Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GnRbjxchuD6rHPufw5K7bqTw1DwfkSQ4KXaNeDSJVZng/0/3137302e3233382e37352e302f32342d3234203d3e20323634343936.roa
File:                     3137302e3233382e37352e302f32342d3234203d3e20323634343936.roa (raw, json)
Hash identifier:          s5eNX1OO9D94BeweFw4mw08rfO+3hq+IUtHsxb1xe1o=
Subject key identifier:   B9:84:30:EC:76:1C:EF:0D:01:2C:4F:E0:40:E9:99:39:98:F3:4A:04
Certificate issuer:       /CN=970CC26DD0C353C244F72F5B62AE4B5B0EE5AE7C
Certificate serial:       1557051F038BADCC1BE6B21337EAECB6146AC2F5
Authority key identifier: 97:0C:C2:6D:D0:C3:53:C2:44:F7:2F:5B:62:AE:4B:5B:0E:E5:AE:7C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/970CC26DD0C353C244F72F5B62AE4B5B0EE5AE7C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GnRbjxchuD6rHPufw5K7bqTw1DwfkSQ4KXaNeDSJVZng/0/3137302e3233382e37352e302f32342d3234203d3e20323634343936.roa
Signing time:             Wed 26 Feb 2025 14:47:25 +0000
ROA not before:           Wed 26 Feb 2025 14:42:25 +0000
ROA not after:            Wed 25 Feb 2026 14:47:25 +0000
asID:                     264496
IP address blocks:        170.238.75.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:57:05:1f:03:8b:ad:cc:1b:e6:b2:13:37:ea:ec:b6:14:6a:c2:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=970CC26DD0C353C244F72F5B62AE4B5B0EE5AE7C
        Validity
            Not Before: Feb 26 14:42:25 2025 GMT
            Not After : Feb 25 14:47:25 2026 GMT
        Subject: CN=B98430EC761CEF0D012C4FE040E9993998F34A04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:f8:e3:82:0b:7f:32:68:a1:84:58:6d:f1:cf:
                    e4:e3:5e:34:59:9b:8d:db:90:09:ba:53:c0:1a:27:
                    c6:58:c4:48:4f:74:98:ee:8e:49:c2:15:7c:47:b1:
                    3b:20:55:ca:aa:bc:8c:b9:f0:25:1b:b2:19:81:17:
                    12:6c:df:01:75:18:5f:40:fd:71:67:75:64:5b:9f:
                    a5:06:13:6d:9c:44:60:49:a4:22:46:19:22:2c:34:
                    6c:e0:8c:52:5b:47:0e:a6:82:f3:0c:11:db:50:77:
                    c2:f8:35:1f:0e:93:2d:97:9a:30:0f:7b:80:89:31:
                    8d:38:2f:82:40:41:d6:d9:f3:58:c5:ce:9d:d5:bb:
                    8d:5d:b6:b9:8a:b3:2e:bf:86:49:3f:b2:e0:a9:af:
                    a1:25:00:13:eb:d7:85:d0:15:99:e8:25:f0:58:18:
                    bb:7c:f3:31:d5:aa:19:72:a7:6e:de:2c:ea:47:ed:
                    57:c2:5e:f2:c8:d2:32:d6:dd:c9:7b:e9:d0:be:2c:
                    cd:2b:51:56:29:7e:df:8b:db:5f:c8:45:2a:79:1c:
                    9a:f4:ff:be:b4:2b:d6:9f:6a:0d:68:1d:4a:46:ff:
                    53:7c:94:9a:c0:00:4b:8e:11:e4:dc:ba:35:1b:14:
                    75:b9:3f:00:95:9d:91:5a:2b:12:bf:f3:99:98:96:
                    b4:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:84:30:EC:76:1C:EF:0D:01:2C:4F:E0:40:E9:99:39:98:F3:4A:04
            X509v3 Authority Key Identifier:
                keyid:97:0C:C2:6D:D0:C3:53:C2:44:F7:2F:5B:62:AE:4B:5B:0E:E5:AE:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GnRbjxchuD6rHPufw5K7bqTw1DwfkSQ4KXaNeDSJVZng/0/970CC26DD0C353C244F72F5B62AE4B5B0EE5AE7C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/970CC26DD0C353C244F72F5B62AE4B5B0EE5AE7C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GnRbjxchuD6rHPufw5K7bqTw1DwfkSQ4KXaNeDSJVZng/0/3137302e3233382e37352e302f32342d3234203d3e20323634343936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.238.75.0/24

    Signature Algorithm: sha256WithRSAEncryption
         07:0b:a1:84:5b:29:bb:fc:5f:7a:a5:41:48:69:bf:a3:f0:fe:
         d3:b7:c5:8b:a3:7b:34:7e:c5:58:a9:5e:9b:d4:f6:4e:8f:e2:
         42:75:52:15:0e:24:cd:e9:c0:fc:80:bc:2f:c6:2e:78:fb:06:
         f8:fd:c1:f3:b3:db:bc:db:ee:e5:4e:5c:db:1d:66:1c:07:1d:
         60:a2:73:d1:ad:9c:df:f0:c5:01:c6:d6:5d:cb:54:57:66:dd:
         4e:1e:cd:c3:2b:e3:75:86:be:a0:6e:71:7b:47:77:d0:34:27:
         de:c0:f8:01:a8:7d:0e:53:0e:2d:70:87:9d:c5:fa:a8:5b:0a:
         ef:ab:8a:6f:3f:4e:06:8a:c6:17:c1:c1:67:3c:dd:34:f3:27:
         a0:a7:65:21:e5:40:92:74:17:1f:c7:2a:97:2e:a5:20:43:52:
         cb:34:98:be:8e:06:36:e9:3c:63:ff:5a:5f:fd:0c:cc:83:77:
         52:bf:1e:5c:a7:da:f5:44:2a:5c:b9:9e:97:c8:b2:f5:4b:4b:
         99:67:8a:ed:ec:ef:d9:c9:ce:35:f5:f2:d7:98:d5:c4:f2:54:
         7e:cc:f7:8c:6a:8f:55:2d:fa:87:a7:10:55:b1:5e:ca:1e:b4:
         84:a0:7b:dd:b7:f8:92:18:53:ff:5c:45:32:02:bc:ea:8d:9a:
         b2:64:75:41
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUFVcFHwOLrcwb5rITN+rsthRqwvUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTcwQ0MyNkREMEMzNTNDMjQ0RjcyRjVCNjJBRTRCNUIw
RUU1QUU3QzAeFw0yNTAyMjYxNDQyMjVaFw0yNjAyMjUxNDQ3MjVaMDMxMTAvBgNV
BAMTKEI5ODQzMEVDNzYxQ0VGMEQwMTJDNEZFMDQwRTk5OTM5OThGMzRBMDQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCn+OOCC38yaKGEWG3xz+TjXjRZ
m43bkAm6U8AaJ8ZYxEhPdJjujknCFXxHsTsgVcqqvIy58CUbshmBFxJs3wF1GF9A
/XFndWRbn6UGE22cRGBJpCJGGSIsNGzgjFJbRw6mgvMMEdtQd8L4NR8Oky2XmjAP
e4CJMY04L4JAQdbZ81jFzp3Vu41dtrmKsy6/hkk/suCpr6ElABPr14XQFZnoJfBY
GLt88zHVqhlyp27eLOpH7VfCXvLI0jLW3cl76dC+LM0rUVYpft+L21/IRSp5HJr0
/760K9afag1oHUpG/1N8lJrAAEuOEeTcujUbFHW5PwCVnZFaKxK/85mYlrSJAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUuYQw7HYc7w0BLE/gQOmZOZjzSgQwHwYDVR0j
BBgwFoAUlwzCbdDDU8JE9y9bYq5LWw7lrnwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR25SYmp4Y2h1RDZySFB1Znc1SzdicVR3MUR3ZmtTUTRLWGFOZURTSlZa
bmcvMC85NzBDQzI2REQwQzM1M0MyNDRGNzJGNUI2MkFFNEI1QjBFRTVBRTdDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzk3MENDMjZERDBDMzUzQzI0
NEY3MkY1QjYyQUU0QjVCMEVFNUFFN0MuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0duUmJqeGNodUQ2ckhQdWZ3NUs3YnFUdzFEd2ZrU1E0S1hhTmVEU0pWWm5nLzAv
MzEzNzMwMmUzMjMzMzgyZTM3MzUyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzQzNDM5MzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBACq7kswDQYJKoZIhvcNAQELBQADggEBAAcLoYRb
Kbv8X3qlQUhpv6Pw/tO3xYujezR+xVipXpvU9k6P4kJ1UhUOJM3pwPyAvC/GLnj7
Bvj9wfOz27zb7uVOXNsdZhwHHWCic9GtnN/wxQHG1l3LVFdm3U4ezcMr43WGvqBu
cXtHd9A0J97A+AGofQ5TDi1wh53F+qhbCu+rim8/TgaKxhfBwWc83TTzJ6CnZSHl
QJJ0Fx/HKpcupSBDUss0mL6OBjbpPGP/Wl/9DMyDd1K/Hlyn2vVEKly5npfIsvVL
S5lniu3s79nJzjX18teY1cTyVH7M94xqj1Ut+oenEFWxXsoetISge923+JIYU/9c
RTICvOqNmrJkdUE=
-----END CERTIFICATE-----
Generated at Sat Apr 5 23:06:09 2025 by rpki-client