6cmbeyyY5qP/0/3137302e3234352e3133352e302f32342d3234203d3e203532373536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.245.135.0/24

    Signature Algorithm: sha256WithRSAEncryption
         02:57:b7:be:38:6d:73:2e:a1:1d:93:cd:aa:1b:82:15:f7:7f:
         db:60:f1:43:5c:b6:e5:e3:35:4b:de:73:cb:c2:a4:29:b2:71:
         cf:13:cf:33:19:21:07:3b:35:5a:8f:6d:70:d2:77:70:a7:67:
         a6:79:c3:bd:30:32:90:da:64:7a:b6:3d:43:b2:14:5b:9c:6d:
         ad:d9:e6:a8:7a:0b:b1:2f:59:b9:d0:04:37:de:aa:60:8c:15:
         ab:ff:54:d4:33:f4:58:8d:cd:e4:fc:9c:66:ee:9e:cd:c3:d1:
         41:57:9c:d2:9b:70:0d:64:fa:c6:cd:b8:b4:b0:93:b9:17:6b:
         90:2d:72:cb:52:37:27:cc:3c:15:19:b9:38:83:28:43:55:c8:
         80:be:fd:cb:79:77:3e:69:9c:fe:3b:a5:20:07:f0:c9:32:07:
         fd:57:26:63:40:9a:2a:ea:b3:29:e1:57:26:e1:37:8a:c1:65:
         2f:eb:80:d3:25:99:d4:19:b4:ab:0f:e0:2d:4c:27:1e:62:ef:
         5b:b1:01:e4:97:c4:22:68:6d:01:1b:4b:56:9c:9a:39:7a:09:
         69:05:24:a9:16:a8:7c:4c:06:b8:6b:3c:61:c1:bb:59:ce:4f:
         46:03:93:56:7e:2a:35:5b:2c:d8:23:96:af:65:8a:c6:bd:80:
         11:17:05:78
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUSHttL42lku6cMLQwgiqw5E/dYmkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjlDRDUwMERBMkJDOEMyNzEwNDg2ODAyRDdGMUMwMDYx
MzZGRDZCNDAeFw0yMzEwMDUyMDQxNTZaFw0yNDEwMDMyMDQ2NTZaMDMxMTAvBgNV
BAMTKERDODJBN0ZDNEEwOEQ1ODNDRjNFMkQ2Njk5NDE0ODgzOEYyQzI5QkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3geDGrX/Fz2tRZ0d7OMgNNt83
1vIWFdXeDxUzuJm+kslo5vqTi9Hv/Lc2VPhPUFyecV/ujpfFNliQKOxbD45rDDQp
jxhNT841GTb48D3bPIO13pqtBapqsJuTsD6dqe1VwPBbCEVXz92UBnsOr6FcHSjC
1O4SVnV7GmDNsaVXw9v2E0vh1K1rSI5WWGRDRHH/EaHXGeu/AtAxc95BMdwCeS3n
NksZAoQi+JvfT0sNxt2AxaRqsHjilCedLsXWh+Qyn1Zi58EHO3l4Cda5Fqifi8KO
rbpFlqnkYJwxSOpztevLjYmsmA6IAyh3E4aEDteBIm/krSg/oiVm1ZNpCNqBAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU3IKn/EoI1YPPPi1mmUFIg48sKbwwHwYDVR0j
BBgwFoAUuc1QDaK8jCcQSGgC1/HABhNv1rQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNURhNXRDcmZtR3M0d3hTcXZaTlRoWWJCdDJhZk02cXhQNmNtYmV5eVk1
cVAvMC9COUNENTAwREEyQkM4QzI3MTA0ODY4MDJEN0YxQzAwNjEzNkZENkI0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0I5Q0Q1MDBEQTJCQzhDMjcx
MDQ4NjgwMkQ3RjFDMDA2MTM2RkQ2QjQuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzVEYTV0Q3JmbUdzNHd4U3F2Wk5UaFliQnQyYWZNNnF4UDZjbWJleXlZNXFQLzAv
MzEzNzMwMmUzMjM0MzUyZTMxMzMzNTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM1
MzIzNzM1MzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBACq9YcwDQYJKoZIhvcNAQELBQADggEBAAJXt744
bXMuoR2TzaobghX3f9tg8UNctuXjNUvec8vCpCmycc8TzzMZIQc7NVqPbXDSd3Cn
Z6Z5w70wMpDaZHq2PUOyFFucba3Z5qh6C7EvWbnQBDfeqmCMFav/VNQz9FiNzeT8
nGbuns3D0UFXnNKbcA1k+sbNuLSwk7kXa5AtcstSNyfMPBUZuTiDKENVyIC+/ct5
dz5pnP47pSAH8MkyB/1XJmNAmirqsynhVybhN4rBZS/rgNMlmdQZtKsP4C1MJx5i
71uxAeSXxCJobQEbS1acmjl6CWkFJKkWqHxMBrhrPGHBu1nOT0YDk1Z+KjVbLNgj
lq9lisa9gBEXBXg=
-----END CERTIFICATE-----
Generated at Fri Mar 14 04:38:06 2025 by rpki-client