Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2tRwyEQ5CnFhgRBoLCtm1PRTJTEq3CE7JoGLaBhU48wi/0/3133382e3132322e3234302e302f32322d3234203d3e20323634353235.roa
File:                     3133382e3132322e3234302e302f32322d3234203d3e20323634353235.roa (raw, json)
Hash identifier:          Z4M9dsaXUobkZJ7IBfV23sKv1hFv40dFs8MA1zGAsbU=
Subject key identifier:   8D:96:7A:A9:58:27:B5:4D:E9:DA:9D:BE:7A:1A:AB:24:28:F0:2C:11
Certificate issuer:       /CN=4766F3CA43125EDED2BA274155576386D9101EDC
Certificate serial:       7B62985B0431A46FAE08743EE8671AABA5FAD68E
Authority key identifier: 47:66:F3:CA:43:12:5E:DE:D2:BA:27:41:55:57:63:86:D9:10:1E:DC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4766F3CA43125EDED2BA274155576386D9101EDC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2tRwyEQ5CnFhgRBoLCtm1PRTJTEq3CE7JoGLaBhU48wi/0/3133382e3132322e3234302e302f32322d3234203d3e20323634353235.roa
Signing time:             Mon 03 Feb 2025 20:34:55 +0000
ROA not before:           Mon 03 Feb 2025 20:29:55 +0000
ROA not after:            Mon 02 Feb 2026 20:34:55 +0000
asID:                     264525
IP address blocks:        138.122.240.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:62:98:5b:04:31:a4:6f:ae:08:74:3e:e8:67:1a:ab:a5:fa:d6:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4766F3CA43125EDED2BA274155576386D9101EDC
        Validity
            Not Before: Feb  3 20:29:55 2025 GMT
            Not After : Feb  2 20:34:55 2026 GMT
        Subject: CN=8D967AA95827B54DE9DA9DBE7A1AAB2428F02C11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:21:96:fa:c3:b8:96:9e:03:fa:20:5d:de:f0:
                    4e:77:67:39:d6:63:f1:5c:d4:c7:d2:be:24:80:7c:
                    8e:fc:98:30:4a:db:62:84:33:c0:ef:f1:ec:92:29:
                    8a:2a:f2:05:28:e6:29:a3:26:90:25:b8:e0:0b:24:
                    78:99:10:f7:65:70:48:f9:6e:ab:ea:d6:7a:d1:83:
                    48:38:e1:ff:25:d0:d5:21:ca:2c:84:7f:a4:f2:28:
                    86:70:d1:7b:f7:63:a5:d5:12:3a:99:da:c9:b4:08:
                    00:e2:cd:26:5a:e6:0d:e3:6a:e7:94:41:29:08:db:
                    b1:71:c0:95:cd:f5:97:91:a4:ba:3f:99:e4:e5:46:
                    41:67:b9:e7:ea:1f:96:a3:74:f7:c5:3b:88:6d:23:
                    c0:6f:8d:bd:d4:6d:bc:18:31:6a:21:7b:59:2d:da:
                    cd:5b:ee:8d:2b:0d:d0:ae:66:98:01:5f:c6:a1:38:
                    8c:23:4a:44:de:a7:71:81:7a:96:e4:00:b0:ba:17:
                    31:e8:79:8d:f8:5d:c5:94:cc:99:26:d6:18:48:80:
                    1c:a3:26:d0:0b:cd:3b:85:a1:b1:57:89:0e:d0:b0:
                    22:8a:c1:b2:ef:19:23:ca:db:d4:23:49:cd:18:15:
                    e2:fe:6d:18:a9:6c:b6:69:c9:16:5b:c1:f2:a6:8c:
                    a9:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:96:7A:A9:58:27:B5:4D:E9:DA:9D:BE:7A:1A:AB:24:28:F0:2C:11
            X509v3 Authority Key Identifier:
                keyid:47:66:F3:CA:43:12:5E:DE:D2:BA:27:41:55:57:63:86:D9:10:1E:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2tRwyEQ5CnFhgRBoLCtm1PRTJTEq3CE7JoGLaBhU48wi/0/4766F3CA43125EDED2BA274155576386D9101EDC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4766F3CA43125EDED2BA274155576386D9101EDC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2tRwyEQ5CnFhgRBoLCtm1PRTJTEq3CE7JoGLaBhU48wi/0/3133382e3132322e3234302e302f32322d3234203d3e20323634353235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.122.240.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5d:b5:6e:13:0e:45:0c:25:a7:6d:09:c1:7b:84:5c:99:ca:7e:
         f1:47:d6:17:d1:fe:5e:cc:ba:a5:41:55:62:d5:00:b2:2e:1d:
         30:14:05:6a:c8:6f:64:54:86:c9:34:c7:cf:ca:56:1b:bd:f3:
         c0:93:79:5b:6b:3c:1b:56:82:10:ab:5b:90:17:5f:79:bc:58:
         07:53:87:94:80:db:bb:a0:53:a1:19:b5:a1:f1:51:6c:db:82:
         dc:aa:89:ad:ac:cd:85:b3:cf:fa:a6:84:aa:c6:98:4b:83:72:
         cc:ae:8f:0e:37:01:cb:c8:47:4f:2b:83:f0:8a:50:15:5c:8d:
         ec:02:86:bb:82:7c:31:6e:ac:1a:ba:59:07:f7:e3:15:0f:c7:
         3f:21:b9:f6:ca:ad:6d:f5:0a:0e:6b:fb:17:03:00:61:14:67:
         d5:e4:e5:a5:5d:3e:32:69:3e:f6:9f:bb:76:68:ef:1f:97:61:
         c3:a4:24:01:5e:84:9d:e9:1d:ff:fb:c1:70:50:e0:d8:e4:f2:
         a2:e2:7f:79:8d:49:0a:24:2a:27:03:54:dc:34:3f:dc:15:de:
         47:da:16:14:b6:54:f9:f3:ce:f7:0c:17:31:d3:70:c7:5a:d3:
         30:fa:cb:fc:b5:b0:c9:bd:ef:de:1c:d7:b3:1e:62:80:06:60:
         d7:c1:b5:51
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUe2KYWwQxpG+uCHQ+6Gcaq6X61o4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDc2NkYzQ0E0MzEyNUVERUQyQkEyNzQxNTU1NzYzODZE
OTEwMUVEQzAeFw0yNTAyMDMyMDI5NTVaFw0yNjAyMDIyMDM0NTVaMDMxMTAvBgNV
BAMTKDhEOTY3QUE5NTgyN0I1NERFOURBOURCRTdBMUFBQjI0MjhGMDJDMTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClIZb6w7iWngP6IF3e8E53ZznW
Y/Fc1MfSviSAfI78mDBK22KEM8Dv8eySKYoq8gUo5imjJpAluOALJHiZEPdlcEj5
bqvq1nrRg0g44f8l0NUhyiyEf6TyKIZw0Xv3Y6XVEjqZ2sm0CADizSZa5g3jaueU
QSkI27FxwJXN9ZeRpLo/meTlRkFnuefqH5ajdPfFO4htI8Bvjb3UbbwYMWohe1kt
2s1b7o0rDdCuZpgBX8ahOIwjSkTep3GBepbkALC6FzHoeY34XcWUzJkm1hhIgByj
JtALzTuFobFXiQ7QsCKKwbLvGSPK29QjSc0YFeL+bRipbLZpyRZbwfKmjKltAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUjZZ6qVgntU3p2p2+ehqrJCjwLBEwHwYDVR0j
BBgwFoAUR2bzykMSXt7SuidBVVdjhtkQHtwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMnRSd3lFUTVDbkZoZ1JCb0xDdG0xUFJUSlRFcTNDRTdKb0dMYUJoVTQ4
d2kvMC80NzY2RjNDQTQzMTI1RURFRDJCQTI3NDE1NTU3NjM4NkQ5MTAxRURDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQ3NjZGM0NBNDMxMjVFREVE
MkJBMjc0MTU1NTc2Mzg2RDkxMDFFREMuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJ0Und5RVE1Q25GaGdSQm9MQ3RtMVBSVEpURXEzQ0U3Sm9HTGFCaFU0OHdpLzAv
MzEzMzM4MmUzMTMyMzIyZTMyMzQzMDJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDMy
MzYzNDM1MzIzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAop68DANBgkqhkiG9w0BAQsFAAOCAQEAXbVu
Ew5FDCWnbQnBe4Rcmcp+8UfWF9H+Xsy6pUFVYtUAsi4dMBQFashvZFSGyTTHz8pW
G73zwJN5W2s8G1aCEKtbkBdfebxYB1OHlIDbu6BToRm1ofFRbNuC3KqJrazNhbPP
+qaEqsaYS4NyzK6PDjcBy8hHTyuD8IpQFVyN7AKGu4J8MW6sGrpZB/fjFQ/HPyG5
9sqtbfUKDmv7FwMAYRRn1eTlpV0+Mmk+9p+7dmjvH5dhw6QkAV6Enekd//vBcFDg
2OTyouJ/eY1JCiQqJwNU3DQ/3BXeR9oWFLZU+fPO9wwXMdNwx1rTMPrL/LWwyb3v
3hzXsx5igAZg18G1UQ==
-----END CERTIFICATE-----
Generated at Wed Apr 9 20:12:30 2025 by rpki-client