Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EpwPfswW9NgLeVJuqGCdYNTKEin1zVBT6oGzes9ardSd/0/3137302e3234372e3230302e302f32332d3233203d3e20323633323536.roa
File:                     3137302e3234372e3230302e302f32332d3233203d3e20323633323536.roa (raw, json)
Hash identifier:          wa4onYO/7wHzI1fuysZNBX9jjQWW5oU9V0XKvuM1HEg=
Subject key identifier:   AF:EC:58:CA:0B:E3:47:11:C6:24:B6:80:5D:32:22:7E:A3:9A:E6:F3
Certificate issuer:       /CN=0156B956215AE4C7F951D9FABA7689B0C1830680
Certificate serial:       5CF81FA3EEAB5D712A228DB07825E9F68A01DDFC
Authority key identifier: 01:56:B9:56:21:5A:E4:C7:F9:51:D9:FA:BA:76:89:B0:C1:83:06:80
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0156B956215AE4C7F951D9FABA7689B0C1830680.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EpwPfswW9NgLeVJuqGCdYNTKEin1zVBT6oGzes9ardSd/0/3137302e3234372e3230302e302f32332d3233203d3e20323633323536.roa
Signing time:             Fri 23 May 2025 16:53:05 +0000
ROA not before:           Fri 23 May 2025 16:48:05 +0000
ROA not after:            Fri 22 May 2026 16:53:05 +0000
asID:                     263256
IP address blocks:        170.247.200.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:f8:1f:a3:ee:ab:5d:71:2a:22:8d:b0:78:25:e9:f6:8a:01:dd:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0156B956215AE4C7F951D9FABA7689B0C1830680
        Validity
            Not Before: May 23 16:48:05 2025 GMT
            Not After : May 22 16:53:05 2026 GMT
        Subject: CN=AFEC58CA0BE34711C624B6805D32227EA39AE6F3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:0e:58:05:b3:16:74:b9:45:86:c3:04:b1:b9:
                    a8:ea:23:75:93:c4:98:e8:73:28:a6:08:25:04:b6:
                    6c:11:3a:7e:c3:66:23:f7:b2:f4:20:fd:1a:3a:23:
                    09:6d:6b:8f:1d:87:32:f9:37:8e:76:05:f2:bd:2c:
                    97:4b:77:77:31:97:fb:fe:39:36:32:f5:4d:0a:13:
                    ba:bb:a5:b7:8a:aa:c4:62:0f:3f:72:e2:26:4d:e2:
                    f0:79:2a:ff:b7:09:22:f0:7c:1e:e3:f1:91:59:41:
                    e8:a8:ab:f2:85:50:d6:33:63:00:52:ec:20:9c:51:
                    cf:35:74:3b:0a:d2:bf:36:f9:4f:26:f0:de:25:ae:
                    0b:6c:cd:59:b7:89:57:a0:3a:6d:d6:39:25:83:9b:
                    38:1d:d3:11:81:a5:3f:ad:65:51:4c:d2:b2:3a:68:
                    f8:04:cb:10:7b:9c:bc:25:21:45:42:9e:3e:93:8e:
                    e3:51:a7:4f:0a:20:81:38:ff:05:6d:11:f0:a5:f1:
                    27:e4:dc:16:19:24:08:d2:03:71:ed:73:bd:98:2b:
                    f9:02:72:cd:d8:f8:34:51:7f:a3:ff:7d:16:9c:e6:
                    af:fc:ac:fc:5e:6a:58:15:fe:98:89:ba:5f:80:78:
                    35:fe:ca:4b:8b:b5:29:83:a4:5c:d3:61:38:3c:9d:
                    c4:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:EC:58:CA:0B:E3:47:11:C6:24:B6:80:5D:32:22:7E:A3:9A:E6:F3
            X509v3 Authority Key Identifier:
                keyid:01:56:B9:56:21:5A:E4:C7:F9:51:D9:FA:BA:76:89:B0:C1:83:06:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EpwPfswW9NgLeVJuqGCdYNTKEin1zVBT6oGzes9ardSd/0/0156B956215AE4C7F951D9FABA7689B0C1830680.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0156B956215AE4C7F951D9FABA7689B0C1830680.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EpwPfswW9NgLeVJuqGCdYNTKEin1zVBT6oGzes9ardSd/0/3137302e3234372e3230302e302f32332d3233203d3e20323633323536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.247.200.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b5:0c:19:6f:db:80:2c:25:6d:81:78:01:d6:b9:cc:b5:43:52:
         da:62:67:d4:3f:15:37:9f:39:6c:84:51:86:03:29:15:9d:6b:
         f9:84:11:9a:54:fb:47:03:15:a0:03:86:3d:aa:5e:5d:d5:6a:
         0e:42:b1:2e:50:9c:42:e8:f3:b9:8d:b7:22:6b:f8:cf:4e:a2:
         38:1b:73:8e:e5:e6:fa:b9:d5:5d:36:86:91:91:5d:44:53:2b:
         e8:6d:34:2a:69:a6:d3:3d:59:38:96:79:24:db:6c:e4:b9:04:
         54:32:62:5a:30:5e:e3:e6:eb:cd:b6:11:b3:b1:1e:67:49:9b:
         d5:9b:cc:e8:14:7d:f3:2f:8a:54:dc:89:8a:5c:41:4d:42:b7:
         07:1d:c8:39:d1:68:dd:4c:f1:c0:5b:b8:de:d9:49:15:3d:90:
         fd:a8:e8:ac:7a:4d:1e:91:4e:41:a5:30:f5:96:59:c2:ec:13:
         8f:00:8a:34:2c:26:86:61:0d:6e:d6:96:46:66:8e:4f:44:34:
         eb:a0:48:c2:7b:3e:5e:29:e8:a3:77:3a:b8:07:e3:e3:bf:64:
         25:f0:6d:04:e1:a2:69:03:e3:85:0b:41:57:ec:74:db:f8:70:
         5e:83:44:40:56:72:53:15:9f:9c:7d:71:db:72:7e:e6:f3:fd:
         db:db:8a:bc
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUXPgfo+6rXXEqIo2weCXp9ooB3fwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDE1NkI5NTYyMTVBRTRDN0Y5NTFEOUZBQkE3Njg5QjBD
MTgzMDY4MDAeFw0yNTA1MjMxNjQ4MDVaFw0yNjA1MjIxNjUzMDVaMDMxMTAvBgNV
BAMTKEFGRUM1OENBMEJFMzQ3MTFDNjI0QjY4MDVEMzIyMjdFQTM5QUU2RjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCDlgFsxZ0uUWGwwSxuajqI3WT
xJjocyimCCUEtmwROn7DZiP3svQg/Ro6Iwlta48dhzL5N452BfK9LJdLd3cxl/v+
OTYy9U0KE7q7pbeKqsRiDz9y4iZN4vB5Kv+3CSLwfB7j8ZFZQeioq/KFUNYzYwBS
7CCcUc81dDsK0r82+U8m8N4lrgtszVm3iVegOm3WOSWDmzgd0xGBpT+tZVFM0rI6
aPgEyxB7nLwlIUVCnj6TjuNRp08KIIE4/wVtEfCl8Sfk3BYZJAjSA3Htc72YK/kC
cs3Y+DRRf6P/fRac5q/8rPxealgV/piJul+AeDX+ykuLtSmDpFzTYTg8ncRZAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUr+xYygvjRxHGJLaAXTIifqOa5vMwHwYDVR0j
BBgwFoAUAVa5ViFa5Mf5Udn6unaJsMGDBoAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRXB3UGZzd1c5TmdMZVZKdXFHQ2RZTlRLRWluMXpWQlQ2b0d6ZXM5YXJk
U2QvMC8wMTU2Qjk1NjIxNUFFNEM3Rjk1MUQ5RkFCQTc2ODlCMEMxODMwNjgwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzAxNTZCOTU2MjE1QUU0QzdG
OTUxRDlGQUJBNzY4OUIwQzE4MzA2ODAuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0Vwd1Bmc3dXOU5nTGVWSnVxR0NkWU5US0VpbjF6VkJUNm9HemVzOWFyZFNkLzAv
MzEzNzMwMmUzMjM0MzcyZTMyMzAzMDJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDMy
MzYzMzMyMzUzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAar3yDANBgkqhkiG9w0BAQsFAAOCAQEAtQwZ
b9uALCVtgXgB1rnMtUNS2mJn1D8VN585bIRRhgMpFZ1r+YQRmlT7RwMVoAOGPape
XdVqDkKxLlCcQujzuY23Imv4z06iOBtzjuXm+rnVXTaGkZFdRFMr6G00Kmmm0z1Z
OJZ5JNts5LkEVDJiWjBe4+brzbYRs7EeZ0mb1ZvM6BR98y+KVNyJilxBTUK3Bx3I
OdFo3UzxwFu43tlJFT2Q/ajorHpNHpFOQaUw9ZZZwuwTjwCKNCwmhmENbtaWRmaO
T0Q066BIwns+Xinoo3c6uAfj479kJfBtBOGiaQPjhQtBV+x02/hwXoNEQFZyUxWf
nH1x23J+5vP929uKvA==
-----END CERTIFICATE-----
Generated at Fri Jun 13 22:43:47 2025 by rpki-client