Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DdPBJF5vS1itxFLQxz99XyuJVAZyaXPzsUE9bHw37a3n/1/3137302e3233382e35372e302f32342d3234203d3e20323636333132.roa
File:                     3137302e3233382e35372e302f32342d3234203d3e20323636333132.roa (raw, json)
Hash identifier:          DjCSjxDO6UMR7RsL+E+7fY5jwinWW66hW063wWQ5YVE=
Subject key identifier:   66:91:0F:B5:59:05:53:35:E9:D9:2F:C3:1E:61:33:88:B4:AB:7B:3D
Certificate issuer:       /CN=0A2DC9F591D32599C3AB0561CB8DEF59C396C055
Certificate serial:       2562E345D4995AC7370DCE156E2721F3067365F2
Authority key identifier: 0A:2D:C9:F5:91:D3:25:99:C3:AB:05:61:CB:8D:EF:59:C3:96:C0:55
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0A2DC9F591D32599C3AB0561CB8DEF59C396C055.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DdPBJF5vS1itxFLQxz99XyuJVAZyaXPzsUE9bHw37a3n/1/3137302e3233382e35372e302f32342d3234203d3e20323636333132.roa
Signing time:             Thu 20 Mar 2025 00:00:38 +0000
ROA not before:           Wed 19 Mar 2025 23:55:38 +0000
ROA not after:            Thu 19 Mar 2026 00:00:38 +0000
asID:                     266312
IP address blocks:        170.238.57.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:62:e3:45:d4:99:5a:c7:37:0d:ce:15:6e:27:21:f3:06:73:65:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0A2DC9F591D32599C3AB0561CB8DEF59C396C055
        Validity
            Not Before: Mar 19 23:55:38 2025 GMT
            Not After : Mar 19 00:00:38 2026 GMT
        Subject: CN=66910FB559055335E9D92FC31E613388B4AB7B3D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:99:8e:37:33:cb:40:af:df:62:84:7c:c1:15:
                    79:fa:ed:a9:90:2d:cd:43:1c:a4:73:c3:7b:63:06:
                    85:ca:d8:d6:6a:8b:fd:53:40:7b:29:b8:50:3b:42:
                    f8:a5:91:07:be:66:dd:ca:2c:e3:98:d5:87:00:3a:
                    42:e6:c4:83:cd:03:be:0f:a9:5c:e6:2f:be:ca:ff:
                    4c:bf:78:b7:82:c6:65:45:ac:cc:61:b7:50:54:0f:
                    10:bc:20:94:63:4d:8c:07:cb:c6:dd:5b:24:73:e3:
                    51:38:e9:f4:41:f5:66:9c:93:d8:d0:0f:c9:4f:f7:
                    e4:36:7f:7c:c7:04:29:2d:93:06:9f:bc:9c:7c:d0:
                    8a:15:1c:02:3e:fd:cb:fc:fa:4b:ce:f1:52:7f:2d:
                    69:f8:34:bb:d6:b4:85:a9:f4:c1:27:92:73:b0:50:
                    6b:a5:7a:ca:34:a8:03:51:dd:e7:60:2f:8e:f4:47:
                    78:f7:11:f0:5b:76:f6:ec:98:be:94:b9:ed:b9:cb:
                    68:5f:66:6f:62:d0:63:7c:af:61:d3:f5:27:0f:5c:
                    99:16:2f:3e:dd:c3:79:d4:9f:b7:43:40:82:77:26:
                    3f:3a:38:f1:e5:0a:9b:76:c3:9a:0e:36:f1:c9:83:
                    c9:3a:85:4c:59:ea:03:7b:89:52:be:bb:75:6a:f1:
                    de:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:91:0F:B5:59:05:53:35:E9:D9:2F:C3:1E:61:33:88:B4:AB:7B:3D
            X509v3 Authority Key Identifier:
                keyid:0A:2D:C9:F5:91:D3:25:99:C3:AB:05:61:CB:8D:EF:59:C3:96:C0:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DdPBJF5vS1itxFLQxz99XyuJVAZyaXPzsUE9bHw37a3n/1/0A2DC9F591D32599C3AB0561CB8DEF59C396C055.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0A2DC9F591D32599C3AB0561CB8DEF59C396C055.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DdPBJF5vS1itxFLQxz99XyuJVAZyaXPzsUE9bHw37a3n/1/3137302e3233382e35372e302f32342d3234203d3e20323636333132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.238.57.0/24

    Signature Algorithm: sha256WithRSAEncryption
         27:b8:37:8c:88:d6:1c:90:d3:0d:f8:ec:c9:24:de:f6:7d:d1:
         8c:32:d7:c4:e9:6a:96:cb:ab:84:29:22:61:ce:75:cc:c1:25:
         bf:b3:8a:92:8c:b2:40:e0:83:d1:8d:0b:27:02:6a:80:79:ed:
         69:d8:e7:f1:55:0f:4c:30:9c:eb:27:69:f9:55:77:84:f6:80:
         f9:f4:8a:08:fb:93:f0:66:01:09:91:43:44:26:65:04:22:38:
         6a:3b:27:a0:fe:71:36:ec:c0:74:b6:fd:0e:93:56:03:2b:53:
         4b:08:7b:30:cf:17:e0:ef:31:0c:72:1f:18:4a:23:35:5d:13:
         8e:cf:ac:b8:4b:c2:4b:f8:74:c4:49:d7:91:8f:b2:6e:14:86:
         4d:ab:ab:e3:86:fc:f8:75:9d:a1:84:3c:31:5e:d4:dc:26:0b:
         6f:02:62:6f:5b:74:c8:b6:bb:45:51:db:ab:ec:40:5b:02:79:
         52:71:40:98:e0:fa:e7:e8:fe:fb:f9:c8:9e:e9:a6:9a:73:79:
         56:a4:d2:e3:b7:45:1a:48:61:bc:b2:32:6a:c3:a5:53:b1:01:
         8a:05:7f:54:bb:69:80:56:c5:91:ce:94:04:5a:65:bd:c8:be:
         b2:43:c8:4f:c8:71:c3:a2:92:e0:0d:18:bb:85:a2:46:76:60:
         45:ab:3c:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 14:38:18 2025 by rpki-client