Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9MfHRzzSZ269cnQbozgyRbNpwp4gLnWBNWFPWZEmWGXs/1/3137302e3234362e3234302e302f32322d3234203d3e20323632363435.roa
File:                     3137302e3234362e3234302e302f32322d3234203d3e20323632363435.roa (raw, json)
Hash identifier:          9iXdlWe7SYeRWmxN5UnqtXIspxlcytHgkAEeNM+dSu8=
Subject key identifier:   8C:83:BA:78:64:9E:7E:F6:E4:17:9E:C4:95:C8:BB:63:E6:39:25:44
Certificate issuer:       /CN=E09F2B81ED12D4B02A5B104DB200DEF0A03303AD
Certificate serial:       75A473A66231DBCA24793E6BA228EAF7D5E6F20D
Authority key identifier: E0:9F:2B:81:ED:12:D4:B0:2A:5B:10:4D:B2:00:DE:F0:A0:33:03:AD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E09F2B81ED12D4B02A5B104DB200DEF0A03303AD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9MfHRzzSZ269cnQbozgyRbNpwp4gLnWBNWFPWZEmWGXs/1/3137302e3234362e3234302e302f32322d3234203d3e20323632363435.roa
Signing time:             Thu 06 Mar 2025 07:45:47 +0000
ROA not before:           Thu 06 Mar 2025 07:40:47 +0000
ROA not after:            Thu 05 Mar 2026 07:45:47 +0000
asID:                     262645
IP address blocks:        170.246.240.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:a4:73:a6:62:31:db:ca:24:79:3e:6b:a2:28:ea:f7:d5:e6:f2:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E09F2B81ED12D4B02A5B104DB200DEF0A03303AD
        Validity
            Not Before: Mar  6 07:40:47 2025 GMT
            Not After : Mar  5 07:45:47 2026 GMT
        Subject: CN=8C83BA78649E7EF6E4179EC495C8BB63E6392544
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:59:e0:4a:3f:9b:37:98:a9:b0:d9:6d:d0:b0:
                    4d:6c:1e:63:28:66:a6:50:11:83:ee:d5:c4:4c:f3:
                    84:da:3a:8d:fb:37:1b:83:1a:6f:2e:df:b8:0c:b2:
                    b4:f3:d2:62:80:78:fc:86:ba:07:b9:41:33:ec:96:
                    0c:b4:0e:c4:ed:6f:f2:90:7c:91:17:63:62:ee:b4:
                    45:8d:47:71:b6:cc:2f:04:c5:32:ca:d3:f6:ca:e8:
                    cb:72:db:98:af:e2:a0:5a:01:a1:cf:42:b7:65:17:
                    26:24:20:65:e1:61:59:68:e6:8a:14:49:e1:23:89:
                    81:45:9a:8f:7c:a2:e1:6b:6b:bc:dc:c2:af:2d:18:
                    c1:2f:3b:74:e0:c7:7f:1f:54:d4:8f:7c:87:47:9e:
                    c3:8f:44:83:33:81:18:fb:d6:fb:b2:d2:0b:0d:48:
                    e0:74:4f:3c:a3:ae:60:c4:43:83:eb:3a:4c:3e:64:
                    87:e9:10:f5:73:1b:ad:c9:04:bb:58:cc:2d:08:c3:
                    ef:1e:84:e4:ff:ff:34:04:05:fa:41:af:45:f1:4f:
                    d7:8f:c3:0e:6b:62:b1:ff:14:85:a3:79:17:83:a0:
                    6b:71:70:38:63:a5:95:66:4b:7c:31:9f:fc:1e:2d:
                    d0:9f:3b:fb:d4:f1:72:0a:83:59:ec:08:c4:72:54:
                    e2:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:83:BA:78:64:9E:7E:F6:E4:17:9E:C4:95:C8:BB:63:E6:39:25:44
            X509v3 Authority Key Identifier:
                keyid:E0:9F:2B:81:ED:12:D4:B0:2A:5B:10:4D:B2:00:DE:F0:A0:33:03:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9MfHRzzSZ269cnQbozgyRbNpwp4gLnWBNWFPWZEmWGXs/1/E09F2B81ED12D4B02A5B104DB200DEF0A03303AD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E09F2B81ED12D4B02A5B104DB200DEF0A03303AD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9MfHRzzSZ269cnQbozgyRbNpwp4gLnWBNWFPWZEmWGXs/1/3137302e3234362e3234302e302f32322d3234203d3e20323632363435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.246.240.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2e:07:15:f9:a9:63:0b:2f:f3:cc:e5:76:bd:71:17:25:4f:1d:
         7b:4e:85:57:37:b1:bd:df:05:dd:36:9c:41:ae:9e:5b:b2:ee:
         c1:20:ed:02:8d:3c:37:b5:1d:d2:a9:86:51:7b:e4:01:38:b3:
         7f:75:ef:1c:5e:d1:36:87:f6:cb:f1:b1:b5:cd:b6:d9:69:ae:
         7c:a3:07:f3:b1:80:56:b1:b6:63:6a:17:a4:3a:cc:7f:a4:af:
         a4:79:0b:fe:7b:10:f7:25:94:92:36:6e:b3:97:4a:6c:ff:39:
         e3:60:0b:a9:b9:b3:a4:6a:9c:2e:93:51:56:5c:93:01:0e:9e:
         8b:25:5b:bc:0a:4c:24:9c:d4:3f:c0:c7:05:e1:20:81:b4:5b:
         69:78:89:8e:01:db:8c:45:82:c1:ab:f4:f5:f5:43:8f:4d:07:
         6b:93:d4:ad:59:3a:80:14:03:71:fc:1f:b7:dc:ee:6d:a7:9c:
         01:49:20:85:86:62:a6:58:90:38:17:6c:06:8c:ca:04:79:22:
         bd:f4:ad:9a:3d:ed:28:68:d7:06:04:33:0b:cd:f4:db:0d:06:
         7b:dc:9b:cc:e6:a7:cf:ef:63:b7:d8:2d:cd:c9:6b:97:c9:9f:
         84:05:8d:bc:07:43:51:07:c1:02:ee:76:2a:55:3f:d0:12:7a:
         35:71:b3:fc
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUdaRzpmIx28okeT5roijq99Xm8g0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTA5RjJCODFFRDEyRDRCMDJBNUIxMDREQjIwMERFRjBB
MDMzMDNBRDAeFw0yNTAzMDYwNzQwNDdaFw0yNjAzMDUwNzQ1NDdaMDMxMTAvBgNV
BAMTKDhDODNCQTc4NjQ5RTdFRjZFNDE3OUVDNDk1QzhCQjYzRTYzOTI1NDQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDmWeBKP5s3mKmw2W3QsE1sHmMo
ZqZQEYPu1cRM84TaOo37NxuDGm8u37gMsrTz0mKAePyGuge5QTPslgy0DsTtb/KQ
fJEXY2LutEWNR3G2zC8ExTLK0/bK6Mty25iv4qBaAaHPQrdlFyYkIGXhYVlo5ooU
SeEjiYFFmo98ouFra7zcwq8tGMEvO3Tgx38fVNSPfIdHnsOPRIMzgRj71vuy0gsN
SOB0TzyjrmDEQ4PrOkw+ZIfpEPVzG63JBLtYzC0Iw+8ehOT//zQEBfpBr0XxT9eP
ww5rYrH/FIWjeReDoGtxcDhjpZVmS3wxn/weLdCfO/vU8XIKg1nsCMRyVOLJAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUjIO6eGSefvbkF57Elci7Y+Y5JUQwHwYDVR0j
BBgwFoAU4J8rge0S1LAqWxBNsgDe8KAzA60wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOU1mSFJ6elNaMjY5Y25RYm96Z3lSYk5wd3A0Z0xuV0JOV0ZQV1pFbVdH
WHMvMS9FMDlGMkI4MUVEMTJENEIwMkE1QjEwNERCMjAwREVGMEEwMzMwM0FELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0UwOUYyQjgxRUQxMkQ0QjAy
QTVCMTA0REIyMDBERUYwQTAzMzAzQUQuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzlNZkhSenpTWjI2OWNuUWJvemd5UmJOcHdwNGdMbldCTldGUFdaRW1XR1hzLzEv
MzEzNzMwMmUzMjM0MzYyZTMyMzQzMDJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDMy
MzYzMjM2MzQzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAqr28DANBgkqhkiG9w0BAQsFAAOCAQEALgcV
+aljCy/zzOV2vXEXJU8de06FVzexvd8F3TacQa6eW7LuwSDtAo08N7Ud0qmGUXvk
ATizf3XvHF7RNof2y/Gxtc222WmufKMH87GAVrG2Y2oXpDrMf6SvpHkL/nsQ9yWU
kjZus5dKbP8542ALqbmzpGqcLpNRVlyTAQ6eiyVbvApMJJzUP8DHBeEggbRbaXiJ
jgHbjEWCwav09fVDj00Ha5PUrVk6gBQDcfwft9zubaecAUkghYZipliQOBdsBozK
BHkivfStmj3tKGjXBgQzC8302w0Ge9ybzOanz+9jt9gtzclrl8mfhAWNvAdDUQfB
Au52KlU/0BJ6NXGz/A==
-----END CERTIFICATE-----
Generated at Sat Apr 5 23:09:00 2025 by rpki-client