Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/C7d4bFfKuVzU8dxoCSqvsD3UBWkVaDwuurLqHfZWEDoc/0/3136382e3132312e37302e302f32342d3234203d3e20323635333030.roa
File:                     3136382e3132312e37302e302f32342d3234203d3e20323635333030.roa (raw, json)
Hash identifier:          1c4OcsmMV+LDGF/d4yKDXEXUFPiDdBev/kZCDQBtPEo=
Subject key identifier:   6E:81:69:DC:63:B1:30:67:3C:70:23:54:C9:F4:98:16:E1:FD:B9:12
Certificate issuer:       /CN=FA878ADB9FDAB7635D897E861584C927DCBA2827
Certificate serial:       427F5E53F7AF172D24360E909FFF016222F8F187
Authority key identifier: FA:87:8A:DB:9F:DA:B7:63:5D:89:7E:86:15:84:C9:27:DC:BA:28:27
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FA878ADB9FDAB7635D897E861584C927DCBA2827.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C7d4bFfKuVzU8dxoCSqvsD3UBWkVaDwuurLqHfZWEDoc/0/3136382e3132312e37302e302f32342d3234203d3e20323635333030.roa
Signing time:             Wed 18 Dec 2024 04:11:09 +0000
ROA not before:           Wed 18 Dec 2024 04:06:09 +0000
ROA not after:            Wed 17 Dec 2025 04:11:09 +0000
asID:                     265300
IP address blocks:        168.121.70.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:7f:5e:53:f7:af:17:2d:24:36:0e:90:9f:ff:01:62:22:f8:f1:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FA878ADB9FDAB7635D897E861584C927DCBA2827
        Validity
            Not Before: Dec 18 04:06:09 2024 GMT
            Not After : Dec 17 04:11:09 2025 GMT
        Subject: CN=6E8169DC63B130673C702354C9F49816E1FDB912
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:49:af:e4:c5:0e:0c:48:89:a6:ef:08:36:e7:
                    87:1a:ab:ca:03:8a:25:cc:d8:d0:0e:e1:25:a8:da:
                    2e:b1:10:b3:4b:12:b0:a8:7d:8c:52:16:54:43:e3:
                    c7:74:3a:ef:03:ba:98:5b:1e:7f:bb:80:65:ff:af:
                    c5:32:5d:22:a8:22:6a:dd:16:42:c8:20:b8:53:d1:
                    0d:2a:64:9b:96:1f:b6:ed:07:0a:3e:bc:9c:a4:55:
                    58:83:22:b1:17:1c:3f:08:21:c3:2c:7f:01:d3:f0:
                    81:ae:8c:22:7f:52:cc:bb:af:b3:9c:f3:13:c2:d7:
                    b4:9c:cb:50:f3:07:ae:a5:db:e8:e6:ab:d5:6b:9e:
                    78:11:2b:0f:8b:25:17:53:d3:71:32:33:b0:aa:02:
                    f0:9c:d2:3d:5e:21:05:e7:50:69:b2:da:24:ab:38:
                    e1:f9:9c:d7:dc:24:8e:da:e9:4f:2f:f4:ce:69:fc:
                    55:07:f4:b6:47:a0:2c:bf:ee:de:7d:c5:7e:4c:31:
                    b9:ac:5e:0e:db:91:31:86:a8:16:b4:17:05:2a:a8:
                    ac:be:47:74:f9:d3:88:cd:1f:d3:db:d1:02:97:95:
                    c6:94:a6:1e:f2:b4:eb:b4:cd:bc:dc:ad:d6:74:66:
                    73:1b:79:34:40:10:2f:d6:d4:97:82:07:ca:18:6c:
                    f4:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:81:69:DC:63:B1:30:67:3C:70:23:54:C9:F4:98:16:E1:FD:B9:12
            X509v3 Authority Key Identifier:
                keyid:FA:87:8A:DB:9F:DA:B7:63:5D:89:7E:86:15:84:C9:27:DC:BA:28:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C7d4bFfKuVzU8dxoCSqvsD3UBWkVaDwuurLqHfZWEDoc/0/FA878ADB9FDAB7635D897E861584C927DCBA2827.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FA878ADB9FDAB7635D897E861584C927DCBA2827.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C7d4bFfKuVzU8dxoCSqvsD3UBWkVaDwuurLqHfZWEDoc/0/3136382e3132312e37302e302f32342d3234203d3e20323635333030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.121.70.0/24

    Signature Algorithm: sha256WithRSAEncryption
         33:cd:00:27:2c:6f:a1:4f:73:60:03:0c:af:12:6f:56:15:a1:
         7f:ec:3d:19:b1:64:8b:40:e9:90:4b:9c:f3:ea:e6:ad:ac:c3:
         a3:86:39:1a:73:14:6e:12:aa:f5:6f:79:90:f0:42:0a:41:05:
         04:34:c5:ac:93:e1:ed:6b:d4:58:70:78:75:9d:31:5f:a3:32:
         d5:57:f9:76:4a:e5:98:8a:3f:dc:45:0d:7a:c5:aa:ac:9e:a2:
         6a:6a:0a:ba:f7:32:8b:25:fc:1d:70:f7:aa:60:26:f2:8d:07:
         bd:99:fc:d0:f5:41:ee:f2:21:0c:f7:b5:53:65:8b:15:3c:03:
         9a:16:e1:81:a0:00:c5:90:00:93:4d:d4:51:74:3c:db:ad:50:
         a4:be:47:02:ab:96:bc:4f:e9:2e:b0:c5:af:4d:7c:90:78:b4:
         60:3f:c3:d1:d9:e7:19:4e:63:3e:09:75:d7:a3:f9:aa:45:d4:
         3e:2a:49:a2:3d:6a:28:f2:e9:b8:53:37:c8:16:97:16:68:1d:
         eb:f8:c1:f8:c4:ae:84:17:e7:18:e0:f0:e4:86:20:83:d9:0f:
         b3:c9:04:56:9c:82:9e:73:fc:65:29:d2:10:25:67:79:e6:2b:
         62:a8:08:0a:5c:91:3e:bb:44:f3:50:39:1c:42:2d:1a:3e:7e:
         c3:36:f2:fd
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUQn9eU/evFy0kNg6Qn/8BYiL48YcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkE4NzhBREI5RkRBQjc2MzVEODk3RTg2MTU4NEM5MjdE
Q0JBMjgyNzAeFw0yNDEyMTgwNDA2MDlaFw0yNTEyMTcwNDExMDlaMDMxMTAvBgNV
BAMTKDZFODE2OURDNjNCMTMwNjczQzcwMjM1NEM5RjQ5ODE2RTFGREI5MTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2Sa/kxQ4MSImm7wg254caq8oD
iiXM2NAO4SWo2i6xELNLErCofYxSFlRD48d0Ou8DuphbHn+7gGX/r8UyXSKoImrd
FkLIILhT0Q0qZJuWH7btBwo+vJykVViDIrEXHD8IIcMsfwHT8IGujCJ/Usy7r7Oc
8xPC17Scy1DzB66l2+jmq9VrnngRKw+LJRdT03EyM7CqAvCc0j1eIQXnUGmy2iSr
OOH5nNfcJI7a6U8v9M5p/FUH9LZHoCy/7t59xX5MMbmsXg7bkTGGqBa0FwUqqKy+
R3T504jNH9Pb0QKXlcaUph7ytOu0zbzcrdZ0ZnMbeTRAEC/W1JeCB8oYbPRXAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUboFp3GOxMGc8cCNUyfSYFuH9uRIwHwYDVR0j
BBgwFoAU+oeK25/at2NdiX6GFYTJJ9y6KCcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQzdkNGJGZkt1VnpVOGR4b0NTcXZzRDNVQldrVmFEd3V1ckxxSGZaV0VE
b2MvMC9GQTg3OEFEQjlGREFCNzYzNUQ4OTdFODYxNTg0QzkyN0RDQkEyODI3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0ZBODc4QURCOUZEQUI3NjM1
RDg5N0U4NjE1ODRDOTI3RENCQTI4MjcuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0M3ZDRiRmZLdVZ6VThkeG9DU3F2c0QzVUJXa1ZhRHd1dXJMcUhmWldFRG9jLzAv
MzEzNjM4MmUzMTMyMzEyZTM3MzAyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzUzMzMwMzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBACoeUYwDQYJKoZIhvcNAQELBQADggEBADPNACcs
b6FPc2ADDK8Sb1YVoX/sPRmxZItA6ZBLnPPq5q2sw6OGORpzFG4SqvVveZDwQgpB
BQQ0xayT4e1r1FhweHWdMV+jMtVX+XZK5ZiKP9xFDXrFqqyeompqCrr3Mosl/B1w
96pgJvKNB72Z/ND1Qe7yIQz3tVNlixU8A5oW4YGgAMWQAJNN1FF0PNutUKS+RwKr
lrxP6S6wxa9NfJB4tGA/w9HZ5xlOYz4Jddej+apF1D4qSaI9aijy6bhTN8gWlxZo
Hev4wfjEroQX5xjg8OSGIIPZD7PJBFacgp5z/GUp0hAlZ3nmK2KoCApckT67RPNQ
ORxCLRo+fsM28v0=
-----END CERTIFICATE-----
Generated at Mon Apr 7 03:43:40 2025 by rpki-client