Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/1/3133382e3132322e3138322e302f32332d3233203d3e203532363533.roa
File:                     3133382e3132322e3138322e302f32332d3233203d3e203532363533.roa (raw, json)
Hash identifier:          59Wg+PmR/DuQsVzECvGtZ/mDJKGdj0kSYdH3CYK3daQ=
Subject key identifier:   5C:E7:29:35:ED:05:48:09:AE:4B:CC:DE:C5:3D:9A:CA:11:64:8B:02
Certificate issuer:       /CN=03748441D9CC7EE2A93E160BAB2724DAEB799F3B
Certificate serial:       6E887846568E671EA011923E3807736798B6771E
Authority key identifier: 03:74:84:41:D9:CC:7E:E2:A9:3E:16:0B:AB:27:24:DA:EB:79:9F:3B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/03748441D9CC7EE2A93E160BAB2724DAEB799F3B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/1/3133382e3132322e3138322e302f32332d3233203d3e203532363533.roa
Signing time:             Thu 06 Mar 2025 00:00:03 +0000
ROA not before:           Wed 05 Mar 2025 23:55:03 +0000
ROA not after:            Thu 05 Mar 2026 00:00:03 +0000
asID:                     52653
IP address blocks:        138.122.182.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:88:78:46:56:8e:67:1e:a0:11:92:3e:38:07:73:67:98:b6:77:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03748441D9CC7EE2A93E160BAB2724DAEB799F3B
        Validity
            Not Before: Mar  5 23:55:03 2025 GMT
            Not After : Mar  5 00:00:03 2026 GMT
        Subject: CN=5CE72935ED054809AE4BCCDEC53D9ACA11648B02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:bf:d4:b8:8f:ef:1a:d9:ae:b3:0f:02:e7:ab:
                    6e:57:16:aa:7b:4d:6d:61:e1:d5:42:f7:13:85:df:
                    4a:86:cd:e2:ce:a5:c0:e2:c9:55:6c:e4:47:aa:56:
                    ec:16:40:bc:be:c0:05:fc:30:ae:52:c6:4f:b0:e8:
                    4d:ea:16:50:76:fb:b7:ad:c0:ea:6c:d8:d4:11:4b:
                    e1:53:f8:b6:09:0a:1e:80:68:31:fc:2b:66:66:e3:
                    21:db:cc:a8:74:a0:cf:a2:bf:a6:7c:85:ed:99:73:
                    b9:69:0e:6a:45:52:df:20:87:c3:bf:05:e2:1f:24:
                    34:e0:45:cd:86:3f:23:1c:f8:57:7f:42:f4:0e:5a:
                    8c:8c:56:08:eb:00:6c:39:9a:d1:17:dd:1d:f2:bf:
                    d7:5b:95:a1:f5:9a:67:a5:ae:de:ac:b6:60:68:0f:
                    e6:51:1a:2a:86:42:33:80:8a:ff:28:a9:b2:be:73:
                    07:75:64:08:2a:4f:03:0b:e4:f3:82:a3:a4:62:32:
                    0b:04:66:57:bd:dd:70:ed:6b:6a:3e:8d:3e:8c:2b:
                    26:27:4c:d4:bc:e3:c4:fc:85:55:0a:8f:ce:3e:75:
                    f4:16:1c:d2:74:76:ac:bd:f2:f9:02:53:f9:3b:b6:
                    b4:a5:d4:70:36:e1:28:b2:a6:c4:71:86:98:63:f7:
                    84:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:E7:29:35:ED:05:48:09:AE:4B:CC:DE:C5:3D:9A:CA:11:64:8B:02
            X509v3 Authority Key Identifier:
                keyid:03:74:84:41:D9:CC:7E:E2:A9:3E:16:0B:AB:27:24:DA:EB:79:9F:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/1/03748441D9CC7EE2A93E160BAB2724DAEB799F3B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/03748441D9CC7EE2A93E160BAB2724DAEB799F3B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/1/3133382e3132322e3138322e302f32332d3233203d3e203532363533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.122.182.0/23

    Signature Algorithm: sha256WithRSAEncryption
         71:61:f6:53:c5:d1:14:7f:39:9b:49:27:0a:52:05:5d:d6:c1:
         9b:8e:07:4f:d8:16:db:70:87:61:ad:8d:a4:27:08:57:80:91:
         2a:8c:20:7e:00:e2:f1:9f:9f:d2:04:04:85:e2:87:49:5d:cc:
         a4:6d:d5:97:f5:4a:c6:16:79:97:3d:56:21:a2:15:d6:ee:ef:
         af:f4:23:ea:bf:d1:78:95:fd:66:47:8c:78:8a:e7:ca:2b:e3:
         40:cf:90:04:d6:1c:a8:f9:e6:65:d7:27:56:3a:7f:27:05:8f:
         3f:4c:f9:21:e2:d9:52:39:75:86:dd:6e:04:b0:53:43:9d:3b:
         1a:7a:c3:a2:c8:29:e1:9c:bc:36:3d:f9:dc:b6:9e:ed:4a:a6:
         28:28:48:bb:63:87:95:70:e3:cc:6a:45:92:c7:41:9d:ba:ca:
         31:54:53:cd:0a:e2:fc:3a:0e:c1:ea:33:31:7d:ce:e6:81:16:
         63:f2:d7:88:54:74:3b:df:99:ea:05:c6:9b:f7:c3:f0:92:94:
         05:74:ae:7f:b8:5b:ce:ea:30:0d:af:66:99:15:98:cf:37:c6:
         6c:28:8a:fa:b9:29:7b:cc:7f:5e:dc:4b:5f:f8:4c:b6:f9:b8:
         4d:42:c0:a4:0b:2b:5e:48:99:6e:8f:74:95:d5:0b:67:13:a3:
         d0:19:77:cd
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUboh4RlaOZx6gEZI+OAdzZ5i2dx4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDM3NDg0NDFEOUNDN0VFMkE5M0UxNjBCQUIyNzI0REFF
Qjc5OUYzQjAeFw0yNTAzMDUyMzU1MDNaFw0yNjAzMDUwMDAwMDNaMDMxMTAvBgNV
BAMTKDVDRTcyOTM1RUQwNTQ4MDlBRTRCQ0NERUM1M0Q5QUNBMTE2NDhCMDIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBv9S4j+8a2a6zDwLnq25XFqp7
TW1h4dVC9xOF30qGzeLOpcDiyVVs5EeqVuwWQLy+wAX8MK5Sxk+w6E3qFlB2+7et
wOps2NQRS+FT+LYJCh6AaDH8K2Zm4yHbzKh0oM+iv6Z8he2Zc7lpDmpFUt8gh8O/
BeIfJDTgRc2GPyMc+Fd/QvQOWoyMVgjrAGw5mtEX3R3yv9dblaH1mmelrt6stmBo
D+ZRGiqGQjOAiv8oqbK+cwd1ZAgqTwML5POCo6RiMgsEZle93XDta2o+jT6MKyYn
TNS848T8hVUKj84+dfQWHNJ0dqy98vkCU/k7trSl1HA24SiypsRxhphj94QpAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUXOcpNe0FSAmuS8zexT2ayhFkiwIwHwYDVR0j
BBgwFoAUA3SEQdnMfuKpPhYLqyck2ut5nzswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNDRUVVJnQnFtWUp5b1N2QWFDTnh3YzJNZHVuWHF0SGVtNlBwS0RpVzF6
SjYvMS8wMzc0ODQ0MUQ5Q0M3RUUyQTkzRTE2MEJBQjI3MjREQUVCNzk5RjNCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzAzNzQ4NDQxRDlDQzdFRTJB
OTNFMTYwQkFCMjcyNERBRUI3OTlGM0IuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzQ0VFVSZ0JxbVlKeW9TdkFhQ054d2MyTWR1blhxdEhlbTZQcEtEaVcxeko2LzEv
MzEzMzM4MmUzMTMyMzIyZTMxMzgzMjJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDM1
MzIzNjM1MzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAGKerYwDQYJKoZIhvcNAQELBQADggEBAHFh9lPF
0RR/OZtJJwpSBV3WwZuOB0/YFttwh2GtjaQnCFeAkSqMIH4A4vGfn9IEBIXih0ld
zKRt1Zf1SsYWeZc9ViGiFdbu76/0I+q/0XiV/WZHjHiK58or40DPkATWHKj55mXX
J1Y6fycFjz9M+SHi2VI5dYbdbgSwU0OdOxp6w6LIKeGcvDY9+dy2nu1KpigoSLtj
h5Vw48xqRZLHQZ26yjFUU80K4vw6DsHqMzF9zuaBFmPy14hUdDvfmeoFxpv3w/CS
lAV0rn+4W87qMA2vZpkVmM83xmwoivq5KXvMf17cS1/4TLb5uE1CwKQLK15ImW6P
dJXVC2cTo9AZd80=
-----END CERTIFICATE-----
Generated at Wed Apr 9 02:07:44 2025 by rpki-client