Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5mDf8fNLTCjQ7aGv3rQSd2XeHNgCDKTMHHYpzN2SQ2WF/0/3138372e3131302e3133362e302f32312d3231203d3e203533313237.roa
File:                     3138372e3131302e3133362e302f32312d3231203d3e203533313237.roa (raw, json)
Hash identifier:          PNzIzIRCilFFKShqXIzhhlCKLKMC5gvwxfumbcWZ5cg=
Subject key identifier:   D8:57:73:38:9D:9A:D2:9C:98:F8:36:A7:81:A5:34:DA:79:EE:37:DF
Certificate issuer:       /CN=E1E15FEEA8B1B9EC3FEEE349F863706D488F93C0
Certificate serial:       7F286677DC32291E7929E428BD74DE3CED93C735
Authority key identifier: E1:E1:5F:EE:A8:B1:B9:EC:3F:EE:E3:49:F8:63:70:6D:48:8F:93:C0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E1E15FEEA8B1B9EC3FEEE349F863706D488F93C0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5mDf8fNLTCjQ7aGv3rQSd2XeHNgCDKTMHHYpzN2SQ2WF/0/3138372e3131302e3133362e302f32312d3231203d3e203533313237.roa
Signing time:             Thu 16 Jan 2025 22:11:47 +0000
ROA not before:           Thu 16 Jan 2025 22:06:47 +0000
ROA not after:            Thu 15 Jan 2026 22:11:47 +0000
asID:                     53127
IP address blocks:        187.110.136.0/21 maxlen: 21
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:28:66:77:dc:32:29:1e:79:29:e4:28:bd:74:de:3c:ed:93:c7:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E1E15FEEA8B1B9EC3FEEE349F863706D488F93C0
        Validity
            Not Before: Jan 16 22:06:47 2025 GMT
            Not After : Jan 15 22:11:47 2026 GMT
        Subject: CN=D85773389D9AD29C98F836A781A534DA79EE37DF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:7a:a8:03:ac:6b:f0:b7:1c:46:fb:a1:72:d1:
                    f2:d6:9e:9a:71:2c:7b:d4:d7:00:a4:83:4c:d4:d5:
                    1a:93:bb:01:50:50:9d:e4:f1:da:b8:6f:d8:d0:1a:
                    92:30:f1:3f:ba:71:ac:3a:35:21:ab:84:ea:6b:a3:
                    f9:6a:f8:d0:96:13:78:80:26:8e:eb:a0:69:b0:57:
                    39:ea:23:27:42:53:27:06:92:fd:f6:aa:f4:52:c2:
                    aa:a7:b3:ed:a5:e4:ab:e5:9f:20:7d:95:5d:14:1e:
                    56:7d:a8:2f:f8:fd:5c:41:9d:5b:8d:5a:b9:88:5e:
                    89:ca:cc:b4:a4:ed:4d:60:06:e8:57:0f:40:80:8c:
                    46:69:8a:7b:aa:56:ce:97:ce:c2:dd:12:06:43:0f:
                    de:2e:60:1c:6c:a3:45:cc:06:fa:4b:89:95:9a:db:
                    49:0a:64:14:c6:b6:d0:e9:b6:02:a2:57:e6:03:56:
                    95:51:fa:3f:21:aa:4d:43:51:63:0d:e5:88:15:db:
                    46:98:8d:39:f0:d3:f1:fa:0b:4d:20:73:c8:d8:19:
                    74:7a:0a:a1:d1:23:d6:bf:a0:27:b6:c3:98:15:1d:
                    d3:b7:a9:63:6f:dc:c3:f4:b2:61:1b:15:20:5b:b6:
                    1b:78:10:8d:65:4d:f3:58:ce:0a:42:7c:fa:87:8b:
                    67:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:57:73:38:9D:9A:D2:9C:98:F8:36:A7:81:A5:34:DA:79:EE:37:DF
            X509v3 Authority Key Identifier:
                keyid:E1:E1:5F:EE:A8:B1:B9:EC:3F:EE:E3:49:F8:63:70:6D:48:8F:93:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5mDf8fNLTCjQ7aGv3rQSd2XeHNgCDKTMHHYpzN2SQ2WF/0/E1E15FEEA8B1B9EC3FEEE349F863706D488F93C0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E1E15FEEA8B1B9EC3FEEE349F863706D488F93C0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5mDf8fNLTCjQ7aGv3rQSd2XeHNgCDKTMHHYpzN2SQ2WF/0/3138372e3131302e3133362e302f32312d3231203d3e203533313237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.110.136.0/21

    Signature Algorithm: sha256WithRSAEncryption
         96:34:2e:07:3f:68:b0:6b:86:cd:e0:8a:db:d3:61:0d:e1:95:
         04:54:d8:f2:78:f1:43:ae:c1:45:00:46:db:43:ac:ee:df:03:
         2e:75:1a:61:0a:bf:35:13:6b:1b:f5:af:b8:33:4d:0d:ae:75:
         83:13:d6:35:db:94:19:bc:9b:62:04:41:a1:68:ed:dd:cf:fc:
         00:85:b8:8b:64:64:62:5a:0a:29:b6:a8:a3:ec:4a:ee:8c:a9:
         c1:e4:34:97:f4:2f:5f:95:c5:54:4a:08:91:b9:09:5d:84:86:
         df:a0:63:d6:c2:48:75:b8:ce:41:ea:22:ee:9c:93:1c:21:df:
         f1:80:7a:aa:0f:5d:1f:1b:a0:11:15:fc:06:46:f2:89:cf:ad:
         5c:c9:75:38:3d:9a:79:a5:e1:44:e0:0a:83:2c:d7:cc:11:db:
         2f:bf:a4:07:e5:88:3d:bc:51:56:38:03:51:28:45:1d:bd:0b:
         0a:e0:39:c7:73:34:ff:a6:de:21:98:6e:00:26:ae:1f:85:24:
         35:f4:30:42:b8:eb:df:ce:ed:8f:95:34:07:e1:ef:67:89:82:
         79:1e:a1:d8:9f:41:b5:c5:f9:93:83:10:2a:d5:21:4c:d7:50:
         34:e9:a9:f8:b5:29:25:13:72:db:70:c5:c9:2b:21:e2:5f:d7:
         3d:1e:9d:dd
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUfyhmd9wyKR55KeQovXTePO2TxzUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTFFMTVGRUVBOEIxQjlFQzNGRUVFMzQ5Rjg2MzcwNkQ0
ODhGOTNDMDAeFw0yNTAxMTYyMjA2NDdaFw0yNjAxMTUyMjExNDdaMDMxMTAvBgNV
BAMTKEQ4NTc3MzM4OUQ5QUQyOUM5OEY4MzZBNzgxQTUzNERBNzlFRTM3REYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLeqgDrGvwtxxG+6Fy0fLWnppx
LHvU1wCkg0zU1RqTuwFQUJ3k8dq4b9jQGpIw8T+6caw6NSGrhOpro/lq+NCWE3iA
Jo7roGmwVznqIydCUycGkv32qvRSwqqns+2l5KvlnyB9lV0UHlZ9qC/4/VxBnVuN
WrmIXonKzLSk7U1gBuhXD0CAjEZpinuqVs6XzsLdEgZDD94uYBxso0XMBvpLiZWa
20kKZBTGttDptgKiV+YDVpVR+j8hqk1DUWMN5YgV20aYjTnw0/H6C00gc8jYGXR6
CqHRI9a/oCe2w5gVHdO3qWNv3MP0smEbFSBbtht4EI1lTfNYzgpCfPqHi2f9AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU2FdzOJ2a0pyY+DangaU02nnuN98wHwYDVR0j
BBgwFoAU4eFf7qixuew/7uNJ+GNwbUiPk8AwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNW1EZjhmTkxUQ2pRN2FHdjNyUVNkMlhlSE5nQ0RLVE1ISFlwek4yU1Ey
V0YvMC9FMUUxNUZFRUE4QjFCOUVDM0ZFRUUzNDlGODYzNzA2RDQ4OEY5M0MwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0UxRTE1RkVFQThCMUI5RUMz
RkVFRTM0OUY4NjM3MDZENDg4RjkzQzAuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzVtRGY4Zk5MVENqUTdhR3YzclFTZDJYZUhOZ0NES1RNSEhZcHpOMlNRMldGLzAv
MzEzODM3MmUzMTMxMzAyZTMxMzMzNjJlMzAyZjMyMzEyZDMyMzEyMDNkM2UyMDM1
MzMzMTMyMzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAO7bogwDQYJKoZIhvcNAQELBQADggEBAJY0Lgc/
aLBrhs3gitvTYQ3hlQRU2PJ48UOuwUUARttDrO7fAy51GmEKvzUTaxv1r7gzTQ2u
dYMT1jXblBm8m2IEQaFo7d3P/ACFuItkZGJaCim2qKPsSu6MqcHkNJf0L1+VxVRK
CJG5CV2Eht+gY9bCSHW4zkHqIu6ckxwh3/GAeqoPXR8boBEV/AZG8onPrVzJdTg9
mnml4UTgCoMs18wR2y+/pAfliD28UVY4A1EoRR29CwrgOcdzNP+m3iGYbgAmrh+F
JDX0MEK469/O7Y+VNAfh72eJgnkeodifQbXF+ZODECrVIUzXUDTpqfi1KSUTcttw
xckrIeJf1z0end0=
-----END CERTIFICATE-----
Generated at Sun Apr 13 09:09:53 2025 by rpki-client