Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A5qNovLNMMSNQckTiyzSHiRUh9GeaQC2zzq1duKqFdSS/1/3137302e38302e34382e302f32342d3234203d3e20323636333734.roa
File:                     3137302e38302e34382e302f32342d3234203d3e20323636333734.roa (raw, json)
Hash identifier:          HodIiouYpi5HRYferTFJC9p/9oItbt3HQJ/8I8MD+HI=
Subject key identifier:   94:49:00:C7:D2:23:4F:A6:0F:2E:91:2D:12:6D:25:54:A9:55:2D:E9
Certificate issuer:       /CN=0F9708322570D07CA4BE75EF484B6831664FE864
Certificate serial:       70928026B8762C023A7F4DA6C3114B853D1E1E95
Authority key identifier: 0F:97:08:32:25:70:D0:7C:A4:BE:75:EF:48:4B:68:31:66:4F:E8:64
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0F9708322570D07CA4BE75EF484B6831664FE864.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A5qNovLNMMSNQckTiyzSHiRUh9GeaQC2zzq1duKqFdSS/1/3137302e38302e34382e302f32342d3234203d3e20323636333734.roa
Signing time:             Wed 26 Mar 2025 15:07:02 +0000
ROA not before:           Wed 26 Mar 2025 15:02:02 +0000
ROA not after:            Wed 25 Mar 2026 15:07:02 +0000
asID:                     266374
IP address blocks:        170.80.48.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:92:80:26:b8:76:2c:02:3a:7f:4d:a6:c3:11:4b:85:3d:1e:1e:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0F9708322570D07CA4BE75EF484B6831664FE864
        Validity
            Not Before: Mar 26 15:02:02 2025 GMT
            Not After : Mar 25 15:07:02 2026 GMT
        Subject: CN=944900C7D2234FA60F2E912D126D2554A9552DE9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:35:58:d3:45:99:13:6c:ec:a0:06:77:08:bf:
                    54:36:1e:dd:15:a6:9a:ae:2e:0e:f1:c3:16:71:73:
                    e4:d3:85:35:21:6e:0b:38:23:e0:ba:78:c8:df:ca:
                    2a:20:63:d0:82:25:d5:ea:d8:48:fa:9c:ac:75:e9:
                    81:62:84:f6:b2:70:19:78:1d:25:26:24:b7:41:ce:
                    eb:e4:24:ff:aa:c4:05:35:3a:5a:e8:4d:90:55:65:
                    72:09:b0:9a:5e:07:76:96:ce:96:8a:b8:0d:75:57:
                    3d:ce:74:cd:f5:29:4d:c9:34:16:32:e3:c1:a6:97:
                    c3:4d:fb:a8:55:47:13:0d:7c:d8:6a:cb:e7:7b:30:
                    12:94:31:6f:88:41:b5:29:4b:6e:5b:47:a3:a2:41:
                    ac:09:3f:f0:df:d3:35:b8:65:a4:1c:56:42:d9:3e:
                    0c:29:98:70:d0:18:82:4c:84:f7:36:cd:b9:e5:74:
                    5d:6b:57:5e:60:af:ac:39:66:c7:e8:5a:91:57:35:
                    14:56:bb:e1:25:7a:d2:ee:07:6b:72:29:fc:bf:6c:
                    71:18:b5:c1:b5:a3:6e:41:c2:ab:b2:95:4c:74:68:
                    bb:93:13:80:02:ee:b7:8d:2f:7a:f2:99:44:3d:0f:
                    40:ca:55:49:1d:15:9e:26:8c:0c:a5:85:d6:71:7a:
                    0a:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:49:00:C7:D2:23:4F:A6:0F:2E:91:2D:12:6D:25:54:A9:55:2D:E9
            X509v3 Authority Key Identifier:
                keyid:0F:97:08:32:25:70:D0:7C:A4:BE:75:EF:48:4B:68:31:66:4F:E8:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A5qNovLNMMSNQckTiyzSHiRUh9GeaQC2zzq1duKqFdSS/1/0F9708322570D07CA4BE75EF484B6831664FE864.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0F9708322570D07CA4BE75EF484B6831664FE864.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A5qNovLNMMSNQckTiyzSHiRUh9GeaQC2zzq1duKqFdSS/1/3137302e38302e34382e302f32342d3234203d3e20323636333734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.80.48.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8c:d9:85:b1:14:46:ff:3a:d7:2c:08:33:2a:72:e3:d0:d6:a2:
         14:8d:28:1b:ee:45:5a:ab:61:2c:9c:ca:df:ae:51:02:3b:62:
         f7:19:2c:e2:71:26:ad:19:3a:8c:d8:df:57:59:5f:29:d2:4f:
         1d:41:21:69:91:70:5f:16:bc:d6:69:0f:f0:c4:7c:2e:f3:0d:
         bf:18:48:3a:ab:ad:27:9a:ea:e3:e9:bf:d4:99:24:32:a0:b2:
         a5:8a:a1:ca:d0:30:49:68:e8:2b:64:72:89:21:c1:fb:e0:27:
         78:24:1f:e7:e7:21:03:f4:60:8d:ab:66:97:f7:65:08:c6:ef:
         98:52:b9:be:94:a8:d6:64:ee:8b:91:8d:15:75:bb:e5:34:8c:
         6f:db:df:86:37:ee:99:eb:c4:f8:1f:57:c4:b8:d2:b8:8b:53:
         08:bc:9c:00:e8:43:ff:77:05:8c:12:03:15:1a:29:72:1e:6c:
         78:14:fb:14:f2:a9:e0:df:d0:b4:74:60:bd:ab:31:c1:72:3e:
         ca:37:72:19:cb:80:da:6b:94:36:f1:60:cf:0f:c1:5d:81:41:
         78:c3:e7:c3:f4:99:4b:64:ff:a8:15:82:7b:fe:b0:e5:0f:0d:
         f3:12:7b:5c:0d:cc:fb:cd:d8:5d:a1:fd:a7:ce:d2:81:1b:22:
         0e:c2:74:ab
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUcJKAJrh2LAI6f02mwxFLhT0eHpUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEY5NzA4MzIyNTcwRDA3Q0E0QkU3NUVGNDg0QjY4MzE2
NjRGRTg2NDAeFw0yNTAzMjYxNTAyMDJaFw0yNjAzMjUxNTA3MDJaMDMxMTAvBgNV
BAMTKDk0NDkwMEM3RDIyMzRGQTYwRjJFOTEyRDEyNkQyNTU0QTk1NTJERTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDANVjTRZkTbOygBncIv1Q2Ht0V
ppquLg7xwxZxc+TThTUhbgs4I+C6eMjfyiogY9CCJdXq2Ej6nKx16YFihPaycBl4
HSUmJLdBzuvkJP+qxAU1OlroTZBVZXIJsJpeB3aWzpaKuA11Vz3OdM31KU3JNBYy
48Gml8NN+6hVRxMNfNhqy+d7MBKUMW+IQbUpS25bR6OiQawJP/Df0zW4ZaQcVkLZ
PgwpmHDQGIJMhPc2zbnldF1rV15gr6w5ZsfoWpFXNRRWu+EletLuB2tyKfy/bHEY
tcG1o25BwquylUx0aLuTE4AC7reNL3rymUQ9D0DKVUkdFZ4mjAylhdZxegrVAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUlEkAx9IjT6YPLpEtEm0lVKlVLekwHwYDVR0j
BBgwFoAUD5cIMiVw0HykvnXvSEtoMWZP6GQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQTVxTm92TE5NTVNOUWNrVGl5elNIaVJVaDlHZWFRQzJ6enExZHVLcUZk
U1MvMS8wRjk3MDgzMjI1NzBEMDdDQTRCRTc1RUY0ODRCNjgzMTY2NEZFODY0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzBGOTcwODMyMjU3MEQwN0NB
NEJFNzVFRjQ4NEI2ODMxNjY0RkU4NjQuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0E1cU5vdkxOTU1TTlFja1RpeXpTSGlSVWg5R2VhUUMyenpxMWR1S3FGZFNTLzEv
MzEzNzMwMmUzODMwMmUzNDM4MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM2
MzMzNzM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAqlAwMA0GCSqGSIb3DQEBCwUAA4IBAQCM2YWxFEb/
OtcsCDMqcuPQ1qIUjSgb7kVaq2EsnMrfrlECO2L3GSzicSatGTqM2N9XWV8p0k8d
QSFpkXBfFrzWaQ/wxHwu8w2/GEg6q60nmurj6b/UmSQyoLKliqHK0DBJaOgrZHKJ
IcH74Cd4JB/n5yED9GCNq2aX92UIxu+YUrm+lKjWZO6LkY0VdbvlNIxv29+GN+6Z
68T4H1fEuNK4i1MIvJwA6EP/dwWMEgMVGilyHmx4FPsU8qng39C0dGC9qzHBcj7K
N3IZy4Daa5Q28WDPD8FdgUF4w+fD9JlLZP+oFYJ7/rDlDw3zEntcDcz7zdhdof2n
ztKBGyIOwnSr
-----END CERTIFICATE-----
Generated at Fri Apr 11 11:56:57 2025 by rpki-client