Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ETFmaA1MKwtCKDxSmqw3PRrMG7mC7EpLpQxAbohWtEDu/0/3137302e3234352e3138302e302f32332d3233203d3e20323636303137.roa
File:                     3137302e3234352e3138302e302f32332d3233203d3e20323636303137.roa (raw, json)
Hash identifier:          X/urHcXAfMahwsIa1jAltqx6uLk17j0hkhAlKjkaUCQ=
Subject key identifier:   21:40:AD:4A:68:66:84:3B:D1:CC:63:87:AF:DD:C2:C5:94:92:40:69
Certificate issuer:       /CN=D2953993A283BAC8CD8FCBB6DFDA8659D546BCE4
Certificate serial:       01F5869DE713EBF782C8986B88DD9EC1E49B734F
Authority key identifier: D2:95:39:93:A2:83:BA:C8:CD:8F:CB:B6:DF:DA:86:59:D5:46:BC:E4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2953993A283BAC8CD8FCBB6DFDA8659D546BCE4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ETFmaA1MKwtCKDxSmqw3PRrMG7mC7EpLpQxAbohWtEDu/0/3137302e3234352e3138302e302f32332d3233203d3e20323636303137.roa
Signing time:             Tue 31 Dec 2024 15:13:28 +0000
ROA not before:           Tue 31 Dec 2024 15:08:28 +0000
ROA not after:            Tue 30 Dec 2025 15:13:28 +0000
asID:                     266017
IP address blocks:        170.245.180.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:f5:86:9d:e7:13:eb:f7:82:c8:98:6b:88:dd:9e:c1:e4:9b:73:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D2953993A283BAC8CD8FCBB6DFDA8659D546BCE4
        Validity
            Not Before: Dec 31 15:08:28 2024 GMT
            Not After : Dec 30 15:13:28 2025 GMT
        Subject: CN=2140AD4A6866843BD1CC6387AFDDC2C594924069
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:d6:fd:78:68:4b:b6:3c:c5:4d:13:1c:fe:14:
                    da:5e:b3:d4:db:be:e9:14:67:53:28:28:ce:0e:13:
                    72:4d:9d:93:d4:ab:a9:78:d4:a4:11:cd:1b:04:f5:
                    cc:f3:c6:ff:b6:82:05:72:d3:c2:b2:5b:f4:1f:a8:
                    58:46:27:8e:cc:40:cb:70:95:9d:b0:44:7b:c5:9e:
                    99:b9:7e:f4:d0:e2:5d:d4:51:aa:35:e8:8b:e3:85:
                    36:8d:d8:89:41:04:6c:a1:09:68:4f:09:ce:7f:a2:
                    f9:3d:59:c6:da:48:9e:8b:13:6d:d7:37:59:62:c2:
                    00:bd:61:54:ca:0d:5e:18:96:8e:a4:51:cf:d3:8d:
                    e0:0e:fc:30:b3:23:e7:7b:f0:8a:5e:59:c7:2b:1b:
                    ae:bc:db:eb:6e:d5:1d:78:2b:24:b2:ca:bd:69:64:
                    47:9f:5c:d7:b0:cf:05:a3:38:b1:86:b0:e5:32:32:
                    67:ce:90:e7:10:94:fc:3d:2d:32:a2:49:4a:89:55:
                    80:5d:1d:31:f1:01:dc:60:bd:c7:b3:72:3d:73:25:
                    e5:28:b9:c6:c7:cf:20:33:e0:40:71:0b:69:ba:ef:
                    17:76:60:4d:c8:d3:16:5e:fc:6b:ca:ef:7f:fd:af:
                    8c:22:bc:35:4d:dd:84:08:b8:bc:ac:cf:7f:a0:52:
                    51:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:40:AD:4A:68:66:84:3B:D1:CC:63:87:AF:DD:C2:C5:94:92:40:69
            X509v3 Authority Key Identifier:
                keyid:D2:95:39:93:A2:83:BA:C8:CD:8F:CB:B6:DF:DA:86:59:D5:46:BC:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ETFmaA1MKwtCKDxSmqw3PRrMG7mC7EpLpQxAbohWtEDu/0/D2953993A283BAC8CD8FCBB6DFDA8659D546BCE4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2953993A283BAC8CD8FCBB6DFDA8659D546BCE4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ETFmaA1MKwtCKDxSmqw3PRrMG7mC7EpLpQxAbohWtEDu/0/3137302e3234352e3138302e302f32332d3233203d3e20323636303137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.245.180.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2f:8a:81:45:a2:96:c8:73:78:a1:34:43:11:61:99:9c:1d:72:
         40:47:76:82:0c:e1:23:88:55:ac:99:07:8a:f1:04:ec:45:29:
         77:22:af:a1:ee:30:17:1e:0c:d6:dc:73:f5:3f:a7:07:66:01:
         29:d2:c2:2a:cd:93:cc:4e:6d:45:c9:de:9b:e3:b0:ac:87:f1:
         6b:49:0a:cd:ac:16:2d:52:a1:be:cb:cf:20:39:92:7e:a8:27:
         e9:88:a5:df:4e:4e:92:38:a6:d8:a1:84:96:b6:fd:5a:09:5b:
         11:f7:39:bc:89:2f:03:23:b7:8d:b2:ab:2e:73:5a:ae:fd:7e:
         6a:c1:32:d8:45:45:9d:8c:f3:b9:a2:68:38:77:8c:94:d8:70:
         ee:65:4d:43:0d:1c:68:87:39:19:63:13:b2:28:98:d7:9c:88:
         11:42:04:29:c0:2c:42:da:96:46:27:81:e3:bc:68:4a:0a:ee:
         49:a4:0f:0b:ed:1a:6e:a2:20:0a:f3:7e:eb:24:41:3f:57:ac:
         8c:c8:39:96:00:70:a2:54:45:83:65:80:cf:bc:cd:13:cc:d3:
         ca:48:94:45:f0:c6:b2:92:98:5b:ce:78:86:ba:83:e0:9d:0a:
         67:5c:75:4c:78:f4:f6:4e:d2:b5:be:b9:e8:5f:c5:d8:e6:1b:
         35:fe:c4:68
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUAfWGnecT6/eCyJhriN2eweSbc08wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDI5NTM5OTNBMjgzQkFDOENEOEZDQkI2REZEQTg2NTlE
NTQ2QkNFNDAeFw0yNDEyMzExNTA4MjhaFw0yNTEyMzAxNTEzMjhaMDMxMTAvBgNV
BAMTKDIxNDBBRDRBNjg2Njg0M0JEMUNDNjM4N0FGRERDMkM1OTQ5MjQwNjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCo1v14aEu2PMVNExz+FNpes9Tb
vukUZ1MoKM4OE3JNnZPUq6l41KQRzRsE9czzxv+2ggVy08KyW/QfqFhGJ47MQMtw
lZ2wRHvFnpm5fvTQ4l3UUao16IvjhTaN2IlBBGyhCWhPCc5/ovk9WcbaSJ6LE23X
N1liwgC9YVTKDV4Ylo6kUc/TjeAO/DCzI+d78IpeWccrG6682+tu1R14KySyyr1p
ZEefXNewzwWjOLGGsOUyMmfOkOcQlPw9LTKiSUqJVYBdHTHxAdxgvcezcj1zJeUo
ucbHzyAz4EBxC2m67xd2YE3I0xZe/GvK73/9r4wivDVN3YQIuLysz3+gUlG9AgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUIUCtSmhmhDvRzGOHr93CxZSSQGkwHwYDVR0j
BBgwFoAU0pU5k6KDusjNj8u239qGWdVGvOQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRVRGbWFBMU1Ld3RDS0R4U21xdzNQUnJNRzdtQzdFcExwUXhBYm9oV3RF
RHUvMC9EMjk1Mzk5M0EyODNCQUM4Q0Q4RkNCQjZERkRBODY1OUQ1NDZCQ0U0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0QyOTUzOTkzQTI4M0JBQzhD
RDhGQ0JCNkRGREE4NjU5RDU0NkJDRTQuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0VURm1hQTFNS3d0Q0tEeFNtcXczUFJyTUc3bUM3RXBMcFF4QWJvaFd0RUR1LzAv
MzEzNzMwMmUzMjM0MzUyZTMxMzgzMDJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDMy
MzYzNjMwMzEzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAar1tDANBgkqhkiG9w0BAQsFAAOCAQEAL4qB
RaKWyHN4oTRDEWGZnB1yQEd2ggzhI4hVrJkHivEE7EUpdyKvoe4wFx4M1txz9T+n
B2YBKdLCKs2TzE5tRcnem+OwrIfxa0kKzawWLVKhvsvPIDmSfqgn6Yil305Okjim
2KGElrb9WglbEfc5vIkvAyO3jbKrLnNarv1+asEy2EVFnYzzuaJoOHeMlNhw7mVN
Qw0caIc5GWMTsiiY15yIEUIEKcAsQtqWRieB47xoSgruSaQPC+0abqIgCvN+6yRB
P1esjMg5lgBwolRFg2WAz7zNE8zTykiURfDGspKYW854hrqD4J0KZ1x1THj09k7S
tb656F/F2OYbNf7EaA==
-----END CERTIFICATE-----
Generated at Wed Apr 9 00:17:54 2025 by rpki-client