Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5uENiHDYwVy4DAAeQgxL4nLtsrqnHafPDVw3KYwuwJL5/1/3139312e3234312e3134372e302f32342d3234203d3e20323632373834.roa
File:                     3139312e3234312e3134372e302f32342d3234203d3e20323632373834.roa (raw, json)
Hash identifier:          0TMssF/XR+X3gIy2YD7jd93PYYoIrpz0TWGsYWaNEUA=
Subject key identifier:   13:DC:1A:ED:91:C7:BE:8A:0F:A9:29:65:C6:03:68:48:19:EB:57:F1
Certificate issuer:       /CN=8CD2E74C0B51414825F95C9D3D432ADD56896751
Certificate serial:       165D88CA47F52CF7EC90692935C3C59DC8FBD325
Authority key identifier: 8C:D2:E7:4C:0B:51:41:48:25:F9:5C:9D:3D:43:2A:DD:56:89:67:51
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8CD2E74C0B51414825F95C9D3D432ADD56896751.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5uENiHDYwVy4DAAeQgxL4nLtsrqnHafPDVw3KYwuwJL5/1/3139312e3234312e3134372e302f32342d3234203d3e20323632373834.roa
Signing time:             Sat 22 Mar 2025 09:59:23 +0000
ROA not before:           Sat 22 Mar 2025 09:54:23 +0000
ROA not after:            Sat 21 Mar 2026 09:59:23 +0000
asID:                     262784
IP address blocks:        191.241.147.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:5d:88:ca:47:f5:2c:f7:ec:90:69:29:35:c3:c5:9d:c8:fb:d3:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8CD2E74C0B51414825F95C9D3D432ADD56896751
        Validity
            Not Before: Mar 22 09:54:23 2025 GMT
            Not After : Mar 21 09:59:23 2026 GMT
        Subject: CN=13DC1AED91C7BE8A0FA92965C603684819EB57F1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:20:3a:d5:5b:93:8f:0a:03:88:9b:e5:b8:fc:
                    70:61:3b:ec:7a:9f:cc:19:de:11:17:49:da:bf:98:
                    3e:5d:28:83:90:04:96:4e:28:81:f3:4d:a1:ea:d4:
                    b8:15:50:38:2c:01:65:69:2d:97:67:15:34:2e:03:
                    12:a2:46:8f:77:35:2f:c2:92:39:96:a5:d6:35:da:
                    5c:df:e7:38:5d:48:e5:e8:d5:26:a2:d1:4f:6f:29:
                    43:63:ee:c0:0a:81:39:44:c4:6c:31:04:8e:9e:61:
                    84:09:0c:88:02:68:3e:c2:0e:d3:cb:8d:fe:ac:e4:
                    7d:3c:c6:dd:e9:ab:94:31:0a:9b:f0:fb:6e:ed:84:
                    80:4a:c3:1c:9c:32:e9:41:49:ba:5e:a6:66:9c:df:
                    a2:ee:4f:51:ee:cf:93:01:5c:0a:c5:b3:47:ee:8c:
                    15:a0:c1:00:ab:ab:70:38:4b:81:d0:bb:0f:eb:07:
                    14:18:f1:bf:86:c7:0d:0f:af:1a:fd:83:32:bf:a1:
                    2d:c6:d1:7c:a4:c5:7f:73:ab:fc:7f:5d:58:41:66:
                    80:a2:aa:b2:8f:be:21:2d:b6:7a:c9:96:d6:93:6f:
                    5c:78:21:6c:94:99:04:8c:19:92:72:9a:89:8c:b7:
                    c5:bb:80:e8:2f:76:03:5f:12:0f:b5:7e:09:fb:f2:
                    8f:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:DC:1A:ED:91:C7:BE:8A:0F:A9:29:65:C6:03:68:48:19:EB:57:F1
            X509v3 Authority Key Identifier:
                keyid:8C:D2:E7:4C:0B:51:41:48:25:F9:5C:9D:3D:43:2A:DD:56:89:67:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5uENiHDYwVy4DAAeQgxL4nLtsrqnHafPDVw3KYwuwJL5/1/8CD2E74C0B51414825F95C9D3D432ADD56896751.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8CD2E74C0B51414825F95C9D3D432ADD56896751.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5uENiHDYwVy4DAAeQgxL4nLtsrqnHafPDVw3KYwuwJL5/1/3139312e3234312e3134372e302f32342d3234203d3e20323632373834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.241.147.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7d:96:6e:3d:cf:18:91:ec:c3:6a:a6:2d:2a:98:2d:0d:7b:03:
         f5:cd:64:d8:d7:2b:df:ca:bd:81:78:99:22:d1:1a:65:03:ac:
         07:0a:98:57:27:8e:a7:48:58:d4:74:72:c4:26:55:7d:f1:6e:
         84:99:67:1a:c6:77:08:0a:01:f3:a1:5e:7d:82:28:e4:da:4c:
         6c:01:8f:fc:14:be:5a:c5:97:20:97:9f:84:24:ef:55:17:64:
         f6:9b:56:ba:65:9e:76:51:a0:37:9c:25:18:a1:11:eb:08:26:
         a3:ab:5c:cc:c5:5f:63:9b:31:79:66:e1:93:2f:2a:36:e8:0d:
         59:df:c3:b0:9d:58:3f:0e:91:cf:df:5a:32:ad:f5:95:d7:3e:
         6b:bf:e8:0f:a8:45:04:9e:c0:d5:71:c2:6b:c3:07:a9:54:d9:
         da:cf:b2:a1:c2:31:50:40:a7:9e:85:e4:e8:84:f7:79:33:13:
         5b:5b:b0:32:fb:be:97:27:1a:c9:44:1d:61:7e:9d:da:40:0b:
         43:f9:9d:7f:4e:9e:1a:3d:aa:b9:5c:85:d9:7a:44:c1:77:14:
         70:a9:5d:49:dc:25:58:1a:da:ef:4f:47:bf:5e:9f:ee:9c:b7:
         86:7d:8b:71:a2:e1:dd:d1:38:17:05:83:a4:d9:d3:a2:52:0f:
         a0:56:ef:27
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUFl2Iykf1LPfskGkpNcPFncj70yUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOENEMkU3NEMwQjUxNDE0ODI1Rjk1QzlEM0Q0MzJBREQ1
Njg5Njc1MTAeFw0yNTAzMjIwOTU0MjNaFw0yNjAzMjEwOTU5MjNaMDMxMTAvBgNV
BAMTKDEzREMxQUVEOTFDN0JFOEEwRkE5Mjk2NUM2MDM2ODQ4MTlFQjU3RjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSIDrVW5OPCgOIm+W4/HBhO+x6
n8wZ3hEXSdq/mD5dKIOQBJZOKIHzTaHq1LgVUDgsAWVpLZdnFTQuAxKiRo93NS/C
kjmWpdY12lzf5zhdSOXo1Sai0U9vKUNj7sAKgTlExGwxBI6eYYQJDIgCaD7CDtPL
jf6s5H08xt3pq5QxCpvw+27thIBKwxycMulBSbpepmac36LuT1Huz5MBXArFs0fu
jBWgwQCrq3A4S4HQuw/rBxQY8b+Gxw0Prxr9gzK/oS3G0XykxX9zq/x/XVhBZoCi
qrKPviEttnrJltaTb1x4IWyUmQSMGZJymomMt8W7gOgvdgNfEg+1fgn78o+JAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUE9wa7ZHHvooPqSllxgNoSBnrV/EwHwYDVR0j
BBgwFoAUjNLnTAtRQUgl+VydPUMq3VaJZ1EwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNXVFTmlIRFl3Vnk0REFBZVFneEw0bkx0c3JxbkhhZlBEVnczS1l3dXdK
TDUvMS84Q0QyRTc0QzBCNTE0MTQ4MjVGOTVDOUQzRDQzMkFERDU2ODk2NzUxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzhDRDJFNzRDMEI1MTQxNDgy
NUY5NUM5RDNENDMyQURENTY4OTY3NTEuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzV1RU5pSERZd1Z5NERBQWVRZ3hMNG5MdHNycW5IYWZQRFZ3M0tZd3V3Skw1LzEv
MzEzOTMxMmUzMjM0MzEyZTMxMzQzNzJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzYzMjM3MzgzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAL/xkzANBgkqhkiG9w0BAQsFAAOCAQEAfZZu
Pc8YkezDaqYtKpgtDXsD9c1k2Ncr38q9gXiZItEaZQOsBwqYVyeOp0hY1HRyxCZV
ffFuhJlnGsZ3CAoB86FefYIo5NpMbAGP/BS+WsWXIJefhCTvVRdk9ptWumWedlGg
N5wlGKER6wgmo6tczMVfY5sxeWbhky8qNugNWd/DsJ1YPw6Rz99aMq31ldc+a7/o
D6hFBJ7A1XHCa8MHqVTZ2s+yocIxUECnnoXk6IT3eTMTW1uwMvu+lycayUQdYX6d
2kALQ/mdf06eGj2quVyF2XpEwXcUcKldSdwlWBra709Hv16f7py3hn2LcaLh3dE4
FwWDpNnTolIPoFbvJw==
-----END CERTIFICATE-----
Generated at Sun Apr 6 05:28:47 2025 by rpki-client