Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4W6i4jmJdnab1GEgq3MbtiB5RBSNZTQEsVViE94xTJri/0/3138312e3138392e3130322e302f32332d3233203d3e20323731333938.roa
File:                     3138312e3138392e3130322e302f32332d3233203d3e20323731333938.roa (raw, json)
Hash identifier:          Y9x3Uut7lB2OVIgdp4UkSQk9h/E2ysfilJRvKpqBS9A=
Subject key identifier:   10:A8:F7:82:B9:F0:83:D6:4C:E8:CD:CE:DF:F4:5A:77:47:CA:4B:3C
Certificate issuer:       /CN=7EB66DEFDD9427398CBE80B8EC3D1D5BCF3321AA
Certificate serial:       10BEF86BDC1FDADCCBAC3BACB9BDE918C7A4A2CE
Authority key identifier: 7E:B6:6D:EF:DD:94:27:39:8C:BE:80:B8:EC:3D:1D:5B:CF:33:21:AA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7EB66DEFDD9427398CBE80B8EC3D1D5BCF3321AA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4W6i4jmJdnab1GEgq3MbtiB5RBSNZTQEsVViE94xTJri/0/3138312e3138392e3130322e302f32332d3233203d3e20323731333938.roa
Signing time:             Tue 18 Feb 2025 18:40:47 +0000
ROA not before:           Tue 18 Feb 2025 18:35:47 +0000
ROA not after:            Tue 17 Feb 2026 18:40:47 +0000
asID:                     271398
IP address blocks:        181.189.102.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:be:f8:6b:dc:1f:da:dc:cb:ac:3b:ac:b9:bd:e9:18:c7:a4:a2:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7EB66DEFDD9427398CBE80B8EC3D1D5BCF3321AA
        Validity
            Not Before: Feb 18 18:35:47 2025 GMT
            Not After : Feb 17 18:40:47 2026 GMT
        Subject: CN=10A8F782B9F083D64CE8CDCEDFF45A7747CA4B3C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:58:2b:d2:c4:97:f9:1c:68:26:ae:e0:80:c6:
                    83:0d:b1:c8:1a:be:f3:d1:b6:82:c6:2c:89:8f:be:
                    90:a0:33:13:8e:59:fa:b4:00:54:e2:25:b1:f6:cd:
                    7b:55:01:e1:cf:80:cd:9a:e0:47:8b:85:c7:af:05:
                    09:9c:99:76:72:7f:70:d6:30:4b:2c:05:f3:e7:cd:
                    64:9e:1a:9d:ee:57:61:73:40:ab:c6:41:fd:90:ee:
                    e6:3d:58:38:c8:c9:98:a9:a0:fd:e2:00:6d:04:d8:
                    79:d5:20:9e:d8:8e:c0:f7:ff:37:b5:44:8e:2b:0a:
                    f9:ad:da:4c:c5:95:d2:b0:03:93:99:6d:04:be:93:
                    ec:39:43:c0:b8:60:59:69:17:24:0d:c4:a9:10:56:
                    22:99:34:d8:4f:18:c9:62:06:3f:6f:65:90:ce:19:
                    38:ab:62:13:03:49:9d:16:6c:b7:e0:e4:21:b5:35:
                    1b:ba:87:2c:14:80:75:85:77:6f:af:a7:63:43:8b:
                    36:d0:fe:e7:ec:b1:ae:79:32:09:54:87:16:b8:89:
                    ce:1f:54:12:89:1b:08:f7:30:71:ea:20:7a:30:c3:
                    ab:d6:d0:c4:45:0e:9b:29:fa:ea:82:9c:4b:83:1b:
                    77:fe:ea:bc:ed:3f:47:fc:ac:2d:d5:f9:0b:51:87:
                    05:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:A8:F7:82:B9:F0:83:D6:4C:E8:CD:CE:DF:F4:5A:77:47:CA:4B:3C
            X509v3 Authority Key Identifier:
                keyid:7E:B6:6D:EF:DD:94:27:39:8C:BE:80:B8:EC:3D:1D:5B:CF:33:21:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4W6i4jmJdnab1GEgq3MbtiB5RBSNZTQEsVViE94xTJri/0/7EB66DEFDD9427398CBE80B8EC3D1D5BCF3321AA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7EB66DEFDD9427398CBE80B8EC3D1D5BCF3321AA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4W6i4jmJdnab1GEgq3MbtiB5RBSNZTQEsVViE94xTJri/0/3138312e3138392e3130322e302f32332d3233203d3e20323731333938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.189.102.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7f:7f:09:67:94:a9:01:08:15:9f:30:7c:3d:b5:17:ec:3c:ad:
         8f:12:c1:0c:87:e6:5a:0c:99:75:cc:d5:22:df:12:05:af:d2:
         72:c1:f9:ff:86:a3:0a:c0:17:4e:3f:90:97:fe:0f:fb:0f:09:
         7f:8f:d2:4a:44:5a:78:9e:91:06:c3:e8:4b:c9:27:65:8b:d0:
         95:85:2e:41:15:9d:ca:4e:d7:b1:c9:3c:6c:f6:b4:f4:10:4f:
         70:dd:54:57:0d:5d:d2:e5:63:a2:b6:94:1c:16:ef:03:01:07:
         fd:01:5f:1e:4d:62:9c:7b:c9:4c:2d:ba:f3:c5:70:dd:52:13:
         89:86:98:3c:a2:0e:8b:17:20:de:a4:ab:b3:b0:6c:a2:a6:21:
         42:9a:51:25:4e:1a:29:49:d6:b9:d5:1c:b6:ec:ab:c1:3f:fc:
         b7:20:d6:4e:b5:1c:49:b9:45:86:49:0b:67:ea:e5:e6:91:d1:
         da:c3:c0:b0:39:ce:16:f5:de:cb:eb:05:29:5b:46:fc:2c:0f:
         3e:e2:45:ab:63:84:7b:aa:ca:19:0d:7a:7a:e9:ee:ec:ad:35:
         27:8f:6e:9c:53:26:c1:1b:ca:3d:9b:b2:aa:90:f8:a0:04:7c:
         b1:50:05:a9:80:94:4c:55:70:66:3a:c4:4f:9b:08:f8:db:14:
         a8:bf:d3:f8
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUEL74a9wf2tzLrDusub3pGMekos4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0VCNjZERUZERDk0MjczOThDQkU4MEI4RUMzRDFENUJD
RjMzMjFBQTAeFw0yNTAyMTgxODM1NDdaFw0yNjAyMTcxODQwNDdaMDMxMTAvBgNV
BAMTKDEwQThGNzgyQjlGMDgzRDY0Q0U4Q0RDRURGRjQ1QTc3NDdDQTRCM0MwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5WCvSxJf5HGgmruCAxoMNscga
vvPRtoLGLImPvpCgMxOOWfq0AFTiJbH2zXtVAeHPgM2a4EeLhcevBQmcmXZyf3DW
MEssBfPnzWSeGp3uV2FzQKvGQf2Q7uY9WDjIyZipoP3iAG0E2HnVIJ7YjsD3/ze1
RI4rCvmt2kzFldKwA5OZbQS+k+w5Q8C4YFlpFyQNxKkQViKZNNhPGMliBj9vZZDO
GTirYhMDSZ0WbLfg5CG1NRu6hywUgHWFd2+vp2NDizbQ/ufssa55MglUhxa4ic4f
VBKJGwj3MHHqIHoww6vW0MRFDpsp+uqCnEuDG3f+6rztP0f8rC3V+QtRhwUnAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUEKj3grnwg9ZM6M3O3/Rad0fKSzwwHwYDVR0j
BBgwFoAUfrZt792UJzmMvoC47D0dW88zIaowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNFc2aTRqbUpkbmFiMUdFZ3EzTWJ0aUI1UkJTTlpUUUVzVlZpRTk0eFRK
cmkvMC83RUI2NkRFRkREOTQyNzM5OENCRTgwQjhFQzNEMUQ1QkNGMzMyMUFBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzdFQjY2REVGREQ5NDI3Mzk4
Q0JFODBCOEVDM0QxRDVCQ0YzMzIxQUEuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRXNmk0am1KZG5hYjFHRWdxM01idGlCNVJCU05aVFFFc1ZWaUU5NHhUSnJpLzAv
MzEzODMxMmUzMTM4MzkyZTMxMzAzMjJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDMy
MzczMTMzMzkzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAbW9ZjANBgkqhkiG9w0BAQsFAAOCAQEAf38J
Z5SpAQgVnzB8PbUX7DytjxLBDIfmWgyZdczVIt8SBa/ScsH5/4ajCsAXTj+Ql/4P
+w8Jf4/SSkRaeJ6RBsPoS8knZYvQlYUuQRWdyk7Xsck8bPa09BBPcN1UVw1d0uVj
oraUHBbvAwEH/QFfHk1inHvJTC2688Vw3VITiYaYPKIOixcg3qSrs7BsoqYhQppR
JU4aKUnWudUctuyrwT/8tyDWTrUcSblFhkkLZ+rl5pHR2sPAsDnOFvXey+sFKVtG
/CwPPuJFq2OEe6rKGQ16eunu7K01J49unFMmwRvKPZuyqpD4oAR8sVAFqYCUTFVw
ZjrET5sI+NsUqL/T+A==
-----END CERTIFICATE-----
Generated at Sat Apr 5 22:52:45 2025 by rpki-client