Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DdPBJF5vS1itxFLQxz99XyuJVAZyaXPzsUE9bHw37a3n/1/3137302e3233382e35362e302f32322d3232203d3e20323636333132.roa
File:                     3137302e3233382e35362e302f32322d3232203d3e20323636333132.roa (raw, json)
Hash identifier:          VS3KH0PiNeiQcK83tqryKnRiXIQUtKzkzwf3JDNGOyg=
Subject key identifier:   FF:19:A5:F9:F8:AB:10:3C:13:55:6A:0A:98:25:FF:C6:EA:80:21:85
Certificate issuer:       /CN=0A2DC9F591D32599C3AB0561CB8DEF59C396C055
Certificate serial:       61E4BB85862829925C30449418EB8F4370DABEBE
Authority key identifier: 0A:2D:C9:F5:91:D3:25:99:C3:AB:05:61:CB:8D:EF:59:C3:96:C0:55
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0A2DC9F591D32599C3AB0561CB8DEF59C396C055.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DdPBJF5vS1itxFLQxz99XyuJVAZyaXPzsUE9bHw37a3n/1/3137302e3233382e35362e302f32322d3232203d3e20323636333132.roa
Signing time:             Thu 06 Mar 2025 13:00:35 +0000
ROA not before:           Thu 06 Mar 2025 12:55:35 +0000
ROA not after:            Thu 05 Mar 2026 13:00:35 +0000
asID:                     266312
IP address blocks:        170.238.56.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:e4:bb:85:86:28:29:92:5c:30:44:94:18:eb:8f:43:70:da:be:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0A2DC9F591D32599C3AB0561CB8DEF59C396C055
        Validity
            Not Before: Mar  6 12:55:35 2025 GMT
            Not After : Mar  5 13:00:35 2026 GMT
        Subject: CN=FF19A5F9F8AB103C13556A0A9825FFC6EA802185
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:5d:22:6f:9b:a6:f2:06:6b:4c:57:e8:f8:53:
                    81:32:cc:de:3b:1c:9e:8c:c6:2b:51:2e:ae:02:35:
                    42:03:49:5b:5c:69:d2:27:11:f5:b8:a2:ca:2a:b8:
                    c7:55:76:08:1a:9d:15:6e:1b:ac:4b:b7:1f:d2:b3:
                    e8:11:94:ac:53:30:89:5b:d5:36:c2:9c:d9:ec:fd:
                    8d:7b:8d:ce:09:39:13:36:ad:88:7b:e8:2d:09:02:
                    74:91:fd:f7:84:66:74:ea:cb:b6:e5:db:97:84:cb:
                    87:6d:df:16:06:3b:74:18:ba:08:fa:bd:ae:9d:bb:
                    e3:1e:64:7f:af:22:5d:3d:cd:2a:33:24:b8:02:a4:
                    46:01:9a:0f:4c:a8:89:d9:1d:57:91:f9:b3:1e:e7:
                    f5:79:e8:25:24:0e:e2:f9:e6:75:35:fb:cb:a4:b9:
                    f9:66:de:bc:98:b0:1d:33:76:13:67:fb:8a:96:49:
                    9f:b9:90:73:e9:79:86:00:3b:98:fd:c7:38:9f:a9:
                    68:2b:73:50:9c:01:41:89:49:36:0d:7b:1c:de:0f:
                    a9:23:45:5d:69:41:e5:1c:00:e2:aa:17:f0:80:7b:
                    92:86:22:40:5e:62:a5:3a:d7:97:c0:b3:02:40:7d:
                    3c:0c:a8:36:a3:a8:44:c0:2e:aa:40:8e:05:5f:47:
                    88:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:19:A5:F9:F8:AB:10:3C:13:55:6A:0A:98:25:FF:C6:EA:80:21:85
            X509v3 Authority Key Identifier:
                keyid:0A:2D:C9:F5:91:D3:25:99:C3:AB:05:61:CB:8D:EF:59:C3:96:C0:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DdPBJF5vS1itxFLQxz99XyuJVAZyaXPzsUE9bHw37a3n/1/0A2DC9F591D32599C3AB0561CB8DEF59C396C055.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0A2DC9F591D32599C3AB0561CB8DEF59C396C055.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DdPBJF5vS1itxFLQxz99XyuJVAZyaXPzsUE9bHw37a3n/1/3137302e3233382e35362e302f32322d3232203d3e20323636333132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.238.56.0/22

    Signature Algorithm: sha256WithRSAEncryption
         da:72:42:f9:7f:1c:d9:3d:2a:af:83:6a:44:4f:51:65:02:c0:
         15:f9:2e:a6:68:b7:4b:8e:47:02:5e:d2:88:2e:95:59:13:ed:
         10:85:28:6b:bd:21:0b:55:f4:34:12:3e:45:2c:94:53:33:76:
         ff:5c:0c:6a:9a:5b:f0:93:d8:67:63:a0:45:6c:18:a3:6a:c9:
         73:19:94:2c:59:89:90:4e:7b:30:9e:68:f0:00:55:4d:13:aa:
         49:62:2a:eb:0a:bd:74:61:53:20:87:48:5d:8e:78:d8:bb:d7:
         5e:28:0b:b4:92:96:c6:0a:40:0e:0b:c2:fa:cf:fc:9b:42:1d:
         52:cd:66:29:c2:86:22:93:e6:fc:e6:60:41:12:d4:75:47:84:
         bb:99:f8:6c:57:8c:5f:a4:ac:34:d5:8f:ea:af:1d:bd:f3:f6:
         71:43:ae:7b:40:58:37:1b:d2:69:49:9a:2c:dd:5d:f7:7b:63:
         9a:74:4d:02:57:7b:37:01:a2:b4:a5:9c:74:dc:a2:c3:9d:d9:
         2b:aa:69:0a:1c:f5:1c:9d:0d:f5:fd:32:71:e9:be:5a:d9:f7:
         f5:0a:69:14:ae:61:7c:da:0c:68:52:39:35:fd:09:21:7b:a0:
         2e:d2:c4:79:0d:21:dc:bf:5a:19:5f:91:e0:59:2e:df:1b:76:
         d4:d5:81:a1
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUYeS7hYYoKZJcMESUGOuPQ3Davr4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEEyREM5RjU5MUQzMjU5OUMzQUIwNTYxQ0I4REVGNTlD
Mzk2QzA1NTAeFw0yNTAzMDYxMjU1MzVaFw0yNjAzMDUxMzAwMzVaMDMxMTAvBgNV
BAMTKEZGMTlBNUY5RjhBQjEwM0MxMzU1NkEwQTk4MjVGRkM2RUE4MDIxODUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+XSJvm6byBmtMV+j4U4EyzN47
HJ6MxitRLq4CNUIDSVtcadInEfW4osoquMdVdgganRVuG6xLtx/Ss+gRlKxTMIlb
1TbCnNns/Y17jc4JORM2rYh76C0JAnSR/feEZnTqy7bl25eEy4dt3xYGO3QYugj6
va6du+MeZH+vIl09zSozJLgCpEYBmg9MqInZHVeR+bMe5/V56CUkDuL55nU1+8uk
uflm3ryYsB0zdhNn+4qWSZ+5kHPpeYYAO5j9xzifqWgrc1CcAUGJSTYNexzeD6kj
RV1pQeUcAOKqF/CAe5KGIkBeYqU615fAswJAfTwMqDajqETALqpAjgVfR4ibAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU/xml+firEDwTVWoKmCX/xuqAIYUwHwYDVR0j
BBgwFoAUCi3J9ZHTJZnDqwVhy43vWcOWwFUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRGRQQkpGNXZTMWl0eEZMUXh6OTlYeXVKVkFaeWFYUHpzVUU5Ykh3Mzdh
M24vMS8wQTJEQzlGNTkxRDMyNTk5QzNBQjA1NjFDQjhERUY1OUMzOTZDMDU1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzBBMkRDOUY1OTFEMzI1OTlD
M0FCMDU2MUNCOERFRjU5QzM5NkMwNTUuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0RkUEJKRjV2UzFpdHhGTFF4ejk5WHl1SlZBWnlhWFB6c1VFOWJIdzM3YTNuLzEv
MzEzNzMwMmUzMjMzMzgyZTM1MzYyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzMjM2
MzYzMzMxMzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAKq7jgwDQYJKoZIhvcNAQELBQADggEBANpyQvl/
HNk9Kq+DakRPUWUCwBX5LqZot0uORwJe0ogulVkT7RCFKGu9IQtV9DQSPkUslFMz
dv9cDGqaW/CT2GdjoEVsGKNqyXMZlCxZiZBOezCeaPAAVU0TqkliKusKvXRhUyCH
SF2OeNi7114oC7SSlsYKQA4LwvrP/JtCHVLNZinChiKT5vzmYEES1HVHhLuZ+GxX
jF+krDTVj+qvHb3z9nFDrntAWDcb0mlJmizdXfd7Y5p0TQJXezcBorSlnHTcosOd
2SuqaQoc9RydDfX9MnHpvlrZ9/UKaRSuYXzaDGhSOTX9CSF7oC7SxHkNIdy/Whlf
keBZLt8bdtTVgaE=
-----END CERTIFICATE-----
Generated at Sat Apr 5 14:33:26 2025 by rpki-client