Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J4AniHbvGBUjbcCLSXtnKW2hSw5ctboKKp8NEjGrWT4y/0/3136372e3234392e32342e302f32322d3232203d3e20323635313636.roa
File:                     3136372e3234392e32342e302f32322d3232203d3e20323635313636.roa (raw, json)
Hash identifier:          8einsxfd1DrZDdfWbjP8NmZmvgd3k4XNBR7sAhoTpJA=
Subject key identifier:   FA:69:43:60:B4:BC:63:3A:48:73:90:26:7E:BC:EE:F4:4D:76:84:23
Certificate issuer:       /CN=2A34C378F02C28B719B1B0E4FD02A736FA4426B1
Certificate serial:       5C1779BF906C6DA4DFA55DDF01945B006CFB10AB
Authority key identifier: 2A:34:C3:78:F0:2C:28:B7:19:B1:B0:E4:FD:02:A7:36:FA:44:26:B1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A34C378F02C28B719B1B0E4FD02A736FA4426B1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J4AniHbvGBUjbcCLSXtnKW2hSw5ctboKKp8NEjGrWT4y/0/3136372e3234392e32342e302f32322d3232203d3e20323635313636.roa
Signing time:             Mon 09 Dec 2024 19:50:53 +0000
ROA not before:           Mon 09 Dec 2024 19:45:53 +0000
ROA not after:            Mon 08 Dec 2025 19:50:53 +0000
asID:                     265166
IP address blocks:        167.249.24.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:17:79:bf:90:6c:6d:a4:df:a5:5d:df:01:94:5b:00:6c:fb:10:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A34C378F02C28B719B1B0E4FD02A736FA4426B1
        Validity
            Not Before: Dec  9 19:45:53 2024 GMT
            Not After : Dec  8 19:50:53 2025 GMT
        Subject: CN=FA694360B4BC633A487390267EBCEEF44D768423
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:d7:78:f3:cf:2b:d2:4d:46:93:77:0e:ee:70:
                    c7:7f:b2:03:07:1a:fa:f4:bb:e3:69:03:37:32:01:
                    41:a4:31:8c:82:4e:0b:84:a5:7f:9d:44:25:74:cf:
                    86:47:b4:2c:48:0b:3e:5e:f6:0e:37:02:25:30:c6:
                    11:15:46:b3:ed:e9:dd:c5:c6:23:32:ba:5a:5e:a9:
                    10:94:f9:68:f7:d3:f7:d2:d2:10:ef:ad:ce:ac:dc:
                    3c:d7:1d:4e:41:59:f6:4a:e3:f0:c3:aa:a8:5e:26:
                    92:07:47:60:38:ac:73:ce:e7:e9:35:0e:18:8e:b7:
                    b0:7a:13:a9:d3:89:be:81:e8:d2:41:0e:d1:88:f8:
                    0a:9d:e3:b5:fd:04:63:62:97:9e:1e:79:6c:14:36:
                    a8:63:fc:64:41:e9:99:c0:58:dd:93:db:0d:d9:4b:
                    7c:f9:dd:1c:f6:76:49:94:48:fd:06:c2:87:aa:a2:
                    a8:f7:de:2a:d6:79:27:bd:34:6c:da:01:a8:c4:72:
                    a9:17:e1:d7:65:8a:5a:55:e3:7e:f4:55:df:8c:ea:
                    2b:bb:33:69:cc:19:7c:8a:c6:78:6f:ca:95:af:9f:
                    2a:c8:fa:fa:36:db:7e:f5:d6:57:bf:2b:96:8e:0c:
                    fc:06:57:28:4b:b0:cc:f3:6a:93:88:b5:fb:17:f5:
                    83:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:69:43:60:B4:BC:63:3A:48:73:90:26:7E:BC:EE:F4:4D:76:84:23
            X509v3 Authority Key Identifier:
                keyid:2A:34:C3:78:F0:2C:28:B7:19:B1:B0:E4:FD:02:A7:36:FA:44:26:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J4AniHbvGBUjbcCLSXtnKW2hSw5ctboKKp8NEjGrWT4y/0/2A34C378F02C28B719B1B0E4FD02A736FA4426B1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A34C378F02C28B719B1B0E4FD02A736FA4426B1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J4AniHbvGBUjbcCLSXtnKW2hSw5ctboKKp8NEjGrWT4y/0/3136372e3234392e32342e302f32322d3232203d3e20323635313636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.249.24.0/22

    Signature Algorithm: sha256WithRSAEncryption
         58:80:88:df:1a:fe:80:79:ae:40:f9:ac:66:0a:0b:a9:1b:b5:
         f8:c7:c6:57:e9:c4:fb:4d:c4:07:dd:a4:98:45:98:95:ca:05:
         f3:30:31:ac:a2:1e:84:7f:a1:93:07:a0:30:6a:db:7b:b2:05:
         25:b5:6f:a8:07:41:a7:b9:33:ac:ff:e8:76:7d:98:3f:e7:1f:
         c8:09:95:5e:d9:42:e3:49:56:b1:f7:c1:75:8b:6f:f2:ca:25:
         d5:a2:90:8b:2f:60:f6:aa:1c:1e:26:a4:2b:d4:86:62:24:85:
         15:cf:d3:d5:e5:c1:39:3b:a0:39:53:09:1f:dd:c3:20:c5:1f:
         91:71:cb:11:9c:e8:70:b9:5e:9a:7e:ad:1e:7f:dd:88:b9:cb:
         dc:df:ff:41:5c:ee:1d:0c:d1:8a:04:e1:28:b0:3b:b0:5e:c3:
         38:e8:79:12:82:67:28:2e:0e:3f:9b:33:1f:c3:ad:4a:be:f2:
         7c:40:bb:57:36:e8:34:c6:1d:eb:4e:8a:ef:5c:0c:2e:ab:43:
         4f:03:00:8c:da:62:78:8d:cf:a4:87:cb:92:a8:3f:e8:42:76:
         34:b0:73:71:09:69:3f:6e:37:ad:0d:05:a0:d2:0f:8b:98:ef:
         2d:38:db:c9:0c:29:25:27:c1:8a:d3:15:fb:0b:f1:aa:42:b2:
         f4:fd:d1:0d
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUXBd5v5BsbaTfpV3fAZRbAGz7EKswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkEzNEMzNzhGMDJDMjhCNzE5QjFCMEU0RkQwMkE3MzZG
QTQ0MjZCMTAeFw0yNDEyMDkxOTQ1NTNaFw0yNTEyMDgxOTUwNTNaMDMxMTAvBgNV
BAMTKEZBNjk0MzYwQjRCQzYzM0E0ODczOTAyNjdFQkNFRUY0NEQ3Njg0MjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCq13jzzyvSTUaTdw7ucMd/sgMH
Gvr0u+NpAzcyAUGkMYyCTguEpX+dRCV0z4ZHtCxICz5e9g43AiUwxhEVRrPt6d3F
xiMyulpeqRCU+Wj30/fS0hDvrc6s3DzXHU5BWfZK4/DDqqheJpIHR2A4rHPO5+k1
DhiOt7B6E6nTib6B6NJBDtGI+Aqd47X9BGNil54eeWwUNqhj/GRB6ZnAWN2T2w3Z
S3z53Rz2dkmUSP0Gwoeqoqj33irWeSe9NGzaAajEcqkX4ddlilpV4370Vd+M6iu7
M2nMGXyKxnhvypWvnyrI+vo223711le/K5aODPwGVyhLsMzzapOItfsX9YP9AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU+mlDYLS8YzpIc5Amfrzu9E12hCMwHwYDVR0j
BBgwFoAUKjTDePAsKLcZsbDk/QKnNvpEJrEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSjRBbmlIYnZHQlVqYmNDTFNYdG5LVzJoU3c1Y3Rib0tLcDhORWpHcldU
NHkvMC8yQTM0QzM3OEYwMkMyOEI3MTlCMUIwRTRGRDAyQTczNkZBNDQyNkIxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJBMzRDMzc4RjAyQzI4Qjcx
OUIxQjBFNEZEMDJBNzM2RkE0NDI2QjEuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0o0QW5pSGJ2R0JVamJjQ0xTWHRuS1cyaFN3NWN0Ym9LS3A4TkVqR3JXVDR5LzAv
MzEzNjM3MmUzMjM0MzkyZTMyMzQyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzMjM2
MzUzMTM2MzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAKn+RgwDQYJKoZIhvcNAQELBQADggEBAFiAiN8a
/oB5rkD5rGYKC6kbtfjHxlfpxPtNxAfdpJhFmJXKBfMwMayiHoR/oZMHoDBq23uy
BSW1b6gHQae5M6z/6HZ9mD/nH8gJlV7ZQuNJVrH3wXWLb/LKJdWikIsvYPaqHB4m
pCvUhmIkhRXP09XlwTk7oDlTCR/dwyDFH5FxyxGc6HC5Xpp+rR5/3Yi5y9zf/0Fc
7h0M0YoE4SiwO7BewzjoeRKCZyguDj+bMx/DrUq+8nxAu1c26DTGHetOiu9cDC6r
Q08DAIzaYniNz6SHy5KoP+hCdjSwc3EJaT9uN60NBaDSD4uY7y0428kMKSUnwYrT
FfsL8apCsvT90Q0=
-----END CERTIFICATE-----
Generated at Wed Apr 9 21:01:39 2025 by rpki-client