Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ETFmaA1MKwtCKDxSmqw3PRrMG7mC7EpLpQxAbohWtEDu/0/3137302e3234352e3138312e302f32342d3234203d3e20323636303137.roa
File:                     3137302e3234352e3138312e302f32342d3234203d3e20323636303137.roa (raw, json)
Hash identifier:          KvdIhq4VLvN2iz8sVS/2o3RYMO2vJ89mgdZLvxsP7aE=
Subject key identifier:   EB:0E:F8:CB:38:3D:58:A1:51:4C:A4:A3:2A:5F:0B:90:96:F3:BB:DE
Certificate issuer:       /CN=D2953993A283BAC8CD8FCBB6DFDA8659D546BCE4
Certificate serial:       762336E8680997BF0E887068BB6F30B699863DFC
Authority key identifier: D2:95:39:93:A2:83:BA:C8:CD:8F:CB:B6:DF:DA:86:59:D5:46:BC:E4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2953993A283BAC8CD8FCBB6DFDA8659D546BCE4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ETFmaA1MKwtCKDxSmqw3PRrMG7mC7EpLpQxAbohWtEDu/0/3137302e3234352e3138312e302f32342d3234203d3e20323636303137.roa
Signing time:             Tue 31 Dec 2024 15:13:31 +0000
ROA not before:           Tue 31 Dec 2024 15:08:31 +0000
ROA not after:            Tue 30 Dec 2025 15:13:31 +0000
asID:                     266017
IP address blocks:        170.245.181.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:23:36:e8:68:09:97:bf:0e:88:70:68:bb:6f:30:b6:99:86:3d:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D2953993A283BAC8CD8FCBB6DFDA8659D546BCE4
        Validity
            Not Before: Dec 31 15:08:31 2024 GMT
            Not After : Dec 30 15:13:31 2025 GMT
        Subject: CN=EB0EF8CB383D58A1514CA4A32A5F0B9096F3BBDE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:3c:ac:8f:f5:d7:02:15:c8:d3:5e:81:0e:65:
                    17:36:7c:72:76:d1:04:ef:4d:af:71:53:f8:64:fc:
                    97:a3:c1:a2:4a:77:cf:6a:c5:67:d3:08:73:29:41:
                    9f:11:ec:ca:28:d2:3e:f3:35:c4:0b:7c:0c:4e:2e:
                    25:be:b9:63:51:02:b9:22:c1:46:01:5f:12:a8:b0:
                    ba:6f:df:46:c1:f4:22:eb:7f:cd:0f:c4:0c:e9:1c:
                    be:47:a0:44:fe:e8:b9:21:a0:35:fe:96:28:8d:38:
                    6e:7e:e1:a7:57:1b:e2:81:d7:01:4c:4f:06:2d:be:
                    af:f6:20:02:76:be:3f:30:76:d7:eb:12:82:9b:ee:
                    14:8b:cd:77:69:92:bd:d4:35:15:77:38:2b:70:01:
                    91:01:6e:f6:ae:0e:f8:29:69:ab:ad:2f:ae:eb:fd:
                    53:af:f2:75:ab:3c:fc:d2:86:38:6c:84:75:fa:d5:
                    d2:0c:07:11:69:9b:9d:de:12:f5:c4:cc:98:98:b2:
                    ee:f2:21:15:46:a5:46:f5:7b:42:4f:ee:aa:39:89:
                    44:ea:1d:b2:45:3b:eb:bf:ca:d6:e5:a8:13:24:11:
                    37:1f:b8:69:a1:37:db:a0:74:39:46:45:b3:d6:a6:
                    1c:7c:79:79:e4:b6:04:a4:5e:60:dd:91:02:0c:38:
                    c9:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:0E:F8:CB:38:3D:58:A1:51:4C:A4:A3:2A:5F:0B:90:96:F3:BB:DE
            X509v3 Authority Key Identifier:
                keyid:D2:95:39:93:A2:83:BA:C8:CD:8F:CB:B6:DF:DA:86:59:D5:46:BC:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ETFmaA1MKwtCKDxSmqw3PRrMG7mC7EpLpQxAbohWtEDu/0/D2953993A283BAC8CD8FCBB6DFDA8659D546BCE4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2953993A283BAC8CD8FCBB6DFDA8659D546BCE4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ETFmaA1MKwtCKDxSmqw3PRrMG7mC7EpLpQxAbohWtEDu/0/3137302e3234352e3138312e302f32342d3234203d3e20323636303137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.245.181.0/24

    Signature Algorithm: sha256WithRSAEncryption
         27:25:65:29:ad:57:f2:8c:3b:57:b6:eb:ba:f5:e0:d4:49:4b:
         f6:e1:46:80:ce:0a:83:52:24:3c:cb:0d:4b:5d:06:1a:d0:07:
         c0:93:bf:6a:b5:96:da:08:ed:8b:05:d5:20:f3:a3:cd:59:c9:
         3f:13:3b:ca:27:09:1c:43:73:6d:65:35:1e:3a:80:89:d3:5a:
         a0:ae:82:9e:7a:ef:01:89:ae:9a:63:ba:9e:ce:d5:b1:1c:4e:
         6c:8d:ec:b3:1e:73:33:5a:a1:67:ba:c3:c8:08:a1:2e:6d:81:
         c7:bf:ca:7e:49:7d:13:61:30:99:d7:f9:6c:35:2f:60:8b:e0:
         17:57:23:de:22:8c:e7:65:bc:85:3a:b1:57:c4:19:7a:ed:be:
         9c:77:eb:e8:8e:8b:d9:b1:52:84:72:82:c4:20:e9:d4:40:40:
         2d:72:50:8d:82:6c:8c:fd:7d:e2:f5:8b:69:5d:4b:13:89:0c:
         39:19:b4:7f:25:6c:76:6d:8a:bf:63:29:36:2f:43:53:80:44:
         a2:0c:09:8f:cb:f3:a4:15:91:d5:49:61:a1:19:91:0d:63:78:
         1b:13:e0:04:b5:6c:05:1f:66:38:2d:5d:7a:62:21:ee:ad:58:
         37:18:4b:ae:ea:fb:e4:24:82:98:48:c8:ed:6f:25:51:d5:c3:
         32:5e:5a:14
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUdiM26GgJl78OiHBou28wtpmGPfwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDI5NTM5OTNBMjgzQkFDOENEOEZDQkI2REZEQTg2NTlE
NTQ2QkNFNDAeFw0yNDEyMzExNTA4MzFaFw0yNTEyMzAxNTEzMzFaMDMxMTAvBgNV
BAMTKEVCMEVGOENCMzgzRDU4QTE1MTRDQTRBMzJBNUYwQjkwOTZGM0JCREUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCSPKyP9dcCFcjTXoEOZRc2fHJ2
0QTvTa9xU/hk/JejwaJKd89qxWfTCHMpQZ8R7Moo0j7zNcQLfAxOLiW+uWNRArki
wUYBXxKosLpv30bB9CLrf80PxAzpHL5HoET+6LkhoDX+liiNOG5+4adXG+KB1wFM
TwYtvq/2IAJ2vj8wdtfrEoKb7hSLzXdpkr3UNRV3OCtwAZEBbvauDvgpaautL67r
/VOv8nWrPPzShjhshHX61dIMBxFpm53eEvXEzJiYsu7yIRVGpUb1e0JP7qo5iUTq
HbJFO+u/ytblqBMkETcfuGmhN9ugdDlGRbPWphx8eXnktgSkXmDdkQIMOMmpAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQU6w74yzg9WKFRTKSjKl8LkJbzu94wHwYDVR0j
BBgwFoAU0pU5k6KDusjNj8u239qGWdVGvOQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRVRGbWFBMU1Ld3RDS0R4U21xdzNQUnJNRzdtQzdFcExwUXhBYm9oV3RF
RHUvMC9EMjk1Mzk5M0EyODNCQUM4Q0Q4RkNCQjZERkRBODY1OUQ1NDZCQ0U0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0QyOTUzOTkzQTI4M0JBQzhD
RDhGQ0JCNkRGREE4NjU5RDU0NkJDRTQuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0VURm1hQTFNS3d0Q0tEeFNtcXczUFJyTUc3bUM3RXBMcFF4QWJvaFd0RUR1LzAv
MzEzNzMwMmUzMjM0MzUyZTMxMzgzMTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzYzNjMwMzEzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAKr1tTANBgkqhkiG9w0BAQsFAAOCAQEAJyVl
Ka1X8ow7V7bruvXg1ElL9uFGgM4Kg1IkPMsNS10GGtAHwJO/arWW2gjtiwXVIPOj
zVnJPxM7yicJHENzbWU1HjqAidNaoK6CnnrvAYmummO6ns7VsRxObI3ssx5zM1qh
Z7rDyAihLm2Bx7/Kfkl9E2Ewmdf5bDUvYIvgF1cj3iKM52W8hTqxV8QZeu2+nHfr
6I6L2bFShHKCxCDp1EBALXJQjYJsjP194vWLaV1LE4kMORm0fyVsdm2Kv2MpNi9D
U4BEogwJj8vzpBWR1UlhoRmRDWN4GxPgBLVsBR9mOC1demIh7q1YNxhLrur75CSC
mEjI7W8lUdXDMl5aFA==
-----END CERTIFICATE-----
Generated at Wed Apr 9 00:17:44 2025 by rpki-client