Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5uENiHDYwVy4DAAeQgxL4nLtsrqnHafPDVw3KYwuwJL5/1/3139312e3234312e3134362e302f32342d3234203d3e20323632373834.roa
File:                     3139312e3234312e3134362e302f32342d3234203d3e20323632373834.roa (raw, json)
Hash identifier:          lw/ZmgHutIZyaLoItZwnKehf9BuMeQC+tIdY33bu0Rs=
Subject key identifier:   97:36:E9:08:68:8C:83:DB:69:89:51:17:57:AB:C4:99:72:64:B6:6F
Certificate issuer:       /CN=8CD2E74C0B51414825F95C9D3D432ADD56896751
Certificate serial:       3EBC6DCAA5D9DEE59A0B4B6FAE9F4DEC8990D917
Authority key identifier: 8C:D2:E7:4C:0B:51:41:48:25:F9:5C:9D:3D:43:2A:DD:56:89:67:51
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8CD2E74C0B51414825F95C9D3D432ADD56896751.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5uENiHDYwVy4DAAeQgxL4nLtsrqnHafPDVw3KYwuwJL5/1/3139312e3234312e3134362e302f32342d3234203d3e20323632373834.roa
Signing time:             Sat 22 Mar 2025 09:59:24 +0000
ROA not before:           Sat 22 Mar 2025 09:54:24 +0000
ROA not after:            Sat 21 Mar 2026 09:59:24 +0000
asID:                     262784
IP address blocks:        191.241.146.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:bc:6d:ca:a5:d9:de:e5:9a:0b:4b:6f:ae:9f:4d:ec:89:90:d9:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8CD2E74C0B51414825F95C9D3D432ADD56896751
        Validity
            Not Before: Mar 22 09:54:24 2025 GMT
            Not After : Mar 21 09:59:24 2026 GMT
        Subject: CN=9736E908688C83DB6989511757ABC4997264B66F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:1a:6f:18:36:7a:c8:68:58:47:40:1e:59:5c:
                    c9:8f:96:c9:b9:b9:ee:6c:62:e3:c3:a8:f0:aa:f6:
                    c5:47:12:ea:fd:b2:e5:2e:52:e3:c9:ea:6e:84:c8:
                    04:bd:11:56:92:08:91:8d:f9:5d:0c:00:13:fb:45:
                    97:2e:19:3d:fc:28:59:fb:e2:99:a6:9f:4c:26:92:
                    44:94:09:4c:54:a5:03:e3:bf:e0:00:3b:d8:a6:6e:
                    b2:31:cb:4f:e9:d5:15:95:99:e5:94:6e:de:1b:2b:
                    b8:4c:27:b6:8c:41:ec:5a:0a:32:d5:6c:ca:62:25:
                    ac:6c:8a:71:23:a9:10:19:de:15:87:5f:2d:82:cd:
                    22:79:43:9b:f1:ba:e7:31:00:1b:86:e6:ad:c9:d9:
                    ff:7d:c2:ed:bb:77:4c:c5:94:39:bc:f3:88:97:3b:
                    f7:e6:bb:e0:34:d2:0c:ad:f8:2b:55:b5:72:02:29:
                    2f:9e:eb:a8:2c:14:de:82:0d:8e:64:07:40:06:b6:
                    d1:a1:44:e6:43:90:a0:a3:81:35:48:e2:4a:58:98:
                    72:3e:bc:4d:af:8e:de:04:56:ec:88:8f:f3:cb:a7:
                    ed:fb:2b:55:8b:0e:c3:9c:e1:b8:a2:ca:31:46:03:
                    d2:27:98:66:e2:52:23:e2:5e:cc:45:a8:5c:2e:8e:
                    6b:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:36:E9:08:68:8C:83:DB:69:89:51:17:57:AB:C4:99:72:64:B6:6F
            X509v3 Authority Key Identifier:
                keyid:8C:D2:E7:4C:0B:51:41:48:25:F9:5C:9D:3D:43:2A:DD:56:89:67:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5uENiHDYwVy4DAAeQgxL4nLtsrqnHafPDVw3KYwuwJL5/1/8CD2E74C0B51414825F95C9D3D432ADD56896751.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8CD2E74C0B51414825F95C9D3D432ADD56896751.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5uENiHDYwVy4DAAeQgxL4nLtsrqnHafPDVw3KYwuwJL5/1/3139312e3234312e3134362e302f32342d3234203d3e20323632373834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.241.146.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c9:a0:1e:5a:80:ab:bd:32:88:f0:e7:52:b2:e3:61:76:cf:d7:
         39:36:75:84:7d:fb:18:0f:6d:e9:28:50:f9:fb:b8:79:86:1e:
         aa:18:37:e6:19:53:7a:35:f1:db:1f:f2:4f:b0:03:6b:60:c6:
         d1:02:dc:e3:3e:51:f1:57:d2:41:92:a2:cf:2f:20:94:cc:e2:
         66:c9:ff:da:9b:d9:9d:32:c9:05:d9:a7:42:83:14:8a:a3:f2:
         d1:5a:86:79:9a:30:2f:28:44:2b:bb:da:32:9b:0e:38:c3:bc:
         53:d4:a8:50:34:eb:95:83:2d:5a:69:24:da:69:98:79:9c:79:
         36:f8:b5:60:38:a3:a3:3e:6a:34:90:52:90:7b:d9:32:76:a8:
         c5:75:87:e1:a6:1c:c8:53:4c:46:b8:a7:79:cd:10:2e:42:5a:
         f0:41:4e:e1:2a:44:a9:38:98:ec:24:58:37:2b:4b:6f:79:46:
         af:24:e4:9a:f0:4f:2e:c4:bc:f7:43:61:56:ec:e5:9f:31:e4:
         59:47:c6:36:da:92:5b:e2:70:69:ea:3a:f1:ce:51:ed:eb:79:
         c6:ae:7b:ff:70:1b:90:48:02:7d:bf:4a:93:7d:5f:a6:c0:92:
         f1:55:7d:ed:66:a9:8e:fb:ad:21:72:e7:31:d0:b4:04:1d:af:
         38:fb:f2:18
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUPrxtyqXZ3uWaC0tvrp9N7ImQ2RcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOENEMkU3NEMwQjUxNDE0ODI1Rjk1QzlEM0Q0MzJBREQ1
Njg5Njc1MTAeFw0yNTAzMjIwOTU0MjRaFw0yNjAzMjEwOTU5MjRaMDMxMTAvBgNV
BAMTKDk3MzZFOTA4Njg4QzgzREI2OTg5NTExNzU3QUJDNDk5NzI2NEI2NkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGGm8YNnrIaFhHQB5ZXMmPlsm5
ue5sYuPDqPCq9sVHEur9suUuUuPJ6m6EyAS9EVaSCJGN+V0MABP7RZcuGT38KFn7
4pmmn0wmkkSUCUxUpQPjv+AAO9imbrIxy0/p1RWVmeWUbt4bK7hMJ7aMQexaCjLV
bMpiJaxsinEjqRAZ3hWHXy2CzSJ5Q5vxuucxABuG5q3J2f99wu27d0zFlDm884iX
O/fmu+A00gyt+CtVtXICKS+e66gsFN6CDY5kB0AGttGhROZDkKCjgTVI4kpYmHI+
vE2vjt4EVuyIj/PLp+37K1WLDsOc4biiyjFGA9InmGbiUiPiXsxFqFwujmt5AgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUlzbpCGiMg9tpiVEXV6vEmXJktm8wHwYDVR0j
BBgwFoAUjNLnTAtRQUgl+VydPUMq3VaJZ1EwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNXVFTmlIRFl3Vnk0REFBZVFneEw0bkx0c3JxbkhhZlBEVnczS1l3dXdK
TDUvMS84Q0QyRTc0QzBCNTE0MTQ4MjVGOTVDOUQzRDQzMkFERDU2ODk2NzUxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzhDRDJFNzRDMEI1MTQxNDgy
NUY5NUM5RDNENDMyQURENTY4OTY3NTEuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzV1RU5pSERZd1Z5NERBQWVRZ3hMNG5MdHNycW5IYWZQRFZ3M0tZd3V3Skw1LzEv
MzEzOTMxMmUzMjM0MzEyZTMxMzQzNjJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzYzMjM3MzgzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAL/xkjANBgkqhkiG9w0BAQsFAAOCAQEAyaAe
WoCrvTKI8OdSsuNhds/XOTZ1hH37GA9t6ShQ+fu4eYYeqhg35hlTejXx2x/yT7AD
a2DG0QLc4z5R8VfSQZKizy8glMziZsn/2pvZnTLJBdmnQoMUiqPy0VqGeZowLyhE
K7vaMpsOOMO8U9SoUDTrlYMtWmkk2mmYeZx5Nvi1YDijoz5qNJBSkHvZMnaoxXWH
4aYcyFNMRrinec0QLkJa8EFO4SpEqTiY7CRYNytLb3lGryTkmvBPLsS890NhVuzl
nzHkWUfGNtqSW+Jwaeo68c5R7et5xq57/3AbkEgCfb9Kk31fpsCS8VV97Wapjvut
IXLnMdC0BB2vOPvyGA==
-----END CERTIFICATE-----
Generated at Thu Apr 10 14:21:45 2025 by rpki-client