Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5LrejS5jBuavbF5rEWzo2RaMFua58XSiVueernNU8qgo/0/3134332e3230322e3131322e302f32322d3232203d3e20323633363034.roa
File:                     3134332e3230322e3131322e302f32322d3232203d3e20323633363034.roa (raw, json)
Hash identifier:          UCQ87c9yeoo1qU9L+9LKYvcpeGn/a1XeOrUtppZ23MY=
Subject key identifier:   D6:84:F9:79:01:2D:43:6E:95:AF:2B:74:E2:BC:7E:38:2E:0E:F3:DA
Certificate issuer:       /CN=B5416A429171B4A07910A6737C6538DE6D5E9EB7
Certificate serial:       66703848B74252D96AC4D1F9393D3E5F6B870BA7
Authority key identifier: B5:41:6A:42:91:71:B4:A0:79:10:A6:73:7C:65:38:DE:6D:5E:9E:B7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5416A429171B4A07910A6737C6538DE6D5E9EB7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5LrejS5jBuavbF5rEWzo2RaMFua58XSiVueernNU8qgo/0/3134332e3230322e3131322e302f32322d3232203d3e20323633363034.roa
Signing time:             Wed 30 Apr 2025 17:43:27 +0000
ROA not before:           Wed 30 Apr 2025 17:38:27 +0000
ROA not after:            Wed 29 Apr 2026 17:43:27 +0000
asID:                     263604
IP address blocks:        143.202.112.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:70:38:48:b7:42:52:d9:6a:c4:d1:f9:39:3d:3e:5f:6b:87:0b:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B5416A429171B4A07910A6737C6538DE6D5E9EB7
        Validity
            Not Before: Apr 30 17:38:27 2025 GMT
            Not After : Apr 29 17:43:27 2026 GMT
        Subject: CN=D684F979012D436E95AF2B74E2BC7E382E0EF3DA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:a2:0c:bb:c5:51:7b:90:3a:9b:65:14:e1:55:
                    71:51:e4:47:06:48:c8:10:a3:21:ab:e4:5d:4d:a8:
                    d2:a4:73:89:2b:ec:4a:49:af:e7:4f:3a:53:fd:63:
                    f1:e9:01:40:58:87:97:c2:00:61:89:66:62:8a:82:
                    9f:9e:0c:e4:c8:71:80:58:4d:d7:d6:e8:d4:48:76:
                    f5:0e:38:5f:f7:01:4f:93:3d:13:ca:94:f4:5b:57:
                    db:76:58:ef:34:d9:44:39:f0:e9:93:62:54:4d:a3:
                    08:d7:80:0a:c1:ce:46:53:5f:03:e6:c9:d4:29:5b:
                    95:bc:36:64:20:1d:6e:12:87:a4:42:53:6e:80:ad:
                    16:00:31:fd:c7:44:4b:68:0b:ae:d0:e2:b7:e5:ef:
                    88:2d:18:35:20:33:b9:2b:5f:7b:fc:dd:ed:f5:c5:
                    d6:1e:e5:5d:06:05:50:88:fc:57:ad:96:91:3f:cc:
                    85:28:b6:6e:a8:b5:4c:fc:24:fb:e6:72:61:86:4d:
                    63:f4:9f:d5:ea:28:bd:26:55:dc:da:a4:06:60:41:
                    87:60:b5:3d:78:17:11:21:ff:86:ae:f7:c8:8d:01:
                    e4:af:54:66:6c:37:08:1b:41:5f:24:58:4f:03:61:
                    8a:ba:17:6d:3d:4b:1d:10:84:95:0a:3e:a4:34:25:
                    71:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:84:F9:79:01:2D:43:6E:95:AF:2B:74:E2:BC:7E:38:2E:0E:F3:DA
            X509v3 Authority Key Identifier:
                keyid:B5:41:6A:42:91:71:B4:A0:79:10:A6:73:7C:65:38:DE:6D:5E:9E:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5LrejS5jBuavbF5rEWzo2RaMFua58XSiVueernNU8qgo/0/B5416A429171B4A07910A6737C6538DE6D5E9EB7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5416A429171B4A07910A6737C6538DE6D5E9EB7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5LrejS5jBuavbF5rEWzo2RaMFua58XSiVueernNU8qgo/0/3134332e3230322e3131322e302f32322d3232203d3e20323633363034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.202.112.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5b:12:23:f1:11:85:1d:e5:41:a1:67:2a:8a:a9:a1:ff:6b:a2:
         77:a9:45:8b:77:40:60:86:91:f0:bf:27:e5:ed:51:8d:40:df:
         91:ec:68:62:23:5a:7d:61:43:83:27:52:7c:a7:c0:dc:34:99:
         9e:88:2d:b4:4c:c9:77:cc:ee:c4:b6:3d:33:81:40:ea:2d:69:
         0a:05:b3:86:70:f0:82:30:9e:87:aa:1b:c9:7e:99:74:41:93:
         c5:33:d8:6b:74:1f:d6:96:94:09:28:d8:13:01:54:2b:aa:29:
         9b:cd:ca:95:a3:6a:90:19:c7:4c:bf:39:30:9d:b3:19:59:11:
         4e:1b:07:76:da:14:86:3b:ea:87:ac:60:02:a7:bd:20:94:4c:
         81:ab:6e:b3:4b:26:03:dd:3d:e1:50:f8:21:58:f7:51:20:03:
         61:ad:07:55:39:55:78:47:b9:96:8d:80:c7:e2:17:a7:d6:11:
         71:64:c5:5f:90:47:c3:0f:ad:b8:e1:5c:da:44:68:64:3e:14:
         9f:54:6f:e1:84:97:b1:68:7f:e1:cb:2a:4b:eb:79:e9:e9:ec:
         0d:e8:36:39:48:6f:2a:a2:e4:74:ac:95:a9:17:b2:4c:13:46:
         a4:0c:a4:bd:21:29:94:78:92:73:ac:6b:85:6c:99:87:12:ae:
         96:0a:2c:56
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUZnA4SLdCUtlqxNH5OT0+X2uHC6cwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjU0MTZBNDI5MTcxQjRBMDc5MTBBNjczN0M2NTM4REU2
RDVFOUVCNzAeFw0yNTA0MzAxNzM4MjdaFw0yNjA0MjkxNzQzMjdaMDMxMTAvBgNV
BAMTKEQ2ODRGOTc5MDEyRDQzNkU5NUFGMkI3NEUyQkM3RTM4MkUwRUYzREEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdogy7xVF7kDqbZRThVXFR5EcG
SMgQoyGr5F1NqNKkc4kr7EpJr+dPOlP9Y/HpAUBYh5fCAGGJZmKKgp+eDOTIcYBY
TdfW6NRIdvUOOF/3AU+TPRPKlPRbV9t2WO802UQ58OmTYlRNowjXgArBzkZTXwPm
ydQpW5W8NmQgHW4Sh6RCU26ArRYAMf3HREtoC67Q4rfl74gtGDUgM7krX3v83e31
xdYe5V0GBVCI/FetlpE/zIUotm6otUz8JPvmcmGGTWP0n9XqKL0mVdzapAZgQYdg
tT14FxEh/4au98iNAeSvVGZsNwgbQV8kWE8DYYq6F209Sx0QhJUKPqQ0JXFfAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQU1oT5eQEtQ26Vryt04rx+OC4O89owHwYDVR0j
BBgwFoAUtUFqQpFxtKB5EKZzfGU43m1enrcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNUxyZWpTNWpCdWF2YkY1ckVXem8yUmFNRnVhNThYU2lWdWVlcm5OVThx
Z28vMC9CNTQxNkE0MjkxNzFCNEEwNzkxMEE2NzM3QzY1MzhERTZENUU5RUI3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0I1NDE2QTQyOTE3MUI0QTA3
OTEwQTY3MzdDNjUzOERFNkQ1RTlFQjcuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzVMcmVqUzVqQnVhdmJGNXJFV3pvMlJhTUZ1YTU4WFNpVnVlZXJuTlU4cWdvLzAv
MzEzNDMzMmUzMjMwMzIyZTMxMzEzMjJlMzAyZjMyMzIyZDMyMzIyMDNkM2UyMDMy
MzYzMzM2MzAzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAo/KcDANBgkqhkiG9w0BAQsFAAOCAQEAWxIj
8RGFHeVBoWcqiqmh/2uid6lFi3dAYIaR8L8n5e1RjUDfkexoYiNafWFDgydSfKfA
3DSZnogttEzJd8zuxLY9M4FA6i1pCgWzhnDwgjCeh6obyX6ZdEGTxTPYa3Qf1paU
CSjYEwFUK6opm83KlaNqkBnHTL85MJ2zGVkRThsHdtoUhjvqh6xgAqe9IJRMgatu
s0smA9094VD4IVj3USADYa0HVTlVeEe5lo2Ax+IXp9YRcWTFX5BHww+tuOFc2kRo
ZD4Un1Rv4YSXsWh/4csqS+t56ensDeg2OUhvKqLkdKyVqReyTBNGpAykvSEplHiS
c6xrhWyZhxKulgosVg==
-----END CERTIFICATE-----
Generated at Sat Jun 7 05:02:23 2025 by rpki-client