Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3UHaLLWT5iSd8N5hAqQmHUnKXJLP2uFSRgkM7sYpv7FX/1/3133312e3130382e3130312e302f32342d3234203d3e203631363732.roa
File:                     3133312e3130382e3130312e302f32342d3234203d3e203631363732.roa (raw, json)
Hash identifier:          9ylID6de0fYzjQvUXLDML69F8xeoBWWPFB2esctZ7K8=
Subject key identifier:   24:52:60:B3:52:3F:1D:0C:BD:E3:DB:24:3B:18:80:13:60:F7:07:0C
Certificate issuer:       /CN=19FA718A7689F718ABB4C46D0D9B0A0C03666281
Certificate serial:       1AAD57BA78547938779A1BFB307690D4251C980A
Authority key identifier: 19:FA:71:8A:76:89:F7:18:AB:B4:C4:6D:0D:9B:0A:0C:03:66:62:81
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/19FA718A7689F718ABB4C46D0D9B0A0C03666281.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3UHaLLWT5iSd8N5hAqQmHUnKXJLP2uFSRgkM7sYpv7FX/1/3133312e3130382e3130312e302f32342d3234203d3e203631363732.roa
Signing time:             Thu 06 Mar 2025 18:53:31 +0000
ROA not before:           Thu 06 Mar 2025 18:48:31 +0000
ROA not after:            Thu 05 Mar 2026 18:53:31 +0000
asID:                     61672
IP address blocks:        131.108.101.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:ad:57:ba:78:54:79:38:77:9a:1b:fb:30:76:90:d4:25:1c:98:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19FA718A7689F718ABB4C46D0D9B0A0C03666281
        Validity
            Not Before: Mar  6 18:48:31 2025 GMT
            Not After : Mar  5 18:53:31 2026 GMT
        Subject: CN=245260B3523F1D0CBDE3DB243B18801360F7070C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:0e:72:02:74:09:71:54:1a:ca:0d:0f:f1:cc:
                    bd:e0:e3:60:67:a5:09:6b:df:80:cd:a8:7c:20:8f:
                    16:94:65:f7:9f:0d:f9:d1:1b:38:d3:90:b1:56:9b:
                    b7:bb:4f:4d:ba:9d:55:26:18:d6:b5:91:92:52:10:
                    c4:cc:a6:c5:85:69:ba:bb:01:7b:92:ca:79:09:f3:
                    23:1f:8e:6c:d6:ab:8d:4d:5a:58:90:59:a8:52:fa:
                    55:67:9b:c1:c2:32:07:74:0d:ac:85:ca:c8:66:fc:
                    ab:82:a5:3d:18:cc:b1:43:56:b4:f5:71:6a:58:68:
                    16:f3:10:3c:23:e2:ad:c1:3f:76:3a:11:7e:65:d7:
                    9b:be:be:b8:29:f2:39:8f:b1:75:6d:f7:61:8d:da:
                    b5:a6:80:f0:4a:8d:88:fe:00:a9:c8:f0:f6:67:6d:
                    c9:b5:97:b5:00:13:8f:8e:38:0a:4b:94:f7:ae:7f:
                    bd:c3:f5:da:ff:96:0e:2f:b5:8a:5d:e2:98:80:77:
                    ed:53:4f:37:c8:3d:d3:55:fb:33:a8:da:50:f6:96:
                    17:34:74:8b:30:82:e2:b8:c4:4e:62:af:ff:15:f1:
                    e7:ed:a5:cf:4f:47:b4:89:0d:53:b4:86:17:2b:f5:
                    48:ec:0f:b5:9a:82:d3:ee:df:6d:14:7b:23:94:f9:
                    00:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:52:60:B3:52:3F:1D:0C:BD:E3:DB:24:3B:18:80:13:60:F7:07:0C
            X509v3 Authority Key Identifier:
                keyid:19:FA:71:8A:76:89:F7:18:AB:B4:C4:6D:0D:9B:0A:0C:03:66:62:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3UHaLLWT5iSd8N5hAqQmHUnKXJLP2uFSRgkM7sYpv7FX/1/19FA718A7689F718ABB4C46D0D9B0A0C03666281.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/19FA718A7689F718ABB4C46D0D9B0A0C03666281.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3UHaLLWT5iSd8N5hAqQmHUnKXJLP2uFSRgkM7sYpv7FX/1/3133312e3130382e3130312e302f32342d3234203d3e203631363732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.108.101.0/24

    Signature Algorithm: sha256WithRSAEncryption
         60:fb:81:25:88:16:b8:1a:ec:cd:fb:a2:16:92:fd:2e:a4:5f:
         16:b9:43:31:8d:aa:8a:1b:d3:52:52:2e:2e:e0:de:25:96:31:
         89:b9:81:d1:b7:b4:a5:7a:72:4b:ce:54:09:44:1f:27:22:0b:
         f9:b5:da:7a:ff:d4:d2:5e:38:23:87:50:ed:76:1a:69:21:e9:
         bf:0d:7a:81:de:b4:23:35:7c:58:8f:93:90:d2:37:aa:14:41:
         7c:d7:c7:4a:6d:07:8b:62:07:ae:1b:61:a5:46:9d:4c:fa:4a:
         ef:d1:86:4e:24:b5:0b:d0:60:f6:98:76:f0:0c:5f:09:01:45:
         6a:35:4e:2c:61:30:b2:ec:41:c1:86:3b:2e:74:3f:46:b6:5c:
         d7:86:e0:e5:75:1d:ac:be:5c:eb:8c:e2:0f:e1:0a:9c:f8:ff:
         83:7c:b4:dd:e5:d3:00:89:b5:6e:28:d5:42:9b:e2:0a:64:ab:
         dc:29:dd:9e:7d:79:17:f4:8b:02:9a:99:83:42:ab:e3:22:fa:
         ec:a9:dd:cb:fc:02:f8:20:c0:fe:e0:ff:01:0b:e3:6a:cf:c4:
         d5:a5:d1:ba:51:cc:3e:1c:b3:e1:6c:98:dd:32:fd:68:6b:57:
         9d:84:2c:b5:89:94:c9:8f:e3:9a:7c:af:f0:4f:f7:da:6b:05:
         30:d6:e2:e2
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUGq1XunhUeTh3mhv7MHaQ1CUcmAowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTlGQTcxOEE3Njg5RjcxOEFCQjRDNDZEMEQ5QjBBMEMw
MzY2NjI4MTAeFw0yNTAzMDYxODQ4MzFaFw0yNjAzMDUxODUzMzFaMDMxMTAvBgNV
BAMTKDI0NTI2MEIzNTIzRjFEMENCREUzREIyNDNCMTg4MDEzNjBGNzA3MEMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDADnICdAlxVBrKDQ/xzL3g42Bn
pQlr34DNqHwgjxaUZfefDfnRGzjTkLFWm7e7T026nVUmGNa1kZJSEMTMpsWFabq7
AXuSynkJ8yMfjmzWq41NWliQWahS+lVnm8HCMgd0DayFyshm/KuCpT0YzLFDVrT1
cWpYaBbzEDwj4q3BP3Y6EX5l15u+vrgp8jmPsXVt92GN2rWmgPBKjYj+AKnI8PZn
bcm1l7UAE4+OOApLlPeuf73D9dr/lg4vtYpd4piAd+1TTzfIPdNV+zOo2lD2lhc0
dIswguK4xE5ir/8V8eftpc9PR7SJDVO0hhcr9UjsD7WagtPu320UeyOU+QBJAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUJFJgs1I/HQy949skOxiAE2D3BwwwHwYDVR0j
BBgwFoAUGfpxinaJ9xirtMRtDZsKDANmYoEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM1VIYUxMV1Q1aVNkOE41aEFxUW1IVW5LWEpMUDJ1RlNSZ2tNN3NZcHY3
RlgvMS8xOUZBNzE4QTc2ODlGNzE4QUJCNEM0NkQwRDlCMEEwQzAzNjY2MjgxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzE5RkE3MThBNzY4OUY3MThB
QkI0QzQ2RDBEOUIwQTBDMDM2NjYyODEuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNVSGFMTFdUNWlTZDhONWhBcVFtSFVuS1hKTFAydUZTUmdrTTdzWXB2N0ZYLzEv
MzEzMzMxMmUzMTMwMzgyZTMxMzAzMTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM2
MzEzNjM3MzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBACDbGUwDQYJKoZIhvcNAQELBQADggEBAGD7gSWI
Frga7M37ohaS/S6kXxa5QzGNqoob01JSLi7g3iWWMYm5gdG3tKV6ckvOVAlEHyci
C/m12nr/1NJeOCOHUO12Gmkh6b8NeoHetCM1fFiPk5DSN6oUQXzXx0ptB4tiB64b
YaVGnUz6Su/Rhk4ktQvQYPaYdvAMXwkBRWo1TixhMLLsQcGGOy50P0a2XNeG4OV1
Hay+XOuM4g/hCpz4/4N8tN3l0wCJtW4o1UKb4gpkq9wp3Z59eRf0iwKamYNCq+Mi
+uyp3cv8AvggwP7g/wEL42rPxNWl0bpRzD4cs+FsmN0y/WhrV52ELLWJlMmP45p8
r/BP99prBTDW4uI=
-----END CERTIFICATE-----
Generated at Sun Apr 6 03:55:10 2025 by rpki-client