Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CuS6Qy3ijz7LJKcnTGg6NTG4YpEcDCLfzhP2bnEzkPMi/0/3137302e3233312e3233322e302f32322d3232203d3e203532363133.roa
File:                     3137302e3233312e3233322e302f32322d3232203d3e203532363133.roa (raw, json)
Hash identifier:          9svGob5+5IrNagqSkBTaL5vAzbPJU5/n3Jbf+XGM8FA=
Subject key identifier:   9B:53:BB:D8:B0:C3:2E:E2:BE:F7:B2:41:50:B2:94:AD:74:7D:76:0E
Certificate issuer:       /CN=EE41996111A070E5D185B28EC741E0A608B24EDC
Certificate serial:       32993872D700CB5F9CCD59A6D371BC625BF6B26F
Authority key identifier: EE:41:99:61:11:A0:70:E5:D1:85:B2:8E:C7:41:E0:A6:08:B2:4E:DC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE41996111A070E5D185B28EC741E0A608B24EDC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CuS6Qy3ijz7LJKcnTGg6NTG4YpEcDCLfzhP2bnEzkPMi/0/3137302e3233312e3233322e302f32322d3232203d3e203532363133.roa
Signing time:             Wed 06 Mar 2024 14:51:58 +0000
ROA not before:           Wed 06 Mar 2024 14:46:58 +0000
ROA not after:            Wed 05 Mar 2025 14:51:58 +0000
asID:                     52613
IP address blocks:        170.231.232.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:99:38:72:d7:00:cb:5f:9c:cd:59:a6:d3:71:bc:62:5b:f6:b2:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE41996111A070E5D185B28EC741E0A608B24EDC
        Validity
            Not Before: Mar  6 14:46:58 2024 GMT
            Not After : Mar  5 14:51:58 2025 GMT
        Subject: CN=9B53BBD8B0C32EE2BEF7B24150B294AD747D760E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:19:f0:c7:47:b5:47:96:e6:d6:d3:5a:eb:57:
                    09:ad:62:50:b8:20:98:13:1d:68:f3:52:d6:7a:5e:
                    ff:20:fc:f1:e0:e7:84:1a:be:05:e6:e1:38:80:c3:
                    86:fb:40:ed:b5:d5:9a:eb:73:9a:76:2c:62:03:58:
                    0d:fd:fb:24:cc:40:38:59:c5:41:3b:80:69:cb:9e:
                    1e:ad:83:c6:d8:45:c0:a4:33:24:01:bf:7a:d3:a0:
                    24:d0:43:c6:14:d6:b5:e5:86:a3:01:e1:1d:80:1c:
                    6e:69:e0:d0:7a:af:a6:39:dd:2d:d8:ed:4e:57:dd:
                    bd:68:91:78:62:67:d5:84:74:f6:b0:29:ef:b4:1a:
                    b4:33:40:cb:af:a9:84:57:d7:1a:9e:78:e3:7f:06:
                    0d:2e:ac:a5:6d:5b:4a:95:ba:30:08:93:92:c1:be:
                    34:2f:e1:4e:50:88:ad:e7:a2:b9:bb:20:17:a4:f6:
                    a9:1e:6d:08:a9:4d:ab:ea:b1:c2:69:0a:94:93:14:
                    83:67:6b:66:17:1d:33:15:6c:c5:d3:4b:3b:f5:e6:
                    27:26:4e:09:5f:37:b6:54:01:65:0c:c4:f6:5d:24:
                    31:fa:a6:fe:37:3d:34:da:ad:54:0c:98:c3:45:e8:
                    0f:bc:b2:d1:43:15:76:69:d5:80:db:f9:71:60:ac:
                    08:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:53:BB:D8:B0:C3:2E:E2:BE:F7:B2:41:50:B2:94:AD:74:7D:76:0E
            X509v3 Authority Key Identifier:
                keyid:EE:41:99:61:11:A0:70:E5:D1:85:B2:8E:C7:41:E0:A6:08:B2:4E:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CuS6Qy3ijz7LJKcnTGg6NTG4YpEcDCLfzhP2bnEzkPMi/0/EE41996111A070E5D185B28EC741E0A608B24EDC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE41996111A070E5D185B28EC741E0A608B24EDC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CuS6Qy3ijz7LJKcnTGg6NTG4YpEcDCLfzhP2bnEzkPMi/0/3137302e3233312e3233322e302f32322d3232203d3e203532363133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.231.232.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1c:a6:e8:fc:e2:bc:ae:58:ee:6f:a1:88:25:dd:44:ad:fc:fa:
         0c:fd:59:21:56:41:0f:31:60:ac:eb:10:8a:a1:bd:48:f9:55:
         57:b4:a1:52:50:39:96:b8:35:cb:db:ec:fc:9a:03:b2:cc:b4:
         f8:75:9e:b6:59:1b:db:74:ff:c5:77:9a:1e:82:11:09:67:62:
         c4:d4:29:d9:42:a0:76:04:83:33:06:9c:75:7b:ea:80:14:1d:
         24:9a:a7:b8:7f:bc:21:a4:7d:e5:db:88:19:a5:97:d6:97:f4:
         3f:7a:8a:d2:bd:2e:7c:f5:b0:ce:d8:63:42:d5:69:2d:f8:d1:
         14:66:fe:74:4c:62:08:73:ed:b2:a4:25:21:57:c1:1d:87:1c:
         51:71:44:cf:73:c7:ad:2e:b1:4b:da:cc:24:82:40:9a:36:4c:
         5a:f1:25:54:e9:39:e3:13:52:98:32:16:c1:73:09:b5:09:38:
         2e:75:56:39:0a:31:2b:9a:78:e0:d8:5a:54:c2:8a:1c:24:55:
         6e:b4:27:1a:c8:1a:3b:52:7f:1f:80:7a:4d:63:b3:d7:d0:fd:
         77:82:a5:68:f4:8a:be:89:f3:fa:9a:d5:b8:ad:d5:9d:97:dc:
         6e:09:78:96:a5:8b:af:2c:05:df:56:15:3f:74:55:ac:61:37:
         da:9b:ba:25
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUMpk4ctcAy1+czVmm03G8Ylv2sm8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU0MTk5NjExMUEwNzBFNUQxODVCMjhFQzc0MUUwQTYw
OEIyNEVEQzAeFw0yNDAzMDYxNDQ2NThaFw0yNTAzMDUxNDUxNThaMDMxMTAvBgNV
BAMTKDlCNTNCQkQ4QjBDMzJFRTJCRUY3QjI0MTUwQjI5NEFENzQ3RDc2MEUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTGfDHR7VHlubW01rrVwmtYlC4
IJgTHWjzUtZ6Xv8g/PHg54QavgXm4TiAw4b7QO211Zrrc5p2LGIDWA39+yTMQDhZ
xUE7gGnLnh6tg8bYRcCkMyQBv3rToCTQQ8YU1rXlhqMB4R2AHG5p4NB6r6Y53S3Y
7U5X3b1okXhiZ9WEdPawKe+0GrQzQMuvqYRX1xqeeON/Bg0urKVtW0qVujAIk5LB
vjQv4U5QiK3norm7IBek9qkebQipTavqscJpCpSTFINna2YXHTMVbMXTSzv15icm
TglfN7ZUAWUMxPZdJDH6pv43PTTarVQMmMNF6A+8stFDFXZp1YDb+XFgrAhhAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUm1O72LDDLuK+97JBULKUrXR9dg4wHwYDVR0j
BBgwFoAU7kGZYRGgcOXRhbKOx0HgpgiyTtwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ3VTNlF5M2lqejdMSktjblRHZzZOVEc0WXBFY0RDTGZ6aFAyYm5FemtQ
TWkvMC9FRTQxOTk2MTExQTA3MEU1RDE4NUIyOEVDNzQxRTBBNjA4QjI0RURDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0VFNDE5OTYxMTFBMDcwRTVE
MTg1QjI4RUM3NDFFMEE2MDhCMjRFREMuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0N1UzZReTNpano3TEpLY25UR2c2TlRHNFlwRWNEQ0xmemhQMmJuRXprUE1pLzAv
MzEzNzMwMmUzMjMzMzEyZTMyMzMzMjJlMzAyZjMyMzIyZDMyMzIyMDNkM2UyMDM1
MzIzNjMxMzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAKq5+gwDQYJKoZIhvcNAQELBQADggEBABym6Pzi
vK5Y7m+hiCXdRK38+gz9WSFWQQ8xYKzrEIqhvUj5VVe0oVJQOZa4Ncvb7PyaA7LM
tPh1nrZZG9t0/8V3mh6CEQlnYsTUKdlCoHYEgzMGnHV76oAUHSSap7h/vCGkfeXb
iBmll9aX9D96itK9Lnz1sM7YY0LVaS340RRm/nRMYghz7bKkJSFXwR2HHFFxRM9z
x60usUvazCSCQJo2TFrxJVTpOeMTUpgyFsFzCbUJOC51VjkKMSuaeODYWlTCihwk
VW60JxrIGjtSfx+Aek1js9fQ/XeCpWj0ir6J8/qa1bit1Z2X3G4JeJali68sBd9W
FT90VaxhN9qbuiU=
-----END CERTIFICATE-----
Generated at Fri Mar 14 05:22:27 2025 by rpki-client