Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7bjjstDsds7QtCcrdgezTDBtf1ZcUUaDKN5b8MT1Q6TA/1/3132382e3230312e3135362e302f32322d3232203d3e20323636363335.roa
File:                     3132382e3230312e3135362e302f32322d3232203d3e20323636363335.roa (raw, json)
Hash identifier:          my89UvNahtQPQ7o0WjVwZjF73KKAyppaCecv0EsdPkQ=
Subject key identifier:   2C:4F:A3:4E:1C:BC:BC:0F:70:29:CE:31:C0:0D:13:09:95:80:E6:20
Certificate issuer:       /CN=EA18A86A9BF3C8CF2C923D41C4489A004392ABFB
Certificate serial:       180DE8E1ED01BC3CDFAC53E19EA5069C85A3E737
Authority key identifier: EA:18:A8:6A:9B:F3:C8:CF:2C:92:3D:41:C4:48:9A:00:43:92:AB:FB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EA18A86A9BF3C8CF2C923D41C4489A004392ABFB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7bjjstDsds7QtCcrdgezTDBtf1ZcUUaDKN5b8MT1Q6TA/1/3132382e3230312e3135362e302f32322d3232203d3e20323636363335.roa
Signing time:             Thu 06 Mar 2025 02:52:44 +0000
ROA not before:           Thu 06 Mar 2025 02:47:44 +0000
ROA not after:            Thu 05 Mar 2026 02:52:44 +0000
asID:                     266635
IP address blocks:        128.201.156.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:0d:e8:e1:ed:01:bc:3c:df:ac:53:e1:9e:a5:06:9c:85:a3:e7:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EA18A86A9BF3C8CF2C923D41C4489A004392ABFB
        Validity
            Not Before: Mar  6 02:47:44 2025 GMT
            Not After : Mar  5 02:52:44 2026 GMT
        Subject: CN=2C4FA34E1CBCBC0F7029CE31C00D13099580E620
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:b3:d0:ea:08:c2:d9:86:b3:dc:f3:8a:ea:34:
                    fe:dd:08:16:a2:5e:87:81:54:ec:cc:aa:c1:a4:3e:
                    f5:14:e8:f0:a0:6e:8d:0a:89:d2:3b:89:b2:6a:e9:
                    e8:b6:e2:6f:33:c0:7c:71:bf:28:8e:26:e7:26:33:
                    41:c5:ec:a7:84:46:a6:68:4f:d1:91:2e:fa:bc:b8:
                    c2:25:4e:39:a2:7b:ab:95:ed:39:c1:5c:80:6e:60:
                    2a:96:ff:1f:ef:ea:79:05:eb:a7:a9:28:10:ec:a4:
                    f3:ff:72:ea:2d:ea:07:8b:65:db:dd:cf:96:08:f4:
                    fb:ed:98:e1:48:dd:18:5a:f4:b8:91:05:68:98:b6:
                    5c:7b:fa:85:2c:e5:e3:68:3b:40:46:c7:c0:fe:45:
                    7f:85:de:47:a3:84:f2:51:a4:10:c4:d4:34:54:24:
                    6a:45:12:26:27:1a:92:66:16:eb:15:6f:d3:ef:3f:
                    19:63:64:a9:e5:7b:e9:1d:36:9a:92:93:48:ba:b5:
                    90:89:05:41:c4:e3:ed:93:b7:d0:79:9c:6c:d4:e1:
                    5c:71:8d:cb:1a:d0:da:b9:f3:1b:74:62:fc:7e:c9:
                    46:02:d1:cb:69:74:a8:9a:19:4a:49:1e:d7:0c:64:
                    46:38:77:ed:41:27:3a:ba:f5:d4:11:4e:02:5f:a9:
                    42:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:4F:A3:4E:1C:BC:BC:0F:70:29:CE:31:C0:0D:13:09:95:80:E6:20
            X509v3 Authority Key Identifier:
                keyid:EA:18:A8:6A:9B:F3:C8:CF:2C:92:3D:41:C4:48:9A:00:43:92:AB:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7bjjstDsds7QtCcrdgezTDBtf1ZcUUaDKN5b8MT1Q6TA/1/EA18A86A9BF3C8CF2C923D41C4489A004392ABFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EA18A86A9BF3C8CF2C923D41C4489A004392ABFB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7bjjstDsds7QtCcrdgezTDBtf1ZcUUaDKN5b8MT1Q6TA/1/3132382e3230312e3135362e302f32322d3232203d3e20323636363335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.201.156.0/22

    Signature Algorithm: sha256WithRSAEncryption
         45:a7:55:14:8a:cd:7c:2c:3f:68:74:5b:25:6d:93:3a:a6:db:
         8c:6b:6b:12:f8:ba:59:aa:25:62:d4:5b:2c:62:88:83:0b:70:
         c0:62:30:c3:ff:96:45:a0:e4:c3:6e:24:5a:85:91:80:82:b2:
         ac:ac:26:3c:f9:74:4b:71:aa:9c:f6:0d:62:75:d6:70:bb:a1:
         3b:c4:50:19:ee:81:99:9e:88:07:88:8d:cd:11:76:f9:e3:19:
         f7:de:af:9a:29:e5:8d:c7:36:75:40:6c:77:1f:1f:57:3c:9e:
         ec:86:6a:f3:92:bb:3e:f9:b7:90:cf:ae:26:d0:ff:3b:42:f8:
         7e:7d:50:42:bd:12:bf:96:f2:ee:83:ea:0a:3b:83:fe:36:61:
         c4:fc:d4:3f:72:50:30:8c:f8:01:b5:53:3f:d9:3e:95:f4:4b:
         ee:7d:39:c3:da:d9:8b:e0:f1:17:61:ee:2b:5d:b8:d3:e4:88:
         a6:90:6f:2b:c7:82:d3:30:ab:29:53:9b:9a:9e:c2:0f:da:54:
         55:00:c5:ef:bb:ff:26:9f:17:93:ec:92:81:e7:bb:64:e6:c3:
         3d:de:af:cd:91:f9:cf:a3:78:76:6b:10:e0:ab:25:67:4b:a8:
         ba:06:af:29:32:7d:a6:d6:82:53:09:c0:5d:58:2c:da:4b:2f:
         ea:d9:5a:24
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUGA3o4e0BvDzfrFPhnqUGnIWj5zcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUExOEE4NkE5QkYzQzhDRjJDOTIzRDQxQzQ0ODlBMDA0
MzkyQUJGQjAeFw0yNTAzMDYwMjQ3NDRaFw0yNjAzMDUwMjUyNDRaMDMxMTAvBgNV
BAMTKDJDNEZBMzRFMUNCQ0JDMEY3MDI5Q0UzMUMwMEQxMzA5OTU4MEU2MjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIs9DqCMLZhrPc84rqNP7dCBai
XoeBVOzMqsGkPvUU6PCgbo0KidI7ibJq6ei24m8zwHxxvyiOJucmM0HF7KeERqZo
T9GRLvq8uMIlTjmie6uV7TnBXIBuYCqW/x/v6nkF66epKBDspPP/cuot6geLZdvd
z5YI9PvtmOFI3Rha9LiRBWiYtlx7+oUs5eNoO0BGx8D+RX+F3kejhPJRpBDE1DRU
JGpFEiYnGpJmFusVb9PvPxljZKnle+kdNpqSk0i6tZCJBUHE4+2Tt9B5nGzU4Vxx
jcsa0Nq58xt0Yvx+yUYC0ctpdKiaGUpJHtcMZEY4d+1BJzq69dQRTgJfqULXAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQULE+jThy8vA9wKc4xwA0TCZWA5iAwHwYDVR0j
BBgwFoAU6hioapvzyM8skj1BxEiaAEOSq/swDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vN2JqanN0RHNkczdRdENjcmRnZXpUREJ0ZjFaY1VVYURLTjViOE1UMVE2
VEEvMS9FQTE4QTg2QTlCRjNDOENGMkM5MjNENDFDNDQ4OUEwMDQzOTJBQkZCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0VBMThBODZBOUJGM0M4Q0Yy
QzkyM0Q0MUM0NDg5QTAwNDM5MkFCRkIuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzdiampzdERzZHM3UXRDY3JkZ2V6VERCdGYxWmNVVWFES041YjhNVDFRNlRBLzEv
MzEzMjM4MmUzMjMwMzEyZTMxMzUzNjJlMzAyZjMyMzIyZDMyMzIyMDNkM2UyMDMy
MzYzNjM2MzMzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAoDJnDANBgkqhkiG9w0BAQsFAAOCAQEARadV
FIrNfCw/aHRbJW2TOqbbjGtrEvi6WaolYtRbLGKIgwtwwGIww/+WRaDkw24kWoWR
gIKyrKwmPPl0S3GqnPYNYnXWcLuhO8RQGe6BmZ6IB4iNzRF2+eMZ996vminljcc2
dUBsdx8fVzye7IZq85K7Pvm3kM+uJtD/O0L4fn1QQr0Sv5by7oPqCjuD/jZhxPzU
P3JQMIz4AbVTP9k+lfRL7n05w9rZi+DxF2HuK1240+SIppBvK8eC0zCrKVObmp7C
D9pUVQDF77v/Jp8Xk+ySgee7ZObDPd6vzZH5z6N4dmsQ4KslZ0uougavKTJ9ptaC
UwnAXVgs2ksv6tlaJA==
-----END CERTIFICATE-----
Generated at Mon Apr 7 02:56:52 2025 by rpki-client