Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5seJupBmt7DNaqkjFuoxGw4yKiZTyiZaETXsuDZrskHn/0/3137302e3233392e34352e302f32342d3234203d3e20323636333339.roa
File:                     3137302e3233392e34352e302f32342d3234203d3e20323636333339.roa (raw, json)
Hash identifier:          Cg2Hi7k4MfH/IbHbduHilh9H2Qn0lptqaoep7A502dE=
Subject key identifier:   A2:CC:1B:AC:C2:63:06:6D:F1:8E:AD:14:AF:AE:B6:50:B6:E1:A9:6B
Certificate issuer:       /CN=2060EDA3B3A799358824BDE72CD21670F9F23032
Certificate serial:       3B0D6EF262A2DEC1237135C196EFA433E0836036
Authority key identifier: 20:60:ED:A3:B3:A7:99:35:88:24:BD:E7:2C:D2:16:70:F9:F2:30:32
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2060EDA3B3A799358824BDE72CD21670F9F23032.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5seJupBmt7DNaqkjFuoxGw4yKiZTyiZaETXsuDZrskHn/0/3137302e3233392e34352e302f32342d3234203d3e20323636333339.roa
Signing time:             Sun 08 Dec 2024 20:04:10 +0000
ROA not before:           Sun 08 Dec 2024 19:59:10 +0000
ROA not after:            Sun 07 Dec 2025 20:04:10 +0000
asID:                     266339
IP address blocks:        170.239.45.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:0d:6e:f2:62:a2:de:c1:23:71:35:c1:96:ef:a4:33:e0:83:60:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2060EDA3B3A799358824BDE72CD21670F9F23032
        Validity
            Not Before: Dec  8 19:59:10 2024 GMT
            Not After : Dec  7 20:04:10 2025 GMT
        Subject: CN=A2CC1BACC263066DF18EAD14AFAEB650B6E1A96B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:81:ad:e5:ef:9d:da:07:bf:c6:99:b3:4d:a4:
                    87:82:87:f5:2d:34:82:f9:a8:3d:d3:e7:77:f7:16:
                    93:d5:22:c0:50:35:1a:9f:d3:a8:12:ba:c4:6d:5b:
                    69:b2:8e:cf:82:42:f8:4e:53:a0:42:3c:22:03:0f:
                    92:35:cb:e7:56:a7:63:c7:df:d5:3b:8f:18:ce:50:
                    98:0a:82:5e:ca:54:6a:51:0a:fc:8f:8f:f4:ef:0f:
                    5f:a2:38:3a:d9:aa:b1:e7:af:c0:de:3d:c4:a2:ce:
                    33:cd:2d:dc:f0:c0:52:47:6c:80:29:53:4c:66:02:
                    dc:d8:3a:75:fe:92:77:c7:19:6c:ce:14:e4:d5:9e:
                    9e:80:06:c4:8d:25:65:a6:99:60:d5:ab:79:17:8c:
                    11:d5:9c:5f:d4:aa:1d:33:12:56:a7:ca:bd:02:b4:
                    a9:03:6c:5b:7e:ca:33:fc:42:05:ab:ec:ac:5f:49:
                    05:78:c6:27:2a:5b:07:a2:b0:c0:52:25:30:7b:bf:
                    62:b8:4c:e2:0b:64:00:58:23:70:47:80:98:7f:18:
                    2b:bf:f6:4f:5f:d7:bb:5c:3a:b9:93:1f:41:db:ca:
                    d5:f8:ac:78:0f:57:e7:f1:c0:1d:55:39:52:70:f4:
                    c8:fd:6f:cf:da:0e:ed:da:65:fe:46:3b:3e:f7:23:
                    21:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:CC:1B:AC:C2:63:06:6D:F1:8E:AD:14:AF:AE:B6:50:B6:E1:A9:6B
            X509v3 Authority Key Identifier:
                keyid:20:60:ED:A3:B3:A7:99:35:88:24:BD:E7:2C:D2:16:70:F9:F2:30:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5seJupBmt7DNaqkjFuoxGw4yKiZTyiZaETXsuDZrskHn/0/2060EDA3B3A799358824BDE72CD21670F9F23032.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2060EDA3B3A799358824BDE72CD21670F9F23032.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5seJupBmt7DNaqkjFuoxGw4yKiZTyiZaETXsuDZrskHn/0/3137302e3233392e34352e302f32342d3234203d3e20323636333339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.239.45.0/24

    Signature Algorithm: sha256WithRSAEncryption
         29:fd:0b:cb:88:17:e7:84:39:21:f3:bb:90:3c:b6:52:41:a7:
         b0:57:09:b0:8d:9e:fd:98:89:c4:71:09:f0:23:b9:ae:6d:99:
         e1:bd:91:21:86:3d:62:5e:fa:bb:41:b3:2c:08:8e:a9:73:67:
         b9:48:e8:e1:4d:45:c4:7d:bd:0f:f0:b6:37:c6:8c:51:d7:73:
         e9:cb:a5:bf:d3:61:29:ef:70:ea:d1:9b:ba:6b:35:59:45:47:
         88:85:43:c1:7a:20:dc:76:ff:47:41:da:36:e4:2f:90:8f:85:
         1a:f9:69:6c:5f:e2:00:a9:f1:28:f0:77:7a:ac:0f:f8:f9:a1:
         e9:8b:38:30:12:e8:3d:92:69:59:aa:73:75:62:e6:d2:42:73:
         fe:72:9f:86:83:41:4d:68:6c:c5:1e:81:ae:0d:98:f3:ec:c4:
         34:5a:bc:8d:3c:4c:3a:d5:c1:f3:04:8b:79:4a:b9:3f:03:4e:
         a2:55:c2:f0:66:d5:c7:2e:7a:45:96:66:7d:d1:a6:8a:02:a2:
         b1:a9:31:70:c6:bb:8f:c9:31:6b:94:8e:f7:ad:3a:f4:69:76:
         f6:48:08:6f:6a:fe:70:7e:5d:51:f5:16:ba:0a:53:88:e9:0b:
         a0:5e:91:70:59:31:79:2a:de:d2:1f:2a:e3:c5:89:72:cb:b4:
         0f:d5:15:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 08:00:05 2025 by rpki-client