Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CozZWaDfdu3BbhkFfSfbs33gaGgMyRfDBEDXRr8xSr8a/0/3137302e3233392e39362e302f32332d3233203d3e20323634333937.roa
File:                     3137302e3233392e39362e302f32332d3233203d3e20323634333937.roa (raw, json)
Hash identifier:          YpOt3NIHXAoACuvubAdMiPFYI5Vo8XY4r18rwg32dpU=
Subject key identifier:   2B:C7:8E:EC:55:01:13:20:F6:E9:F3:B4:58:F9:C5:FC:41:DE:3F:1D
Certificate issuer:       /CN=D40D71C26E8C990D22430A76496945930ECE72FE
Certificate serial:       605E9BCBF1A39AAF5B61BF6118E8B22FBA38CAF2
Authority key identifier: D4:0D:71:C2:6E:8C:99:0D:22:43:0A:76:49:69:45:93:0E:CE:72:FE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D40D71C26E8C990D22430A76496945930ECE72FE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CozZWaDfdu3BbhkFfSfbs33gaGgMyRfDBEDXRr8xSr8a/0/3137302e3233392e39362e302f32332d3233203d3e20323634333937.roa
Signing time:             Mon 16 Dec 2024 16:27:45 +0000
ROA not before:           Mon 16 Dec 2024 16:22:45 +0000
ROA not after:            Mon 15 Dec 2025 16:27:45 +0000
asID:                     264397
IP address blocks:        170.239.96.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:5e:9b:cb:f1:a3:9a:af:5b:61:bf:61:18:e8:b2:2f:ba:38:ca:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D40D71C26E8C990D22430A76496945930ECE72FE
        Validity
            Not Before: Dec 16 16:22:45 2024 GMT
            Not After : Dec 15 16:27:45 2025 GMT
        Subject: CN=2BC78EEC55011320F6E9F3B458F9C5FC41DE3F1D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:2a:8a:63:e1:e0:f3:a4:9f:e1:48:3f:1c:89:
                    d9:fe:e8:37:eb:9c:e9:a5:eb:39:18:95:63:af:e4:
                    65:73:86:47:0a:da:76:48:2e:08:1e:be:5e:37:4f:
                    44:6b:6d:80:7d:31:cf:a0:36:8c:ae:55:4a:1b:83:
                    d7:61:67:3f:9c:ca:3a:24:a8:df:86:82:ca:ea:b9:
                    58:24:36:44:e3:07:4b:f3:31:bf:1e:89:ed:e8:c7:
                    9b:8a:d8:89:f1:16:52:80:65:de:23:29:ed:04:9b:
                    a4:15:e5:54:aa:44:35:5c:dd:80:10:55:6c:69:fb:
                    a9:38:1f:c7:d3:26:26:76:d9:6d:ff:89:2e:c1:0a:
                    04:f8:7d:fc:09:86:2a:50:bc:ca:ca:42:ee:bd:81:
                    66:32:9e:24:0d:6a:8b:a5:51:d4:16:e0:a2:45:05:
                    b8:ee:ea:19:7b:ca:14:a3:5e:71:2b:05:e5:79:fc:
                    7d:d9:f1:c4:be:93:7e:1f:be:54:6b:c7:5b:86:74:
                    da:25:8d:6c:f0:3e:31:c3:a1:da:9b:7f:c8:1d:dd:
                    4e:90:a3:fe:b8:b7:74:af:f1:6b:0d:02:a4:50:58:
                    7c:29:d3:1c:b3:cb:03:d7:a8:1f:9a:54:45:98:ec:
                    eb:ea:0d:5c:c9:79:c5:5d:17:9a:2f:f2:66:19:bc:
                    65:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:C7:8E:EC:55:01:13:20:F6:E9:F3:B4:58:F9:C5:FC:41:DE:3F:1D
            X509v3 Authority Key Identifier:
                keyid:D4:0D:71:C2:6E:8C:99:0D:22:43:0A:76:49:69:45:93:0E:CE:72:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CozZWaDfdu3BbhkFfSfbs33gaGgMyRfDBEDXRr8xSr8a/0/D40D71C26E8C990D22430A76496945930ECE72FE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D40D71C26E8C990D22430A76496945930ECE72FE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CozZWaDfdu3BbhkFfSfbs33gaGgMyRfDBEDXRr8xSr8a/0/3137302e3233392e39362e302f32332d3233203d3e20323634333937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.239.96.0/23

    Signature Algorithm: sha256WithRSAEncryption
         c1:2f:8c:55:67:68:fe:e1:6b:c9:81:e6:57:d2:ae:73:ae:c6:
         d3:97:79:55:00:99:53:2d:21:d5:88:4f:a6:4b:0f:1c:e2:2f:
         57:d4:c4:90:90:e6:b2:0f:8b:4b:64:17:97:10:16:34:ed:d3:
         b5:ab:f6:d3:38:11:5f:4b:86:bc:a9:57:c8:69:f4:f0:e9:3e:
         2a:a9:dd:fc:34:6d:32:0b:45:1a:59:f7:f6:41:cb:45:4c:a0:
         05:41:b7:a5:f0:c7:15:2b:11:b5:bf:3f:a6:4e:2e:d5:ad:db:
         8c:07:d9:e8:9b:fd:d2:37:3f:bd:0c:30:a2:6b:9b:62:c4:d2:
         3d:df:1d:3b:aa:d6:73:d8:05:76:a8:cd:fa:8c:5c:db:63:67:
         4c:b9:03:36:13:23:69:ee:5d:6d:9e:18:73:a8:c3:43:ce:b5:
         de:57:19:eb:d1:94:88:f6:69:fd:ca:0e:f5:0d:f7:4b:60:91:
         d5:6f:0a:6b:84:06:c2:5b:80:ae:a2:92:1a:02:21:64:13:8f:
         ed:5e:8b:ef:61:55:47:0b:06:61:1c:e5:37:13:af:d2:7d:89:
         62:af:70:57:44:b8:4e:f7:cb:80:56:86:17:2c:28:22:15:a3:
         74:83:6f:c1:a5:41:30:e7:3a:9c:16:db:ca:68:e6:87:35:60:
         cd:0e:3b:9a
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUYF6by/Gjmq9bYb9hGOiyL7o4yvIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDQwRDcxQzI2RThDOTkwRDIyNDMwQTc2NDk2OTQ1OTMw
RUNFNzJGRTAeFw0yNDEyMTYxNjIyNDVaFw0yNTEyMTUxNjI3NDVaMDMxMTAvBgNV
BAMTKDJCQzc4RUVDNTUwMTEzMjBGNkU5RjNCNDU4RjlDNUZDNDFERTNGMUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIKopj4eDzpJ/hSD8cidn+6Dfr
nOml6zkYlWOv5GVzhkcK2nZILggevl43T0RrbYB9Mc+gNoyuVUobg9dhZz+cyjok
qN+GgsrquVgkNkTjB0vzMb8eie3ox5uK2InxFlKAZd4jKe0Em6QV5VSqRDVc3YAQ
VWxp+6k4H8fTJiZ22W3/iS7BCgT4ffwJhipQvMrKQu69gWYyniQNaoulUdQW4KJF
Bbju6hl7yhSjXnErBeV5/H3Z8cS+k34fvlRrx1uGdNoljWzwPjHDodqbf8gd3U6Q
o/64t3Sv8WsNAqRQWHwp0xyzywPXqB+aVEWY7OvqDVzJecVdF5ov8mYZvGVzAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUK8eO7FUBEyD26fO0WPnF/EHePx0wHwYDVR0j
BBgwFoAU1A1xwm6MmQ0iQwp2SWlFkw7Ocv4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ296WldhRGZkdTNCYmhrRmZTZmJzMzNnYUdnTXlSZkRCRURYUnI4eFNy
OGEvMC9ENDBENzFDMjZFOEM5OTBEMjI0MzBBNzY0OTY5NDU5MzBFQ0U3MkZFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Q0MEQ3MUMyNkU4Qzk5MEQy
MjQzMEE3NjQ5Njk0NTkzMEVDRTcyRkUuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0NvelpXYURmZHUzQmJoa0ZmU2ZiczMzZ2FHZ015UmZEQkVEWFJyOHhTcjhhLzAv
MzEzNzMwMmUzMjMzMzkyZTM5MzYyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzMjM2
MzQzMzM5Mzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAGq72AwDQYJKoZIhvcNAQELBQADggEBAMEvjFVn
aP7ha8mB5lfSrnOuxtOXeVUAmVMtIdWIT6ZLDxziL1fUxJCQ5rIPi0tkF5cQFjTt
07Wr9tM4EV9LhrypV8hp9PDpPiqp3fw0bTILRRpZ9/ZBy0VMoAVBt6XwxxUrEbW/
P6ZOLtWt24wH2eib/dI3P70MMKJrm2LE0j3fHTuq1nPYBXaozfqMXNtjZ0y5AzYT
I2nuXW2eGHOow0POtd5XGevRlIj2af3KDvUN90tgkdVvCmuEBsJbgK6ikhoCIWQT
j+1ei+9hVUcLBmEc5TcTr9J9iWKvcFdEuE73y4BWhhcsKCIVo3SDb8GlQTDnOpwW
28po5oc1YM0OO5o=
-----END CERTIFICATE-----
Generated at Wed Apr 9 16:27:39 2025 by rpki-client