Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5mDf8fNLTCjQ7aGv3rQSd2XeHNgCDKTMHHYpzN2SQ2WF/0/3138372e3131302e3133342e302f32342d3234203d3e203533313237.roa
File:                     3138372e3131302e3133342e302f32342d3234203d3e203533313237.roa (raw, json)
Hash identifier:          ISEHjCGIJRhDT9uWoHxqTSSYG/yqxSHtRcob7sI5SV4=
Subject key identifier:   97:4A:4A:9B:C7:00:38:D5:00:F1:DA:48:E0:AF:D9:F0:29:B3:93:97
Certificate issuer:       /CN=E1E15FEEA8B1B9EC3FEEE349F863706D488F93C0
Certificate serial:       6B81D76340327F95D714578F47DC9853E29A9B41
Authority key identifier: E1:E1:5F:EE:A8:B1:B9:EC:3F:EE:E3:49:F8:63:70:6D:48:8F:93:C0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E1E15FEEA8B1B9EC3FEEE349F863706D488F93C0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5mDf8fNLTCjQ7aGv3rQSd2XeHNgCDKTMHHYpzN2SQ2WF/0/3138372e3131302e3133342e302f32342d3234203d3e203533313237.roa
Signing time:             Thu 16 Jan 2025 22:11:45 +0000
ROA not before:           Thu 16 Jan 2025 22:06:45 +0000
ROA not after:            Thu 15 Jan 2026 22:11:45 +0000
asID:                     53127
IP address blocks:        187.110.134.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:81:d7:63:40:32:7f:95:d7:14:57:8f:47:dc:98:53:e2:9a:9b:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E1E15FEEA8B1B9EC3FEEE349F863706D488F93C0
        Validity
            Not Before: Jan 16 22:06:45 2025 GMT
            Not After : Jan 15 22:11:45 2026 GMT
        Subject: CN=974A4A9BC70038D500F1DA48E0AFD9F029B39397
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:d7:c1:64:48:91:45:32:2a:e9:51:0c:1f:81:
                    85:16:06:06:4f:21:e8:8a:ea:e3:87:45:05:4a:6c:
                    d0:47:d9:4e:3e:ed:e8:8c:0e:7c:12:d9:10:09:ea:
                    94:65:ed:be:72:85:c5:b1:b2:66:d9:83:cb:0a:90:
                    c2:e7:a4:10:69:68:76:31:c0:88:7c:96:19:80:92:
                    88:fa:58:a7:06:f4:7b:12:4e:62:0b:b6:19:cf:a8:
                    75:cd:6d:d6:1e:37:4f:99:97:6a:9c:65:94:2b:96:
                    3f:bf:bf:93:11:1d:d1:ae:d9:8e:04:13:61:6e:0c:
                    b1:1b:40:17:5d:99:d9:b0:94:c1:36:29:cf:61:79:
                    b9:ee:4d:e4:72:e5:83:c9:e3:34:7a:b6:53:f9:13:
                    d2:da:16:3e:5e:9f:3a:e7:d9:94:30:a6:72:03:cc:
                    ad:ac:78:97:a5:87:85:e5:b7:fa:50:3e:fe:c4:c4:
                    f0:9a:0e:7a:44:49:75:93:15:d2:47:bd:9e:6f:7c:
                    d9:06:47:06:71:29:ad:79:4a:a1:a7:8c:e6:5b:ef:
                    50:a1:17:b3:87:ef:d3:e8:49:41:d5:54:37:a4:6f:
                    68:bb:2d:e7:98:09:a1:3a:6d:71:36:17:68:1a:7a:
                    87:02:a9:bc:f9:c1:88:6f:1a:c8:d0:f4:3f:50:18:
                    e2:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:4A:4A:9B:C7:00:38:D5:00:F1:DA:48:E0:AF:D9:F0:29:B3:93:97
            X509v3 Authority Key Identifier:
                keyid:E1:E1:5F:EE:A8:B1:B9:EC:3F:EE:E3:49:F8:63:70:6D:48:8F:93:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5mDf8fNLTCjQ7aGv3rQSd2XeHNgCDKTMHHYpzN2SQ2WF/0/E1E15FEEA8B1B9EC3FEEE349F863706D488F93C0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E1E15FEEA8B1B9EC3FEEE349F863706D488F93C0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5mDf8fNLTCjQ7aGv3rQSd2XeHNgCDKTMHHYpzN2SQ2WF/0/3138372e3131302e3133342e302f32342d3234203d3e203533313237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.110.134.0/24

    Signature Algorithm: sha256WithRSAEncryption
         98:5a:11:30:8d:56:28:ca:55:e1:e4:0d:0c:4b:bd:b1:b5:3e:
         61:f8:93:e6:49:3f:a5:96:3c:93:48:c2:2f:04:1c:2e:41:ad:
         59:1b:d3:c7:3e:fa:3d:ee:55:b6:c6:55:01:28:9e:15:ee:47:
         53:04:c7:12:af:b5:ce:ce:de:82:6b:98:eb:2c:8b:b7:d1:c0:
         41:40:89:34:8b:55:53:07:1d:1a:26:d7:1c:53:48:c6:be:65:
         ce:61:fe:5f:87:5e:14:a0:96:b5:d9:ef:54:2a:81:17:94:fa:
         a6:d0:ee:8a:7a:b0:75:80:04:3a:34:87:8d:af:ba:00:de:f3:
         eb:55:1b:a6:70:1a:0b:97:bc:3b:00:3f:34:3b:f6:37:06:db:
         a7:1b:a2:28:35:aa:96:c2:af:fc:b0:c8:22:8f:a6:58:73:02:
         2f:e9:03:f0:39:78:73:80:b9:80:18:6b:c7:da:d0:12:a4:7e:
         32:ed:ad:61:23:f1:8b:73:21:97:b9:db:17:81:ef:01:d4:5a:
         75:29:57:96:97:08:40:84:0f:f2:87:49:a6:06:f3:c4:51:1b:
         cd:f2:90:b4:ad:bb:4b:e0:6f:35:71:b5:7b:76:6b:9a:27:9c:
         ad:8d:45:ee:1c:b6:0f:05:b0:7f:9e:55:e2:61:16:2e:e8:54:
         18:2d:2c:ac
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUa4HXY0Ayf5XXFFePR9yYU+Kam0EwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTFFMTVGRUVBOEIxQjlFQzNGRUVFMzQ5Rjg2MzcwNkQ0
ODhGOTNDMDAeFw0yNTAxMTYyMjA2NDVaFw0yNjAxMTUyMjExNDVaMDMxMTAvBgNV
BAMTKDk3NEE0QTlCQzcwMDM4RDUwMEYxREE0OEUwQUZEOUYwMjlCMzkzOTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDU18FkSJFFMirpUQwfgYUWBgZP
IeiK6uOHRQVKbNBH2U4+7eiMDnwS2RAJ6pRl7b5yhcWxsmbZg8sKkMLnpBBpaHYx
wIh8lhmAkoj6WKcG9HsSTmILthnPqHXNbdYeN0+Zl2qcZZQrlj+/v5MRHdGu2Y4E
E2FuDLEbQBddmdmwlME2Kc9hebnuTeRy5YPJ4zR6tlP5E9LaFj5enzrn2ZQwpnID
zK2seJelh4Xlt/pQPv7ExPCaDnpESXWTFdJHvZ5vfNkGRwZxKa15SqGnjOZb71Ch
F7OH79PoSUHVVDekb2i7LeeYCaE6bXE2F2gaeocCqbz5wYhvGsjQ9D9QGOLRAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUl0pKm8cAONUA8dpI4K/Z8Cmzk5cwHwYDVR0j
BBgwFoAU4eFf7qixuew/7uNJ+GNwbUiPk8AwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNW1EZjhmTkxUQ2pRN2FHdjNyUVNkMlhlSE5nQ0RLVE1ISFlwek4yU1Ey
V0YvMC9FMUUxNUZFRUE4QjFCOUVDM0ZFRUUzNDlGODYzNzA2RDQ4OEY5M0MwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0UxRTE1RkVFQThCMUI5RUMz
RkVFRTM0OUY4NjM3MDZENDg4RjkzQzAuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzVtRGY4Zk5MVENqUTdhR3YzclFTZDJYZUhOZ0NES1RNSEhZcHpOMlNRMldGLzAv
MzEzODM3MmUzMTMxMzAyZTMxMzMzNDJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM1
MzMzMTMyMzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAC7boYwDQYJKoZIhvcNAQELBQADggEBAJhaETCN
VijKVeHkDQxLvbG1PmH4k+ZJP6WWPJNIwi8EHC5BrVkb08c++j3uVbbGVQEonhXu
R1MExxKvtc7O3oJrmOssi7fRwEFAiTSLVVMHHRom1xxTSMa+Zc5h/l+HXhSglrXZ
71QqgReU+qbQ7op6sHWABDo0h42vugDe8+tVG6ZwGguXvDsAPzQ79jcG26cboig1
qpbCr/ywyCKPplhzAi/pA/A5eHOAuYAYa8fa0BKkfjLtrWEj8YtzIZe52xeB7wHU
WnUpV5aXCECED/KHSaYG88RRG83ykLStu0vgbzVxtXt2a5onnK2NRe4ctg8FsH+e
VeJhFi7oVBgtLKw=
-----END CERTIFICATE-----
Generated at Mon Apr 7 20:15:19 2025 by rpki-client