Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6GjKhCPcpnVYAoMB4qvM1QuWtFj3HUBZVHCKkGZsRo3N/0/32342e3135322e3132322e302f32332d3233203d3e20323730343938.roa
File:                     32342e3135322e3132322e302f32332d3233203d3e20323730343938.roa (raw, json)
Hash identifier:          8z6SAGmwpqO8gQn+Y6Lt6pqLzsVAwuWy426lqVXpBFM=
Subject key identifier:   D1:BB:E5:FC:C0:7D:E7:CF:E3:F2:41:43:A4:45:94:66:2F:8D:E4:95
Certificate issuer:       /CN=829064A66351CAD7B748DA917A6753A6722F5F37
Certificate serial:       621DF146223FC1D8D7B09407204ABA47F8EE7B12
Authority key identifier: 82:90:64:A6:63:51:CA:D7:B7:48:DA:91:7A:67:53:A6:72:2F:5F:37
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/829064A66351CAD7B748DA917A6753A6722F5F37.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6GjKhCPcpnVYAoMB4qvM1QuWtFj3HUBZVHCKkGZsRo3N/0/32342e3135322e3132322e302f32332d3233203d3e20323730343938.roa
Signing time:             Tue 20 Aug 2024 14:00:10 +0000
ROA not before:           Tue 20 Aug 2024 13:55:10 +0000
ROA not after:            Tue 19 Aug 2025 14:00:10 +0000
asID:                     270498
IP address blocks:        24.152.122.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:1d:f1:46:22:3f:c1:d8:d7:b0:94:07:20:4a:ba:47:f8:ee:7b:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=829064A66351CAD7B748DA917A6753A6722F5F37
        Validity
            Not Before: Aug 20 13:55:10 2024 GMT
            Not After : Aug 19 14:00:10 2025 GMT
        Subject: CN=D1BBE5FCC07DE7CFE3F24143A44594662F8DE495
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:24:5e:7c:42:f0:6c:fa:25:43:72:05:a0:5c:
                    ad:d4:07:8c:f6:f6:ba:0d:e3:1e:02:77:f4:54:d6:
                    c2:a0:9d:a9:bd:3f:c3:a3:f6:67:9a:ae:09:c6:0d:
                    0e:d6:26:5c:04:5d:69:21:a6:6e:36:ab:8b:55:11:
                    30:ba:b2:8c:1e:f7:1b:10:52:b7:9d:8f:91:1a:13:
                    89:62:17:7d:33:fc:bc:0b:3b:eb:84:23:30:50:62:
                    49:66:f4:9f:23:ca:b5:82:41:7a:1b:19:2b:4f:b8:
                    79:1d:2b:b6:e9:f9:e5:85:d8:d3:77:28:ea:c9:62:
                    fc:ff:1c:ad:ee:9f:b2:7f:f8:61:3f:ac:21:d6:5a:
                    66:3d:eb:48:f7:f8:11:2b:9d:1b:c3:92:90:4a:5a:
                    ce:4b:5a:59:1b:37:c6:cd:28:a3:7d:81:9d:d9:cb:
                    3e:40:54:41:1c:76:ab:55:f5:bd:d0:60:0f:95:35:
                    2c:5e:0a:c9:bb:66:ce:ed:c6:a6:5a:06:db:fa:d7:
                    77:00:cf:93:3a:32:5f:eb:d2:88:60:8f:54:0e:a7:
                    8b:56:c9:52:76:cd:a1:dc:8e:b0:26:23:37:fb:d4:
                    73:fb:c9:9f:0c:ea:3a:0e:cc:b1:c8:58:68:29:13:
                    33:d4:d6:0c:b5:23:73:3c:f8:e1:ac:59:28:79:0c:
                    bb:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:BB:E5:FC:C0:7D:E7:CF:E3:F2:41:43:A4:45:94:66:2F:8D:E4:95
            X509v3 Authority Key Identifier:
                keyid:82:90:64:A6:63:51:CA:D7:B7:48:DA:91:7A:67:53:A6:72:2F:5F:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6GjKhCPcpnVYAoMB4qvM1QuWtFj3HUBZVHCKkGZsRo3N/0/829064A66351CAD7B748DA917A6753A6722F5F37.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/829064A66351CAD7B748DA917A6753A6722F5F37.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6GjKhCPcpnVYAoMB4qvM1QuWtFj3HUBZVHCKkGZsRo3N/0/32342e3135322e3132322e302f32332d3233203d3e20323730343938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.152.122.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9e:b9:7e:d2:61:85:57:99:54:e8:f0:6e:9a:0b:ff:4a:d1:1e:
         a5:68:b3:36:bd:3a:db:5a:3f:a2:03:cf:4c:7d:2a:18:0e:bb:
         e6:4f:d6:95:c4:8e:eb:d9:53:8b:29:0d:17:2e:11:4b:de:a4:
         b1:3d:68:e9:f8:2e:76:3f:e0:3a:ed:4f:fc:58:a3:c9:eb:8b:
         57:b7:bd:76:2a:9b:8a:34:7f:1c:ad:cf:41:1a:14:67:e3:35:
         7e:3d:6b:66:60:f7:20:4f:13:2b:d8:7d:87:f2:bb:52:41:94:
         02:00:c4:e0:fe:f4:be:c7:8b:37:de:8e:85:55:cd:22:52:c4:
         3f:3c:10:1a:45:07:f2:86:24:38:b7:f7:a5:4d:aa:0f:bf:2f:
         76:fd:7b:22:24:a5:db:39:a7:f4:bb:7b:56:ac:53:13:a1:77:
         d1:58:58:fd:01:36:96:d7:d3:45:07:60:00:b2:0e:db:a3:84:
         ac:ed:c3:ad:fa:50:ad:a3:d3:9f:de:43:ab:5a:2d:83:50:be:
         b3:cf:f7:93:2d:05:04:90:4f:f7:fb:04:46:3d:14:32:90:0c:
         0e:f0:b0:74:cf:e8:2d:63:e7:f5:11:f2:e8:a4:e3:77:f9:03:
         a2:c7:08:fe:0b:f7:de:2e:28:b7:7c:97:53:f4:69:65:00:23:
         46:17:d3:4f
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUYh3xRiI/wdjXsJQHIEq6R/juexIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODI5MDY0QTY2MzUxQ0FEN0I3NDhEQTkxN0E2NzUzQTY3
MjJGNUYzNzAeFw0yNDA4MjAxMzU1MTBaFw0yNTA4MTkxNDAwMTBaMDMxMTAvBgNV
BAMTKEQxQkJFNUZDQzA3REU3Q0ZFM0YyNDE0M0E0NDU5NDY2MkY4REU0OTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZJF58QvBs+iVDcgWgXK3UB4z2
9roN4x4Cd/RU1sKgnam9P8Oj9meargnGDQ7WJlwEXWkhpm42q4tVETC6sowe9xsQ
Uredj5EaE4liF30z/LwLO+uEIzBQYklm9J8jyrWCQXobGStPuHkdK7bp+eWF2NN3
KOrJYvz/HK3un7J/+GE/rCHWWmY960j3+BErnRvDkpBKWs5LWlkbN8bNKKN9gZ3Z
yz5AVEEcdqtV9b3QYA+VNSxeCsm7Zs7txqZaBtv613cAz5M6Ml/r0ohgj1QOp4tW
yVJ2zaHcjrAmIzf71HP7yZ8M6joOzLHIWGgpEzPU1gy1I3M8+OGsWSh5DLvrAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU0bvl/MB958/j8kFDpEWUZi+N5JUwHwYDVR0j
BBgwFoAUgpBkpmNRyte3SNqRemdTpnIvXzcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNkdqS2hDUGNwblZZQW9NQjRxdk0xUXVXdEZqM0hVQlpWSENLa0dac1Jv
M04vMC84MjkwNjRBNjYzNTFDQUQ3Qjc0OERBOTE3QTY3NTNBNjcyMkY1RjM3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzgyOTA2NEE2NjM1MUNBRDdC
NzQ4REE5MTdBNjc1M0E2NzIyRjVGMzcuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzZHaktoQ1BjcG5WWUFvTUI0cXZNMVF1V3RGajNIVUJaVkhDS2tHWnNSbzNOLzAv
MzIzNDJlMzEzNTMyMmUzMTMyMzIyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzMjM3
MzAzNDM5Mzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAEYmHowDQYJKoZIhvcNAQELBQADggEBAJ65ftJh
hVeZVOjwbpoL/0rRHqVosza9OttaP6IDz0x9KhgOu+ZP1pXEjuvZU4spDRcuEUve
pLE9aOn4LnY/4DrtT/xYo8nri1e3vXYqm4o0fxytz0EaFGfjNX49a2Zg9yBPEyvY
fYfyu1JBlAIAxOD+9L7HizfejoVVzSJSxD88EBpFB/KGJDi396VNqg+/L3b9eyIk
pds5p/S7e1asUxOhd9FYWP0BNpbX00UHYACyDtujhKztw636UK2j05/eQ6taLYNQ
vrPP95MtBQSQT/f7BEY9FDKQDA7wsHTP6C1j5/UR8uik43f5A6LHCP4L994uKLd8
l1P0aWUAI0YX008=
-----END CERTIFICATE-----
Generated at Fri Mar 14 02:24:07 2025 by rpki-client