Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EpwPfswW9NgLeVJuqGCdYNTKEin1zVBT6oGzes9ardSd/0/3137302e3234372e3230302e302f32322d3332203d3e20323633323536.roa
File:                     3137302e3234372e3230302e302f32322d3332203d3e20323633323536.roa (raw, json)
Hash identifier:          6B1rRaeZEj2+xXniLFMwLDciBsdK9tq28toFCrhKVe0=
Subject key identifier:   6D:39:5D:D8:0A:50:D7:50:D4:06:6A:55:29:55:FC:36:02:35:15:7E
Certificate issuer:       /CN=4AC63499535F096FC094DF4DF02AC3681513D3B2
Certificate serial:       10E8698DB411481161D29A9D6AA3A0B35F94D2C7
Authority key identifier: 4A:C6:34:99:53:5F:09:6F:C0:94:DF:4D:F0:2A:C3:68:15:13:D3:B2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4AC63499535F096FC094DF4DF02AC3681513D3B2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EpwPfswW9NgLeVJuqGCdYNTKEin1zVBT6oGzes9ardSd/0/3137302e3234372e3230302e302f32322d3332203d3e20323633323536.roa
Signing time:             Mon 09 Dec 2024 19:58:49 +0000
ROA not before:           Mon 09 Dec 2024 19:53:49 +0000
ROA not after:            Mon 08 Dec 2025 19:58:49 +0000
asID:                     263256
IP address blocks:        170.247.200.0/22 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:e8:69:8d:b4:11:48:11:61:d2:9a:9d:6a:a3:a0:b3:5f:94:d2:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4AC63499535F096FC094DF4DF02AC3681513D3B2
        Validity
            Not Before: Dec  9 19:53:49 2024 GMT
            Not After : Dec  8 19:58:49 2025 GMT
        Subject: CN=6D395DD80A50D750D4066A552955FC360235157E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:ea:bb:cb:a3:eb:ee:7d:d8:56:ad:5b:ea:92:
                    18:b5:80:27:c4:c7:da:ac:b6:3e:18:96:5e:ba:96:
                    f3:ef:f4:82:16:48:0e:2c:73:12:e8:25:23:66:77:
                    59:cc:38:51:8e:8a:72:b7:e8:ff:e2:d2:d6:d8:61:
                    fe:6c:c7:b6:d3:47:7d:9c:cd:20:cd:3c:20:ca:96:
                    db:2f:1f:eb:a9:8d:4d:6c:e2:fd:8f:cc:6e:ef:bc:
                    ed:4c:bc:cc:49:56:fa:90:5b:61:e7:c1:8a:fe:9f:
                    e6:e8:5d:45:24:74:50:c0:ed:40:c7:26:ff:c8:ee:
                    a3:b3:23:a0:68:50:a4:ce:b8:09:da:27:9c:a2:41:
                    39:b9:a1:d5:73:a7:3a:46:89:e1:b8:73:c2:71:a8:
                    91:f8:68:7e:25:8b:be:fa:08:a6:29:1a:fc:74:2f:
                    89:31:c0:99:f3:bd:80:49:e8:0c:00:68:11:11:c0:
                    92:2d:65:0c:0c:29:d2:0a:59:65:e3:ff:a0:a6:31:
                    94:06:4f:78:42:bc:9d:38:69:56:6f:36:fd:00:e5:
                    15:9f:86:d8:e6:dd:bb:7c:9f:05:12:f3:5f:e0:85:
                    1a:12:88:a1:a4:5e:ca:d5:70:54:c8:7d:19:f8:07:
                    15:d5:26:1c:d7:18:be:f3:ac:76:58:c2:78:2a:94:
                    c0:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:39:5D:D8:0A:50:D7:50:D4:06:6A:55:29:55:FC:36:02:35:15:7E
            X509v3 Authority Key Identifier:
                keyid:4A:C6:34:99:53:5F:09:6F:C0:94:DF:4D:F0:2A:C3:68:15:13:D3:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EpwPfswW9NgLeVJuqGCdYNTKEin1zVBT6oGzes9ardSd/0/4AC63499535F096FC094DF4DF02AC3681513D3B2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4AC63499535F096FC094DF4DF02AC3681513D3B2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EpwPfswW9NgLeVJuqGCdYNTKEin1zVBT6oGzes9ardSd/0/3137302e3234372e3230302e302f32322d3332203d3e20323633323536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.247.200.0/22

    Signature Algorithm: sha256WithRSAEncryption
         94:c0:ea:b9:12:0d:46:f6:f1:64:1a:7c:d6:ee:19:25:01:24:
         fd:15:c8:1e:b5:2d:66:83:e0:71:94:23:9a:10:f1:ef:85:4d:
         d2:44:59:61:4d:a8:5d:92:e0:bf:11:f7:f2:e4:dd:ad:0d:cf:
         44:9a:63:a6:e8:29:95:88:3e:dd:e7:cc:8d:11:93:e4:47:1d:
         d7:90:45:7c:23:38:4b:80:a1:07:1c:c7:bc:7f:a7:0f:f8:58:
         17:10:38:b2:35:20:29:da:85:7b:4c:85:68:34:ae:f7:6b:ce:
         ac:2e:da:3b:67:0e:be:44:93:68:e4:8a:b0:44:13:bf:0c:3c:
         2a:08:31:4a:ac:4f:d0:9f:82:c7:7a:74:37:97:e4:b9:17:e3:
         49:05:62:0d:04:27:2a:94:fe:e9:4a:08:f7:38:07:04:2c:b9:
         46:a9:05:43:32:d6:f2:4a:d3:5a:26:a8:7e:17:d1:ff:55:c0:
         58:65:4c:3f:1a:00:49:ca:c2:52:65:b2:68:6d:0d:e8:01:2c:
         f3:f7:44:c2:21:6a:b8:9d:bf:d9:7e:f0:f4:00:c6:4e:35:19:
         71:95:16:dd:53:a7:09:57:ba:a0:7d:29:31:15:f2:db:c2:b9:
         f0:e5:59:20:76:f7:f8:45:50:12:10:97:12:e4:28:62:d4:54:
         79:52:c1:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 14:07:55 2025 by rpki-client