Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ETFmaA1MKwtCKDxSmqw3PRrMG7mC7EpLpQxAbohWtEDu/0/3137302e3234352e3138302e302f32342d3234203d3e20323636303137.roa
File:                     3137302e3234352e3138302e302f32342d3234203d3e20323636303137.roa (raw, json)
Hash identifier:          P6FwQKS4FGL7IELKZlOSgzddEGrg3AXEShsupx9zgzw=
Subject key identifier:   22:E4:02:E8:F5:E0:01:38:0C:46:B1:4F:C0:45:13:24:4A:E4:9A:F4
Certificate issuer:       /CN=D2953993A283BAC8CD8FCBB6DFDA8659D546BCE4
Certificate serial:       0F84A20ADE8600D86C277211DFC46CCF0208AFA9
Authority key identifier: D2:95:39:93:A2:83:BA:C8:CD:8F:CB:B6:DF:DA:86:59:D5:46:BC:E4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2953993A283BAC8CD8FCBB6DFDA8659D546BCE4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ETFmaA1MKwtCKDxSmqw3PRrMG7mC7EpLpQxAbohWtEDu/0/3137302e3234352e3138302e302f32342d3234203d3e20323636303137.roa
Signing time:             Tue 31 Dec 2024 15:13:30 +0000
ROA not before:           Tue 31 Dec 2024 15:08:30 +0000
ROA not after:            Tue 30 Dec 2025 15:13:30 +0000
asID:                     266017
IP address blocks:        170.245.180.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:84:a2:0a:de:86:00:d8:6c:27:72:11:df:c4:6c:cf:02:08:af:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D2953993A283BAC8CD8FCBB6DFDA8659D546BCE4
        Validity
            Not Before: Dec 31 15:08:30 2024 GMT
            Not After : Dec 30 15:13:30 2025 GMT
        Subject: CN=22E402E8F5E001380C46B14FC04513244AE49AF4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:d5:09:7c:e2:0b:20:55:6f:0d:69:8f:5f:48:
                    48:2e:17:be:65:78:3a:d2:2c:0f:fe:34:b8:b9:8e:
                    36:92:61:c9:ca:e0:99:d4:23:a4:b8:b6:45:f2:64:
                    e7:4b:07:21:2d:e6:49:76:36:79:c3:20:81:4c:40:
                    64:1e:60:0b:dc:0c:b1:15:c9:8b:25:54:b2:91:44:
                    8d:17:f9:fd:5c:da:7b:be:38:cc:e6:1f:76:5e:95:
                    7b:b2:82:29:c0:32:b3:9d:b9:e7:69:c3:79:f2:33:
                    03:a8:54:ae:2b:16:6f:fe:c6:f1:1e:8a:37:63:4c:
                    71:11:8b:01:64:11:aa:9c:51:d6:7e:d6:25:17:9c:
                    ad:60:75:88:fd:7b:2b:db:ff:e3:63:1b:e8:40:6e:
                    c8:f9:3c:f2:36:f7:12:5a:b7:68:59:24:25:29:df:
                    52:be:7b:ff:d0:bd:38:52:6a:90:39:d0:1c:62:a4:
                    c8:4d:2b:59:d0:1b:d3:f3:c3:f6:93:4b:59:c4:6a:
                    2a:18:7b:f7:46:6d:fb:23:55:9a:20:4d:f4:67:13:
                    6a:53:dc:e5:3f:49:2a:98:49:0e:75:7c:17:01:22:
                    ae:30:f7:ff:a7:a6:5d:2d:1c:98:fb:87:c6:ad:68:
                    fd:68:18:4a:c9:ab:a6:83:6a:6f:96:ce:f3:20:c1:
                    27:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:E4:02:E8:F5:E0:01:38:0C:46:B1:4F:C0:45:13:24:4A:E4:9A:F4
            X509v3 Authority Key Identifier:
                keyid:D2:95:39:93:A2:83:BA:C8:CD:8F:CB:B6:DF:DA:86:59:D5:46:BC:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ETFmaA1MKwtCKDxSmqw3PRrMG7mC7EpLpQxAbohWtEDu/0/D2953993A283BAC8CD8FCBB6DFDA8659D546BCE4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2953993A283BAC8CD8FCBB6DFDA8659D546BCE4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ETFmaA1MKwtCKDxSmqw3PRrMG7mC7EpLpQxAbohWtEDu/0/3137302e3234352e3138302e302f32342d3234203d3e20323636303137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.245.180.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d4:79:31:f2:57:f6:08:0f:e5:07:03:a1:ff:e9:2c:80:ed:45:
         f0:23:71:c5:52:28:3e:24:9c:ee:82:3e:46:93:dd:33:ab:b2:
         17:c3:5c:1c:40:9e:6c:ee:8e:8b:60:35:c7:57:1f:be:29:38:
         d0:a8:bf:da:88:b0:9d:49:51:71:a7:fc:e9:e8:a8:d7:1b:cd:
         0a:5e:e6:39:e5:d2:8f:cf:5a:85:0f:9d:5a:7b:c0:ea:f4:b2:
         8e:97:ee:8d:4a:d2:c3:79:97:e1:92:88:47:0d:51:89:7a:18:
         82:35:0f:b2:e3:1a:3e:62:1a:b5:9c:d5:c5:20:c0:3e:1a:0b:
         e3:37:44:13:fb:28:10:6b:c9:ee:d1:df:2d:fa:e1:ef:ab:67:
         f8:42:4d:66:fe:9b:9f:94:11:c5:b5:a9:ab:73:7e:17:69:30:
         c4:58:af:62:c1:22:a1:42:84:7e:be:42:9c:01:18:0a:dd:72:
         e3:fb:25:60:3e:4a:ff:3a:a5:ed:68:91:74:c2:c7:6d:9e:b1:
         b0:5d:7c:1b:94:10:22:a1:b2:23:28:ad:60:dc:5d:0a:b4:bf:
         be:0f:f3:5f:d5:0a:c6:b1:04:b2:a0:3f:cb:7f:38:3a:48:26:
         2e:d0:29:35:b1:84:7a:35:4f:93:b8:7d:59:f5:1a:c0:4b:62:
         c3:d9:19:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 00:23:20 2025 by rpki-client