Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/716UF5rQjRhvd29jPs1HtdFNrwjVdAEdSCZoSD6ciimZ/0/3139302e3131312e3135312e302f32342d3234203d3e20323730343239.roa
File:                     3139302e3131312e3135312e302f32342d3234203d3e20323730343239.roa (raw, json)
Hash identifier:          48QjQMGV2x5TbSQS8PrErwjtCfYhCpT1gL7lc20r+xY=
Subject key identifier:   25:8E:2B:D2:86:55:62:9F:6B:B4:DD:B7:AC:49:82:7F:26:DA:AE:69
Certificate issuer:       /CN=7EC0B807856399E82A913F6CC7DF0DF3D2A170CB
Certificate serial:       7AC001DFE55ED15AB44E8248F33B78B5E6C21E15
Authority key identifier: 7E:C0:B8:07:85:63:99:E8:2A:91:3F:6C:C7:DF:0D:F3:D2:A1:70:CB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7EC0B807856399E82A913F6CC7DF0DF3D2A170CB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/716UF5rQjRhvd29jPs1HtdFNrwjVdAEdSCZoSD6ciimZ/0/3139302e3131312e3135312e302f32342d3234203d3e20323730343239.roa
Signing time:             Fri 10 Jan 2025 19:15:20 +0000
ROA not before:           Fri 10 Jan 2025 19:10:20 +0000
ROA not after:            Fri 09 Jan 2026 19:15:20 +0000
asID:                     270429
IP address blocks:        190.111.151.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:c0:01:df:e5:5e:d1:5a:b4:4e:82:48:f3:3b:78:b5:e6:c2:1e:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7EC0B807856399E82A913F6CC7DF0DF3D2A170CB
        Validity
            Not Before: Jan 10 19:10:20 2025 GMT
            Not After : Jan  9 19:15:20 2026 GMT
        Subject: CN=258E2BD28655629F6BB4DDB7AC49827F26DAAE69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:4a:f3:80:2c:dc:8c:40:cb:17:17:b1:6c:87:
                    3e:ba:27:c2:2b:14:95:c2:b5:c8:00:72:f7:51:3e:
                    f4:73:e6:c2:cc:01:4a:dd:c9:90:bf:c4:52:83:e7:
                    3a:33:85:9a:be:c6:16:d0:a4:b8:14:56:cd:17:95:
                    78:d3:10:89:48:98:31:5f:c5:a2:ab:08:5c:71:fa:
                    0e:69:58:75:39:cc:e2:ef:4b:f6:00:d0:51:6a:e3:
                    24:14:2a:b4:1a:4a:76:bb:2e:f3:33:c6:3b:bd:40:
                    61:ab:8a:9a:60:d4:4d:5f:39:fa:4d:65:4d:ba:cd:
                    86:ca:ca:55:74:35:be:4c:ac:3c:03:81:e6:7c:5a:
                    f2:ce:d9:7b:1b:5c:96:53:e4:c2:0f:fc:19:81:dd:
                    e0:14:4a:9c:27:ec:76:2c:dd:dd:36:8a:a2:e6:3c:
                    ed:f1:c8:dd:ef:3e:ad:60:39:99:08:28:cd:8d:e7:
                    cf:99:3b:d3:eb:4d:3b:7a:96:d3:1a:91:6d:1e:67:
                    b8:85:42:f4:49:c3:4e:99:a9:fe:e4:c6:d5:b1:12:
                    68:b0:ff:5f:1a:8d:ae:d8:16:d0:40:43:2f:df:e6:
                    e0:25:c6:e7:69:18:1c:e4:49:90:98:54:ba:42:a8:
                    20:5d:0c:18:83:74:69:a2:78:c0:79:1b:93:0c:21:
                    fa:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:8E:2B:D2:86:55:62:9F:6B:B4:DD:B7:AC:49:82:7F:26:DA:AE:69
            X509v3 Authority Key Identifier:
                keyid:7E:C0:B8:07:85:63:99:E8:2A:91:3F:6C:C7:DF:0D:F3:D2:A1:70:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/716UF5rQjRhvd29jPs1HtdFNrwjVdAEdSCZoSD6ciimZ/0/7EC0B807856399E82A913F6CC7DF0DF3D2A170CB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7EC0B807856399E82A913F6CC7DF0DF3D2A170CB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/716UF5rQjRhvd29jPs1HtdFNrwjVdAEdSCZoSD6ciimZ/0/3139302e3131312e3135312e302f32342d3234203d3e20323730343239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.111.151.0/24

    Signature Algorithm: sha256WithRSAEncryption
         70:94:a7:8f:a3:98:8e:a6:3b:38:0c:18:a7:c5:dd:de:94:af:
         fc:77:a0:00:35:e7:51:a5:85:b6:e6:b3:dc:b1:7c:8f:81:34:
         b5:59:80:e6:8f:0b:bb:dc:b9:2c:16:52:b4:00:18:6a:94:52:
         af:d5:b1:b2:eb:9a:21:19:ed:82:43:eb:dc:80:5b:75:ef:e1:
         50:d1:28:1e:0e:17:ff:2c:1b:05:8f:b2:1b:f2:37:a2:39:db:
         83:df:3e:d9:51:e3:b6:e9:c6:6c:21:8d:48:e6:cf:7a:d6:02:
         ea:47:ef:97:51:e0:9f:96:b8:97:4f:fe:76:8e:fa:7f:18:0b:
         d1:5d:b2:eb:96:ab:58:99:8d:21:2a:58:9f:96:da:4b:7c:39:
         02:c1:5f:4b:45:97:53:b7:bc:38:11:f7:47:dc:49:41:89:11:
         5f:96:ac:df:9d:be:e5:17:22:b9:a1:9d:d3:0e:9b:c4:30:40:
         ec:97:6f:23:f4:04:22:cf:0a:c7:38:95:63:65:6b:66:b6:82:
         78:da:eb:f4:fa:af:8d:e4:f5:a2:4d:c9:a2:28:7b:dc:38:8b:
         3f:45:08:21:36:ec:6a:d1:67:3a:08:18:d4:83:81:a0:f3:e3:
         dd:c7:df:38:94:23:6b:c6:fe:84:88:4f:ae:7d:a5:99:ad:61:
         50:5b:ce:17
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUesAB3+Ve0Vq0ToJI8zt4tebCHhUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0VDMEI4MDc4NTYzOTlFODJBOTEzRjZDQzdERjBERjNE
MkExNzBDQjAeFw0yNTAxMTAxOTEwMjBaFw0yNjAxMDkxOTE1MjBaMDMxMTAvBgNV
BAMTKDI1OEUyQkQyODY1NTYyOUY2QkI0RERCN0FDNDk4MjdGMjZEQUFFNjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDASvOALNyMQMsXF7Fshz66J8Ir
FJXCtcgAcvdRPvRz5sLMAUrdyZC/xFKD5zozhZq+xhbQpLgUVs0XlXjTEIlImDFf
xaKrCFxx+g5pWHU5zOLvS/YA0FFq4yQUKrQaSna7LvMzxju9QGGrippg1E1fOfpN
ZU26zYbKylV0Nb5MrDwDgeZ8WvLO2XsbXJZT5MIP/BmB3eAUSpwn7HYs3d02iqLm
PO3xyN3vPq1gOZkIKM2N58+ZO9PrTTt6ltMakW0eZ7iFQvRJw06Zqf7kxtWxEmiw
/18aja7YFtBAQy/f5uAlxudpGBzkSZCYVLpCqCBdDBiDdGmieMB5G5MMIfrpAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUJY4r0oZVYp9rtN23rEmCfybarmkwHwYDVR0j
BBgwFoAUfsC4B4VjmegqkT9sx98N89KhcMswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNzE2VUY1clFqUmh2ZDI5alBzMUh0ZEZOcndqVmRBRWRTQ1pvU0Q2Y2lp
bVovMC83RUMwQjgwNzg1NjM5OUU4MkE5MTNGNkNDN0RGMERGM0QyQTE3MENCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzdFQzBCODA3ODU2Mzk5RTgy
QTkxM0Y2Q0M3REYwREYzRDJBMTcwQ0IuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzcxNlVGNXJRalJodmQyOWpQczFIdGRGTnJ3alZkQUVkU0Nab1NENmNpaW1aLzAv
MzEzOTMwMmUzMTMxMzEyZTMxMzUzMTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzczMDM0MzIzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAL5vlzANBgkqhkiG9w0BAQsFAAOCAQEAcJSn
j6OYjqY7OAwYp8Xd3pSv/HegADXnUaWFtuaz3LF8j4E0tVmA5o8Lu9y5LBZStAAY
apRSr9WxsuuaIRntgkPr3IBbde/hUNEoHg4X/ywbBY+yG/I3ojnbg98+2VHjtunG
bCGNSObPetYC6kfvl1Hgn5a4l0/+do76fxgL0V2y65arWJmNISpYn5baS3w5AsFf
S0WXU7e8OBH3R9xJQYkRX5as352+5RciuaGd0w6bxDBA7JdvI/QEIs8KxziVY2Vr
ZraCeNrr9PqvjeT1ok3Joih73DiLP0UIITbsatFnOggY1IOBoPPj3cffOJQja8b+
hIhPrn2lma1hUFvOFw==
-----END CERTIFICATE-----
Generated at Sun Apr 6 09:07:41 2025 by rpki-client