Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/E1L1grakzfreepv5Ydoqn2JBrWyyRPvYUJ1v1XmrzA1G/0/3137302e3233312e3137342e302f32332d3233203d3e20323632353930.roa
File:                     3137302e3233312e3137342e302f32332d3233203d3e20323632353930.roa (raw, json)
Hash identifier:          +4cjg2fPwBotIldcG2kpLSrXyEQYkxnXc38EN3io4iU=
Subject key identifier:   FB:15:59:EC:72:03:F1:F7:A8:16:7E:DE:32:49:5C:C0:7A:89:C6:2D
Certificate issuer:       /CN=AC7596BD33B9167E922BE54B9B004B12EAD19D29
Certificate serial:       458A2F91F1EC9DB6A869CFB8C06C4664DC72F1FE
Authority key identifier: AC:75:96:BD:33:B9:16:7E:92:2B:E5:4B:9B:00:4B:12:EA:D1:9D:29
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC7596BD33B9167E922BE54B9B004B12EAD19D29.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E1L1grakzfreepv5Ydoqn2JBrWyyRPvYUJ1v1XmrzA1G/0/3137302e3233312e3137342e302f32332d3233203d3e20323632353930.roa
Signing time:             Tue 04 Mar 2025 13:33:50 +0000
ROA not before:           Tue 04 Mar 2025 13:28:50 +0000
ROA not after:            Tue 03 Mar 2026 13:33:50 +0000
asID:                     262590
IP address blocks:        170.231.174.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:8a:2f:91:f1:ec:9d:b6:a8:69:cf:b8:c0:6c:46:64:dc:72:f1:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC7596BD33B9167E922BE54B9B004B12EAD19D29
        Validity
            Not Before: Mar  4 13:28:50 2025 GMT
            Not After : Mar  3 13:33:50 2026 GMT
        Subject: CN=FB1559EC7203F1F7A8167EDE32495CC07A89C62D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:91:82:58:a7:ce:d0:04:57:9e:93:2d:3f:b1:
                    32:08:58:c9:7e:ca:7d:84:26:4a:8a:4f:09:99:9c:
                    db:06:b9:33:f0:aa:eb:ad:77:21:63:30:49:51:ae:
                    e2:f2:36:5f:3d:04:b2:22:36:bb:b5:a3:88:df:28:
                    3f:e1:6d:46:b9:d4:2e:7a:a0:86:32:ef:71:58:9c:
                    a3:79:6a:22:25:a4:4e:55:82:0f:95:0f:3b:c1:96:
                    8f:eb:de:70:b8:b8:f8:82:87:07:5b:7c:68:2a:71:
                    88:2d:3b:15:68:86:81:3b:71:ed:63:fe:a0:c3:f3:
                    5c:76:a2:99:cf:70:81:44:d3:92:2a:b0:52:f3:7b:
                    0f:33:fb:ed:20:17:13:40:ee:7e:b9:96:34:0a:9c:
                    16:e4:d3:fd:4d:d6:b2:92:f0:df:ec:68:9d:05:3a:
                    38:1b:83:94:7f:ae:66:ac:d3:3d:a9:47:ed:c4:df:
                    32:a6:d4:a0:5d:4e:ca:f7:56:95:6d:39:b4:7f:b4:
                    93:94:38:72:d7:4c:48:43:01:76:32:cd:22:a5:89:
                    d6:ef:2a:52:07:9f:f9:23:56:29:b1:b8:16:a8:0e:
                    25:54:e0:37:c9:7f:ec:8d:bf:87:a5:0f:ce:f2:af:
                    c8:67:c2:ff:df:e9:95:dc:0d:63:07:2c:05:4e:1f:
                    fa:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:15:59:EC:72:03:F1:F7:A8:16:7E:DE:32:49:5C:C0:7A:89:C6:2D
            X509v3 Authority Key Identifier:
                keyid:AC:75:96:BD:33:B9:16:7E:92:2B:E5:4B:9B:00:4B:12:EA:D1:9D:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E1L1grakzfreepv5Ydoqn2JBrWyyRPvYUJ1v1XmrzA1G/0/AC7596BD33B9167E922BE54B9B004B12EAD19D29.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC7596BD33B9167E922BE54B9B004B12EAD19D29.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E1L1grakzfreepv5Ydoqn2JBrWyyRPvYUJ1v1XmrzA1G/0/3137302e3233312e3137342e302f32332d3233203d3e20323632353930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.231.174.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7a:d1:ad:78:fe:22:b3:f3:52:b6:d3:05:a7:9f:f3:c4:36:76:
         b2:42:bb:c2:56:72:06:45:d4:77:d4:32:e9:8f:cb:74:6e:2c:
         44:63:d8:31:5a:14:8c:8b:67:ce:17:99:2e:f4:5a:6c:16:2a:
         f1:01:a8:72:76:bf:24:81:c2:82:d8:cf:76:6c:2f:ef:63:81:
         3c:83:dc:9c:e9:a4:d8:06:cc:a7:4d:b7:e0:dc:06:b3:01:92:
         66:87:02:bb:cd:37:96:86:98:21:11:5e:09:79:c2:a7:5c:ef:
         f0:80:f9:b4:93:2c:f1:80:60:34:ae:00:68:10:4f:7e:45:cd:
         7c:fd:0d:51:f5:d8:e1:c7:e2:6a:cb:3e:53:46:ad:72:56:f4:
         40:2e:fb:7d:07:97:15:af:b6:cb:b7:4e:df:f0:43:56:cc:6b:
         4e:ca:5d:17:5e:8b:7d:38:7b:fc:bb:f8:f2:4e:f1:3b:74:4a:
         ec:6f:91:3b:7c:56:1d:b4:98:cf:de:74:94:16:2d:f3:45:7e:
         ee:c1:22:59:34:50:7e:c5:c3:e0:58:65:2b:69:6f:82:92:7b:
         78:96:2c:96:4f:70:69:ac:0f:38:4d:b5:dc:84:ab:80:24:5d:
         59:ad:3c:58:a7:3c:79:d6:19:3f:43:8f:a3:bc:b8:ea:f4:79:
         85:1e:59:69
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIURYovkfHsnbaoac+4wGxGZNxy8f4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUM3NTk2QkQzM0I5MTY3RTkyMkJFNTRCOUIwMDRCMTJF
QUQxOUQyOTAeFw0yNTAzMDQxMzI4NTBaFw0yNjAzMDMxMzMzNTBaMDMxMTAvBgNV
BAMTKEZCMTU1OUVDNzIwM0YxRjdBODE2N0VERTMyNDk1Q0MwN0E4OUM2MkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD3kYJYp87QBFeeky0/sTIIWMl+
yn2EJkqKTwmZnNsGuTPwquutdyFjMElRruLyNl89BLIiNru1o4jfKD/hbUa51C56
oIYy73FYnKN5aiIlpE5Vgg+VDzvBlo/r3nC4uPiChwdbfGgqcYgtOxVohoE7ce1j
/qDD81x2opnPcIFE05IqsFLzew8z++0gFxNA7n65ljQKnBbk0/1N1rKS8N/saJ0F
Ojgbg5R/rmas0z2pR+3E3zKm1KBdTsr3VpVtObR/tJOUOHLXTEhDAXYyzSKlidbv
KlIHn/kjVimxuBaoDiVU4DfJf+yNv4elD87yr8hnwv/f6ZXcDWMHLAVOH/o3AgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQU+xVZ7HID8feoFn7eMklcwHqJxi0wHwYDVR0j
BBgwFoAUrHWWvTO5Fn6SK+VLmwBLEurRnSkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRTFMMWdyYWt6ZnJlZXB2NVlkb3FuMkpCcld5eVJQdllVSjF2MVhtcnpB
MUcvMC9BQzc1OTZCRDMzQjkxNjdFOTIyQkU1NEI5QjAwNEIxMkVBRDE5RDI5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0FDNzU5NkJEMzNCOTE2N0U5
MjJCRTU0QjlCMDA0QjEyRUFEMTlEMjkuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0UxTDFncmFremZyZWVwdjVZZG9xbjJKQnJXeXlSUHZZVUoxdjFYbXJ6QTFHLzAv
MzEzNzMwMmUzMjMzMzEyZTMxMzczNDJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDMy
MzYzMjM1MzkzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAarnrjANBgkqhkiG9w0BAQsFAAOCAQEAetGt
eP4is/NSttMFp5/zxDZ2skK7wlZyBkXUd9Qy6Y/LdG4sRGPYMVoUjItnzheZLvRa
bBYq8QGocna/JIHCgtjPdmwv72OBPIPcnOmk2AbMp0234NwGswGSZocCu803loaY
IRFeCXnCp1zv8ID5tJMs8YBgNK4AaBBPfkXNfP0NUfXY4cfiass+U0atclb0QC77
fQeXFa+2y7dO3/BDVsxrTspdF16LfTh7/Lv48k7xO3RK7G+RO3xWHbSYz950lBYt
80V+7sEiWTRQfsXD4FhlK2lvgpJ7eJYslk9waawPOE213ISrgCRdWa08WKc8edYZ
P0OPo7y46vR5hR5ZaQ==
-----END CERTIFICATE-----
Generated at Sat Apr 5 21:21:14 2025 by rpki-client