Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/84cPB6KkxcR9XZoiL8pho3aYpJ1durKEsGHDjpHbtG7c/0/3133322e3235352e34372e302f32342d3234203d3e20323637333838.roa
File:                     3133322e3235352e34372e302f32342d3234203d3e20323637333838.roa (raw, json)
Hash identifier:          TT3jGuKV2AzDdpnW1KHM+J9UzONDaPtvyoUy1KcZ4zQ=
Subject key identifier:   57:6F:38:AE:18:A6:06:AC:D9:C7:1D:D6:ED:29:03:01:C2:25:A9:12
Certificate issuer:       /CN=4D6D5A5430B6F5F08B2B00A06B91B9C4BABDAA52
Certificate serial:       68EEBCFB36FB7A74652160C24CE389DCA72AE12F
Authority key identifier: 4D:6D:5A:54:30:B6:F5:F0:8B:2B:00:A0:6B:91:B9:C4:BA:BD:AA:52
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4D6D5A5430B6F5F08B2B00A06B91B9C4BABDAA52.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/84cPB6KkxcR9XZoiL8pho3aYpJ1durKEsGHDjpHbtG7c/0/3133322e3235352e34372e302f32342d3234203d3e20323637333838.roa
Signing time:             Mon 28 Oct 2024 14:40:58 +0000
ROA not before:           Mon 28 Oct 2024 14:35:58 +0000
ROA not after:            Mon 27 Oct 2025 14:40:58 +0000
asID:                     267388
IP address blocks:        132.255.47.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:ee:bc:fb:36:fb:7a:74:65:21:60:c2:4c:e3:89:dc:a7:2a:e1:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4D6D5A5430B6F5F08B2B00A06B91B9C4BABDAA52
        Validity
            Not Before: Oct 28 14:35:58 2024 GMT
            Not After : Oct 27 14:40:58 2025 GMT
        Subject: CN=576F38AE18A606ACD9C71DD6ED290301C225A912
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:2c:a1:d6:5e:e6:a4:ee:f1:f4:bc:37:7f:0a:
                    ee:ab:89:de:c5:12:3a:91:24:6c:04:aa:3a:50:2a:
                    f8:26:3e:75:d8:0d:a0:66:ba:ab:cb:c3:60:c7:e4:
                    05:29:bd:7e:8b:26:d0:99:b4:be:ad:ad:c6:e1:22:
                    c1:54:d2:4f:4d:dc:ad:33:ac:ce:de:a5:8d:ab:4a:
                    6c:16:1b:07:ea:91:7e:c6:3d:ed:cd:20:e1:14:ea:
                    af:9a:ed:db:ba:aa:1b:5e:cf:33:6e:93:29:33:1f:
                    73:70:9e:05:ce:81:7c:25:a9:ec:66:c5:b4:13:7f:
                    7c:9f:4b:19:99:91:33:45:a6:e1:95:2c:34:fd:56:
                    ba:80:77:a1:38:4a:b1:71:5b:e8:4b:8d:a5:2d:41:
                    0a:be:1a:a4:af:40:43:cc:14:8a:45:6a:f9:0a:d3:
                    5f:62:1b:ab:42:11:ee:09:b2:73:e1:e2:4f:17:8b:
                    b5:7a:7a:1b:11:b8:fb:c9:97:5e:7f:ec:96:eb:72:
                    fe:e4:4c:06:68:46:42:ea:6a:3c:b7:6c:05:2d:15:
                    ad:9f:12:45:04:06:2b:cf:fa:3d:2f:47:dc:53:e2:
                    ce:1b:d8:d9:c8:40:4d:1d:2e:13:1a:9a:39:7f:0f:
                    77:a4:3d:20:21:0f:bd:09:a9:b2:db:79:34:41:4d:
                    e4:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:6F:38:AE:18:A6:06:AC:D9:C7:1D:D6:ED:29:03:01:C2:25:A9:12
            X509v3 Authority Key Identifier:
                keyid:4D:6D:5A:54:30:B6:F5:F0:8B:2B:00:A0:6B:91:B9:C4:BA:BD:AA:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/84cPB6KkxcR9XZoiL8pho3aYpJ1durKEsGHDjpHbtG7c/0/4D6D5A5430B6F5F08B2B00A06B91B9C4BABDAA52.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4D6D5A5430B6F5F08B2B00A06B91B9C4BABDAA52.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/84cPB6KkxcR9XZoiL8pho3aYpJ1durKEsGHDjpHbtG7c/0/3133322e3235352e34372e302f32342d3234203d3e20323637333838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  132.255.47.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7a:f1:d7:c0:0b:2d:93:b9:2d:da:cb:94:cd:1b:c0:2c:b7:21:
         c2:ae:49:0b:d1:6c:2a:39:42:71:01:b2:43:5d:92:5d:29:1d:
         99:d4:72:35:1b:1b:8f:b4:e0:47:b3:12:8e:7f:7e:7a:e7:7a:
         69:13:43:7f:18:c0:e0:9f:05:5a:b1:35:a5:26:4a:e8:6b:10:
         89:2a:02:4e:92:dc:8b:5d:f5:c4:c1:d7:16:6d:ae:2a:60:b8:
         3c:c0:15:d3:58:f7:68:fe:90:4e:20:46:53:49:ba:ae:cf:27:
         4a:d3:67:94:64:02:18:97:28:53:fe:ca:e2:b6:17:78:f6:0d:
         fe:b8:1c:52:67:0c:ce:d9:70:67:96:d6:08:7f:ee:da:ac:e2:
         5d:6f:5c:88:61:df:63:7f:98:a9:57:f0:09:37:00:26:75:83:
         c0:30:af:e1:0a:51:a4:c9:86:ce:77:44:b8:28:25:21:f8:e2:
         e9:e7:d4:b6:94:15:51:62:39:08:3b:25:54:33:a2:94:70:ed:
         0c:7e:af:4a:af:c1:a0:e7:46:6e:6c:0e:bc:0c:80:0e:18:5c:
         aa:a8:0d:d8:26:70:6c:44:7a:58:5c:2a:7d:ef:ff:6e:4a:18:
         2b:5d:c3:48:54:d9:43:a6:f9:90:c1:d1:d6:ca:c2:71:48:73:
         88:a0:ea:d2
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUaO68+zb7enRlIWDCTOOJ3Kcq4S8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNEQ2RDVBNTQzMEI2RjVGMDhCMkIwMEEwNkI5MUI5QzRC
QUJEQUE1MjAeFw0yNDEwMjgxNDM1NThaFw0yNTEwMjcxNDQwNThaMDMxMTAvBgNV
BAMTKDU3NkYzOEFFMThBNjA2QUNEOUM3MURENkVEMjkwMzAxQzIyNUE5MTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCTLKHWXuak7vH0vDd/Cu6rid7F
EjqRJGwEqjpQKvgmPnXYDaBmuqvLw2DH5AUpvX6LJtCZtL6trcbhIsFU0k9N3K0z
rM7epY2rSmwWGwfqkX7GPe3NIOEU6q+a7du6qhtezzNukykzH3NwngXOgXwlqexm
xbQTf3yfSxmZkTNFpuGVLDT9VrqAd6E4SrFxW+hLjaUtQQq+GqSvQEPMFIpFavkK
019iG6tCEe4JsnPh4k8Xi7V6ehsRuPvJl15/7Jbrcv7kTAZoRkLqajy3bAUtFa2f
EkUEBivP+j0vR9xT4s4b2NnIQE0dLhMamjl/D3ekPSAhD70JqbLbeTRBTeR7AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUV284rhimBqzZxx3W7SkDAcIlqRIwHwYDVR0j
BBgwFoAUTW1aVDC29fCLKwCga5G5xLq9qlIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vODRjUEI2S2t4Y1I5WFpvaUw4cGhvM2FZcEoxZHVyS0VzR0hEanBIYnRH
N2MvMC80RDZENUE1NDMwQjZGNUYwOEIyQjAwQTA2QjkxQjlDNEJBQkRBQTUyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzRENkQ1QTU0MzBCNkY1RjA4
QjJCMDBBMDZCOTFCOUM0QkFCREFBNTIuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
Lzg0Y1BCNktreGNSOVhab2lMOHBobzNhWXBKMWR1cktFc0dIRGpwSGJ0RzdjLzAv
MzEzMzMyMmUzMjM1MzUyZTM0MzcyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzczMzM4Mzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBACE/y8wDQYJKoZIhvcNAQELBQADggEBAHrx18AL
LZO5LdrLlM0bwCy3IcKuSQvRbCo5QnEBskNdkl0pHZnUcjUbG4+04EezEo5/fnrn
emkTQ38YwOCfBVqxNaUmSuhrEIkqAk6S3Itd9cTB1xZtripguDzAFdNY92j+kE4g
RlNJuq7PJ0rTZ5RkAhiXKFP+yuK2F3j2Df64HFJnDM7ZcGeW1gh/7tqs4l1vXIhh
32N/mKlX8Ak3ACZ1g8Awr+EKUaTJhs53RLgoJSH44unn1LaUFVFiOQg7JVQzopRw
7Qx+r0qvwaDnRm5sDrwMgA4YXKqoDdgmcGxEelhcKn3v/25KGCtdw0hU2UOm+ZDB
0dbKwnFIc4ig6tI=
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:10:35 2025 by rpki-client