Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8ETW4C6YMkep4ZFnSXwCnxQyuwkwrsAvgvQvJftuyg9h/0/3137302e3233332e3130362e302f32342d3234203d3e20323731313333.roa
File:                     3137302e3233332e3130362e302f32342d3234203d3e20323731313333.roa (raw, json)
Hash identifier:          8t7K4xqOsslfPPhNprk265rMY8Tiip34jFBtSKq7vS0=
Subject key identifier:   E8:9F:32:6A:03:6C:2C:8C:02:10:E9:F7:65:17:2D:F9:73:34:93:55
Certificate issuer:       /CN=355FC2C67FE738ECACBFEF94B8DB5D5D5228C7C2
Certificate serial:       433713D5301C0937E454817E9BDE981C8BC8BDB4
Authority key identifier: 35:5F:C2:C6:7F:E7:38:EC:AC:BF:EF:94:B8:DB:5D:5D:52:28:C7:C2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/355FC2C67FE738ECACBFEF94B8DB5D5D5228C7C2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8ETW4C6YMkep4ZFnSXwCnxQyuwkwrsAvgvQvJftuyg9h/0/3137302e3233332e3130362e302f32342d3234203d3e20323731313333.roa
Signing time:             Tue 17 Dec 2024 11:48:54 +0000
ROA not before:           Tue 17 Dec 2024 11:43:54 +0000
ROA not after:            Tue 16 Dec 2025 11:48:54 +0000
asID:                     271133
IP address blocks:        170.233.106.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:37:13:d5:30:1c:09:37:e4:54:81:7e:9b:de:98:1c:8b:c8:bd:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=355FC2C67FE738ECACBFEF94B8DB5D5D5228C7C2
        Validity
            Not Before: Dec 17 11:43:54 2024 GMT
            Not After : Dec 16 11:48:54 2025 GMT
        Subject: CN=E89F326A036C2C8C0210E9F765172DF973349355
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:60:1a:02:89:71:8b:07:fe:36:40:c2:af:fb:
                    bf:ec:87:47:58:8d:37:ed:6d:55:4b:20:63:c3:c2:
                    83:39:00:6b:ba:c6:8e:b2:40:da:98:49:98:1e:4f:
                    59:5e:cf:3c:a5:c8:65:36:60:7c:72:8d:7f:e2:aa:
                    bd:c5:11:d5:53:28:a4:be:93:cc:f3:52:33:69:1f:
                    c9:6a:dd:5e:fc:97:fa:25:c0:1f:fe:30:6b:2f:c8:
                    7f:76:34:16:29:88:04:2f:92:c5:20:0b:3d:e0:48:
                    30:1f:a9:e3:13:12:32:79:d4:94:48:1c:a4:d3:27:
                    06:32:a6:b7:57:f9:62:a7:20:57:98:d0:df:58:a6:
                    ee:18:88:ef:e8:21:d0:6b:20:0c:22:cf:5e:fd:78:
                    16:de:90:f6:1e:c9:e1:51:d4:28:4d:18:d2:28:9c:
                    5f:b2:33:bd:26:ea:f3:d5:7d:a7:d0:f1:03:77:61:
                    da:ef:bf:9c:c7:10:38:6d:c3:a9:40:99:57:9d:0b:
                    c7:a0:9b:09:09:11:f2:1b:52:48:af:4c:b7:89:c9:
                    71:35:12:48:54:81:ff:08:03:33:70:74:7c:40:9c:
                    c5:f2:e7:06:4e:ad:a5:b6:7e:79:ca:00:ca:e6:60:
                    49:63:1d:56:49:2c:c4:99:0b:3c:ae:ca:f3:d0:bd:
                    66:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:9F:32:6A:03:6C:2C:8C:02:10:E9:F7:65:17:2D:F9:73:34:93:55
            X509v3 Authority Key Identifier:
                keyid:35:5F:C2:C6:7F:E7:38:EC:AC:BF:EF:94:B8:DB:5D:5D:52:28:C7:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8ETW4C6YMkep4ZFnSXwCnxQyuwkwrsAvgvQvJftuyg9h/0/355FC2C67FE738ECACBFEF94B8DB5D5D5228C7C2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/355FC2C67FE738ECACBFEF94B8DB5D5D5228C7C2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8ETW4C6YMkep4ZFnSXwCnxQyuwkwrsAvgvQvJftuyg9h/0/3137302e3233332e3130362e302f32342d3234203d3e20323731313333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.233.106.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0a:b6:86:9c:8a:a5:81:4c:19:df:ab:a2:14:45:06:cd:e9:2b:
         07:2d:63:57:ce:43:27:37:b0:fe:6b:92:67:ec:73:60:78:3a:
         09:f3:24:5f:50:b2:a2:a7:77:62:22:54:22:fa:2d:5d:53:8b:
         2c:02:06:21:bb:71:24:16:9e:55:90:03:d7:96:db:d6:51:95:
         f1:54:e3:34:dc:25:fd:77:f0:aa:1f:94:04:35:c9:99:17:92:
         e8:11:c0:3b:a0:23:38:2a:1d:66:00:e5:90:c1:1f:8f:3c:20:
         4a:c4:8b:82:bf:21:b1:a5:0d:95:49:eb:4e:9f:f1:ef:05:29:
         64:38:86:ca:0d:74:12:7c:d9:bd:fe:f5:7c:da:59:24:4f:ab:
         fc:03:88:9f:01:4d:5d:e4:dc:28:02:61:90:07:5e:c2:3b:5a:
         ea:6b:80:32:7f:57:c3:c2:45:b9:ae:6f:f2:93:0f:93:11:72:
         b5:a0:6b:f6:c9:b1:b4:3a:e1:6d:bd:a2:0c:03:ed:00:46:6a:
         e3:f3:bc:f9:32:9a:0c:04:b3:93:4d:6d:b2:05:f8:27:b4:f5:
         24:19:89:6e:3b:5c:05:69:13:0d:3c:b1:d0:88:4b:06:41:46:
         b1:3c:c1:06:8b:fc:c6:a5:5d:fc:52:54:09:9e:b0:85:37:29:
         ce:22:84:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 04:16:37 2025 by rpki-client