Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GmxeCH4MWATqxVw9myA1pQoYNsMuCBfxjrm743CVBX1G/0/3137302e3233382e3136312e302f32342d3234203d3e20323636333237.roa
File:                     3137302e3233382e3136312e302f32342d3234203d3e20323636333237.roa (raw, json)
Hash identifier:          6Qqkl4nieTT9wrZoTIKOplU+UlQBpaCQ4oqKGWM2NFc=
Subject key identifier:   22:61:00:EB:EF:2B:B9:A4:41:9E:5E:80:B9:1F:35:EC:4B:1E:B9:00
Certificate issuer:       /CN=52519D71351C02D14D4BE69A71D2C09F76A4F333
Certificate serial:       122C55A373EB8C1189FE795E35B56AE27582BAB9
Authority key identifier: 52:51:9D:71:35:1C:02:D1:4D:4B:E6:9A:71:D2:C0:9F:76:A4:F3:33
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/52519D71351C02D14D4BE69A71D2C09F76A4F333.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GmxeCH4MWATqxVw9myA1pQoYNsMuCBfxjrm743CVBX1G/0/3137302e3233382e3136312e302f32342d3234203d3e20323636333237.roa
Signing time:             Mon 27 Jan 2025 19:21:25 +0000
ROA not before:           Mon 27 Jan 2025 19:16:25 +0000
ROA not after:            Mon 26 Jan 2026 19:21:25 +0000
asID:                     266327
IP address blocks:        170.238.161.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:2c:55:a3:73:eb:8c:11:89:fe:79:5e:35:b5:6a:e2:75:82:ba:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52519D71351C02D14D4BE69A71D2C09F76A4F333
        Validity
            Not Before: Jan 27 19:16:25 2025 GMT
            Not After : Jan 26 19:21:25 2026 GMT
        Subject: CN=226100EBEF2BB9A4419E5E80B91F35EC4B1EB900
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:63:c9:ba:ea:2a:33:43:a8:d3:90:a1:a2:de:
                    f9:be:a5:3c:ea:e1:8e:f6:1c:bd:ea:e3:d9:cb:9a:
                    f1:2f:f0:d3:b5:57:5e:79:c0:30:4d:1a:ad:7a:d5:
                    98:1e:72:ec:60:be:a6:8b:41:ce:d2:ac:13:62:46:
                    aa:6c:99:13:e7:a8:25:07:c3:c9:e9:a5:ad:ec:47:
                    5c:6b:a2:ef:54:9e:17:e0:4a:e0:36:7c:ed:45:62:
                    8a:28:88:77:bd:82:54:67:7c:c1:51:83:8d:6e:b7:
                    5d:b6:5d:63:80:2c:d7:ca:b7:b3:95:31:6c:b1:10:
                    c1:c3:8d:3d:a4:a8:e7:bc:61:61:ad:99:56:80:ab:
                    5c:84:61:48:74:35:5c:90:0d:d5:ef:20:53:94:62:
                    a6:df:dd:46:60:8f:28:ad:a3:5c:8f:6b:62:24:6e:
                    3d:fc:3d:21:05:a3:bf:83:dd:f8:b7:58:1e:a7:80:
                    c5:b6:41:3c:67:26:c8:49:e8:25:a2:c1:27:ce:0b:
                    9e:4e:46:d7:ce:82:ad:15:16:1b:b5:4e:fc:74:02:
                    b9:fe:42:8d:5f:82:a2:1f:57:0d:d2:24:fc:75:0e:
                    06:ae:33:b7:75:eb:94:10:4f:8e:6e:d5:0e:81:0f:
                    ff:5b:b8:14:f4:88:55:76:7b:d7:a5:7e:ef:99:a6:
                    8a:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:61:00:EB:EF:2B:B9:A4:41:9E:5E:80:B9:1F:35:EC:4B:1E:B9:00
            X509v3 Authority Key Identifier:
                keyid:52:51:9D:71:35:1C:02:D1:4D:4B:E6:9A:71:D2:C0:9F:76:A4:F3:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GmxeCH4MWATqxVw9myA1pQoYNsMuCBfxjrm743CVBX1G/0/52519D71351C02D14D4BE69A71D2C09F76A4F333.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/52519D71351C02D14D4BE69A71D2C09F76A4F333.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GmxeCH4MWATqxVw9myA1pQoYNsMuCBfxjrm743CVBX1G/0/3137302e3233382e3136312e302f32342d3234203d3e20323636333237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.238.161.0/24

    Signature Algorithm: sha256WithRSAEncryption
         66:59:92:d9:33:d6:0d:ae:f8:8f:55:58:87:f6:d7:b3:a4:11:
         ee:fa:31:14:45:73:82:d8:45:d2:7c:f9:cc:f0:58:d0:4c:06:
         ef:36:dd:e0:5a:40:96:02:cd:9b:8a:53:f7:d6:7f:1d:c6:52:
         be:8e:3e:ef:da:da:74:fb:de:65:e0:e5:90:57:b2:df:ff:ad:
         45:97:bf:2a:5f:4a:5c:e9:55:ea:18:53:cc:02:e9:70:d5:90:
         5a:24:c2:f0:eb:65:64:c0:6e:c2:ac:4a:fd:1a:08:d9:ac:e2:
         d1:d4:1e:c4:33:eb:f1:73:10:c7:fb:d1:5e:fe:e7:7c:6d:fd:
         57:5c:14:c8:64:41:bb:7d:d9:3f:60:3c:ec:f7:90:d0:c7:5e:
         d1:0d:c6:41:8b:58:60:d7:e3:68:ab:6f:2f:9c:38:cb:20:32:
         ae:3c:ff:f4:eb:79:5f:91:07:fd:cb:1a:a1:b5:11:73:b6:47:
         2f:14:d4:15:72:c4:f8:54:1e:3e:4e:30:7b:eb:50:8c:00:2f:
         13:1b:ba:73:ca:67:09:27:6c:4b:20:ff:23:bd:77:15:2a:36:
         24:f3:0a:2f:22:c7:05:59:4e:99:f0:60:73:38:c3:04:e7:19:
         ec:68:92:82:1f:fc:b9:09:9a:69:19:ce:6d:dd:e5:64:3d:51:
         1a:65:b1:68
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUEixVo3PrjBGJ/nleNbVq4nWCurkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTI1MTlENzEzNTFDMDJEMTRENEJFNjlBNzFEMkMwOUY3
NkE0RjMzMzAeFw0yNTAxMjcxOTE2MjVaFw0yNjAxMjYxOTIxMjVaMDMxMTAvBgNV
BAMTKDIyNjEwMEVCRUYyQkI5QTQ0MTlFNUU4MEI5MUYzNUVDNEIxRUI5MDAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRY8m66iozQ6jTkKGi3vm+pTzq
4Y72HL3q49nLmvEv8NO1V155wDBNGq161ZgecuxgvqaLQc7SrBNiRqpsmRPnqCUH
w8nppa3sR1xrou9UnhfgSuA2fO1FYoooiHe9glRnfMFRg41ut122XWOALNfKt7OV
MWyxEMHDjT2kqOe8YWGtmVaAq1yEYUh0NVyQDdXvIFOUYqbf3UZgjyito1yPa2Ik
bj38PSEFo7+D3fi3WB6ngMW2QTxnJshJ6CWiwSfOC55ORtfOgq0VFhu1Tvx0Arn+
Qo1fgqIfVw3SJPx1DgauM7d165QQT45u1Q6BD/9buBT0iFV2e9elfu+ZpoprAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUImEA6+8ruaRBnl6AuR817EseuQAwHwYDVR0j
BBgwFoAUUlGdcTUcAtFNS+aacdLAn3ak8zMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR214ZUNINE1XQVRxeFZ3OW15QTFwUW9ZTnNNdUNCZnhqcm03NDNDVkJY
MUcvMC81MjUxOUQ3MTM1MUMwMkQxNEQ0QkU2OUE3MUQyQzA5Rjc2QTRGMzMzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzUyNTE5RDcxMzUxQzAyRDE0
RDRCRTY5QTcxRDJDMDlGNzZBNEYzMzMuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0dteGVDSDRNV0FUcXhWdzlteUExcFFvWU5zTXVDQmZ4anJtNzQzQ1ZCWDFHLzAv
MzEzNzMwMmUzMjMzMzgyZTMxMzYzMTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzYzNjMzMzIzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAKruoTANBgkqhkiG9w0BAQsFAAOCAQEAZlmS
2TPWDa74j1VYh/bXs6QR7voxFEVzgthF0nz5zPBY0EwG7zbd4FpAlgLNm4pT99Z/
HcZSvo4+79radPveZeDlkFey3/+tRZe/Kl9KXOlV6hhTzALpcNWQWiTC8OtlZMBu
wqxK/RoI2azi0dQexDPr8XMQx/vRXv7nfG39V1wUyGRBu33ZP2A87PeQ0Mde0Q3G
QYtYYNfjaKtvL5w4yyAyrjz/9Ot5X5EH/csaobURc7ZHLxTUFXLE+FQePk4we+tQ
jAAvExu6c8pnCSdsSyD/I713FSo2JPMKLyLHBVlOmfBgczjDBOcZ7GiSgh/8uQma
aRnObd3lZD1RGmWxaA==
-----END CERTIFICATE-----
Generated at Sat Apr 5 14:48:45 2025 by rpki-client