Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FmzVot6dWRLx9f5e9zJWThN1vnEQabMvpurWd6WHyxK3/0/32342e3135322e312e302f32342d3234203d3e20323730343830.roa
File:                     32342e3135322e312e302f32342d3234203d3e20323730343830.roa (raw, json)
Hash identifier:          xpPNnoKAleekwVfmY8nnpVSApG3QPZ8nJPImSW5AZSs=
Subject key identifier:   B5:19:C8:F3:48:6D:D9:2E:7E:34:63:D2:0A:D0:1C:25:0A:49:28:E7
Certificate issuer:       /CN=AFFD1A00014BE825E27B1DBE87E973BAD5D81A1E
Certificate serial:       2D7CED7D9F2B5B0FE8A03E1CCF4F2702ED60A788
Authority key identifier: AF:FD:1A:00:01:4B:E8:25:E2:7B:1D:BE:87:E9:73:BA:D5:D8:1A:1E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AFFD1A00014BE825E27B1DBE87E973BAD5D81A1E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FmzVot6dWRLx9f5e9zJWThN1vnEQabMvpurWd6WHyxK3/0/32342e3135322e312e302f32342d3234203d3e20323730343830.roa
Signing time:             Wed 24 Nov 2021 03:46:50 +0000
ROA not before:           Wed 24 Nov 2021 03:41:50 +0000
ROA not after:            Wed 23 Nov 2022 03:46:50 +0000
asID:                     270480
IP address blocks:        24.152.1.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:7c:ed:7d:9f:2b:5b:0f:e8:a0:3e:1c:cf:4f:27:02:ed:60:a7:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFFD1A00014BE825E27B1DBE87E973BAD5D81A1E
        Validity
            Not Before: Nov 24 03:41:50 2021 GMT
            Not After : Nov 23 03:46:50 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:49:d2:ae:0b:26:2a:79:79:2d:25:78:05:79:
                    03:50:d3:7f:bc:2c:6c:33:ef:cb:30:bc:87:99:3e:
                    22:64:2b:20:09:88:99:a3:8e:de:c6:6a:c6:6c:11:
                    f8:28:ad:9d:77:7b:00:41:5e:a4:ec:72:d4:fb:dd:
                    40:a6:bd:57:1a:b2:a1:1d:95:10:7e:64:c0:73:68:
                    42:7b:58:99:08:76:90:a8:2f:bc:41:08:13:00:98:
                    da:01:fa:6d:62:29:be:ac:2e:61:4b:09:92:4a:67:
                    c9:ca:66:53:40:a5:c1:e0:63:e9:b8:38:fe:07:94:
                    d8:0c:31:95:67:6e:47:ca:c2:58:14:e6:8b:b9:5c:
                    2f:3e:4c:fe:59:44:8a:2d:a7:70:70:66:14:f5:6a:
                    9c:c0:7f:5c:72:e7:2b:54:9e:8d:59:29:f2:aa:f4:
                    b6:d8:dc:e2:d2:28:0e:26:7f:17:f1:20:e6:2f:cc:
                    a6:c5:ec:9d:71:f2:bb:3d:f8:be:90:04:17:e4:59:
                    b4:72:0b:fc:15:39:4c:5e:21:8c:40:10:37:a4:8f:
                    a1:04:6b:13:b1:b5:86:85:fc:a5:11:17:2e:0b:2d:
                    07:65:17:95:36:f7:46:a2:a7:9a:e6:4c:68:d7:ca:
                    4c:a3:12:14:85:3a:a2:72:84:7e:f7:a5:1e:32:47:
                    59:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:19:C8:F3:48:6D:D9:2E:7E:34:63:D2:0A:D0:1C:25:0A:49:28:E7
            X509v3 Authority Key Identifier:
                keyid:AF:FD:1A:00:01:4B:E8:25:E2:7B:1D:BE:87:E9:73:BA:D5:D8:1A:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FmzVot6dWRLx9f5e9zJWThN1vnEQabMvpurWd6WHyxK3/0/AFFD1A00014BE825E27B1DBE87E973BAD5D81A1E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AFFD1A00014BE825E27B1DBE87E973BAD5D81A1E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FmzVot6dWRLx9f5e9zJWThN1vnEQabMvpurWd6WHyxK3/0/32342e3135322e312e302f32342d3234203d3e20323730343830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.152.1.0/24

    Signature Algorithm: sha256WithRSAEncryption
         68:32:6b:20:f5:2b:23:75:75:8f:fe:29:2f:10:de:ac:d1:8b:
         e1:eb:fe:de:69:76:8d:c7:9f:b7:01:57:62:bc:cd:b0:7e:44:
         78:d4:0a:4a:da:71:89:38:57:44:c1:9f:10:b5:fb:19:a9:b9:
         7e:bf:56:c2:10:e7:7f:cd:8f:d7:30:76:a0:84:70:98:30:88:
         9f:eb:54:48:d2:2e:16:8c:10:b9:2b:8b:3a:6d:ca:9d:94:d4:
         b1:5b:a3:b3:69:e1:66:bb:0f:ef:77:5f:e0:6d:66:1d:6d:69:
         88:a8:44:6f:4e:81:9c:91:cd:ad:3d:01:26:4d:93:8f:88:5c:
         b8:cd:4a:90:c1:8b:0a:de:07:2a:ff:2a:b3:47:d9:76:a8:b2:
         d5:d7:7e:7f:04:84:07:cd:9c:7b:ab:f9:95:18:9c:20:ff:37:
         46:11:b8:9c:3f:12:36:56:d8:79:fb:10:99:26:dc:91:4a:f7:
         58:4d:4f:41:dd:d7:f2:c5:20:32:30:47:27:ec:08:8c:6f:72:
         56:96:84:2d:26:cd:26:d1:43:23:35:ed:46:0f:03:77:7e:6f:
         1b:73:f1:96:95:e4:6b:00:0e:c6:60:46:62:12:d8:85:f4:f9:
         81:51:61:e4:e2:73:33:68:a7:9f:70:55:9f:78:fb:6e:5a:53:
         7e:66:b8:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:35:46 2025 by rpki-client