Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DdPBJF5vS1itxFLQxz99XyuJVAZyaXPzsUE9bHw37a3n/1/3137302e3233382e35382e302f32342d3234203d3e20323636333132.roa
File:                     3137302e3233382e35382e302f32342d3234203d3e20323636333132.roa (raw, json)
Hash identifier:          2rEmdKgz//Nur4ZHrC4T1nDivkOAOv/P7I+ZjVjG3sg=
Subject key identifier:   DE:14:85:9B:30:BE:01:36:52:62:C4:E8:1F:01:12:93:8A:89:05:0E
Certificate issuer:       /CN=0A2DC9F591D32599C3AB0561CB8DEF59C396C055
Certificate serial:       10978FDA59DC7D1EA4B7A5164548CBE1BC5A8D2E
Authority key identifier: 0A:2D:C9:F5:91:D3:25:99:C3:AB:05:61:CB:8D:EF:59:C3:96:C0:55
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0A2DC9F591D32599C3AB0561CB8DEF59C396C055.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DdPBJF5vS1itxFLQxz99XyuJVAZyaXPzsUE9bHw37a3n/1/3137302e3233382e35382e302f32342d3234203d3e20323636333132.roa
Signing time:             Thu 20 Mar 2025 00:00:38 +0000
ROA not before:           Wed 19 Mar 2025 23:55:38 +0000
ROA not after:            Thu 19 Mar 2026 00:00:38 +0000
asID:                     266312
IP address blocks:        170.238.58.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:97:8f:da:59:dc:7d:1e:a4:b7:a5:16:45:48:cb:e1:bc:5a:8d:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0A2DC9F591D32599C3AB0561CB8DEF59C396C055
        Validity
            Not Before: Mar 19 23:55:38 2025 GMT
            Not After : Mar 19 00:00:38 2026 GMT
        Subject: CN=DE14859B30BE01365262C4E81F0112938A89050E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:21:a8:26:08:ca:30:19:88:c0:c3:35:e7:ac:
                    40:27:ac:6c:8c:03:91:27:1a:55:51:c4:28:72:7f:
                    c1:3f:df:75:ab:fa:b4:f6:3e:fa:f0:56:fc:05:69:
                    90:5c:15:88:9b:9a:42:5a:0e:2e:95:2b:02:c5:b6:
                    21:fd:73:35:0f:c7:99:32:43:af:a2:d8:fe:6f:c2:
                    ae:fb:70:71:6f:55:66:6b:32:09:c1:2a:58:c8:f8:
                    c2:f8:36:a2:5f:b3:9d:16:91:5c:b3:1d:47:55:0b:
                    c6:58:c8:92:fb:41:dc:b7:5e:94:08:5e:a2:3e:5d:
                    04:f8:ed:0c:19:6c:d6:42:ea:7f:5f:f3:d1:ca:d8:
                    35:7b:a8:db:ba:65:19:e8:aa:51:60:ff:a0:dd:8b:
                    8d:4e:05:7a:f7:79:86:c1:1a:dd:4e:fe:50:c5:a6:
                    4d:81:af:34:ff:ba:24:50:c4:96:ef:0a:7b:6f:2b:
                    6f:e7:08:55:b3:99:f6:ca:02:73:e4:8f:9c:2a:15:
                    fe:ff:1a:63:89:a9:93:6d:a6:2d:59:26:9b:a8:7b:
                    18:cc:fb:3a:e0:d2:ff:05:6b:2d:2c:0c:08:33:37:
                    c7:63:cc:1a:51:1a:6d:d0:89:39:44:63:4c:fb:88:
                    05:ed:9e:e9:0a:15:40:66:71:82:ab:84:a6:7f:87:
                    7c:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:14:85:9B:30:BE:01:36:52:62:C4:E8:1F:01:12:93:8A:89:05:0E
            X509v3 Authority Key Identifier:
                keyid:0A:2D:C9:F5:91:D3:25:99:C3:AB:05:61:CB:8D:EF:59:C3:96:C0:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DdPBJF5vS1itxFLQxz99XyuJVAZyaXPzsUE9bHw37a3n/1/0A2DC9F591D32599C3AB0561CB8DEF59C396C055.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0A2DC9F591D32599C3AB0561CB8DEF59C396C055.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DdPBJF5vS1itxFLQxz99XyuJVAZyaXPzsUE9bHw37a3n/1/3137302e3233382e35382e302f32342d3234203d3e20323636333132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.238.58.0/24

    Signature Algorithm: sha256WithRSAEncryption
         87:8b:16:d8:32:a7:28:ce:ef:7b:13:5c:31:58:07:93:1d:16:
         fe:d0:bf:de:68:5b:38:c9:64:4b:69:bc:b4:f8:ff:f4:ed:2a:
         5b:00:69:19:6f:5c:41:58:e6:55:82:d0:3e:6d:b6:39:2f:c2:
         d2:0a:29:52:74:bc:46:eb:96:de:bf:d5:ee:a8:12:77:55:63:
         12:7b:c8:cf:8a:71:21:fa:5b:5c:77:83:57:bc:f9:61:ae:81:
         f8:48:1f:ab:4f:0b:9f:72:73:22:6b:0f:a5:9d:18:4a:ce:c0:
         e0:82:68:19:8e:af:7e:0e:cc:07:01:4b:19:b3:68:91:42:1e:
         d8:27:e8:4f:f3:6a:24:f2:c4:90:51:27:d7:fe:f9:77:9e:fa:
         96:40:77:41:9b:3f:ec:68:d1:de:ad:0d:5e:53:dc:14:a2:89:
         72:39:b7:6c:ee:8c:90:65:44:6e:06:92:d5:73:8c:55:bf:2c:
         7b:8d:5e:e3:68:79:67:d2:d2:6c:f5:08:2d:22:73:53:e1:12:
         64:13:90:a0:eb:a8:fd:60:4b:0c:52:f3:c0:f9:b6:e9:89:50:
         41:18:c0:29:f2:a5:5b:7b:54:45:69:ac:7a:13:a6:30:07:c3:
         55:4b:1a:2b:71:b6:b6:6b:14:e4:d1:66:e0:67:15:73:b3:43:
         31:62:fb:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 14:43:48 2025 by rpki-client