Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5seJupBmt7DNaqkjFuoxGw4yKiZTyiZaETXsuDZrskHn/0/3137302e3233392e34362e302f32342d3234203d3e20323636333339.roa
File:                     3137302e3233392e34362e302f32342d3234203d3e20323636333339.roa (raw, json)
Hash identifier:          JK56B9izh6UfZjDxvsUf6cdl0H9JbVddaYs9a+W/34A=
Subject key identifier:   E9:56:93:14:CF:C2:74:C1:35:2D:3D:08:0F:17:C4:98:96:D6:F2:28
Certificate issuer:       /CN=2060EDA3B3A799358824BDE72CD21670F9F23032
Certificate serial:       5B31B91DF2018C0C3732485255685E169C729FCD
Authority key identifier: 20:60:ED:A3:B3:A7:99:35:88:24:BD:E7:2C:D2:16:70:F9:F2:30:32
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2060EDA3B3A799358824BDE72CD21670F9F23032.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5seJupBmt7DNaqkjFuoxGw4yKiZTyiZaETXsuDZrskHn/0/3137302e3233392e34362e302f32342d3234203d3e20323636333339.roa
Signing time:             Sun 08 Dec 2024 20:04:12 +0000
ROA not before:           Sun 08 Dec 2024 19:59:12 +0000
ROA not after:            Sun 07 Dec 2025 20:04:12 +0000
asID:                     266339
IP address blocks:        170.239.46.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:31:b9:1d:f2:01:8c:0c:37:32:48:52:55:68:5e:16:9c:72:9f:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2060EDA3B3A799358824BDE72CD21670F9F23032
        Validity
            Not Before: Dec  8 19:59:12 2024 GMT
            Not After : Dec  7 20:04:12 2025 GMT
        Subject: CN=E9569314CFC274C1352D3D080F17C49896D6F228
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:2e:dc:72:6e:48:22:35:20:a0:d7:1f:71:72:
                    80:8b:40:d8:dd:27:d8:be:56:13:79:90:c4:f9:24:
                    3d:70:f0:d4:5b:2b:99:91:06:67:72:fb:7b:fe:87:
                    f0:8b:ee:ac:90:61:5d:67:dd:74:01:42:9e:0e:98:
                    ff:fe:7b:c6:d6:9c:69:cf:18:68:76:99:36:33:41:
                    78:6e:1e:2e:90:67:46:5d:30:15:1c:7a:cc:77:2b:
                    b1:b8:40:c8:34:61:92:f7:15:88:9b:98:dd:96:1b:
                    00:f0:6d:fb:16:17:bc:c7:24:55:d4:61:0c:e9:21:
                    a5:4f:ab:71:b5:15:11:08:84:23:fc:87:e9:22:81:
                    78:c1:a4:fe:86:1d:f5:cf:69:f9:82:c6:c0:ae:9a:
                    e2:da:a6:59:48:a4:95:31:10:03:cf:59:e0:18:4a:
                    3f:24:fe:36:df:12:2b:08:80:ed:f0:39:a0:fa:9a:
                    57:24:ee:bf:26:5a:68:6a:9c:86:1b:0f:9d:39:44:
                    72:01:95:49:bf:e0:ca:ed:49:b0:9b:e3:22:65:7e:
                    3b:4d:29:a8:e6:0f:c6:27:9e:d7:d5:9d:67:ac:58:
                    46:d0:b8:12:63:0f:37:43:db:a9:02:56:1d:a8:b3:
                    d7:6f:49:27:8c:a4:5f:da:e4:43:f5:56:fc:97:30:
                    16:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:56:93:14:CF:C2:74:C1:35:2D:3D:08:0F:17:C4:98:96:D6:F2:28
            X509v3 Authority Key Identifier:
                keyid:20:60:ED:A3:B3:A7:99:35:88:24:BD:E7:2C:D2:16:70:F9:F2:30:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5seJupBmt7DNaqkjFuoxGw4yKiZTyiZaETXsuDZrskHn/0/2060EDA3B3A799358824BDE72CD21670F9F23032.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2060EDA3B3A799358824BDE72CD21670F9F23032.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5seJupBmt7DNaqkjFuoxGw4yKiZTyiZaETXsuDZrskHn/0/3137302e3233392e34362e302f32342d3234203d3e20323636333339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.239.46.0/24

    Signature Algorithm: sha256WithRSAEncryption
         83:d9:b6:2d:f7:9b:65:7f:1f:1f:16:1a:9c:88:fa:41:a5:ae:
         85:60:07:9c:3b:c0:d2:d6:98:cb:6d:00:01:47:0d:43:1b:f5:
         61:17:7b:cf:2b:9f:04:dd:7c:ab:f9:e4:e9:67:fe:95:2a:11:
         28:f5:b7:e5:bd:7c:5d:ca:0a:c5:71:33:d3:9f:d7:99:ac:d2:
         6c:03:81:f5:c3:35:be:20:68:33:59:bb:59:07:ab:34:38:69:
         3a:bf:e9:1e:66:6b:a3:06:c9:c4:26:bd:22:4b:08:d3:83:7c:
         cd:d6:ce:72:25:cb:29:52:5b:40:29:a4:55:5b:bc:75:58:98:
         4c:fe:a3:4d:18:6c:d4:e4:28:8e:01:0b:fb:e7:b2:0d:e5:f6:
         96:6d:45:31:38:4d:7b:f3:87:6e:93:f5:79:1b:40:7a:d6:88:
         d3:48:05:da:2c:c9:26:dd:6a:33:13:91:f4:b8:84:3e:c0:f7:
         2f:15:f4:2e:a1:96:1c:23:1c:33:67:d1:87:a6:c3:1a:ac:02:
         bc:d9:65:8a:b8:46:83:c8:9d:8a:5a:d4:3e:d6:9b:6b:e8:1f:
         23:50:70:7a:b4:3f:06:40:0e:28:e5:0c:2f:3e:62:d1:85:bd:
         28:25:a3:4a:54:80:3d:0c:96:a9:c4:09:a1:7a:8e:25:ca:b7:
         e9:34:0a:82
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUWzG5HfIBjAw3MkhSVWheFpxyn80wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjA2MEVEQTNCM0E3OTkzNTg4MjRCREU3MkNEMjE2NzBG
OUYyMzAzMjAeFw0yNDEyMDgxOTU5MTJaFw0yNTEyMDcyMDA0MTJaMDMxMTAvBgNV
BAMTKEU5NTY5MzE0Q0ZDMjc0QzEzNTJEM0QwODBGMTdDNDk4OTZENkYyMjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwLtxybkgiNSCg1x9xcoCLQNjd
J9i+VhN5kMT5JD1w8NRbK5mRBmdy+3v+h/CL7qyQYV1n3XQBQp4OmP/+e8bWnGnP
GGh2mTYzQXhuHi6QZ0ZdMBUcesx3K7G4QMg0YZL3FYibmN2WGwDwbfsWF7zHJFXU
YQzpIaVPq3G1FREIhCP8h+kigXjBpP6GHfXPafmCxsCumuLapllIpJUxEAPPWeAY
Sj8k/jbfEisIgO3wOaD6mlck7r8mWmhqnIYbD505RHIBlUm/4MrtSbCb4yJlfjtN
KajmD8YnntfVnWesWEbQuBJjDzdD26kCVh2os9dvSSeMpF/a5EP1VvyXMBZLAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU6VaTFM/CdME1LT0IDxfEmJbW8igwHwYDVR0j
BBgwFoAUIGDto7OnmTWIJL3nLNIWcPnyMDIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNXNlSnVwQm10N0ROYXFrakZ1b3hHdzR5S2laVHlpWmFFVFhzdURacnNr
SG4vMC8yMDYwRURBM0IzQTc5OTM1ODgyNEJERTcyQ0QyMTY3MEY5RjIzMDMyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzIwNjBFREEzQjNBNzk5MzU4
ODI0QkRFNzJDRDIxNjcwRjlGMjMwMzIuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzVzZUp1cEJtdDdETmFxa2pGdW94R3c0eUtpWlR5aVphRVRYc3VEWnJza0huLzAv
MzEzNzMwMmUzMjMzMzkyZTM0MzYyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzYzMzMzMzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBACq7y4wDQYJKoZIhvcNAQELBQADggEBAIPZti33
m2V/Hx8WGpyI+kGlroVgB5w7wNLWmMttAAFHDUMb9WEXe88rnwTdfKv55Oln/pUq
ESj1t+W9fF3KCsVxM9Of15ms0mwDgfXDNb4gaDNZu1kHqzQ4aTq/6R5ma6MGycQm
vSJLCNODfM3WznIlyylSW0AppFVbvHVYmEz+o00YbNTkKI4BC/vnsg3l9pZtRTE4
TXvzh26T9XkbQHrWiNNIBdosySbdajMTkfS4hD7A9y8V9C6hlhwjHDNn0Yemwxqs
ArzZZYq4RoPInYpa1D7Wm2voHyNQcHq0PwZADijlDC8+YtGFvSglo0pUgD0MlqnE
CaF6jiXKt+k0CoI=
-----END CERTIFICATE-----
Generated at Tue Apr 29 20:49:31 2025 by rpki-client