Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DsNym3AhwDJKaistw2zB3shGSWMSA4Pfm6j94ofPU4tB/0/3137302e3234342e32342e302f32342d3234203d3e20323636343839.roa
File:                     3137302e3234342e32342e302f32342d3234203d3e20323636343839.roa (raw, json)
Hash identifier:          G3PdW4Q6v2C+kVls4oMZBmF7av+NAllQnvQnTJWc5lc=
Subject key identifier:   65:2A:C3:FB:AB:5C:F6:9D:7C:FB:89:4B:E5:1B:F3:49:78:CC:EA:21
Certificate issuer:       /CN=DCDF3F704AF3B7D3719CD934C3BA88561969C337
Certificate serial:       012960890E169554FB0535B3F6CDACC6CBF4BEDD
Authority key identifier: DC:DF:3F:70:4A:F3:B7:D3:71:9C:D9:34:C3:BA:88:56:19:69:C3:37
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DCDF3F704AF3B7D3719CD934C3BA88561969C337.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DsNym3AhwDJKaistw2zB3shGSWMSA4Pfm6j94ofPU4tB/0/3137302e3234342e32342e302f32342d3234203d3e20323636343839.roa
Signing time:             Fri 24 Mar 2023 12:06:45 +0000
ROA not before:           Fri 24 Mar 2023 12:01:45 +0000
ROA not after:            Fri 22 Mar 2024 12:06:45 +0000
asID:                     266489
IP address blocks:        170.244.24.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:29:60:89:0e:16:95:54:fb:05:35:b3:f6:cd:ac:c6:cb:f4:be:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DCDF3F704AF3B7D3719CD934C3BA88561969C337
        Validity
            Not Before: Mar 24 12:01:45 2023 GMT
            Not After : Mar 22 12:06:45 2024 GMT
        Subject: CN=652AC3FBAB5CF69D7CFB894BE51BF34978CCEA21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:20:ae:a9:d5:60:e7:b5:67:f6:a0:69:4b:42:
                    a0:c8:ef:c5:8b:bb:94:41:6e:26:8b:92:03:b8:21:
                    88:ba:53:fe:36:4b:c5:8d:25:cf:c5:52:d1:dd:85:
                    a5:89:b1:e7:0d:80:6a:01:68:c6:90:8a:d1:d3:c2:
                    ab:f0:45:8f:72:67:59:b5:3e:41:82:1c:0a:9b:71:
                    cf:fc:2d:ce:89:48:bc:d4:b2:53:f1:6c:13:60:3f:
                    4a:46:ff:74:0f:40:34:48:46:74:b3:84:1b:30:b1:
                    47:27:fd:f2:16:7f:bc:53:90:de:04:fd:6e:f1:2e:
                    47:b3:b7:28:52:f8:8a:19:7f:a8:7c:83:1a:23:87:
                    2f:7e:97:a0:9b:df:c9:ef:5d:ae:cf:d0:97:af:bc:
                    06:b9:25:ca:9c:75:7f:41:f1:fd:2f:5e:65:e8:b8:
                    c6:5c:9d:22:54:43:16:7e:37:eb:72:dc:2b:e2:a2:
                    7e:29:93:d5:65:f7:fa:f2:59:8d:77:71:8b:36:08:
                    f3:70:a2:6b:94:26:ad:59:76:2e:08:b0:6f:93:75:
                    02:41:6d:90:82:27:fa:4a:14:fb:fe:34:58:b9:40:
                    43:68:62:c7:e4:fb:43:c2:28:51:96:8f:b7:e1:18:
                    e8:61:78:82:ef:aa:f9:8e:c1:56:88:b0:1e:c6:a5:
                    dd:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:2A:C3:FB:AB:5C:F6:9D:7C:FB:89:4B:E5:1B:F3:49:78:CC:EA:21
            X509v3 Authority Key Identifier:
                keyid:DC:DF:3F:70:4A:F3:B7:D3:71:9C:D9:34:C3:BA:88:56:19:69:C3:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DsNym3AhwDJKaistw2zB3shGSWMSA4Pfm6j94ofPU4tB/0/DCDF3F704AF3B7D3719CD934C3BA88561969C337.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DCDF3F704AF3B7D3719CD934C3BA88561969C337.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DsNym3AhwDJKaistw2zB3shGSWMSA4Pfm6j94ofPU4tB/0/3137302e3234342e32342e302f32342d3234203d3e20323636343839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.244.24.0/24

    Signature Algorithm: sha256WithRSAEncryption
         85:1d:00:d7:bf:48:30:c7:2b:92:6e:ab:1d:27:0e:a6:2f:f4:
         41:54:7d:f2:b9:1f:85:a7:b6:16:cc:45:06:a5:b2:32:fe:a8:
         d9:4a:34:f7:9e:2f:ff:a4:e8:8e:03:43:9b:fb:89:21:f8:7f:
         77:fe:74:a1:c4:0a:e2:fa:6e:4d:cb:02:e1:12:e7:99:7f:45:
         ec:91:c7:78:0f:05:82:e5:f3:50:fe:0d:20:4e:c5:66:59:5e:
         20:12:dc:c0:61:0b:95:26:38:8c:53:e2:44:da:3a:84:30:32:
         90:7b:fd:bb:e0:92:f0:84:03:7d:4e:04:38:48:71:51:68:4e:
         4a:1f:2a:42:d8:e1:00:d4:5a:3f:27:64:51:90:1b:f5:22:42:
         34:17:cb:81:44:ca:da:79:ec:13:f6:c9:aa:22:0b:55:f6:29:
         6b:44:84:4f:58:2c:a4:d6:a7:60:97:80:d7:4c:fc:2a:95:bb:
         ba:4b:7e:57:f5:2f:8b:fc:4e:3c:72:fd:88:30:c3:0b:30:e8:
         d2:f3:08:e4:93:bb:76:e3:d5:af:2b:be:80:b6:e4:52:cb:ea:
         66:43:cd:cc:d2:e2:67:b8:33:99:be:37:ee:06:31:40:a6:4f:
         a2:fa:da:81:a4:1e:42:bd:be:25:a5:be:4c:0c:d2:41:b3:d2:
         2c:5e:71:ef
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUASlgiQ4WlVT7BTWz9s2sxsv0vt0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRENERjNGNzA0QUYzQjdEMzcxOUNEOTM0QzNCQTg4NTYx
OTY5QzMzNzAeFw0yMzAzMjQxMjAxNDVaFw0yNDAzMjIxMjA2NDVaMDMxMTAvBgNV
BAMTKDY1MkFDM0ZCQUI1Q0Y2OUQ3Q0ZCODk0QkU1MUJGMzQ5NzhDQ0VBMjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/IK6p1WDntWf2oGlLQqDI78WL
u5RBbiaLkgO4IYi6U/42S8WNJc/FUtHdhaWJsecNgGoBaMaQitHTwqvwRY9yZ1m1
PkGCHAqbcc/8Lc6JSLzUslPxbBNgP0pG/3QPQDRIRnSzhBswsUcn/fIWf7xTkN4E
/W7xLkeztyhS+IoZf6h8gxojhy9+l6Cb38nvXa7P0JevvAa5JcqcdX9B8f0vXmXo
uMZcnSJUQxZ+N+ty3Cvion4pk9Vl9/ryWY13cYs2CPNwomuUJq1Zdi4IsG+TdQJB
bZCCJ/pKFPv+NFi5QENoYsfk+0PCKFGWj7fhGOhheILvqvmOwVaIsB7Gpd1lAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUZSrD+6tc9p18+4lL5RvzSXjM6iEwHwYDVR0j
BBgwFoAU3N8/cErzt9NxnNk0w7qIVhlpwzcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRHNOeW0zQWh3REpLYWlzdHcyekIzc2hHU1dNU0E0UGZtNmo5NG9mUFU0
dEIvMC9EQ0RGM0Y3MDRBRjNCN0QzNzE5Q0Q5MzRDM0JBODg1NjE5NjlDMzM3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0RDREYzRjcwNEFGM0I3RDM3
MTlDRDkzNEMzQkE4ODU2MTk2OUMzMzcuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0RzTnltM0Fod0RKS2Fpc3R3MnpCM3NoR1NXTVNBNFBmbTZqOTRvZlBVNHRCLzAv
MzEzNzMwMmUzMjM0MzQyZTMyMzQyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzYzNDM4Mzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBACq9BgwDQYJKoZIhvcNAQELBQADggEBAIUdANe/
SDDHK5Juqx0nDqYv9EFUffK5H4WnthbMRQalsjL+qNlKNPeeL/+k6I4DQ5v7iSH4
f3f+dKHECuL6bk3LAuES55l/ReyRx3gPBYLl81D+DSBOxWZZXiAS3MBhC5UmOIxT
4kTaOoQwMpB7/bvgkvCEA31OBDhIcVFoTkofKkLY4QDUWj8nZFGQG/UiQjQXy4FE
ytp57BP2yaoiC1X2KWtEhE9YLKTWp2CXgNdM/CqVu7pLflf1L4v8Tjxy/Ygwwwsw
6NLzCOSTu3bj1a8rvoC25FLL6mZDzczS4me4M5m+N+4GMUCmT6L62oGkHkK9viWl
vkwM0kGz0ixece8=
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:24:29 2025 by rpki-client