Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AkQsPZ9vdp2ANWRof7Nf2kwmpJqrhHXvSCyubLRe7Fw3/0/3137302e3235342e3233362e302f32332d3233203d3e20323731303037.roa
File:                     3137302e3235342e3233362e302f32332d3233203d3e20323731303037.roa (raw, json)
Hash identifier:          671LQu5LgF1LoTUQXtXuk2EBgwUZo44wCsYmiqlh/Os=
Subject key identifier:   B9:64:95:E2:FF:21:70:47:CE:CA:A9:D2:08:09:A7:25:BA:71:A3:E6
Certificate issuer:       /CN=031B7A807743AC5BE7218B45A482A2BB809962D6
Certificate serial:       12477350FCFAFA8D7BE2BA7462B0F8C40912F2D0
Authority key identifier: 03:1B:7A:80:77:43:AC:5B:E7:21:8B:45:A4:82:A2:BB:80:99:62:D6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/031B7A807743AC5BE7218B45A482A2BB809962D6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AkQsPZ9vdp2ANWRof7Nf2kwmpJqrhHXvSCyubLRe7Fw3/0/3137302e3235342e3233362e302f32332d3233203d3e20323731303037.roa
Signing time:             Fri 06 Sep 2024 18:15:29 +0000
ROA not before:           Fri 06 Sep 2024 18:10:29 +0000
ROA not after:            Fri 05 Sep 2025 18:15:29 +0000
asID:                     271007
IP address blocks:        170.254.236.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:47:73:50:fc:fa:fa:8d:7b:e2:ba:74:62:b0:f8:c4:09:12:f2:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=031B7A807743AC5BE7218B45A482A2BB809962D6
        Validity
            Not Before: Sep  6 18:10:29 2024 GMT
            Not After : Sep  5 18:15:29 2025 GMT
        Subject: CN=B96495E2FF217047CECAA9D20809A725BA71A3E6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:43:02:46:06:9e:c0:16:54:01:55:82:33:4e:
                    f7:86:4e:46:3d:f4:b6:2e:11:8e:9e:b1:65:ec:af:
                    c7:f3:53:d3:a7:60:62:08:79:19:9f:e4:9b:19:d0:
                    d4:cb:50:58:0e:19:ae:a4:40:26:ea:6c:9c:a0:1b:
                    11:8a:3a:54:ef:ab:d0:fa:c5:7f:61:d6:3d:54:13:
                    c3:4c:73:4b:c9:8a:34:24:77:ac:41:6a:8d:2c:1a:
                    cc:fe:ca:05:4c:6b:ca:96:8b:26:9a:ac:75:c2:34:
                    c5:ff:ac:b7:63:8e:fe:27:7d:fe:0b:2b:c0:46:55:
                    5d:87:36:5a:fc:29:b4:07:cd:5f:f4:8c:49:3e:ea:
                    3d:24:67:7c:6f:f6:52:54:40:71:f9:8f:c8:51:87:
                    75:96:33:61:28:82:a1:24:b5:b7:4b:ea:5b:41:18:
                    b5:f3:67:31:9c:cc:ca:0e:84:a8:c7:6e:43:46:76:
                    3f:06:83:70:b2:e2:03:94:1e:7d:43:e5:79:ff:9e:
                    62:ad:6f:8c:ae:44:20:82:2e:30:6a:86:cf:60:f7:
                    fa:24:fb:6c:50:39:a7:57:13:eb:03:f8:f2:f9:e8:
                    b0:7f:66:67:3a:7e:b3:67:d2:50:a8:ff:84:1c:66:
                    be:7c:dd:30:11:2f:76:86:8b:f7:70:2c:be:99:29:
                    a4:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:64:95:E2:FF:21:70:47:CE:CA:A9:D2:08:09:A7:25:BA:71:A3:E6
            X509v3 Authority Key Identifier:
                keyid:03:1B:7A:80:77:43:AC:5B:E7:21:8B:45:A4:82:A2:BB:80:99:62:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AkQsPZ9vdp2ANWRof7Nf2kwmpJqrhHXvSCyubLRe7Fw3/0/031B7A807743AC5BE7218B45A482A2BB809962D6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/031B7A807743AC5BE7218B45A482A2BB809962D6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AkQsPZ9vdp2ANWRof7Nf2kwmpJqrhHXvSCyubLRe7Fw3/0/3137302e3235342e3233362e302f32332d3233203d3e20323731303037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.254.236.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3d:18:6b:6b:17:12:89:dd:f1:ee:2d:70:f9:82:58:5a:b7:58:
         3e:fa:63:6e:e4:86:41:34:3a:7b:42:1e:88:b9:61:33:a9:ca:
         dd:57:29:de:97:8e:7f:19:a6:1b:98:76:d1:5f:63:85:48:ee:
         ac:99:c2:d0:8a:50:24:57:8d:f2:e3:70:97:0c:b8:db:7b:f6:
         b3:1f:03:dd:5a:94:71:23:6d:c6:5f:e8:8c:a3:2d:61:f9:66:
         ac:bb:9d:95:b0:3c:09:64:af:1a:47:0e:70:ed:d7:81:9d:5f:
         16:dd:2c:d6:92:cd:af:0f:77:ba:24:29:e4:49:7a:c0:58:6b:
         c6:a6:d9:77:93:e6:6e:b9:6c:8e:b4:8c:14:a0:b9:f0:b4:28:
         48:74:5a:d2:5d:0e:76:26:e8:63:56:a0:2f:62:ee:56:60:9a:
         ae:f3:ad:8b:57:f2:b1:25:42:31:03:69:a6:50:20:e4:6a:0a:
         62:22:dd:e9:47:75:3a:53:57:e5:23:97:65:66:d4:68:7a:76:
         ed:81:a1:6e:d2:b5:de:58:d7:01:47:18:81:32:8a:0f:47:a7:
         4e:07:88:e6:51:a8:60:08:06:cd:d0:22:02:08:b7:e3:dc:71:
         cc:b9:dd:aa:38:13:ee:58:d8:f6:14:83:7b:05:53:3e:c6:44:
         a1:a0:c9:29
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUEkdzUPz6+o174rp0YrD4xAkS8tAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDMxQjdBODA3NzQzQUM1QkU3MjE4QjQ1QTQ4MkEyQkI4
MDk5NjJENjAeFw0yNDA5MDYxODEwMjlaFw0yNTA5MDUxODE1MjlaMDMxMTAvBgNV
BAMTKEI5NjQ5NUUyRkYyMTcwNDdDRUNBQTlEMjA4MDlBNzI1QkE3MUEzRTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDmQwJGBp7AFlQBVYIzTveGTkY9
9LYuEY6esWXsr8fzU9OnYGIIeRmf5JsZ0NTLUFgOGa6kQCbqbJygGxGKOlTvq9D6
xX9h1j1UE8NMc0vJijQkd6xBao0sGsz+ygVMa8qWiyaarHXCNMX/rLdjjv4nff4L
K8BGVV2HNlr8KbQHzV/0jEk+6j0kZ3xv9lJUQHH5j8hRh3WWM2EogqEktbdL6ltB
GLXzZzGczMoOhKjHbkNGdj8Gg3Cy4gOUHn1D5Xn/nmKtb4yuRCCCLjBqhs9g9/ok
+2xQOadXE+sD+PL56LB/Zmc6frNn0lCo/4QcZr583TARL3aGi/dwLL6ZKaQtAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUuWSV4v8hcEfOyqnSCAmnJbpxo+YwHwYDVR0j
BBgwFoAUAxt6gHdDrFvnIYtFpIKiu4CZYtYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQWtRc1BaOXZkcDJBTldSb2Y3TmYya3dtcEpxcmhIWHZTQ3l1YkxSZTdG
dzMvMC8wMzFCN0E4MDc3NDNBQzVCRTcyMThCNDVBNDgyQTJCQjgwOTk2MkQ2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzAzMUI3QTgwNzc0M0FDNUJF
NzIxOEI0NUE0ODJBMkJCODA5OTYyRDYuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0FrUXNQWjl2ZHAyQU5XUm9mN05mMmt3bXBKcXJoSFh2U0N5dWJMUmU3RnczLzAv
MzEzNzMwMmUzMjM1MzQyZTMyMzMzNjJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDMy
MzczMTMwMzAzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAar+7DANBgkqhkiG9w0BAQsFAAOCAQEAPRhr
axcSid3x7i1w+YJYWrdYPvpjbuSGQTQ6e0IeiLlhM6nK3Vcp3peOfxmmG5h20V9j
hUjurJnC0IpQJFeN8uNwlwy423v2sx8D3VqUcSNtxl/ojKMtYflmrLudlbA8CWSv
GkcOcO3XgZ1fFt0s1pLNrw93uiQp5El6wFhrxqbZd5PmbrlsjrSMFKC58LQoSHRa
0l0OdiboY1agL2LuVmCarvOti1fysSVCMQNpplAg5GoKYiLd6Ud1OlNX5SOXZWbU
aHp27YGhbtK13ljXAUcYgTKKD0enTgeI5lGoYAgGzdAiAgi349xxzLndqjgT7ljY
9hSDewVTPsZEoaDJKQ==
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:23:22 2025 by rpki-client