Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ETFmaA1MKwtCKDxSmqw3PRrMG7mC7EpLpQxAbohWtEDu/0/3137302e3234352e3138322e302f32332d3233203d3e20323636303137.roa
File:                     3137302e3234352e3138322e302f32332d3233203d3e20323636303137.roa (raw, json)
Hash identifier:          juFyXLTpaqDCsAcDazDvCav5VMO5YTkktrQF4aYd+Bk=
Subject key identifier:   C9:34:00:C9:41:0C:0D:EB:F7:8C:A5:60:A6:32:ED:5D:19:60:CB:B2
Certificate issuer:       /CN=D2953993A283BAC8CD8FCBB6DFDA8659D546BCE4
Certificate serial:       2E413855FF08CB49D8F5E22EFC4BBE5090085E4C
Authority key identifier: D2:95:39:93:A2:83:BA:C8:CD:8F:CB:B6:DF:DA:86:59:D5:46:BC:E4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2953993A283BAC8CD8FCBB6DFDA8659D546BCE4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ETFmaA1MKwtCKDxSmqw3PRrMG7mC7EpLpQxAbohWtEDu/0/3137302e3234352e3138322e302f32332d3233203d3e20323636303137.roa
Signing time:             Tue 31 Dec 2024 15:13:33 +0000
ROA not before:           Tue 31 Dec 2024 15:08:33 +0000
ROA not after:            Tue 30 Dec 2025 15:13:33 +0000
asID:                     266017
IP address blocks:        170.245.182.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:41:38:55:ff:08:cb:49:d8:f5:e2:2e:fc:4b:be:50:90:08:5e:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D2953993A283BAC8CD8FCBB6DFDA8659D546BCE4
        Validity
            Not Before: Dec 31 15:08:33 2024 GMT
            Not After : Dec 30 15:13:33 2025 GMT
        Subject: CN=C93400C9410C0DEBF78CA560A632ED5D1960CBB2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:7a:9a:31:96:bd:0e:50:93:1b:7f:8a:d5:e9:
                    ea:17:31:fb:61:25:1e:03:ce:da:7d:95:b3:fc:49:
                    85:de:9d:18:44:73:4b:5a:14:eb:dd:3f:9f:db:c8:
                    88:85:23:76:a5:e3:02:f4:59:bc:e3:af:69:e5:f7:
                    fb:73:f6:b4:6b:4a:12:3f:9b:83:3d:84:a3:c1:5e:
                    93:87:56:00:65:89:c4:18:02:e9:6d:8f:1d:36:95:
                    69:fd:0e:99:a6:60:0a:49:fe:f2:a3:35:ec:8f:04:
                    80:f5:a0:fb:12:f7:ed:4d:8d:2d:5c:51:d2:2f:e9:
                    3f:7b:03:0a:af:8c:67:4b:95:5d:1d:05:a8:81:e6:
                    c6:dd:05:e7:da:49:ea:c6:54:dd:d0:83:36:cc:fd:
                    5b:60:a4:34:7c:e6:a9:bf:91:a5:0c:3e:a9:a2:ab:
                    70:f2:bb:43:2b:b3:a7:10:5f:7a:3a:be:47:f7:28:
                    01:ec:0c:de:a3:2e:93:01:85:09:17:45:64:e3:c4:
                    ca:89:fc:0c:5d:ab:15:58:c0:85:b0:1f:58:4a:c4:
                    e2:0f:1c:e0:2e:47:47:96:68:f4:8b:ff:67:0a:9f:
                    7b:6d:30:5b:76:88:48:b1:23:7b:d1:39:ca:e9:0a:
                    83:22:39:03:4d:e7:1f:82:41:c9:96:23:15:f5:04:
                    d0:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:34:00:C9:41:0C:0D:EB:F7:8C:A5:60:A6:32:ED:5D:19:60:CB:B2
            X509v3 Authority Key Identifier:
                keyid:D2:95:39:93:A2:83:BA:C8:CD:8F:CB:B6:DF:DA:86:59:D5:46:BC:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ETFmaA1MKwtCKDxSmqw3PRrMG7mC7EpLpQxAbohWtEDu/0/D2953993A283BAC8CD8FCBB6DFDA8659D546BCE4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2953993A283BAC8CD8FCBB6DFDA8659D546BCE4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ETFmaA1MKwtCKDxSmqw3PRrMG7mC7EpLpQxAbohWtEDu/0/3137302e3234352e3138322e302f32332d3233203d3e20323636303137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.245.182.0/23

    Signature Algorithm: sha256WithRSAEncryption
         56:e5:d2:07:cd:d5:b4:1f:36:ef:a3:09:94:17:50:e9:10:ca:
         4b:c6:5f:4c:05:46:be:de:e7:20:76:a1:34:1b:87:8d:6a:4c:
         3c:52:79:3a:57:74:5e:ae:22:5e:27:17:fb:d2:2a:81:46:17:
         4c:fa:7f:f8:4b:0b:37:34:ac:24:b2:4d:93:b1:54:f0:b6:ac:
         c5:71:af:16:86:5c:6b:86:be:b3:6b:2b:9d:bb:0a:50:af:29:
         cf:e3:5a:05:9e:7f:3a:bf:08:9d:55:4c:f0:75:9c:81:84:04:
         4d:8e:d0:88:96:c6:a2:cf:58:50:42:2d:bb:6a:f9:c6:c2:52:
         d8:8a:56:1a:5d:16:5c:89:27:97:30:46:e1:d7:f6:f9:71:54:
         1a:a1:93:08:85:20:1b:47:33:0f:cf:31:0a:fa:be:8c:dc:54:
         ed:4c:81:35:21:18:98:b6:2d:8e:11:df:15:4e:34:13:a2:5a:
         fb:9f:91:d4:9c:72:0c:8e:de:00:17:93:63:f5:08:d4:36:15:
         ce:99:5a:ac:93:b8:a7:3b:76:d7:0b:01:f8:d9:3b:2c:d2:f6:
         b4:c6:13:71:d2:45:e7:14:b9:e1:83:e8:d4:0c:59:bc:bf:3f:
         82:de:b3:35:92:01:ca:17:83:da:c5:f7:88:1e:96:8b:9c:ba:
         0c:78:43:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 00:15:47 2025 by rpki-client