Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7oVrcem1iPXHJTcEEqq1tbeDTVXTss45xizLh2rPJeuC/0/3139312e3234312e352e302f32342d3234203d3e20323633363633.roa
File:                     3139312e3234312e352e302f32342d3234203d3e20323633363633.roa (raw, json)
Hash identifier:          w6iQ6qKFC4Kx9y2n+uyfve9ygq8W4CGOnDvo8isHu58=
Subject key identifier:   AD:D6:1A:EF:78:C9:18:30:20:16:71:87:14:97:C8:93:96:16:62:5D
Certificate issuer:       /CN=2C6DF34BDE2E49E968259A5DBAC54ECE3B15A078
Certificate serial:       4318322C03DAE69BF8AC07B134D02D9C4B4E73B1
Authority key identifier: 2C:6D:F3:4B:DE:2E:49:E9:68:25:9A:5D:BA:C5:4E:CE:3B:15:A0:78
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2C6DF34BDE2E49E968259A5DBAC54ECE3B15A078.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7oVrcem1iPXHJTcEEqq1tbeDTVXTss45xizLh2rPJeuC/0/3139312e3234312e352e302f32342d3234203d3e20323633363633.roa
Signing time:             Mon 04 Mar 2024 16:18:32 +0000
ROA not before:           Mon 04 Mar 2024 16:13:32 +0000
ROA not after:            Mon 03 Mar 2025 16:18:32 +0000
asID:                     263663
IP address blocks:        191.241.5.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:18:32:2c:03:da:e6:9b:f8:ac:07:b1:34:d0:2d:9c:4b:4e:73:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2C6DF34BDE2E49E968259A5DBAC54ECE3B15A078
        Validity
            Not Before: Mar  4 16:13:32 2024 GMT
            Not After : Mar  3 16:18:32 2025 GMT
        Subject: CN=ADD61AEF78C91830201671871497C8939616625D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:cb:87:c3:42:14:66:a1:d2:b7:eb:2e:e3:e2:
                    30:2a:81:50:b8:f2:e9:05:b1:b1:77:2a:77:d7:64:
                    a2:5f:97:a0:68:6a:fe:f9:b9:18:9f:55:60:f5:2b:
                    d3:34:80:73:43:e0:bf:c2:78:7c:98:ac:d3:53:e7:
                    92:7e:42:c1:55:9b:eb:5d:bb:ee:93:97:02:e9:bb:
                    bc:57:d5:9b:cb:28:e9:0d:c7:63:b6:13:9c:fe:19:
                    ec:f5:1f:a3:b1:37:52:f0:db:0b:5a:50:0d:29:95:
                    ec:02:70:8e:0a:9b:62:fb:83:d9:26:a5:68:1f:94:
                    df:f6:7d:05:88:62:d9:df:76:65:90:1f:47:0e:67:
                    7c:a7:49:9c:2d:86:57:b2:4f:bf:d8:90:8f:48:16:
                    bc:67:6c:a0:38:6c:8e:33:7a:ad:42:5a:27:1c:81:
                    ca:79:20:17:24:5f:c7:a7:26:8c:c8:2a:49:d9:a4:
                    68:6f:b3:6e:0e:7f:ff:01:86:42:a9:71:4e:d4:16:
                    64:fb:76:e6:1b:c0:fa:a7:20:fb:dd:eb:90:20:0a:
                    a3:52:49:df:47:df:fc:a9:ce:a4:5f:9d:2c:b1:bd:
                    34:52:b4:8b:1e:9a:11:e5:fb:06:f2:f3:f1:90:27:
                    04:1c:de:88:0e:74:bd:cb:e7:7e:b1:54:5c:e2:c0:
                    03:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:D6:1A:EF:78:C9:18:30:20:16:71:87:14:97:C8:93:96:16:62:5D
            X509v3 Authority Key Identifier:
                keyid:2C:6D:F3:4B:DE:2E:49:E9:68:25:9A:5D:BA:C5:4E:CE:3B:15:A0:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7oVrcem1iPXHJTcEEqq1tbeDTVXTss45xizLh2rPJeuC/0/2C6DF34BDE2E49E968259A5DBAC54ECE3B15A078.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2C6DF34BDE2E49E968259A5DBAC54ECE3B15A078.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7oVrcem1iPXHJTcEEqq1tbeDTVXTss45xizLh2rPJeuC/0/3139312e3234312e352e302f32342d3234203d3e20323633363633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.241.5.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1e:42:c1:6b:68:21:ae:9e:26:b6:2e:98:f1:a0:3b:13:8b:ee:
         95:00:7d:45:59:3a:61:4e:8c:0c:11:32:37:9a:be:57:e3:57:
         c4:44:46:27:de:f3:63:b8:6a:93:03:e9:c1:a6:2f:5c:97:11:
         b7:fd:42:db:e1:b8:d6:63:ca:a9:7d:87:b9:aa:4b:10:d9:3a:
         cd:c5:68:7e:76:09:45:9a:40:4a:a6:4d:30:c2:83:1f:7f:61:
         ce:33:6d:bc:02:ac:06:ee:f1:16:6c:e2:1f:39:6d:4d:fe:ab:
         5a:a6:9b:3f:38:fe:a2:20:2b:e7:2c:c0:08:93:96:a1:41:7d:
         9e:8b:47:a4:e3:d5:aa:b8:6c:8e:12:60:95:39:a8:2c:fc:62:
         9e:04:6a:f8:46:a2:90:4d:a7:ca:6d:59:99:ac:77:c8:a7:77:
         4c:99:12:68:81:92:14:94:75:37:b2:a0:d9:ce:b3:58:c9:53:
         73:b1:a1:b9:04:aa:bb:c0:80:54:63:01:ae:e3:46:ab:e7:d7:
         a7:db:10:ed:14:09:f2:d1:4b:7e:e1:06:0c:f3:c7:61:09:b4:
         7d:4b:d8:04:24:9a:36:a2:c2:93:d4:15:d4:89:6f:43:b2:ea:
         da:5f:4a:5b:18:16:5d:27:14:f7:14:13:0d:6f:cd:6b:69:db:
         6c:07:79:20
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUQxgyLAPa5pv4rAexNNAtnEtOc7EwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkM2REYzNEJERTJFNDlFOTY4MjU5QTVEQkFDNTRFQ0Uz
QjE1QTA3ODAeFw0yNDAzMDQxNjEzMzJaFw0yNTAzMDMxNjE4MzJaMDMxMTAvBgNV
BAMTKEFERDYxQUVGNzhDOTE4MzAyMDE2NzE4NzE0OTdDODkzOTYxNjYyNUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuy4fDQhRmodK36y7j4jAqgVC4
8ukFsbF3KnfXZKJfl6Boav75uRifVWD1K9M0gHND4L/CeHyYrNNT55J+QsFVm+td
u+6TlwLpu7xX1ZvLKOkNx2O2E5z+Gez1H6OxN1Lw2wtaUA0plewCcI4Km2L7g9km
pWgflN/2fQWIYtnfdmWQH0cOZ3ynSZwthleyT7/YkI9IFrxnbKA4bI4zeq1CWicc
gcp5IBckX8enJozIKknZpGhvs24Of/8BhkKpcU7UFmT7duYbwPqnIPvd65AgCqNS
Sd9H3/ypzqRfnSyxvTRStIsemhHl+wby8/GQJwQc3ogOdL3L536xVFziwAPdAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUrdYa73jJGDAgFnGHFJfIk5YWYl0wHwYDVR0j
BBgwFoAULG3zS94uSeloJZpdusVOzjsVoHgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vN29WcmNlbTFpUFhISlRjRUVxcTF0YmVEVFZYVHNzNDV4aXpMaDJyUEpl
dUMvMC8yQzZERjM0QkRFMkU0OUU5NjgyNTlBNURCQUM1NEVDRTNCMTVBMDc4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzJDNkRGMzRCREUyRTQ5RTk2
ODI1OUE1REJBQzU0RUNFM0IxNUEwNzguY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzdvVnJjZW0xaVBYSEpUY0VFcXExdGJlRFRWWFRzczQ1eGl6TGgyclBKZXVDLzAv
MzEzOTMxMmUzMjM0MzEyZTM1MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjMz
MzYzNjMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAv/EFMA0GCSqGSIb3DQEBCwUAA4IBAQAeQsFraCGu
nia2LpjxoDsTi+6VAH1FWTphTowMETI3mr5X41fEREYn3vNjuGqTA+nBpi9clxG3
/ULb4bjWY8qpfYe5qksQ2TrNxWh+dglFmkBKpk0wwoMff2HOM228AqwG7vEWbOIf
OW1N/qtapps/OP6iICvnLMAIk5ahQX2ei0ek49WquGyOEmCVOags/GKeBGr4RqKQ
TafKbVmZrHfIp3dMmRJogZIUlHU3sqDZzrNYyVNzsaG5BKq7wIBUYwGu40ar59en
2xDtFAny0Ut+4QYM88dhCbR9S9gEJJo2osKT1BXUiW9DsuraX0pbGBZdJxT3FBMN
b81radtsB3kg
-----END CERTIFICATE-----
Generated at Tue Feb 18 13:33:20 2025 by rpki-client