Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/34LKUVp6i31q4FRGhAxf7jac9c1dr8HmdGWNewJYUn8n/1/3139322e3134312e37322e302f32322d3234203d3e20323637343730.roa
File:                     3139322e3134312e37322e302f32322d3234203d3e20323637343730.roa (raw, json)
Hash identifier:          2nyA1C/3pQsVksAQff9z0tCApVwd24PShi0vQj0HPK4=
Subject key identifier:   3A:38:03:D9:27:A0:A9:B4:9B:90:F7:A0:18:03:DC:AC:50:AD:57:31
Certificate issuer:       /CN=BFD56512C8580D0E6D2FD05F5D13C3714B45AAEA
Certificate serial:       251B3B88711083FE918601530136B3406EC205E6
Authority key identifier: BF:D5:65:12:C8:58:0D:0E:6D:2F:D0:5F:5D:13:C3:71:4B:45:AA:EA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BFD56512C8580D0E6D2FD05F5D13C3714B45AAEA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/34LKUVp6i31q4FRGhAxf7jac9c1dr8HmdGWNewJYUn8n/1/3139322e3134312e37322e302f32322d3234203d3e20323637343730.roa
Signing time:             Wed 05 Mar 2025 19:00:08 +0000
ROA not before:           Wed 05 Mar 2025 18:55:08 +0000
ROA not after:            Wed 04 Mar 2026 19:00:08 +0000
asID:                     267470
IP address blocks:        192.141.72.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:1b:3b:88:71:10:83:fe:91:86:01:53:01:36:b3:40:6e:c2:05:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BFD56512C8580D0E6D2FD05F5D13C3714B45AAEA
        Validity
            Not Before: Mar  5 18:55:08 2025 GMT
            Not After : Mar  4 19:00:08 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:b2:3b:6c:31:87:1e:52:a6:27:3c:1f:09:b0:
                    3c:68:8f:5b:5c:d9:b9:5d:ab:d5:cc:4e:e0:f9:21:
                    15:84:c4:8b:44:fb:72:02:4d:15:88:f8:c3:a5:c0:
                    d8:a9:2d:a3:65:5d:14:c5:af:2c:c1:43:8f:85:de:
                    ff:16:b3:c9:05:9a:7e:99:e4:60:b3:2e:75:db:27:
                    c7:36:64:83:54:dd:dd:db:04:72:87:07:33:f1:ad:
                    b2:26:df:f4:cf:1a:b4:30:f3:cc:6b:df:af:a8:55:
                    05:1d:53:48:c1:59:f4:e4:b9:71:c9:2f:54:cd:26:
                    c2:77:6f:58:3c:43:65:8d:41:86:c6:8d:ef:aa:8e:
                    b1:f2:36:f5:0d:60:1b:19:71:ea:63:c7:68:b8:d1:
                    b7:d2:f0:a5:b6:08:a4:e5:f0:a5:47:a1:71:ee:88:
                    de:44:ef:23:fa:8a:62:3c:b9:cb:78:12:14:44:7d:
                    df:f1:69:c3:c2:a7:b1:9d:a7:ee:02:ef:3a:69:e2:
                    7b:76:ae:70:02:98:0e:a1:db:24:f7:93:d1:cc:85:
                    64:00:3d:37:41:bc:a7:29:52:ad:0d:72:ad:d6:e7:
                    64:fa:ef:9e:b7:94:36:6a:04:b6:df:8d:9c:89:60:
                    c3:45:e5:d1:c2:21:4c:5d:fa:9f:d4:0d:84:7c:98:
                    35:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:38:03:D9:27:A0:A9:B4:9B:90:F7:A0:18:03:DC:AC:50:AD:57:31
            X509v3 Authority Key Identifier:
                keyid:BF:D5:65:12:C8:58:0D:0E:6D:2F:D0:5F:5D:13:C3:71:4B:45:AA:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/34LKUVp6i31q4FRGhAxf7jac9c1dr8HmdGWNewJYUn8n/1/BFD56512C8580D0E6D2FD05F5D13C3714B45AAEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BFD56512C8580D0E6D2FD05F5D13C3714B45AAEA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/34LKUVp6i31q4FRGhAxf7jac9c1dr8HmdGWNewJYUn8n/1/3139322e3134312e37322e302f32322d3234203d3e20323637343730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.141.72.0/22

    Signature Algorithm: sha256WithRSAEncryption
         63:01:50:f0:c9:7f:0e:3b:8a:ab:1c:1f:23:fc:fa:b4:a3:31:
         b7:95:fb:e4:33:f1:0f:29:9c:4d:93:85:9c:4b:13:32:ff:da:
         f9:4a:2a:cd:2a:07:a3:b9:ef:b2:d6:7a:60:b4:90:50:c1:5f:
         19:0d:47:a8:25:ec:66:31:8c:53:4f:74:4b:47:f4:3e:c1:8c:
         b8:3e:30:6d:b6:c9:4d:ff:ff:68:dd:72:3e:7e:9b:7e:ef:45:
         de:f3:79:b1:b4:86:e0:6a:4e:e5:83:25:d4:01:e1:10:3a:2e:
         2d:4a:46:b9:70:f5:7d:37:56:47:e3:a9:5a:38:85:5d:df:a2:
         d3:25:34:7d:52:e3:43:dd:27:43:95:e6:13:9c:22:74:bf:4d:
         6b:44:22:f0:42:d4:f1:65:0f:18:82:c2:54:4e:55:0c:ac:52:
         fc:e6:88:7d:a7:53:51:41:00:5d:23:15:29:e8:5c:eb:66:48:
         02:f1:32:21:b5:ab:ea:7a:f8:84:cf:11:be:20:64:4d:2d:8b:
         9b:e1:a4:1c:ce:c7:54:87:96:49:34:32:ec:04:73:fb:07:61:
         a9:57:fe:e3:06:28:0c:bf:16:5b:ff:4e:a5:cc:3f:3e:61:95:
         f9:c2:9a:11:60:4d:de:88:32:14:e3:7a:1c:96:a8:1c:ae:f9:
         1e:71:57:6a
-----BEGIN CERTIFICATE-----
MIIHQzCCBiugAwIBAgIUJRs7iHEQg/6RhgFTATazQG7CBeYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkZENTY1MTJDODU4MEQwRTZEMkZEMDVGNUQxM0MzNzE0
QjQ1QUFFQTAeFw0yNTAzMDUxODU1MDhaFw0yNjAzMDQxOTAwMDhaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQUFCMjNCNkMzMTg3MUU1MkE2
MjczQzFGMDlCMDNDNjg4RjVCNUNEOUI5NURBQkQ1Q0M0RUUwRjkyMTE1ODRDNDhC
NDRGQjcyMDI0RDE1ODhGOEMzQTVDMEQ4QTkyREEzNjU1RDE0QzVBRjJDQzE0MzhG
ODVERUZGMTZCM0M5MDU5QTdFOTlFNDYwQjMyRTc1REIyN0M3MzY2NDgzNTRERERE
REIwNDcyODcwNzMzRjFBREIyMjZERkY0Q0YxQUI0MzBGM0NDNkJERkFGQTg1NTA1
MUQ1MzQ4QzE1OUY0RTRCOTcxQzkyRjU0Q0QyNkMyNzc2RjU4M0M0MzY1OEQ0MTg2
QzY4REVGQUE4RUIxRjIzNkY1MEQ2MDFCMTk3MUVBNjNDNzY4QjhEMUI3RDJGMEE1
QjYwOEE0RTVGMEE1NDdBMTcxRUU4OERFNDRFRjIzRkE4QTYyM0NCOUNCNzgxMjE0
NDQ3RERGRjE2OUMzQzJBN0IxOURBN0VFMDJFRjNBNjlFMjdCNzZBRTcwMDI5ODBF
QTFEQjI0Rjc5M0QxQ0M4NTY0MDAzRDM3NDFCQ0E3Mjk1MkFEMEQ3MkFERDZFNzY0
RkFFRjlFQjc5NDM2NkEwNEI2REY4RDlDODk2MEMzNDVFNUQxQzIyMTRDNURGQTlG
RDQwRDg0N0M5ODM1QTUwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAqrI7bDGHHlKmJzwfCbA8aI9bXNm5XavVzE7g+SEVhMSLRPtyAk0V
iPjDpcDYqS2jZV0Uxa8swUOPhd7/FrPJBZp+meRgsy512yfHNmSDVN3d2wRyhwcz
8a2yJt/0zxq0MPPMa9+vqFUFHVNIwVn05LlxyS9UzSbCd29YPENljUGGxo3vqo6x
8jb1DWAbGXHqY8douNG30vCltgik5fClR6Fx7ojeRO8j+opiPLnLeBIURH3f8WnD
wqexnafuAu86aeJ7dq5wApgOodsk95PRzIVkAD03QbynKVKtDXKt1udk+u+et5Q2
agS2342ciWDDReXRwiFMXfqf1A2EfJg1pQIDAQABo4ICUTCCAk0wHQYDVR0OBBYE
FDo4A9knoKm0m5D3oBgD3KxQrVcxMB8GA1UdIwQYMBaAFL/VZRLIWA0ObS/QX10T
w3FLRarqMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzM0TEtVVnA2aTMxcTRG
UkdoQXhmN2phYzljMWRyOEhtZEdXTmV3SllVbjhuLzEvQkZENTY1MTJDODU4MEQw
RTZEMkZEMDVGNUQxM0MzNzE0QjQ1QUFFQS5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS9CRkQ1NjUxMkM4NTgwRDBFNkQyRkQwNUY1RDEzQzM3MTRCNDVB
QUVBLmNlcjCBrgYIKwYBBQUHAQsEgaEwgZ4wgZsGCCsGAQUFBzALhoGOcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby8zNExLVVZwNmkzMXE0RlJHaEF4
ZjdqYWM5YzFkcjhIbWRHV05ld0pZVW44bi8xLzMxMzkzMjJlMzEzNDMxMmUzNzMy
MmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzNjM3MzQzNzMwLnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC
wI1IMA0GCSqGSIb3DQEBCwUAA4IBAQBjAVDwyX8OO4qrHB8j/Pq0ozG3lfvkM/EP
KZxNk4WcSxMy/9r5SirNKgejue+y1npgtJBQwV8ZDUeoJexmMYxTT3RLR/Q+wYy4
PjBttslN//9o3XI+fpt+70Xe83mxtIbgak7lgyXUAeEQOi4tSka5cPV9N1ZH46la
OIVd36LTJTR9UuND3SdDleYTnCJ0v01rRCLwQtTxZQ8YgsJUTlUMrFL85oh9p1NR
QQBdIxUp6FzrZkgC8TIhtavqeviEzxG+IGRNLYub4aQczsdUh5ZJNDLsBHP7B2Gp
V/7jBigMvxZb/06lzD8+YZX5wpoRYE3eiDIU43oclqgcrvkecVdq
-----END CERTIFICATE-----
Generated at Sat Apr 5 07:14:37 2025 by rpki-client