Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EpwPfswW9NgLeVJuqGCdYNTKEin1zVBT6oGzes9ardSd/0/3137302e3234372e3230312e302f32342d3234203d3e20323633323536.roa
File:                     3137302e3234372e3230312e302f32342d3234203d3e20323633323536.roa (raw, json)
Hash identifier:          WrJwC3g6tCQlD2xai/na3ofXDdZUlyIsD2eOKQjTFno=
Subject key identifier:   9F:AE:31:9F:5A:6D:33:C2:7F:91:1C:8E:25:AB:13:3C:1F:E5:4B:45
Certificate issuer:       /CN=60F5CEDC60B1C92A5A74DCB3CFE6F044F9462011
Certificate serial:       256028312F313C882B6F46618585B2A846860433
Authority key identifier: 60:F5:CE:DC:60:B1:C9:2A:5A:74:DC:B3:CF:E6:F0:44:F9:46:20:11
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/60F5CEDC60B1C92A5A74DCB3CFE6F044F9462011.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EpwPfswW9NgLeVJuqGCdYNTKEin1zVBT6oGzes9ardSd/0/3137302e3234372e3230312e302f32342d3234203d3e20323633323536.roa
Signing time:             Fri 10 Jan 2025 16:41:55 +0000
ROA not before:           Fri 10 Jan 2025 16:36:55 +0000
ROA not after:            Fri 09 Jan 2026 16:41:55 +0000
asID:                     263256
IP address blocks:        170.247.201.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:60:28:31:2f:31:3c:88:2b:6f:46:61:85:85:b2:a8:46:86:04:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60F5CEDC60B1C92A5A74DCB3CFE6F044F9462011
        Validity
            Not Before: Jan 10 16:36:55 2025 GMT
            Not After : Jan  9 16:41:55 2026 GMT
        Subject: CN=9FAE319F5A6D33C27F911C8E25AB133C1FE54B45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:7d:68:f9:0f:d4:bd:61:cf:75:bd:e8:7d:fc:
                    4b:9b:48:2e:19:e0:f5:71:7a:79:b9:ae:55:91:e1:
                    a4:5a:03:48:0c:52:47:bc:8c:35:c5:fd:9b:88:88:
                    93:59:3c:0d:63:33:03:07:92:6e:68:e5:bb:bd:4d:
                    b9:70:f9:c3:6a:c3:cf:46:09:49:d4:6e:45:86:0d:
                    5e:ce:44:f0:f7:d8:f9:ed:3a:d3:e3:b1:96:84:ce:
                    e3:6c:d8:11:b3:13:b8:aa:1b:66:ea:b9:8a:ac:8a:
                    de:c8:3a:2e:35:fa:34:22:d2:a3:e7:eb:8d:2a:83:
                    7a:73:0b:eb:90:a6:62:29:d1:ac:70:bb:10:89:c3:
                    5a:1a:2e:55:fd:0e:7e:6e:c3:19:f8:56:66:3a:90:
                    b1:13:75:60:16:51:b4:50:8d:9c:b0:60:b8:c5:b6:
                    cf:89:6a:ce:a0:a3:3b:3c:06:e7:b0:8d:f4:4c:ec:
                    a5:1c:f0:2f:ba:33:1a:8c:ba:6d:e9:d7:ae:96:86:
                    44:e6:3b:35:8e:94:92:f0:46:d3:fb:9c:3d:82:38:
                    01:c2:6f:c3:24:a6:52:0a:5f:71:11:9e:3c:eb:63:
                    40:79:1d:34:aa:4b:b7:7b:a9:23:ab:7a:82:fe:6c:
                    85:9c:24:66:bd:f8:73:d2:af:c0:5f:b8:45:7a:69:
                    12:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:AE:31:9F:5A:6D:33:C2:7F:91:1C:8E:25:AB:13:3C:1F:E5:4B:45
            X509v3 Authority Key Identifier:
                keyid:60:F5:CE:DC:60:B1:C9:2A:5A:74:DC:B3:CF:E6:F0:44:F9:46:20:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EpwPfswW9NgLeVJuqGCdYNTKEin1zVBT6oGzes9ardSd/0/60F5CEDC60B1C92A5A74DCB3CFE6F044F9462011.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/60F5CEDC60B1C92A5A74DCB3CFE6F044F9462011.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EpwPfswW9NgLeVJuqGCdYNTKEin1zVBT6oGzes9ardSd/0/3137302e3234372e3230312e302f32342d3234203d3e20323633323536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.247.201.0/24

    Signature Algorithm: sha256WithRSAEncryption
         67:1b:30:64:0a:5e:15:6f:df:58:c2:bd:d4:d3:7e:b0:32:11:
         c5:32:91:67:fe:07:89:86:6d:4f:ab:f4:7b:b0:41:1e:4d:e8:
         9f:03:7f:8d:bb:d3:d0:20:5a:c6:6a:64:0a:0b:25:6c:d5:9e:
         7d:ad:d9:b8:61:eb:ff:cc:a2:9f:2a:e9:e7:f6:61:e9:76:02:
         fc:cf:e7:62:b1:fa:41:63:fb:06:ec:e5:92:04:18:2a:5f:4d:
         62:24:4a:1a:29:91:41:2d:b0:72:46:b0:a7:4e:6f:18:80:28:
         97:19:cd:53:ff:a5:5c:fe:6a:e7:06:c4:ca:80:56:e0:e6:5c:
         c9:8c:b6:91:1f:82:52:2b:9b:84:c9:44:ba:dd:06:1d:da:54:
         81:1d:6d:b1:6b:82:6c:3d:fa:2b:e4:29:16:32:98:b5:61:49:
         0b:e9:77:2b:07:e1:3d:30:e9:84:37:13:26:15:aa:7c:4e:b7:
         67:ba:3d:d5:79:bd:12:e7:d8:86:6c:60:4d:fb:99:40:95:95:
         78:04:f9:44:ea:03:49:a9:36:b0:4d:f1:94:16:6a:86:f7:a3:
         d9:b1:73:77:69:55:65:cb:d0:30:82:4a:94:be:85:e3:dc:87:
         45:b4:f0:23:78:67:b0:5f:30:f2:0d:05:3d:0b:ff:42:fb:81:
         84:83:77:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 16:45:11 2025 by rpki-client