Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DG9qDAdvPnBq2rMxT84ENPnuYNQG6yD9rKSXx3k6iB8j/1/3137302e302e32372e302f32342d3234203d3e20323634303031.roa
File:                     3137302e302e32372e302f32342d3234203d3e20323634303031.roa (raw, json)
Hash identifier:          TwcH8J/89GcHIqxUaC/vWa6mggoYIEUBDLs3PHwOWX4=
Subject key identifier:   75:3C:82:79:BA:6A:5D:D3:4C:54:C9:62:CB:AD:DC:6E:D8:40:55:CE
Certificate issuer:       /CN=E4E679E110DA011F952FB409E81E8EC81BAE43EF
Certificate serial:       08A8DB35BE5446FFBA746A066B5FDD699068F36F
Authority key identifier: E4:E6:79:E1:10:DA:01:1F:95:2F:B4:09:E8:1E:8E:C8:1B:AE:43:EF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E4E679E110DA011F952FB409E81E8EC81BAE43EF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DG9qDAdvPnBq2rMxT84ENPnuYNQG6yD9rKSXx3k6iB8j/1/3137302e302e32372e302f32342d3234203d3e20323634303031.roa
Signing time:             Thu 06 Mar 2025 11:17:51 +0000
ROA not before:           Thu 06 Mar 2025 11:12:51 +0000
ROA not after:            Thu 05 Mar 2026 11:17:51 +0000
asID:                     264001
IP address blocks:        170.0.27.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:a8:db:35:be:54:46:ff:ba:74:6a:06:6b:5f:dd:69:90:68:f3:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E4E679E110DA011F952FB409E81E8EC81BAE43EF
        Validity
            Not Before: Mar  6 11:12:51 2025 GMT
            Not After : Mar  5 11:17:51 2026 GMT
        Subject: CN=753C8279BA6A5DD34C54C962CBADDC6ED84055CE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:6c:cc:de:dc:94:49:73:d7:04:d9:46:fc:30:
                    6f:89:0b:e3:14:27:b9:e7:86:70:6e:88:e6:49:ca:
                    93:6a:3f:bf:c5:33:1c:15:d2:d9:e5:83:ed:03:61:
                    d8:12:ee:22:1a:cb:0e:f2:01:fa:a6:e9:82:51:60:
                    1b:1a:ec:c6:16:38:3b:16:79:3f:42:9e:87:6e:4b:
                    34:88:d4:9b:c0:e2:e5:6d:75:a3:33:dd:a1:89:53:
                    74:fc:45:91:1b:32:d2:7b:a1:aa:b8:12:ff:29:95:
                    eb:86:81:49:a5:c5:f2:89:f0:8e:8b:ee:10:ea:bd:
                    bd:9b:de:0e:f9:df:ac:e8:41:12:59:4f:58:62:2f:
                    d7:34:3a:ac:4b:84:74:8e:fb:47:a4:be:19:a7:ae:
                    c5:8e:9b:f2:b2:91:c3:d6:87:f1:c3:28:84:8c:89:
                    73:73:94:39:fc:c2:a8:19:a4:52:e2:75:8d:8e:fc:
                    e7:b6:75:68:2e:42:72:5b:bb:58:e9:06:a9:72:6f:
                    a9:98:ea:81:cd:16:3f:ea:53:08:21:58:33:6b:59:
                    04:8d:46:8e:53:bb:ca:4e:0b:85:5f:57:6a:ad:77:
                    2e:82:ff:d7:e7:d4:86:df:aa:96:d4:84:ff:88:66:
                    ad:03:ec:0c:2f:72:3f:95:e2:a7:90:8e:40:b5:55:
                    02:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:3C:82:79:BA:6A:5D:D3:4C:54:C9:62:CB:AD:DC:6E:D8:40:55:CE
            X509v3 Authority Key Identifier:
                keyid:E4:E6:79:E1:10:DA:01:1F:95:2F:B4:09:E8:1E:8E:C8:1B:AE:43:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DG9qDAdvPnBq2rMxT84ENPnuYNQG6yD9rKSXx3k6iB8j/1/E4E679E110DA011F952FB409E81E8EC81BAE43EF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E4E679E110DA011F952FB409E81E8EC81BAE43EF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DG9qDAdvPnBq2rMxT84ENPnuYNQG6yD9rKSXx3k6iB8j/1/3137302e302e32372e302f32342d3234203d3e20323634303031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.0.27.0/24

    Signature Algorithm: sha256WithRSAEncryption
         17:e3:c8:bd:be:10:fd:85:54:ba:e8:74:42:6f:49:05:eb:e8:
         86:24:de:6c:47:a4:3d:24:8a:41:e1:06:39:ae:f8:15:3e:02:
         75:ba:0b:dc:d9:59:1c:91:23:20:04:f6:fd:8b:71:c1:3b:58:
         27:f7:44:e4:c0:61:36:6a:52:53:89:70:91:ae:16:81:57:d0:
         a1:c5:98:4f:8d:e1:b3:43:ea:11:51:b4:36:b8:81:5b:eb:52:
         6b:d8:e6:07:70:2e:68:db:7a:24:52:33:10:75:05:c6:89:3f:
         94:5d:63:dc:3d:c3:d7:85:58:92:2b:54:84:ed:e7:00:ed:e4:
         66:c2:6b:cb:a2:72:7a:79:c9:ce:37:3c:1e:00:ac:ee:c7:25:
         2c:89:1c:5b:a8:11:32:c8:4b:11:c8:87:91:67:f3:2b:9e:75:
         a1:42:ee:58:1a:16:c7:38:0f:bc:f6:a7:1f:97:84:f7:ae:79:
         b4:18:5e:98:c2:dc:b7:ad:de:73:92:76:c8:93:8e:62:49:16:
         16:fc:e3:da:e5:75:b2:83:ef:a7:3c:e1:49:c2:7f:3e:20:e6:
         7a:93:88:ea:88:6f:7e:66:f7:a3:59:25:b3:c4:a1:b1:87:cd:
         4a:67:c4:04:6d:e6:86:b1:e4:82:11:96:a4:28:62:20:74:5a:
         dd:ba:0c:4a
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUCKjbNb5URv+6dGoGa1/daZBo828wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTRFNjc5RTExMERBMDExRjk1MkZCNDA5RTgxRThFQzgx
QkFFNDNFRjAeFw0yNTAzMDYxMTEyNTFaFw0yNjAzMDUxMTE3NTFaMDMxMTAvBgNV
BAMTKDc1M0M4Mjc5QkE2QTVERDM0QzU0Qzk2MkNCQUREQzZFRDg0MDU1Q0UwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFbMze3JRJc9cE2Ub8MG+JC+MU
J7nnhnBuiOZJypNqP7/FMxwV0tnlg+0DYdgS7iIayw7yAfqm6YJRYBsa7MYWODsW
eT9CnoduSzSI1JvA4uVtdaMz3aGJU3T8RZEbMtJ7oaq4Ev8pleuGgUmlxfKJ8I6L
7hDqvb2b3g7536zoQRJZT1hiL9c0OqxLhHSO+0ekvhmnrsWOm/KykcPWh/HDKISM
iXNzlDn8wqgZpFLidY2O/Oe2dWguQnJbu1jpBqlyb6mY6oHNFj/qUwghWDNrWQSN
Ro5Tu8pOC4VfV2qtdy6C/9fn1IbfqpbUhP+IZq0D7Awvcj+V4qeQjkC1VQJ3AgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUdTyCebpqXdNMVMliy63cbthAVc4wHwYDVR0j
BBgwFoAU5OZ54RDaAR+VL7QJ6B6OyBuuQ+8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vREc5cURBZHZQbkJxMnJNeFQ4NEVOUG51WU5RRzZ5RDlyS1NYeDNrNmlC
OGovMS9FNEU2NzlFMTEwREEwMTFGOTUyRkI0MDlFODFFOEVDODFCQUU0M0VGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0U0RTY3OUUxMTBEQTAxMUY5
NTJGQjQwOUU4MUU4RUM4MUJBRTQzRUYuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0RHOXFEQWR2UG5CcTJyTXhUODRFTlBudVlOUUc2eUQ5cktTWHgzazZpQjhqLzEv
MzEzNzMwMmUzMDJlMzIzNzJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzYzNDMw
MzAzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEAKoAGzANBgkqhkiG9w0BAQsFAAOCAQEAF+PIvb4Q/YVU
uuh0Qm9JBevohiTebEekPSSKQeEGOa74FT4CdboL3NlZHJEjIAT2/YtxwTtYJ/dE
5MBhNmpSU4lwka4WgVfQocWYT43hs0PqEVG0NriBW+tSa9jmB3AuaNt6JFIzEHUF
xok/lF1j3D3D14VYkitUhO3nAO3kZsJry6JyennJzjc8HgCs7sclLIkcW6gRMshL
EciHkWfzK551oULuWBoWxzgPvPanH5eE9655tBhemMLct63ec5J2yJOOYkkWFvzj
2uV1soPvpzzhScJ/PiDmepOI6ohvfmb3o1kls8ShsYfNSmfEBG3mhrHkghGWpChi
IHRa3boMSg==
-----END CERTIFICATE-----
Generated at Sun Apr 6 17:16:38 2025 by rpki-client