Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5mDf8fNLTCjQ7aGv3rQSd2XeHNgCDKTMHHYpzN2SQ2WF/0/3138372e3131302e3133362e302f32332d3233203d3e203533313237.roa
File:                     3138372e3131302e3133362e302f32332d3233203d3e203533313237.roa (raw, json)
Hash identifier:          qQ8vnpycp+dpL4p5UxqtG/jRZkorakf+1C6YXUTlej4=
Subject key identifier:   A4:9F:1D:BC:CC:9A:4B:12:37:07:28:5A:E8:40:8A:26:FA:13:A8:F9
Certificate issuer:       /CN=E1E15FEEA8B1B9EC3FEEE349F863706D488F93C0
Certificate serial:       3960330FEA0A05332745A95DD98E54FE6FC1181B
Authority key identifier: E1:E1:5F:EE:A8:B1:B9:EC:3F:EE:E3:49:F8:63:70:6D:48:8F:93:C0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E1E15FEEA8B1B9EC3FEEE349F863706D488F93C0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5mDf8fNLTCjQ7aGv3rQSd2XeHNgCDKTMHHYpzN2SQ2WF/0/3138372e3131302e3133362e302f32332d3233203d3e203533313237.roa
Signing time:             Thu 16 Jan 2025 22:11:47 +0000
ROA not before:           Thu 16 Jan 2025 22:06:47 +0000
ROA not after:            Thu 15 Jan 2026 22:11:47 +0000
asID:                     53127
IP address blocks:        187.110.136.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:60:33:0f:ea:0a:05:33:27:45:a9:5d:d9:8e:54:fe:6f:c1:18:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E1E15FEEA8B1B9EC3FEEE349F863706D488F93C0
        Validity
            Not Before: Jan 16 22:06:47 2025 GMT
            Not After : Jan 15 22:11:47 2026 GMT
        Subject: CN=A49F1DBCCC9A4B123707285AE8408A26FA13A8F9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:6a:f0:8c:ba:d0:09:e8:90:51:30:fd:f2:c4:
                    cc:6a:51:a8:56:71:50:f6:ea:b3:5a:80:7a:f1:cb:
                    ba:2b:4f:80:8b:f6:25:08:61:6e:c1:e2:3a:cd:95:
                    13:89:eb:3e:db:29:c0:88:6c:f3:84:4e:f2:50:17:
                    a4:db:37:25:3b:65:29:ea:3b:0d:a6:9e:09:36:7f:
                    a6:a9:8c:fb:df:9e:3c:6c:16:91:48:96:d5:0f:87:
                    55:ac:b9:50:a0:d3:bc:1b:0c:b2:f2:ee:b4:50:61:
                    65:ed:f7:79:b2:39:0f:7c:0c:a4:98:67:94:e9:f7:
                    73:78:32:2a:71:8c:74:d7:d8:2b:ae:fe:a6:11:c7:
                    45:d4:2c:53:fe:e7:27:db:4b:b5:be:66:bc:e8:37:
                    8d:ca:ba:61:c7:96:51:9b:45:37:15:59:5c:64:0e:
                    6a:75:5c:35:fd:74:30:84:68:01:46:5c:0f:ff:fa:
                    5b:1a:ac:b9:59:31:72:9b:ca:39:4c:02:67:00:e9:
                    0c:6e:3b:34:5e:9c:f9:43:0d:f9:82:b2:82:6b:73:
                    14:c8:37:00:0b:67:85:25:fe:ee:6c:0b:89:64:fa:
                    8d:13:66:62:3d:63:14:3b:a1:cc:7f:c6:06:67:0a:
                    a4:08:1d:f0:12:41:5a:f2:a0:c2:8d:99:01:13:40:
                    ab:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:9F:1D:BC:CC:9A:4B:12:37:07:28:5A:E8:40:8A:26:FA:13:A8:F9
            X509v3 Authority Key Identifier:
                keyid:E1:E1:5F:EE:A8:B1:B9:EC:3F:EE:E3:49:F8:63:70:6D:48:8F:93:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5mDf8fNLTCjQ7aGv3rQSd2XeHNgCDKTMHHYpzN2SQ2WF/0/E1E15FEEA8B1B9EC3FEEE349F863706D488F93C0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E1E15FEEA8B1B9EC3FEEE349F863706D488F93C0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5mDf8fNLTCjQ7aGv3rQSd2XeHNgCDKTMHHYpzN2SQ2WF/0/3138372e3131302e3133362e302f32332d3233203d3e203533313237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.110.136.0/23

    Signature Algorithm: sha256WithRSAEncryption
         54:3a:17:d4:6b:8f:18:bf:d1:6e:de:c0:61:78:6b:92:4c:a5:
         97:2a:ad:db:e4:dd:e4:03:0c:77:57:fd:49:04:d3:79:55:f6:
         62:75:da:18:c6:f9:7c:9e:83:15:45:08:db:06:d5:63:73:52:
         1b:04:c4:90:ab:a8:43:f5:e1:ef:62:c0:37:b9:b4:21:0a:35:
         6e:28:27:f6:b2:58:88:db:c1:cb:84:95:36:5c:0e:e4:e1:d2:
         0d:85:6b:de:64:b2:39:11:68:db:c7:12:31:4c:f9:44:cb:be:
         81:5f:52:2e:c8:7a:7c:35:0d:3b:43:13:0d:84:9b:77:8a:7f:
         1d:23:9c:c1:fe:e1:e4:80:c5:04:5d:0e:99:e1:e4:e6:3f:81:
         9b:0c:a7:59:85:9a:da:5d:c5:ce:8d:fc:54:78:31:f9:b7:18:
         75:10:ee:32:9f:d1:4f:50:c5:a2:d1:e6:0a:bd:11:33:b4:ab:
         d3:46:be:2e:b6:82:83:f5:77:54:5e:c6:93:e6:f0:4c:b5:ae:
         7e:ae:67:c4:b9:82:26:5c:71:5d:85:1b:de:bd:3b:38:17:d5:
         0e:fd:71:0f:0b:28:85:c7:ab:9f:eb:79:4c:38:dc:19:4b:cc:
         cf:ad:7a:a3:4e:46:7d:a6:2e:da:cf:bd:e3:58:d2:78:23:00:
         cb:ce:6d:8d
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUOWAzD+oKBTMnRald2Y5U/m/BGBswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTFFMTVGRUVBOEIxQjlFQzNGRUVFMzQ5Rjg2MzcwNkQ0
ODhGOTNDMDAeFw0yNTAxMTYyMjA2NDdaFw0yNjAxMTUyMjExNDdaMDMxMTAvBgNV
BAMTKEE0OUYxREJDQ0M5QTRCMTIzNzA3Mjg1QUU4NDA4QTI2RkExM0E4RjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvavCMutAJ6JBRMP3yxMxqUahW
cVD26rNagHrxy7orT4CL9iUIYW7B4jrNlROJ6z7bKcCIbPOETvJQF6TbNyU7ZSnq
Ow2mngk2f6apjPvfnjxsFpFIltUPh1WsuVCg07wbDLLy7rRQYWXt93myOQ98DKSY
Z5Tp93N4MipxjHTX2Cuu/qYRx0XULFP+5yfbS7W+ZrzoN43KumHHllGbRTcVWVxk
Dmp1XDX9dDCEaAFGXA//+lsarLlZMXKbyjlMAmcA6QxuOzRenPlDDfmCsoJrcxTI
NwALZ4Ul/u5sC4lk+o0TZmI9YxQ7ocx/xgZnCqQIHfASQVryoMKNmQETQKuhAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUpJ8dvMyaSxI3Byha6ECKJvoTqPkwHwYDVR0j
BBgwFoAU4eFf7qixuew/7uNJ+GNwbUiPk8AwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNW1EZjhmTkxUQ2pRN2FHdjNyUVNkMlhlSE5nQ0RLVE1ISFlwek4yU1Ey
V0YvMC9FMUUxNUZFRUE4QjFCOUVDM0ZFRUUzNDlGODYzNzA2RDQ4OEY5M0MwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0UxRTE1RkVFQThCMUI5RUMz
RkVFRTM0OUY4NjM3MDZENDg4RjkzQzAuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzVtRGY4Zk5MVENqUTdhR3YzclFTZDJYZUhOZ0NES1RNSEhZcHpOMlNRMldGLzAv
MzEzODM3MmUzMTMxMzAyZTMxMzMzNjJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDM1
MzMzMTMyMzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAG7bogwDQYJKoZIhvcNAQELBQADggEBAFQ6F9Rr
jxi/0W7ewGF4a5JMpZcqrdvk3eQDDHdX/UkE03lV9mJ12hjG+XyegxVFCNsG1WNz
UhsExJCrqEP14e9iwDe5tCEKNW4oJ/ayWIjbwcuElTZcDuTh0g2Fa95ksjkRaNvH
EjFM+UTLvoFfUi7Ienw1DTtDEw2Em3eKfx0jnMH+4eSAxQRdDpnh5OY/gZsMp1mF
mtpdxc6N/FR4Mfm3GHUQ7jKf0U9QxaLR5gq9ETO0q9NGvi62goP1d1RexpPm8Ey1
rn6uZ8S5giZccV2FG969OzgX1Q79cQ8LKIXHq5/reUw43BlLzM+teqNORn2mLtrP
veNY0ngjAMvObY0=
-----END CERTIFICATE-----
Generated at Mon Apr 7 13:33:17 2025 by rpki-client