Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5L1jWNLigWYM9xm39zeZYxyrLjTYfyqkGCeoE3XXhZzL/1/3133382e3235352e3135312e302f32342d3234203d3e20323633363530.roa
File:                     3133382e3235352e3135312e302f32342d3234203d3e20323633363530.roa (raw, json)
Hash identifier:          fdcldvS++SsDTYn8odxPcaAMMAB1n8qJoznzHm+tfAw=
Subject key identifier:   72:0F:4E:CD:8F:B2:57:34:D3:2F:C1:EF:95:E5:81:CE:CA:41:10:0D
Certificate issuer:       /CN=A310DCB05D2CA23F2230D8427C32EFF0CBFF42B5
Certificate serial:       6C4D710AAF69D7D0A1D0DE968BCCC43AC498EB15
Authority key identifier: A3:10:DC:B0:5D:2C:A2:3F:22:30:D8:42:7C:32:EF:F0:CB:FF:42:B5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A310DCB05D2CA23F2230D8427C32EFF0CBFF42B5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5L1jWNLigWYM9xm39zeZYxyrLjTYfyqkGCeoE3XXhZzL/1/3133382e3235352e3135312e302f32342d3234203d3e20323633363530.roa
Signing time:             Thu 06 Mar 2025 22:10:33 +0000
ROA not before:           Thu 06 Mar 2025 22:05:33 +0000
ROA not after:            Thu 05 Mar 2026 22:10:33 +0000
asID:                     263650
IP address blocks:        138.255.151.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:4d:71:0a:af:69:d7:d0:a1:d0:de:96:8b:cc:c4:3a:c4:98:eb:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A310DCB05D2CA23F2230D8427C32EFF0CBFF42B5
        Validity
            Not Before: Mar  6 22:05:33 2025 GMT
            Not After : Mar  5 22:10:33 2026 GMT
        Subject: CN=720F4ECD8FB25734D32FC1EF95E581CECA41100D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:fe:07:c8:c7:30:b8:ff:48:70:08:a9:49:a9:
                    7d:64:dd:08:2c:14:52:85:fa:83:aa:4c:fb:62:22:
                    d9:33:57:11:8c:55:10:b1:d3:6a:43:67:7d:b8:3d:
                    36:82:58:ad:57:29:6c:d2:45:4e:fe:36:3a:ee:d4:
                    86:c1:10:87:62:20:84:af:eb:48:70:94:cd:e6:df:
                    b5:6e:e3:41:73:ac:db:ec:de:6f:b5:33:35:df:46:
                    4d:f1:ae:97:54:e6:36:7e:a7:86:aa:55:3c:85:8b:
                    e0:2b:7b:b4:d9:b1:9e:17:2f:4a:17:58:dc:61:e2:
                    02:38:2e:7e:3a:d8:b2:c4:a4:00:d9:1d:97:ee:63:
                    4e:83:5b:03:ee:66:7c:6c:fd:da:86:bb:03:4b:e6:
                    17:8c:5f:ff:60:d6:64:af:b7:2a:3e:b5:2c:f6:67:
                    b4:12:e1:c2:88:9c:67:ca:cf:ab:20:12:ae:cf:d1:
                    36:a0:c3:59:e5:ab:ea:2c:2e:c4:35:49:57:cd:f6:
                    5b:fd:d5:03:02:17:13:8d:4a:7e:01:d6:50:a4:a3:
                    bb:bd:f1:07:13:bd:88:86:55:fe:e5:1d:1a:61:cc:
                    a7:55:0e:49:a4:db:e4:ca:c4:85:92:91:00:8b:28:
                    af:52:4b:e1:a6:2c:d0:19:c0:29:8d:af:ea:97:b1:
                    95:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:0F:4E:CD:8F:B2:57:34:D3:2F:C1:EF:95:E5:81:CE:CA:41:10:0D
            X509v3 Authority Key Identifier:
                keyid:A3:10:DC:B0:5D:2C:A2:3F:22:30:D8:42:7C:32:EF:F0:CB:FF:42:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5L1jWNLigWYM9xm39zeZYxyrLjTYfyqkGCeoE3XXhZzL/1/A310DCB05D2CA23F2230D8427C32EFF0CBFF42B5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A310DCB05D2CA23F2230D8427C32EFF0CBFF42B5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5L1jWNLigWYM9xm39zeZYxyrLjTYfyqkGCeoE3XXhZzL/1/3133382e3235352e3135312e302f32342d3234203d3e20323633363530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.255.151.0/24

    Signature Algorithm: sha256WithRSAEncryption
         23:5b:89:7b:53:d1:86:80:9f:09:0c:0c:64:bc:a0:13:8b:c4:
         5a:b3:ca:63:dc:a5:22:09:a7:97:ed:06:92:f6:54:de:2e:78:
         fb:1c:bc:19:40:9f:5f:f3:29:1f:df:63:3b:1f:71:53:4a:97:
         fe:83:37:09:fd:27:fd:7a:a5:a6:86:e0:f9:83:dd:b6:dc:ad:
         82:6e:36:e5:0f:74:37:c6:b3:49:a5:2c:2d:93:5f:7f:68:0d:
         da:0f:f1:2b:eb:9b:7b:20:3d:55:f3:f6:de:2d:34:b5:c3:de:
         cf:e6:43:0d:69:66:56:e5:d6:0f:14:23:90:05:1d:27:e4:ca:
         e0:84:ae:1a:5c:bd:dc:f9:b7:79:56:6d:0d:fd:3b:5c:2c:dc:
         6c:b5:0d:84:36:fa:cc:4c:91:19:7e:b8:54:7b:db:03:8e:a5:
         49:17:59:6f:86:58:ca:78:be:1d:b0:7e:e2:68:40:fe:93:86:
         18:3f:ad:e4:64:28:e2:a6:fe:6c:05:0c:ae:2a:8c:01:8c:10:
         8b:b6:f0:f8:03:b9:a9:8d:02:35:e0:be:11:e4:b0:b7:c7:b4:
         4b:27:51:6f:e1:4b:61:95:7a:18:90:47:93:be:0e:43:2a:20:
         45:6a:4d:a5:f0:1c:16:07:8b:27:df:ca:15:41:82:20:ca:22:
         24:4a:81:53
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUbE1xCq9p19Ch0N6Wi8zEOsSY6xUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTMxMERDQjA1RDJDQTIzRjIyMzBEODQyN0MzMkVGRjBD
QkZGNDJCNTAeFw0yNTAzMDYyMjA1MzNaFw0yNjAzMDUyMjEwMzNaMDMxMTAvBgNV
BAMTKDcyMEY0RUNEOEZCMjU3MzREMzJGQzFFRjk1RTU4MUNFQ0E0MTEwMEQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDq/gfIxzC4/0hwCKlJqX1k3Qgs
FFKF+oOqTPtiItkzVxGMVRCx02pDZ324PTaCWK1XKWzSRU7+Njru1IbBEIdiIISv
60hwlM3m37Vu40FzrNvs3m+1MzXfRk3xrpdU5jZ+p4aqVTyFi+Are7TZsZ4XL0oX
WNxh4gI4Ln462LLEpADZHZfuY06DWwPuZnxs/dqGuwNL5heMX/9g1mSvtyo+tSz2
Z7QS4cKInGfKz6sgEq7P0Tagw1nlq+osLsQ1SVfN9lv91QMCFxONSn4B1lCko7u9
8QcTvYiGVf7lHRphzKdVDkmk2+TKxIWSkQCLKK9SS+GmLNAZwCmNr+qXsZX7AgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUcg9OzY+yVzTTL8HvleWBzspBEA0wHwYDVR0j
BBgwFoAUoxDcsF0soj8iMNhCfDLv8Mv/QrUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNUwxaldOTGlnV1lNOXhtMzl6ZVpZeHlyTGpUWWZ5cWtHQ2VvRTNYWGha
ekwvMS9BMzEwRENCMDVEMkNBMjNGMjIzMEQ4NDI3QzMyRUZGMENCRkY0MkI1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0EzMTBEQ0IwNUQyQ0EyM0Yy
MjMwRDg0MjdDMzJFRkYwQ0JGRjQyQjUuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzVMMWpXTkxpZ1dZTTl4bTM5emVaWXh5ckxqVFlmeXFrR0Nlb0UzWFhoWnpMLzEv
MzEzMzM4MmUzMjM1MzUyZTMxMzUzMTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzYzMzM2MzUzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAIr/lzANBgkqhkiG9w0BAQsFAAOCAQEAI1uJ
e1PRhoCfCQwMZLygE4vEWrPKY9ylIgmnl+0GkvZU3i54+xy8GUCfX/MpH99jOx9x
U0qX/oM3Cf0n/Xqlpobg+YPdttytgm425Q90N8azSaUsLZNff2gN2g/xK+ubeyA9
VfP23i00tcPez+ZDDWlmVuXWDxQjkAUdJ+TK4ISuGly93Pm3eVZtDf07XCzcbLUN
hDb6zEyRGX64VHvbA46lSRdZb4ZYyni+HbB+4mhA/pOGGD+t5GQo4qb+bAUMriqM
AYwQi7bw+AO5qY0CNeC+EeSwt8e0SydRb+FLYZV6GJBHk74OQyogRWpNpfAcFgeL
J9/KFUGCIMoiJEqBUw==
-----END CERTIFICATE-----
Generated at Sat Apr 12 05:03:49 2025 by rpki-client