Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/1/3137302e3233312e342e302f32342d3234203d3e203532393737.roa
File:                     3137302e3233312e342e302f32342d3234203d3e203532393737.roa (raw, json)
Hash identifier:          A43qmWLCYJAnwksyOQMO1oSJW7JZT0ZYlSlrkHPUB4k=
Subject key identifier:   EC:16:8E:91:7A:61:2C:EF:1D:28:0F:0D:00:31:89:A4:2C:CC:13:66
Certificate issuer:       /CN=9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E
Certificate serial:       3D3416DFBE8177FE49685FDAECC9B1E916F9E83C
Authority key identifier: 9C:BC:4D:C7:50:0C:24:EB:7B:E5:D1:B3:23:5A:7C:F0:EE:7C:C5:0E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/1/3137302e3233312e342e302f32342d3234203d3e203532393737.roa
Signing time:             Wed 05 Mar 2025 19:00:02 +0000
ROA not before:           Wed 05 Mar 2025 18:55:02 +0000
ROA not after:            Wed 04 Mar 2026 19:00:02 +0000
asID:                     52977
IP address blocks:        170.231.4.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:34:16:df:be:81:77:fe:49:68:5f:da:ec:c9:b1:e9:16:f9:e8:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E
        Validity
            Not Before: Mar  5 18:55:02 2025 GMT
            Not After : Mar  4 19:00:02 2026 GMT
        Subject: CN=EC168E917A612CEF1D280F0D003189A42CCC1366
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:90:85:84:07:f6:63:a0:8a:20:7a:d7:19:7b:
                    65:0a:16:40:bf:64:e6:6f:00:c2:b0:ad:13:f4:65:
                    d7:ec:08:92:a4:40:f0:5d:d1:e7:5a:78:5e:85:de:
                    b1:7f:0c:c0:2c:8b:30:83:33:54:61:c7:17:43:1d:
                    ea:2f:6c:eb:52:41:50:73:f2:2a:5a:36:60:fa:ba:
                    81:bf:94:1a:49:8e:1d:f9:58:d1:4a:8e:f8:3d:4e:
                    17:91:30:b5:18:6a:be:c7:a9:43:bb:b6:88:d6:18:
                    fe:0b:31:c3:00:04:73:bb:7a:17:a2:d7:37:ad:58:
                    27:57:da:50:0d:94:45:d4:79:ff:74:5d:23:3d:93:
                    82:99:b2:22:5b:10:c9:f1:be:5d:dc:61:4c:0d:7b:
                    f8:a7:1a:71:10:b2:54:5a:32:c5:59:b9:82:82:78:
                    b1:66:ed:5d:21:cb:ad:4e:eb:26:8e:ea:d8:f7:24:
                    e2:33:98:ee:4b:8f:4c:43:38:87:53:5a:f4:85:94:
                    88:68:21:f0:a1:46:f6:76:80:19:65:42:a6:d1:90:
                    75:7f:1a:9d:d1:85:be:bd:5d:3a:10:4b:95:85:e9:
                    7f:b3:c9:cc:81:19:a5:8e:a7:7e:07:2f:2c:62:12:
                    9e:8b:3d:27:12:e1:f4:a8:7f:3a:6d:22:bf:9d:01:
                    57:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:16:8E:91:7A:61:2C:EF:1D:28:0F:0D:00:31:89:A4:2C:CC:13:66
            X509v3 Authority Key Identifier:
                keyid:9C:BC:4D:C7:50:0C:24:EB:7B:E5:D1:B3:23:5A:7C:F0:EE:7C:C5:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/1/9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/1/3137302e3233312e342e302f32342d3234203d3e203532393737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.231.4.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c1:50:b3:18:21:20:8c:63:84:51:bd:5d:a0:a0:fe:1c:be:33:
         9d:a3:26:77:9c:b0:90:7c:62:85:ca:b2:bd:6d:88:ac:d3:66:
         5f:96:21:f8:cf:d2:98:24:50:54:e5:e7:da:c0:43:09:6d:c7:
         af:09:78:65:b9:6c:6b:a1:6e:4b:c0:0f:ac:e2:2a:16:ff:5e:
         bf:3b:ed:07:b1:37:8a:6b:87:64:e8:f8:19:d3:9d:a9:55:e4:
         9c:ad:94:b7:19:48:8d:34:5b:79:bf:b8:99:ae:09:34:92:17:
         62:bf:67:53:f9:21:87:01:96:b9:ce:34:4b:90:be:83:04:b8:
         df:55:b5:ac:a3:a5:82:fd:17:3c:5f:0c:b8:99:80:ff:7f:50:
         f3:9e:e4:b3:9c:13:f1:b4:5a:94:00:f9:55:e5:70:d8:c6:5d:
         56:21:92:b7:05:72:60:9b:6b:6d:91:3c:7c:20:b0:08:92:46:
         15:d6:31:ed:96:ce:66:22:6c:65:45:7a:35:2a:98:c8:b8:fb:
         d8:67:44:c1:86:16:c2:de:9d:c7:a2:29:8e:bc:e9:d5:74:9c:
         30:74:6a:45:1f:52:c2:17:55:35:af:98:81:40:d5:9e:55:fe:
         6f:b0:f2:5f:cd:31:a8:3e:46:d1:b0:2e:f1:86:e1:24:9d:23:
         a1:46:f4:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 15:02:35 2025 by rpki-client