Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/E1L1grakzfreepv5Ydoqn2JBrWyyRPvYUJ1v1XmrzA1G/0/3137302e3233312e3137322e302f32322d3232203d3e20323632353930.roa
File:                     3137302e3233312e3137322e302f32322d3232203d3e20323632353930.roa (raw, json)
Hash identifier:          5nbVGnHIRNDMM1SxkNY4rgkKtKFio0shBJZ1Y8aP/ek=
Subject key identifier:   0F:6C:AE:51:C8:89:A4:38:9D:A5:A6:F4:8B:4C:21:F5:B8:2E:85:8A
Certificate issuer:       /CN=E5DBC8B1974C0630B4F705A3FC1449B3F4FEAC02
Certificate serial:       52BE721918E1587610009E32BE0C7FD9861117C4
Authority key identifier: E5:DB:C8:B1:97:4C:06:30:B4:F7:05:A3:FC:14:49:B3:F4:FE:AC:02
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E5DBC8B1974C0630B4F705A3FC1449B3F4FEAC02.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E1L1grakzfreepv5Ydoqn2JBrWyyRPvYUJ1v1XmrzA1G/0/3137302e3233312e3137322e302f32322d3232203d3e20323632353930.roa
Signing time:             Sat 08 Feb 2025 00:52:50 +0000
ROA not before:           Sat 08 Feb 2025 00:47:50 +0000
ROA not after:            Sat 07 Feb 2026 00:52:50 +0000
asID:                     262590
IP address blocks:        170.231.172.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:be:72:19:18:e1:58:76:10:00:9e:32:be:0c:7f:d9:86:11:17:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E5DBC8B1974C0630B4F705A3FC1449B3F4FEAC02
        Validity
            Not Before: Feb  8 00:47:50 2025 GMT
            Not After : Feb  7 00:52:50 2026 GMT
        Subject: CN=0F6CAE51C889A4389DA5A6F48B4C21F5B82E858A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:11:dd:35:07:53:83:3c:2d:0e:1f:82:f5:26:
                    6c:e9:ac:96:e2:c2:2a:03:0d:cc:33:b9:ef:50:0a:
                    a7:92:9b:56:5b:7b:e9:a2:b9:aa:5d:c7:95:ac:12:
                    54:53:9f:6e:e4:91:bb:28:c9:7d:0c:e1:86:f2:d4:
                    5f:f6:b8:8a:67:01:c0:52:1e:ea:7b:00:21:17:eb:
                    9c:4d:fb:76:2a:ef:3d:6b:be:ff:5e:bc:0e:d7:6f:
                    db:56:09:f6:70:de:72:f2:33:b0:ee:cf:9e:46:92:
                    07:d1:45:10:89:a3:2d:17:58:24:2c:46:5a:6f:60:
                    a7:d0:ea:42:d5:52:9d:39:48:3c:2d:27:85:f2:5f:
                    30:8d:b4:f2:79:90:57:97:0b:b6:07:7a:07:d1:e6:
                    96:87:1e:0b:d4:7b:3a:92:9a:d2:13:7f:f5:d4:2e:
                    7d:73:d6:eb:22:58:59:13:b1:55:5d:00:30:4c:91:
                    a8:30:42:97:77:ff:89:60:4d:6b:78:04:9a:7e:39:
                    72:7f:f4:9d:65:f9:36:e1:6f:b9:89:29:8e:ac:73:
                    84:de:34:cd:3e:05:ef:8e:94:06:a7:74:c4:d0:45:
                    df:6c:24:89:e1:cb:c2:bc:04:4d:b5:8a:09:46:80:
                    ec:30:16:08:e5:49:1c:12:81:8e:50:e1:79:bf:cf:
                    00:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:6C:AE:51:C8:89:A4:38:9D:A5:A6:F4:8B:4C:21:F5:B8:2E:85:8A
            X509v3 Authority Key Identifier:
                keyid:E5:DB:C8:B1:97:4C:06:30:B4:F7:05:A3:FC:14:49:B3:F4:FE:AC:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E1L1grakzfreepv5Ydoqn2JBrWyyRPvYUJ1v1XmrzA1G/0/E5DBC8B1974C0630B4F705A3FC1449B3F4FEAC02.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E5DBC8B1974C0630B4F705A3FC1449B3F4FEAC02.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E1L1grakzfreepv5Ydoqn2JBrWyyRPvYUJ1v1XmrzA1G/0/3137302e3233312e3137322e302f32322d3232203d3e20323632353930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.231.172.0/22

    Signature Algorithm: sha256WithRSAEncryption
         14:8b:2e:07:d1:0e:3e:ca:98:f9:79:fa:36:4c:97:90:4c:d5:
         7b:0d:dd:ea:cd:a1:55:6d:22:47:4b:6a:c1:46:e0:cd:e2:89:
         ce:76:5c:10:5e:eb:94:9d:23:f9:1f:03:c0:f9:46:bf:8a:13:
         9a:89:57:3a:0b:7b:a3:b9:c3:23:f3:fa:f2:e9:5b:e1:26:b6:
         51:75:2a:e4:f7:9e:6d:c0:fb:42:36:01:24:10:5d:27:65:5b:
         04:79:3d:27:31:00:13:7a:53:e8:28:b2:f7:3b:cf:3d:16:62:
         bb:f3:79:88:f2:bb:6c:ab:ec:d1:ab:cf:86:87:e9:c9:5d:fb:
         e3:19:2f:7f:55:04:ca:33:2c:85:7d:0b:02:af:6e:a0:ea:bd:
         21:90:0b:88:15:a7:b5:a4:90:c6:cb:61:53:91:ff:ea:ee:6e:
         fd:f4:69:df:50:d3:60:24:42:3e:35:22:1d:ef:4f:6b:85:db:
         0e:49:57:86:09:8e:3a:a1:0e:24:c5:3b:5f:ac:a4:5a:02:85:
         0a:f9:71:fc:ee:41:95:ab:07:26:b3:5f:5a:54:0e:46:df:ae:
         78:b4:26:ef:9a:97:43:71:96:7d:70:5d:91:b5:03:ea:f7:64:
         16:18:3b:04:95:d7:6f:5f:09:06:15:f2:d7:91:06:9b:54:04:
         78:6f:ea:2c
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUUr5yGRjhWHYQAJ4yvgx/2YYRF8QwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTVEQkM4QjE5NzRDMDYzMEI0RjcwNUEzRkMxNDQ5QjNG
NEZFQUMwMjAeFw0yNTAyMDgwMDQ3NTBaFw0yNjAyMDcwMDUyNTBaMDMxMTAvBgNV
BAMTKDBGNkNBRTUxQzg4OUE0Mzg5REE1QTZGNDhCNEMyMUY1QjgyRTg1OEEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD3Ed01B1ODPC0OH4L1JmzprJbi
wioDDcwzue9QCqeSm1Zbe+miuapdx5WsElRTn27kkbsoyX0M4Yby1F/2uIpnAcBS
Hup7ACEX65xN+3Yq7z1rvv9evA7Xb9tWCfZw3nLyM7Duz55GkgfRRRCJoy0XWCQs
RlpvYKfQ6kLVUp05SDwtJ4XyXzCNtPJ5kFeXC7YHegfR5paHHgvUezqSmtITf/XU
Ln1z1usiWFkTsVVdADBMkagwQpd3/4lgTWt4BJp+OXJ/9J1l+Tbhb7mJKY6sc4Te
NM0+Be+OlAandMTQRd9sJInhy8K8BE21iglGgOwwFgjlSRwSgY5Q4Xm/zwB3AgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUD2yuUciJpDidpab0i0wh9bguhYowHwYDVR0j
BBgwFoAU5dvIsZdMBjC09wWj/BRJs/T+rAIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRTFMMWdyYWt6ZnJlZXB2NVlkb3FuMkpCcld5eVJQdllVSjF2MVhtcnpB
MUcvMC9FNURCQzhCMTk3NEMwNjMwQjRGNzA1QTNGQzE0NDlCM0Y0RkVBQzAyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0U1REJDOEIxOTc0QzA2MzBC
NEY3MDVBM0ZDMTQ0OUIzRjRGRUFDMDIuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0UxTDFncmFremZyZWVwdjVZZG9xbjJKQnJXeXlSUHZZVUoxdjFYbXJ6QTFHLzAv
MzEzNzMwMmUzMjMzMzEyZTMxMzczMjJlMzAyZjMyMzIyZDMyMzIyMDNkM2UyMDMy
MzYzMjM1MzkzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAqrnrDANBgkqhkiG9w0BAQsFAAOCAQEAFIsu
B9EOPsqY+Xn6NkyXkEzVew3d6s2hVW0iR0tqwUbgzeKJznZcEF7rlJ0j+R8DwPlG
v4oTmolXOgt7o7nDI/P68ulb4Sa2UXUq5PeebcD7QjYBJBBdJ2VbBHk9JzEAE3pT
6Ciy9zvPPRZiu/N5iPK7bKvs0avPhofpyV374xkvf1UEyjMshX0LAq9uoOq9IZAL
iBWntaSQxsthU5H/6u5u/fRp31DTYCRCPjUiHe9Pa4XbDklXhgmOOqEOJMU7X6yk
WgKFCvlx/O5BlasHJrNfWlQORt+ueLQm75qXQ3GWfXBdkbUD6vdkFhg7BJXXb18J
BhXy15EGm1QEeG/qLA==
-----END CERTIFICATE-----
Generated at Sat Apr 5 21:22:50 2025 by rpki-client