Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7B2JLdDEsCMiaw3zkVkYANXL7CDxbaNzjWGnb62j8Kk7/0/3139312e372e3134342e302f32302d3234203d3e20323633333230.roa
File:                     3139312e372e3134342e302f32302d3234203d3e20323633333230.roa (raw, json)
Hash identifier:          wxoNDxntRn3hSoxXMZwjAZUZoNGSbajgZNT2mLpYu2k=
Subject key identifier:   3D:45:38:98:C1:A9:F9:55:92:4C:9C:CD:7B:DB:AE:75:90:C2:B6:FF
Certificate issuer:       /CN=403D1CC0FEEE423B90F653F1A6A71D104DE1AA56
Certificate serial:       4E71AC25C07789AD4EB7DBCA027772BE8DAD953A
Authority key identifier: 40:3D:1C:C0:FE:EE:42:3B:90:F6:53:F1:A6:A7:1D:10:4D:E1:AA:56
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/403D1CC0FEEE423B90F653F1A6A71D104DE1AA56.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7B2JLdDEsCMiaw3zkVkYANXL7CDxbaNzjWGnb62j8Kk7/0/3139312e372e3134342e302f32302d3234203d3e20323633333230.roa
Signing time:             Mon 06 Jan 2025 18:43:53 +0000
ROA not before:           Mon 06 Jan 2025 18:38:53 +0000
ROA not after:            Mon 05 Jan 2026 18:43:53 +0000
asID:                     263320
IP address blocks:        191.7.144.0/20 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:71:ac:25:c0:77:89:ad:4e:b7:db:ca:02:77:72:be:8d:ad:95:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=403D1CC0FEEE423B90F653F1A6A71D104DE1AA56
        Validity
            Not Before: Jan  6 18:38:53 2025 GMT
            Not After : Jan  5 18:43:53 2026 GMT
        Subject: CN=3D453898C1A9F955924C9CCD7BDBAE7590C2B6FF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:a6:43:fd:cc:4c:3d:c4:14:7c:e9:92:85:e6:
                    b1:f2:c2:39:06:42:09:78:55:5c:a3:a9:5f:32:1e:
                    55:ee:97:e4:9c:2b:46:bc:a4:b7:c0:9e:46:45:2d:
                    35:b0:33:0f:ec:7f:b4:ae:66:66:a3:72:c6:3a:76:
                    96:ca:f6:fc:e2:27:0b:63:d2:9d:a6:8e:da:27:59:
                    49:6f:ca:3a:2b:17:cd:53:c1:af:dd:c4:6f:93:aa:
                    e4:cd:e7:49:c6:f5:12:a6:75:45:22:50:88:35:6f:
                    0c:42:e9:c2:67:c9:c4:07:51:20:cb:4a:c9:dd:87:
                    f4:90:03:ea:d1:3d:b4:59:86:48:12:fd:ee:bf:34:
                    2e:1c:9d:79:ee:88:ee:a0:3d:90:14:e6:17:69:9a:
                    06:a1:04:66:79:72:a5:09:ae:bd:c4:cb:b8:d4:07:
                    6c:b0:09:80:c3:cf:e6:c8:ee:aa:bd:1e:4e:68:f6:
                    80:06:7f:43:70:2e:a6:75:c6:2a:09:43:38:19:f7:
                    1c:72:51:57:38:e0:57:66:15:e6:89:c7:f5:90:41:
                    df:4f:9c:82:b8:fb:1b:b0:31:7c:72:f2:93:9e:f2:
                    5f:dc:07:52:30:17:dc:bf:2f:90:eb:7b:31:60:1e:
                    16:81:64:95:0b:1f:14:de:9b:c3:25:1f:fb:80:1e:
                    5e:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:45:38:98:C1:A9:F9:55:92:4C:9C:CD:7B:DB:AE:75:90:C2:B6:FF
            X509v3 Authority Key Identifier:
                keyid:40:3D:1C:C0:FE:EE:42:3B:90:F6:53:F1:A6:A7:1D:10:4D:E1:AA:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7B2JLdDEsCMiaw3zkVkYANXL7CDxbaNzjWGnb62j8Kk7/0/403D1CC0FEEE423B90F653F1A6A71D104DE1AA56.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/403D1CC0FEEE423B90F653F1A6A71D104DE1AA56.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7B2JLdDEsCMiaw3zkVkYANXL7CDxbaNzjWGnb62j8Kk7/0/3139312e372e3134342e302f32302d3234203d3e20323633333230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.7.144.0/20

    Signature Algorithm: sha256WithRSAEncryption
         c8:52:1d:78:67:7a:ce:05:ae:c2:16:0f:68:5f:e9:6f:23:0f:
         bc:78:c4:01:f1:33:96:c7:46:63:6f:d3:da:c6:d9:4d:9a:47:
         96:41:46:96:20:b1:a7:b8:73:41:33:4c:5e:95:90:79:2d:39:
         81:48:9c:b5:ec:9f:89:9b:c5:9a:75:c7:72:1f:97:82:49:85:
         3e:93:1a:ed:52:4e:56:e6:65:d3:fb:2b:94:62:bb:9d:fc:6d:
         f6:2a:61:76:f2:56:d7:ac:c3:74:b8:f6:94:bb:8c:9e:e8:da:
         3d:03:de:bd:70:9c:07:0f:0f:27:46:c7:41:88:fe:d7:ea:f9:
         76:cc:eb:72:31:55:81:b1:45:b7:bc:24:fa:a2:23:bd:c2:79:
         6c:fe:79:9d:86:6a:06:0a:f9:ce:96:60:f8:ee:9d:8e:a3:41:
         5a:18:7c:d7:f3:52:f0:62:82:3a:47:0e:eb:f5:fd:71:e4:e4:
         8b:8e:0d:3b:60:24:2d:03:75:0f:e8:c5:bd:f5:3a:b4:29:0b:
         94:71:84:96:b2:17:c2:56:c9:94:66:d9:c9:6b:58:c9:d1:ee:
         3c:60:1c:9f:0c:52:b8:c7:14:03:bc:e7:c5:f2:a6:c9:21:91:
         f9:e7:c4:ad:6f:f6:3f:fa:c4:7e:18:6d:6f:35:0f:e8:e9:f0:
         de:0b:9d:da
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUTnGsJcB3ia1Ot9vKAndyvo2tlTowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDAzRDFDQzBGRUVFNDIzQjkwRjY1M0YxQTZBNzFEMTA0
REUxQUE1NjAeFw0yNTAxMDYxODM4NTNaFw0yNjAxMDUxODQzNTNaMDMxMTAvBgNV
BAMTKDNENDUzODk4QzFBOUY5NTU5MjRDOUNDRDdCREJBRTc1OTBDMkI2RkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcpkP9zEw9xBR86ZKF5rHywjkG
Qgl4VVyjqV8yHlXul+ScK0a8pLfAnkZFLTWwMw/sf7SuZmajcsY6dpbK9vziJwtj
0p2mjtonWUlvyjorF81Twa/dxG+TquTN50nG9RKmdUUiUIg1bwxC6cJnycQHUSDL
Ssndh/SQA+rRPbRZhkgS/e6/NC4cnXnuiO6gPZAU5hdpmgahBGZ5cqUJrr3Ey7jU
B2ywCYDDz+bI7qq9Hk5o9oAGf0NwLqZ1xioJQzgZ9xxyUVc44FdmFeaJx/WQQd9P
nIK4+xuwMXxy8pOe8l/cB1IwF9y/L5DrezFgHhaBZJULHxTem8MlH/uAHl7tAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUPUU4mMGp+VWSTJzNe9uudZDCtv8wHwYDVR0j
BBgwFoAUQD0cwP7uQjuQ9lPxpqcdEE3hqlYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vN0IySkxkREVzQ01pYXczemtWa1lBTlhMN0NEeGJhTnpqV0duYjYyajhL
azcvMC80MDNEMUNDMEZFRUU0MjNCOTBGNjUzRjFBNkE3MUQxMDRERTFBQTU2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQwM0QxQ0MwRkVFRTQyM0I5
MEY2NTNGMUE2QTcxRDEwNERFMUFBNTYuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzdCMkpMZERFc0NNaWF3M3prVmtZQU5YTDdDRHhiYU56aldHbmI2Mmo4S2s3LzAv
MzEzOTMxMmUzNzJlMzEzNDM0MmUzMDJmMzIzMDJkMzIzNDIwM2QzZTIwMzIzNjMz
MzMzMjMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQEvweQMA0GCSqGSIb3DQEBCwUAA4IBAQDIUh14Z3rO
Ba7CFg9oX+lvIw+8eMQB8TOWx0Zjb9PaxtlNmkeWQUaWILGnuHNBM0xelZB5LTmB
SJy17J+Jm8WadcdyH5eCSYU+kxrtUk5W5mXT+yuUYrud/G32KmF28lbXrMN0uPaU
u4ye6No9A969cJwHDw8nRsdBiP7X6vl2zOtyMVWBsUW3vCT6oiO9wnls/nmdhmoG
CvnOlmD47p2Oo0FaGHzX81LwYoI6Rw7r9f1x5OSLjg07YCQtA3UP6MW99Tq0KQuU
cYSWshfCVsmUZtnJa1jJ0e48YByfDFK4xxQDvOfF8qbJIZH558Stb/Y/+sR+GG1v
NQ/o6fDeC53a
-----END CERTIFICATE-----
Generated at Fri Apr 11 16:19:35 2025 by rpki-client