Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4Dsb4rCAub16dTz8umJW8f5vtdq5jpmjPMPKk8VActTx/0/3138312e3233322e3133392e302f32342d3234203d3e20323731333535.roa
File:                     3138312e3233322e3133392e302f32342d3234203d3e20323731333535.roa (raw, json)
Hash identifier:          n6DGTaUJ5146+xiIGJDKSDaq4FJ2siRSGLtE25F1S0Y=
Subject key identifier:   1C:29:A3:6F:5D:22:C9:D1:66:DD:4B:85:F4:BC:8D:10:F2:40:8C:05
Certificate issuer:       /CN=F5A743CB79514A022DEC422535A63FCBFC40185B
Certificate serial:       69229835B5784372B8B15DEB61E8E219490B19C7
Authority key identifier: F5:A7:43:CB:79:51:4A:02:2D:EC:42:25:35:A6:3F:CB:FC:40:18:5B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F5A743CB79514A022DEC422535A63FCBFC40185B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4Dsb4rCAub16dTz8umJW8f5vtdq5jpmjPMPKk8VActTx/0/3138312e3233322e3133392e302f32342d3234203d3e20323731333535.roa
Signing time:             Thu 07 Nov 2024 16:43:28 +0000
ROA not before:           Thu 07 Nov 2024 16:38:28 +0000
ROA not after:            Thu 06 Nov 2025 16:43:28 +0000
asID:                     271355
IP address blocks:        181.232.139.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:22:98:35:b5:78:43:72:b8:b1:5d:eb:61:e8:e2:19:49:0b:19:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F5A743CB79514A022DEC422535A63FCBFC40185B
        Validity
            Not Before: Nov  7 16:38:28 2024 GMT
            Not After : Nov  6 16:43:28 2025 GMT
        Subject: CN=1C29A36F5D22C9D166DD4B85F4BC8D10F2408C05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:59:b0:9e:fe:03:9c:62:fb:06:ff:1d:b4:73:
                    2b:3e:ea:a4:34:4c:c2:13:33:69:21:27:76:b8:1a:
                    d3:9e:8e:ce:3d:f7:e0:ed:0e:00:f5:aa:45:a2:00:
                    03:c6:0e:f2:6e:05:4b:3d:b8:9d:aa:cf:66:65:29:
                    d1:0c:32:2e:ad:b7:5b:66:8e:27:cd:d6:31:99:cf:
                    aa:0c:2e:ea:4d:f2:df:4f:4c:18:59:4f:83:ee:0a:
                    8f:49:5a:87:4f:63:1f:09:9c:ee:99:8a:c6:15:c7:
                    73:4e:0a:c8:75:14:c6:57:97:e4:dc:cb:4f:af:4f:
                    71:5a:02:0a:60:50:e6:29:2a:60:59:c7:0d:9d:9e:
                    3d:38:f6:48:0b:ab:98:fc:a4:14:43:fd:3e:b0:e7:
                    8f:70:10:a3:3f:e5:b2:af:4e:03:86:98:2b:21:28:
                    38:4e:ec:e2:ad:d2:fb:eb:7d:95:a6:36:45:0e:15:
                    41:99:6e:2c:2a:3b:1b:46:b9:82:c7:26:d3:22:c6:
                    cc:61:25:0c:37:de:e0:7a:3d:7f:05:52:fe:51:8e:
                    99:fb:d9:dd:30:4c:ac:34:4c:38:bb:5f:1e:c8:43:
                    dc:5c:37:fa:1d:aa:08:76:b8:5d:04:1c:8e:cb:03:
                    53:5d:86:c5:d8:8a:54:b5:e8:d9:fb:7a:f3:75:d8:
                    cb:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:29:A3:6F:5D:22:C9:D1:66:DD:4B:85:F4:BC:8D:10:F2:40:8C:05
            X509v3 Authority Key Identifier:
                keyid:F5:A7:43:CB:79:51:4A:02:2D:EC:42:25:35:A6:3F:CB:FC:40:18:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4Dsb4rCAub16dTz8umJW8f5vtdq5jpmjPMPKk8VActTx/0/F5A743CB79514A022DEC422535A63FCBFC40185B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F5A743CB79514A022DEC422535A63FCBFC40185B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4Dsb4rCAub16dTz8umJW8f5vtdq5jpmjPMPKk8VActTx/0/3138312e3233322e3133392e302f32342d3234203d3e20323731333535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.232.139.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d4:1a:c5:f7:e9:57:f5:43:82:3d:50:c2:b0:3c:bc:03:e3:25:
         30:3b:cc:ed:ad:93:28:ce:6b:18:8b:ac:d7:db:0d:3b:8a:7a:
         85:67:c3:78:18:e2:73:22:5e:58:33:fb:99:dc:e7:b1:40:86:
         ab:19:4d:d9:79:59:8f:cd:3f:1a:b7:09:1f:3d:76:41:a3:08:
         ad:2d:8b:ea:5e:a4:ba:1a:0b:ce:1d:87:7d:3c:99:43:5e:59:
         24:26:6f:82:0e:1e:36:c6:dc:1c:bd:3d:e0:90:56:74:fd:7a:
         72:ce:1a:2d:fc:9e:23:1b:08:d8:88:fd:a9:aa:fc:da:9d:ba:
         59:02:e3:ae:8d:e6:f2:ea:0d:10:1c:15:4d:f0:77:c1:b1:0a:
         6f:f8:8f:09:dd:ed:d2:01:79:9d:cd:86:80:e8:14:bd:47:b9:
         11:ea:f0:c5:9e:ac:7d:ef:4f:6e:22:bd:d2:9f:2a:fd:8e:76:
         c0:2f:e0:21:44:fd:18:14:c6:38:26:0a:1f:bb:36:07:09:6a:
         1f:da:2a:0f:ec:b3:5d:e6:dd:58:90:ed:26:2d:67:b8:61:1c:
         e5:06:c2:1a:57:f3:09:a7:16:dc:c5:99:80:b5:38:e4:08:46:
         53:2f:4b:04:2f:4d:84:48:c9:dc:05:5c:ec:07:d3:a7:58:93:
         4c:a1:83:45
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUaSKYNbV4Q3K4sV3rYejiGUkLGccwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjVBNzQzQ0I3OTUxNEEwMjJERUM0MjI1MzVBNjNGQ0JG
QzQwMTg1QjAeFw0yNDExMDcxNjM4MjhaFw0yNTExMDYxNjQzMjhaMDMxMTAvBgNV
BAMTKDFDMjlBMzZGNUQyMkM5RDE2NkRENEI4NUY0QkM4RDEwRjI0MDhDMDUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcWbCe/gOcYvsG/x20cys+6qQ0
TMITM2khJ3a4GtOejs499+DtDgD1qkWiAAPGDvJuBUs9uJ2qz2ZlKdEMMi6tt1tm
jifN1jGZz6oMLupN8t9PTBhZT4PuCo9JWodPYx8JnO6ZisYVx3NOCsh1FMZXl+Tc
y0+vT3FaAgpgUOYpKmBZxw2dnj049kgLq5j8pBRD/T6w549wEKM/5bKvTgOGmCsh
KDhO7OKt0vvrfZWmNkUOFUGZbiwqOxtGuYLHJtMixsxhJQw33uB6PX8FUv5Rjpn7
2d0wTKw0TDi7Xx7IQ9xcN/odqgh2uF0EHI7LA1NdhsXYilS16Nn7evN12MslAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUHCmjb10iydFm3UuF9LyNEPJAjAUwHwYDVR0j
BBgwFoAU9adDy3lRSgIt7EIlNaY/y/xAGFswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNERzYjRyQ0F1YjE2ZFR6OHVtSlc4ZjV2dGRxNWpwbWpQTVBLazhWQWN0
VHgvMC9GNUE3NDNDQjc5NTE0QTAyMkRFQzQyMjUzNUE2M0ZDQkZDNDAxODVCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Y1QTc0M0NCNzk1MTRBMDIy
REVDNDIyNTM1QTYzRkNCRkM0MDE4NUIuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzREc2I0ckNBdWIxNmRUejh1bUpXOGY1dnRkcTVqcG1qUE1QS2s4VkFjdFR4LzAv
MzEzODMxMmUzMjMzMzIyZTMxMzMzOTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzczMTMzMzUzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEALXoizANBgkqhkiG9w0BAQsFAAOCAQEA1BrF
9+lX9UOCPVDCsDy8A+MlMDvM7a2TKM5rGIus19sNO4p6hWfDeBjicyJeWDP7mdzn
sUCGqxlN2XlZj80/GrcJHz12QaMIrS2L6l6kuhoLzh2HfTyZQ15ZJCZvgg4eNsbc
HL094JBWdP16cs4aLfyeIxsI2Ij9qar82p26WQLjro3m8uoNEBwVTfB3wbEKb/iP
Cd3t0gF5nc2GgOgUvUe5EerwxZ6sfe9PbiK90p8q/Y52wC/gIUT9GBTGOCYKH7s2
BwlqH9oqD+yzXebdWJDtJi1nuGEc5QbCGlfzCacW3MWZgLU45AhGUy9LBC9NhEjJ
3AVc7AfTp1iTTKGDRQ==
-----END CERTIFICATE-----
Generated at Fri Mar 14 04:14:52 2025 by rpki-client