Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Du9zTgyAyDMfAkiePdQLC3TJevrgMJKUzPLicW1PthzL/0/3137392e3130362e3136382e302f32312d3234203d3e203532393734.roa
File:                     3137392e3130362e3136382e302f32312d3234203d3e203532393734.roa (raw, json)
Hash identifier:          iW6Oqk7fY5JTVOCyxBCgSTxWZAcIJnq+zdnOP/INIsY=
Subject key identifier:   5E:1F:5F:6F:A8:6E:DF:74:25:D6:7B:7E:1E:54:E5:CC:11:C7:B5:3B
Certificate issuer:       /CN=E0B78B98B4094A86E58E4FA9EAD0064F2A8CCF68
Certificate serial:       3676AE4935988FDFECEFC65DE9062630CF895B09
Authority key identifier: E0:B7:8B:98:B4:09:4A:86:E5:8E:4F:A9:EA:D0:06:4F:2A:8C:CF:68
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E0B78B98B4094A86E58E4FA9EAD0064F2A8CCF68.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Du9zTgyAyDMfAkiePdQLC3TJevrgMJKUzPLicW1PthzL/0/3137392e3130362e3136382e302f32312d3234203d3e203532393734.roa
Signing time:             Fri 14 Mar 2025 14:16:59 +0000
ROA not before:           Fri 14 Mar 2025 14:11:59 +0000
ROA not after:            Fri 13 Mar 2026 14:16:59 +0000
asID:                     52974
IP address blocks:        179.106.168.0/21 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:76:ae:49:35:98:8f:df:ec:ef:c6:5d:e9:06:26:30:cf:89:5b:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E0B78B98B4094A86E58E4FA9EAD0064F2A8CCF68
        Validity
            Not Before: Mar 14 14:11:59 2025 GMT
            Not After : Mar 13 14:16:59 2026 GMT
        Subject: CN=5E1F5F6FA86EDF7425D67B7E1E54E5CC11C7B53B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:55:5a:e0:10:2a:0b:5b:a1:ea:17:d8:f6:06:
                    0b:d5:7b:3e:0f:d8:3e:bf:06:73:9c:96:12:60:06:
                    0f:1c:27:86:67:1f:86:c6:b6:d6:d0:f6:e5:5f:d9:
                    70:c1:71:d3:c9:93:d4:67:f6:81:39:11:8a:e2:b7:
                    a0:fd:f4:e9:c0:14:3d:8c:05:24:f9:94:88:d2:7d:
                    2d:9c:c7:68:16:35:75:1a:57:f2:06:7a:df:f0:76:
                    51:09:48:08:b7:d4:09:6a:59:4f:46:8b:8e:11:da:
                    bc:9e:3d:61:4a:6b:3e:a2:c2:53:fd:63:83:dc:69:
                    97:d3:99:26:29:12:5c:aa:95:0e:68:db:33:39:d9:
                    81:56:88:ca:59:fc:03:03:5f:da:8a:29:48:ac:c6:
                    03:e5:05:95:cb:d2:5d:12:5b:9d:0e:6c:2d:0e:82:
                    27:96:c3:20:d0:cf:bd:ca:82:de:03:ae:f0:e8:c5:
                    43:53:11:6e:6a:e4:6a:6d:d1:be:fa:ab:b4:a4:a8:
                    2e:11:3a:b2:07:0f:79:32:85:e7:63:f4:cd:7e:2e:
                    2f:59:f1:f1:ec:ad:d0:0c:28:11:18:f4:dd:16:6d:
                    df:86:55:af:98:9e:4a:62:f1:b3:49:e9:1b:8e:af:
                    3a:f3:fd:88:ed:1f:c4:e9:8e:fc:aa:31:08:bc:84:
                    3d:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:1F:5F:6F:A8:6E:DF:74:25:D6:7B:7E:1E:54:E5:CC:11:C7:B5:3B
            X509v3 Authority Key Identifier:
                keyid:E0:B7:8B:98:B4:09:4A:86:E5:8E:4F:A9:EA:D0:06:4F:2A:8C:CF:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Du9zTgyAyDMfAkiePdQLC3TJevrgMJKUzPLicW1PthzL/0/E0B78B98B4094A86E58E4FA9EAD0064F2A8CCF68.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E0B78B98B4094A86E58E4FA9EAD0064F2A8CCF68.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Du9zTgyAyDMfAkiePdQLC3TJevrgMJKUzPLicW1PthzL/0/3137392e3130362e3136382e302f32312d3234203d3e203532393734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.106.168.0/21

    Signature Algorithm: sha256WithRSAEncryption
         32:02:90:eb:7e:d1:2d:05:99:e0:89:8c:27:b6:79:c9:28:bd:
         a0:1c:bd:c0:9a:28:5c:61:a7:87:a2:dc:b2:c0:d5:e1:ce:7b:
         dc:11:77:39:45:a9:d8:f6:fb:c3:2b:3c:a3:fc:9e:6c:f7:5e:
         89:9c:44:a0:20:86:4f:50:6b:90:f0:ca:fc:46:4f:0a:78:7a:
         f6:2e:99:32:60:6e:c2:64:c0:66:3d:12:6a:d5:c2:9a:73:30:
         19:cb:f1:0e:e2:d8:c0:8b:e2:32:3b:00:8b:71:cf:ca:bb:fd:
         05:ed:d4:31:65:86:9b:ef:e2:81:5b:d8:90:31:58:88:a8:a0:
         cd:3c:b2:e8:6f:af:c4:9d:3f:4d:60:91:a3:82:47:76:27:1d:
         56:9e:23:76:dc:ff:0f:16:32:e5:96:9e:39:e2:f0:ec:f1:cd:
         8c:88:bc:b8:e2:33:1f:89:be:5a:dc:c9:87:e0:d8:e7:8e:97:
         8f:31:18:50:a9:11:e0:72:a6:59:fe:25:5a:17:0a:67:85:03:
         40:f8:6e:46:36:43:09:05:07:ab:35:e7:bf:3c:62:44:f5:56:
         22:81:45:5f:c8:c5:a4:1f:87:1c:69:9d:fd:5a:fe:c8:79:19:
         da:80:68:28:71:8a:c6:c9:1e:80:8b:55:3c:ac:1e:dd:c1:43:
         b9:43:d7:b3
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUNnauSTWYj9/s78Zd6QYmMM+JWwkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTBCNzhCOThCNDA5NEE4NkU1OEU0RkE5RUFEMDA2NEYy
QThDQ0Y2ODAeFw0yNTAzMTQxNDExNTlaFw0yNjAzMTMxNDE2NTlaMDMxMTAvBgNV
BAMTKDVFMUY1RjZGQTg2RURGNzQyNUQ2N0I3RTFFNTRFNUNDMTFDN0I1M0IwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPVVrgECoLW6HqF9j2BgvVez4P
2D6/BnOclhJgBg8cJ4ZnH4bGttbQ9uVf2XDBcdPJk9Rn9oE5EYrit6D99OnAFD2M
BST5lIjSfS2cx2gWNXUaV/IGet/wdlEJSAi31AlqWU9Gi44R2ryePWFKaz6iwlP9
Y4PcaZfTmSYpElyqlQ5o2zM52YFWiMpZ/AMDX9qKKUisxgPlBZXL0l0SW50ObC0O
gieWwyDQz73Kgt4DrvDoxUNTEW5q5Gpt0b76q7SkqC4ROrIHD3kyhedj9M1+Li9Z
8fHsrdAMKBEY9N0Wbd+GVa+Ynkpi8bNJ6RuOrzrz/YjtH8TpjvyqMQi8hD0zAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUXh9fb6hu33Ql1nt+HlTlzBHHtTswHwYDVR0j
BBgwFoAU4LeLmLQJSobljk+p6tAGTyqMz2gwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRHU5elRneUF5RE1mQWtpZVBkUUxDM1RKZXZyZ01KS1V6UExpY1cxUHRo
ekwvMC9FMEI3OEI5OEI0MDk0QTg2RTU4RTRGQTlFQUQwMDY0RjJBOENDRjY4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0UwQjc4Qjk4QjQwOTRBODZF
NThFNEZBOUVBRDAwNjRGMkE4Q0NGNjguY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0R1OXpUZ3lBeURNZkFraWVQZFFMQzNUSmV2cmdNSktVelBMaWNXMVB0aHpMLzAv
MzEzNzM5MmUzMTMwMzYyZTMxMzYzODJlMzAyZjMyMzEyZDMyMzQyMDNkM2UyMDM1
MzIzOTM3MzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAOzaqgwDQYJKoZIhvcNAQELBQADggEBADICkOt+
0S0FmeCJjCe2eckovaAcvcCaKFxhp4ei3LLA1eHOe9wRdzlFqdj2+8MrPKP8nmz3
XomcRKAghk9Qa5DwyvxGTwp4evYumTJgbsJkwGY9EmrVwppzMBnL8Q7i2MCL4jI7
AItxz8q7/QXt1DFlhpvv4oFb2JAxWIiooM08suhvr8SdP01gkaOCR3YnHVaeI3bc
/w8WMuWWnjni8OzxzYyIvLjiMx+JvlrcyYfg2OeOl48xGFCpEeBypln+JVoXCmeF
A0D4bkY2QwkFB6s15788YkT1ViKBRV/IxaQfhxxpnf1a/sh5GdqAaChxisbJHoCL
VTysHt3BQ7lD17M=
-----END CERTIFICATE-----
Generated at Mon Apr 7 02:51:47 2025 by rpki-client