Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DG9qDAdvPnBq2rMxT84ENPnuYNQG6yD9rKSXx3k6iB8j/1/3137302e302e32342e302f32322d3232203d3e20323634303031.roa
File:                     3137302e302e32342e302f32322d3232203d3e20323634303031.roa (raw, json)
Hash identifier:          qn3DO9Qxcy/H42tjQuxmgcQrS/Y7Ndo7X7bYT7qXR6E=
Subject key identifier:   D0:29:62:8C:8B:FD:60:2D:98:13:DA:36:55:ED:C8:A9:47:B1:90:34
Certificate issuer:       /CN=E4E679E110DA011F952FB409E81E8EC81BAE43EF
Certificate serial:       30E82F6C91EC9C639C8D1B32EF20A6709021B47B
Authority key identifier: E4:E6:79:E1:10:DA:01:1F:95:2F:B4:09:E8:1E:8E:C8:1B:AE:43:EF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E4E679E110DA011F952FB409E81E8EC81BAE43EF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DG9qDAdvPnBq2rMxT84ENPnuYNQG6yD9rKSXx3k6iB8j/1/3137302e302e32342e302f32322d3232203d3e20323634303031.roa
Signing time:             Thu 06 Mar 2025 11:17:51 +0000
ROA not before:           Thu 06 Mar 2025 11:12:51 +0000
ROA not after:            Thu 05 Mar 2026 11:17:51 +0000
asID:                     264001
IP address blocks:        170.0.24.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:e8:2f:6c:91:ec:9c:63:9c:8d:1b:32:ef:20:a6:70:90:21:b4:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E4E679E110DA011F952FB409E81E8EC81BAE43EF
        Validity
            Not Before: Mar  6 11:12:51 2025 GMT
            Not After : Mar  5 11:17:51 2026 GMT
        Subject: CN=D029628C8BFD602D9813DA3655EDC8A947B19034
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:77:fb:b4:78:b6:a7:dd:b0:83:99:0e:5b:eb:
                    3a:bf:0f:16:b2:68:d3:b0:95:32:2e:d6:3b:ea:5d:
                    84:6d:23:98:07:24:fe:2d:22:95:9d:65:6c:76:84:
                    7a:f9:69:27:be:61:8f:5e:ca:dd:a2:20:b4:03:ab:
                    c1:65:86:fc:e7:86:b9:6f:bd:18:d9:a0:c2:ed:f0:
                    04:8d:78:38:df:31:b4:c6:3e:ee:e3:57:ca:16:75:
                    0a:35:bf:65:3a:d2:85:a2:f9:6c:58:af:31:41:a2:
                    97:fb:c9:e3:6e:40:e0:66:40:e2:e0:bd:01:c1:38:
                    a1:b0:95:cd:ab:f3:20:00:db:05:fc:1f:c0:ee:83:
                    0a:3e:bd:7e:16:08:0f:06:07:54:b4:35:58:8d:67:
                    a0:e3:36:fc:d1:af:ab:4a:2e:ab:83:f1:7c:e9:35:
                    5f:7f:7d:09:8d:15:af:a9:95:0a:1e:c9:96:68:95:
                    17:54:0b:dc:db:1b:da:53:3b:72:a5:41:90:d1:11:
                    d5:4e:1d:34:a8:67:69:a8:80:60:d5:37:41:57:79:
                    d2:71:e5:b8:b7:af:18:d9:13:dd:07:5a:4b:49:1c:
                    34:a7:4d:ab:93:96:51:6b:2c:25:e0:31:e3:16:97:
                    29:d4:81:bb:50:ed:4b:3f:d5:fd:77:da:13:ea:e7:
                    39:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:29:62:8C:8B:FD:60:2D:98:13:DA:36:55:ED:C8:A9:47:B1:90:34
            X509v3 Authority Key Identifier:
                keyid:E4:E6:79:E1:10:DA:01:1F:95:2F:B4:09:E8:1E:8E:C8:1B:AE:43:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DG9qDAdvPnBq2rMxT84ENPnuYNQG6yD9rKSXx3k6iB8j/1/E4E679E110DA011F952FB409E81E8EC81BAE43EF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E4E679E110DA011F952FB409E81E8EC81BAE43EF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DG9qDAdvPnBq2rMxT84ENPnuYNQG6yD9rKSXx3k6iB8j/1/3137302e302e32342e302f32322d3232203d3e20323634303031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.0.24.0/22

    Signature Algorithm: sha256WithRSAEncryption
         38:da:12:14:5d:97:b5:c7:38:1c:38:1e:c7:92:de:3b:f9:76:
         b5:02:25:f5:76:14:15:57:8e:4b:5a:53:65:bd:3c:2f:3d:90:
         87:55:d1:48:2a:13:96:1d:05:24:28:6e:0e:da:fc:4b:2e:b3:
         66:0b:42:2b:37:29:6e:00:ae:6a:c6:03:cf:1d:eb:d2:9e:7c:
         2b:ae:bf:05:c8:dd:88:5e:61:9e:2d:2c:c5:55:17:c1:00:2c:
         61:29:18:c2:0f:ba:73:43:c9:f3:fb:77:3e:81:f5:ac:6b:aa:
         f2:9a:6e:32:41:f3:be:3f:82:97:2e:26:ee:8e:33:f0:d9:6c:
         1e:ae:16:de:64:33:a5:a6:a7:d2:53:1e:8b:31:22:86:00:1e:
         c7:03:58:f4:42:fd:7f:d0:f4:d6:53:63:ef:f5:c1:aa:14:81:
         61:fc:54:2b:a7:84:58:ca:54:e5:ae:e6:ec:36:c2:59:e2:54:
         af:47:c3:c0:18:cc:e4:91:73:91:15:8a:54:f5:af:0b:29:d6:
         68:e8:49:12:a4:84:16:2c:17:c7:fb:2d:cb:98:c2:be:91:6c:
         ed:86:b4:18:cd:95:ad:a3:fa:7c:d4:3f:df:0b:b7:4f:1a:59:
         97:3f:ad:ae:4c:ec:e7:79:cf:fa:ea:67:47:d1:d0:96:0f:ac:
         af:57:d7:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 17:11:38 2025 by rpki-client