Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/86FvZtDsydfEWa4vCj5kvwg1rWLmmZxXQU7FYRx86pnj/0/3138312e3139312e34382e302f32342d3234203d3e20323637343533.roa
File:                     3138312e3139312e34382e302f32342d3234203d3e20323637343533.roa (raw, json)
Hash identifier:          a0NKbWha9cecmgXHLMIvm18sgFpG70o5DFp67R671H4=
Subject key identifier:   DC:29:6D:4E:C4:CF:4D:E8:7A:06:DD:DE:06:F6:57:8F:15:02:08:C4
Certificate issuer:       /CN=FE2FB4044730F5FD718399AEBDC9295665F44072
Certificate serial:       554B46424E4FFF7943C01C61427CE28CE2B0C36B
Authority key identifier: FE:2F:B4:04:47:30:F5:FD:71:83:99:AE:BD:C9:29:56:65:F4:40:72
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FE2FB4044730F5FD718399AEBDC9295665F44072.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/86FvZtDsydfEWa4vCj5kvwg1rWLmmZxXQU7FYRx86pnj/0/3138312e3139312e34382e302f32342d3234203d3e20323637343533.roa
Signing time:             Tue 18 Mar 2025 17:04:15 +0000
ROA not before:           Tue 18 Mar 2025 16:59:15 +0000
ROA not after:            Tue 17 Mar 2026 17:04:15 +0000
asID:                     267453
IP address blocks:        181.191.48.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:4b:46:42:4e:4f:ff:79:43:c0:1c:61:42:7c:e2:8c:e2:b0:c3:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FE2FB4044730F5FD718399AEBDC9295665F44072
        Validity
            Not Before: Mar 18 16:59:15 2025 GMT
            Not After : Mar 17 17:04:15 2026 GMT
        Subject: CN=DC296D4EC4CF4DE87A06DDDE06F6578F150208C4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:a4:03:ed:c0:ca:62:b4:0a:1b:91:80:b3:c7:
                    e4:46:5f:c2:96:f3:04:0a:ba:c3:c2:33:95:22:86:
                    8b:96:46:ba:25:0d:03:13:c1:65:50:40:05:22:fe:
                    69:b8:d5:1f:1b:10:23:08:8f:5b:c1:bf:88:9c:b9:
                    2b:7d:a7:0b:bb:1a:09:e0:bc:f5:ef:c6:3b:b4:b0:
                    35:74:ae:5c:5c:9e:76:96:43:cf:9e:82:cc:fd:97:
                    71:fe:54:9f:5d:41:75:fa:32:72:fc:7d:83:0e:8e:
                    43:96:f0:bb:28:aa:b1:95:03:95:6d:95:86:ae:61:
                    4e:59:5d:9f:47:89:39:74:c7:57:24:e2:5d:0a:c9:
                    c7:ed:79:ae:21:c8:db:78:06:bb:12:11:b6:03:f0:
                    22:56:2a:93:3f:db:d7:ba:61:e4:14:59:d0:9e:90:
                    90:5a:f4:26:d5:7b:55:0b:39:85:f3:a8:07:cc:01:
                    ed:2d:14:8d:19:c7:bb:98:6a:4a:25:bb:10:97:fb:
                    8c:d1:f5:cd:1e:0b:9d:1c:25:cb:55:94:97:4f:8e:
                    c1:c0:8c:8e:14:3c:51:a3:0a:0e:c4:72:37:e3:3d:
                    fc:3a:f3:49:1f:75:d9:e3:29:18:2c:5f:75:a4:b5:
                    bf:e2:0d:2a:ae:a3:db:fa:48:72:04:c7:d9:35:06:
                    9a:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:29:6D:4E:C4:CF:4D:E8:7A:06:DD:DE:06:F6:57:8F:15:02:08:C4
            X509v3 Authority Key Identifier:
                keyid:FE:2F:B4:04:47:30:F5:FD:71:83:99:AE:BD:C9:29:56:65:F4:40:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/86FvZtDsydfEWa4vCj5kvwg1rWLmmZxXQU7FYRx86pnj/0/FE2FB4044730F5FD718399AEBDC9295665F44072.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FE2FB4044730F5FD718399AEBDC9295665F44072.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/86FvZtDsydfEWa4vCj5kvwg1rWLmmZxXQU7FYRx86pnj/0/3138312e3139312e34382e302f32342d3234203d3e20323637343533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.191.48.0/24

    Signature Algorithm: sha256WithRSAEncryption
         81:b1:13:e6:90:33:00:b4:db:53:18:86:c2:3e:89:cd:60:1a:
         54:5a:fa:38:e4:ef:b9:83:11:e5:0d:85:f6:0b:5c:44:9e:f2:
         bd:38:cb:85:9f:b5:d0:20:6d:17:21:15:a2:db:6b:30:f3:07:
         b2:69:4b:1b:2d:59:95:90:33:93:ee:28:15:9f:c3:34:d4:1e:
         4a:f7:66:45:29:7a:57:cc:2e:e0:38:f1:e0:9e:ef:e3:c4:ce:
         0a:a6:c9:3c:12:d9:97:8c:37:4b:75:66:78:c5:b9:7c:0b:51:
         97:39:c0:2d:6c:fb:88:61:ef:c8:d1:fd:64:dd:70:d5:b9:8f:
         98:76:4b:69:83:ea:de:23:ad:2e:28:20:30:c8:69:09:ea:ca:
         be:06:1c:36:b4:f8:2e:44:47:17:35:10:d7:86:03:7b:4c:cb:
         00:47:c4:2e:4f:59:9c:54:2d:24:38:bf:1d:5d:89:a8:49:ee:
         e6:d1:08:e2:e8:30:55:44:36:e8:aa:ec:d5:34:05:6e:7a:07:
         87:7b:2c:11:92:fa:a2:38:ad:37:80:e4:4e:89:b8:9b:ef:57:
         c4:c1:13:12:70:e1:8b:56:e8:e8:d0:cc:0d:71:b5:e2:b2:45:
         90:d8:b1:d8:46:fa:db:cb:e9:13:09:05:7c:ac:c3:8a:59:14:
         65:dc:5f:1c
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUVUtGQk5P/3lDwBxhQnzijOKww2swDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkUyRkI0MDQ0NzMwRjVGRDcxODM5OUFFQkRDOTI5NTY2
NUY0NDA3MjAeFw0yNTAzMTgxNjU5MTVaFw0yNjAzMTcxNzA0MTVaMDMxMTAvBgNV
BAMTKERDMjk2RDRFQzRDRjRERTg3QTA2RERERTA2RjY1NzhGMTUwMjA4QzQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSpAPtwMpitAobkYCzx+RGX8KW
8wQKusPCM5UihouWRrolDQMTwWVQQAUi/mm41R8bECMIj1vBv4icuSt9pwu7Ggng
vPXvxju0sDV0rlxcnnaWQ8+egsz9l3H+VJ9dQXX6MnL8fYMOjkOW8LsoqrGVA5Vt
lYauYU5ZXZ9HiTl0x1ck4l0Kycftea4hyNt4BrsSEbYD8CJWKpM/29e6YeQUWdCe
kJBa9CbVe1ULOYXzqAfMAe0tFI0Zx7uYakoluxCX+4zR9c0eC50cJctVlJdPjsHA
jI4UPFGjCg7EcjfjPfw680kfddnjKRgsX3Wktb/iDSquo9v6SHIEx9k1BpoTAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU3CltTsTPTeh6Bt3eBvZXjxUCCMQwHwYDVR0j
BBgwFoAU/i+0BEcw9f1xg5muvckpVmX0QHIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vODZGdlp0RHN5ZGZFV2E0dkNqNWt2d2cxcldMbW1aeFhRVTdGWVJ4ODZw
bmovMC9GRTJGQjQwNDQ3MzBGNUZENzE4Mzk5QUVCREM5Mjk1NjY1RjQ0MDcyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0ZFMkZCNDA0NDczMEY1RkQ3
MTgzOTlBRUJEQzkyOTU2NjVGNDQwNzIuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
Lzg2RnZadERzeWRmRVdhNHZDajVrdndnMXJXTG1tWnhYUVU3RllSeDg2cG5qLzAv
MzEzODMxMmUzMTM5MzEyZTM0MzgyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzczNDM1MzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAC1vzAwDQYJKoZIhvcNAQELBQADggEBAIGxE+aQ
MwC021MYhsI+ic1gGlRa+jjk77mDEeUNhfYLXESe8r04y4WftdAgbRchFaLbazDz
B7JpSxstWZWQM5PuKBWfwzTUHkr3ZkUpelfMLuA48eCe7+PEzgqmyTwS2ZeMN0t1
ZnjFuXwLUZc5wC1s+4hh78jR/WTdcNW5j5h2S2mD6t4jrS4oIDDIaQnqyr4GHDa0
+C5ERxc1ENeGA3tMywBHxC5PWZxULSQ4vx1diahJ7ubRCOLoMFVENuiq7NU0BW56
B4d7LBGS+qI4rTeA5E6JuJvvV8TBExJw4YtW6OjQzA1xteKyRZDYsdhG+tvL6RMJ
BXysw4pZFGXcXxw=
-----END CERTIFICATE-----
Generated at Sun Apr 6 04:00:18 2025 by rpki-client