Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6vPVV8Cuz1XC7HGrSkbWnjsQQ3Vg4kwdqdbjjuApxPsV/0/3230312e3135302e3132362e302f32332d3233203d3e203631383736.roa
File:                     3230312e3135302e3132362e302f32332d3233203d3e203631383736.roa (raw, json)
Hash identifier:          X+j7TFrVBsxwDKrW/5irjs/OaOYZIIg0TWAxzbyMC8k=
Subject key identifier:   FD:E3:C0:93:A0:78:49:E2:04:04:5C:59:1D:F7:EA:23:A0:5F:A2:53
Certificate issuer:       /CN=4FD2257689EE83DB094839D2005FC336CC9380AC
Certificate serial:       36977E9EBB6695CF03E751C4C3EE928F4A4FE622
Authority key identifier: 4F:D2:25:76:89:EE:83:DB:09:48:39:D2:00:5F:C3:36:CC:93:80:AC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4FD2257689EE83DB094839D2005FC336CC9380AC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6vPVV8Cuz1XC7HGrSkbWnjsQQ3Vg4kwdqdbjjuApxPsV/0/3230312e3135302e3132362e302f32332d3233203d3e203631383736.roa
Signing time:             Tue 21 Jan 2025 16:50:07 +0000
ROA not before:           Tue 21 Jan 2025 16:45:07 +0000
ROA not after:            Tue 20 Jan 2026 16:50:07 +0000
asID:                     61876
IP address blocks:        201.150.126.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:97:7e:9e:bb:66:95:cf:03:e7:51:c4:c3:ee:92:8f:4a:4f:e6:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4FD2257689EE83DB094839D2005FC336CC9380AC
        Validity
            Not Before: Jan 21 16:45:07 2025 GMT
            Not After : Jan 20 16:50:07 2026 GMT
        Subject: CN=FDE3C093A07849E204045C591DF7EA23A05FA253
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:74:22:bd:4d:92:01:d6:63:b6:e5:ec:2c:77:
                    98:02:df:20:af:6a:8f:99:ee:9c:d1:55:f0:62:ae:
                    0c:1e:c8:a9:09:b6:e7:0d:9f:8e:ce:59:61:c6:f8:
                    aa:87:46:44:d3:37:a7:9b:bf:6a:dc:98:48:6f:1b:
                    8f:bf:ae:41:27:d3:c6:9f:33:1f:0b:f4:99:63:2f:
                    81:f5:53:c3:a2:10:c2:8a:c3:58:c5:75:cf:4e:ad:
                    28:59:11:b8:62:fa:04:2c:ef:1b:91:3d:bb:3e:4e:
                    5c:62:18:2c:51:02:03:26:3f:64:cf:92:bf:56:69:
                    2c:7f:a0:8d:9a:eb:95:e9:23:3a:25:58:32:81:4f:
                    7c:a8:4e:8d:cc:29:1c:3e:38:1f:8a:a9:52:95:88:
                    be:8d:4b:71:45:ab:b0:0c:b2:63:c3:07:85:ea:80:
                    47:58:58:43:10:ad:df:4c:80:1a:bd:9e:e6:0d:96:
                    24:dd:fd:5d:60:02:dd:aa:62:d1:34:50:d2:81:76:
                    54:f4:9b:b6:26:0a:74:bc:92:7f:02:6c:d0:27:af:
                    3b:ad:28:56:d0:7b:ee:83:03:53:d9:3f:b4:88:55:
                    07:7c:1c:3c:36:d4:35:a9:50:83:7b:19:e0:ae:9f:
                    41:50:d2:24:2d:8f:11:79:11:80:5b:21:b5:e2:df:
                    b8:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:E3:C0:93:A0:78:49:E2:04:04:5C:59:1D:F7:EA:23:A0:5F:A2:53
            X509v3 Authority Key Identifier:
                keyid:4F:D2:25:76:89:EE:83:DB:09:48:39:D2:00:5F:C3:36:CC:93:80:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6vPVV8Cuz1XC7HGrSkbWnjsQQ3Vg4kwdqdbjjuApxPsV/0/4FD2257689EE83DB094839D2005FC336CC9380AC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4FD2257689EE83DB094839D2005FC336CC9380AC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6vPVV8Cuz1XC7HGrSkbWnjsQQ3Vg4kwdqdbjjuApxPsV/0/3230312e3135302e3132362e302f32332d3233203d3e203631383736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.150.126.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3b:33:ff:2c:22:bd:3d:b6:58:62:0b:4b:3e:e0:a5:55:99:b1:
         4d:1d:23:6e:f0:fb:45:f4:22:c3:06:fa:f8:26:4e:9a:6a:c2:
         6f:0b:e9:01:3e:c3:5d:49:da:7a:e7:99:c2:4a:fa:ef:d3:ed:
         f7:8d:d0:89:07:77:09:d4:39:3b:52:b2:db:8d:89:38:2c:76:
         7e:b5:79:b7:f5:c2:37:01:de:2c:dd:24:96:7f:aa:fe:56:07:
         eb:26:eb:fb:09:ff:2b:a7:39:b4:73:94:ad:13:1e:fb:ad:5d:
         54:12:e3:97:c5:1a:3d:32:d2:77:f9:f3:7f:54:67:a1:f4:4c:
         e0:d4:22:70:8c:07:8e:14:ea:19:72:6d:be:93:0b:41:04:ae:
         bf:86:47:d4:cd:c5:9f:3f:ea:5b:d5:f0:f3:26:e1:89:14:a3:
         81:51:b3:8e:ed:3a:58:54:4e:8d:a0:3f:68:52:d5:b1:ae:05:
         96:32:68:de:3f:16:bf:fb:14:60:e3:31:b9:df:ca:05:dd:78:
         06:89:4b:08:cf:22:94:a3:87:dc:f6:f3:b8:ad:3d:71:7f:94:
         83:f8:bc:26:77:74:58:ab:42:13:f9:0d:18:01:46:11:5b:6b:
         27:42:0c:24:b7:e7:2c:0b:21:15:3d:ab:6d:16:62:b1:2e:fa:
         ef:43:dd:eb
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUNpd+nrtmlc8D51HEw+6Sj0pP5iIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNEZEMjI1NzY4OUVFODNEQjA5NDgzOUQyMDA1RkMzMzZD
QzkzODBBQzAeFw0yNTAxMjExNjQ1MDdaFw0yNjAxMjAxNjUwMDdaMDMxMTAvBgNV
BAMTKEZERTNDMDkzQTA3ODQ5RTIwNDA0NUM1OTFERjdFQTIzQTA1RkEyNTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjdCK9TZIB1mO25ewsd5gC3yCv
ao+Z7pzRVfBirgweyKkJtucNn47OWWHG+KqHRkTTN6ebv2rcmEhvG4+/rkEn08af
Mx8L9JljL4H1U8OiEMKKw1jFdc9OrShZEbhi+gQs7xuRPbs+TlxiGCxRAgMmP2TP
kr9WaSx/oI2a65XpIzolWDKBT3yoTo3MKRw+OB+KqVKViL6NS3FFq7AMsmPDB4Xq
gEdYWEMQrd9MgBq9nuYNliTd/V1gAt2qYtE0UNKBdlT0m7YmCnS8kn8CbNAnrzut
KFbQe+6DA1PZP7SIVQd8HDw21DWpUIN7GeCun0FQ0iQtjxF5EYBbIbXi37ghAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU/ePAk6B4SeIEBFxZHffqI6BfolMwHwYDVR0j
BBgwFoAUT9Ildonug9sJSDnSAF/DNsyTgKwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNnZQVlY4Q3V6MVhDN0hHclNrYlduanNRUTNWZzRrd2RxZGJqanVBcHhQ
c1YvMC80RkQyMjU3Njg5RUU4M0RCMDk0ODM5RDIwMDVGQzMzNkNDOTM4MEFDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzRGRDIyNTc2ODlFRTgzREIw
OTQ4MzlEMjAwNUZDMzM2Q0M5MzgwQUMuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzZ2UFZWOEN1ejFYQzdIR3JTa2JXbmpzUVEzVmc0a3dkcWRiamp1QXB4UHNWLzAv
MzIzMDMxMmUzMTM1MzAyZTMxMzIzNjJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDM2
MzEzODM3MzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAHJln4wDQYJKoZIhvcNAQELBQADggEBADsz/ywi
vT22WGILSz7gpVWZsU0dI27w+0X0IsMG+vgmTppqwm8L6QE+w11J2nrnmcJK+u/T
7feN0IkHdwnUOTtSstuNiTgsdn61ebf1wjcB3izdJJZ/qv5WB+sm6/sJ/yunObRz
lK0THvutXVQS45fFGj0y0nf5839UZ6H0TODUInCMB44U6hlybb6TC0EErr+GR9TN
xZ8/6lvV8PMm4YkUo4FRs47tOlhUTo2gP2hS1bGuBZYyaN4/Fr/7FGDjMbnfygXd
eAaJSwjPIpSjh9z287itPXF/lIP4vCZ3dFirQhP5DRgBRhFbaydCDCS35ywLIRU9
q20WYrEu+u9D3es=
-----END CERTIFICATE-----
Generated at Mon Apr 7 11:31:42 2025 by rpki-client