Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8nFDcpQBHMMfez2vyu3BjTHMiJDya3gKuSppxeLtG5TX/1/3138392e3132372e3133382e302f32332d3234203d3e20323730373730.roa
File:                     3138392e3132372e3133382e302f32332d3234203d3e20323730373730.roa (raw, json)
Hash identifier:          WnxFkjgBAQRKMZZDYpAUe7BwDntsek7X2KvX4VwASxA=
Subject key identifier:   10:DF:E0:BB:85:69:4F:64:7A:EC:38:38:23:8E:37:D1:56:C5:BF:CE
Certificate issuer:       /CN=2FE8A659DB4BEDA1E0B9CF631CD2BA802A77C654
Certificate serial:       69763CB7F52A2B24FEADD444A653FFE8762A3E42
Authority key identifier: 2F:E8:A6:59:DB:4B:ED:A1:E0:B9:CF:63:1C:D2:BA:80:2A:77:C6:54
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2FE8A659DB4BEDA1E0B9CF631CD2BA802A77C654.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8nFDcpQBHMMfez2vyu3BjTHMiJDya3gKuSppxeLtG5TX/1/3138392e3132372e3133382e302f32332d3234203d3e20323730373730.roa
Signing time:             Thu 06 Mar 2025 19:00:00 +0000
ROA not before:           Thu 06 Mar 2025 18:55:00 +0000
ROA not after:            Fri 06 Mar 2026 19:00:00 +0000
asID:                     270770
IP address blocks:        189.127.138.0/23 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:76:3c:b7:f5:2a:2b:24:fe:ad:d4:44:a6:53:ff:e8:76:2a:3e:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2FE8A659DB4BEDA1E0B9CF631CD2BA802A77C654
        Validity
            Not Before: Mar  6 18:55:00 2025 GMT
            Not After : Mar  6 19:00:00 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:ec:7d:30:cb:0b:4c:1b:60:c2:9c:7d:9d:01:
                    d6:af:26:e6:6f:a9:8c:4a:c8:02:b7:ee:3f:95:18:
                    f9:1f:0b:5e:b7:ee:e7:b6:5a:22:1f:d0:d9:cb:97:
                    5f:26:8b:7a:54:c6:41:44:f2:3b:11:90:4c:64:b7:
                    1a:e6:f5:e3:89:20:71:eb:b0:ef:0f:93:e2:23:f3:
                    4a:4a:9d:3a:74:09:9a:74:d9:42:67:c2:02:aa:bc:
                    49:29:12:01:f0:2a:65:51:b5:4a:1c:df:60:62:24:
                    34:98:90:25:7d:53:72:28:95:87:30:45:52:3a:dc:
                    37:d6:27:16:a1:ea:8e:b1:14:46:db:79:de:2e:d3:
                    39:bc:72:2b:27:aa:0d:1c:02:ce:2a:b7:8a:8a:87:
                    4d:93:62:b8:6c:79:aa:82:31:5e:57:c3:6c:ae:39:
                    87:fd:85:bc:0a:c5:fb:da:f6:56:a4:98:43:91:91:
                    a9:73:8a:12:0e:8f:35:44:f3:4e:9c:f7:d4:86:9f:
                    52:1b:34:ce:96:6c:49:0b:10:5a:4c:2d:02:ca:11:
                    03:bc:18:74:4a:da:98:ed:6a:31:f8:9b:66:85:15:
                    b7:15:dd:25:c0:36:09:21:50:b6:55:c6:1f:ae:48:
                    4b:6f:86:a8:3f:ec:d8:32:bf:ec:12:26:b5:d1:cf:
                    27:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:DF:E0:BB:85:69:4F:64:7A:EC:38:38:23:8E:37:D1:56:C5:BF:CE
            X509v3 Authority Key Identifier:
                keyid:2F:E8:A6:59:DB:4B:ED:A1:E0:B9:CF:63:1C:D2:BA:80:2A:77:C6:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8nFDcpQBHMMfez2vyu3BjTHMiJDya3gKuSppxeLtG5TX/1/2FE8A659DB4BEDA1E0B9CF631CD2BA802A77C654.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2FE8A659DB4BEDA1E0B9CF631CD2BA802A77C654.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8nFDcpQBHMMfez2vyu3BjTHMiJDya3gKuSppxeLtG5TX/1/3138392e3132372e3133382e302f32332d3234203d3e20323730373730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.127.138.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8c:af:be:e9:5d:39:55:d3:00:15:da:eb:0c:cc:47:20:51:eb:
         c2:d7:52:e6:eb:2d:fa:7f:1b:fc:ef:d0:86:62:6e:6e:a8:2c:
         c8:a7:b7:73:c2:f7:35:9c:4b:6f:dc:cf:81:f5:8e:c0:8d:e5:
         f7:dd:96:d1:bd:5f:a3:5f:3d:5b:90:60:af:73:ed:1c:3f:8a:
         19:de:a5:b1:1a:aa:d0:14:4e:5a:bb:c8:5a:8e:c5:56:08:e2:
         43:5a:d6:52:2e:76:dc:18:b1:da:68:be:66:e6:d1:3e:5f:30:
         f6:2a:1f:65:4e:ae:4c:cd:2c:f3:c1:b6:75:30:b8:3b:47:0e:
         94:ff:01:89:69:de:2b:8c:ba:f1:19:94:d0:68:cd:db:b2:44:
         15:12:ff:9b:be:dd:ac:0e:55:96:cc:d0:18:e9:7f:da:b6:1f:
         ec:6b:b2:e8:42:8c:cc:c4:e5:2f:4f:2c:58:49:d8:0b:ec:b2:
         6f:7e:9d:fc:cb:7c:01:c2:f7:8e:d5:9e:a9:31:40:ed:e7:28:
         66:ea:40:4c:ca:44:ab:77:83:35:90:55:23:a4:5f:e7:80:7c:
         6e:d8:28:7a:9c:e7:1c:b6:46:a2:a0:6a:da:6c:a2:21:2f:9f:
         78:26:51:e3:f1:b5:07:e2:7b:f3:d8:77:fa:d6:ef:8d:08:83:
         f4:1a:93:20
-----BEGIN CERTIFICATE-----
MIIHRTCCBi2gAwIBAgIUaXY8t/UqKyT+rdREplP/6HYqPkIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkZFOEE2NTlEQjRCRURBMUUwQjlDRjYzMUNEMkJBODAy
QTc3QzY1NDAeFw0yNTAzMDYxODU1MDBaFw0yNjAzMDYxOTAwMDBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwOUJFQzdEMzBDQjBCNEMxQjYw
QzI5QzdEOUQwMUQ2QUYyNkU2NkZBOThDNEFDODAyQjdFRTNGOTUxOEY5MUYwQjVF
QjdFRUU3QjY1QTIyMUZEMEQ5Q0I5NzVGMjY4QjdBNTRDNjQxNDRGMjNCMTE5MDRD
NjRCNzFBRTZGNUUzODkyMDcxRUJCMEVGMEY5M0UyMjNGMzRBNEE5RDNBNzQwOTlB
NzREOTQyNjdDMjAyQUFCQzQ5MjkxMjAxRjAyQTY1NTFCNTRBMUNERjYwNjIyNDM0
OTg5MDI1N0Q1MzcyMjg5NTg3MzA0NTUyM0FEQzM3RDYyNzE2QTFFQThFQjExNDQ2
REI3OURFMkVEMzM5QkM3MjJCMjdBQTBEMUMwMkNFMkFCNzhBOEE4NzREOTM2MkI4
NkM3OUFBODIzMTVFNTdDMzZDQUUzOTg3RkQ4NUJDMEFDNUZCREFGNjU2QTQ5ODQz
OTE5MUE5NzM4QTEyMEU4RjM1NDRGMzRFOUNGN0Q0ODY5RjUyMUIzNENFOTY2QzQ5
MEIxMDVBNEMyRDAyQ0ExMTAzQkMxODc0NEFEQTk4RUQ2QTMxRjg5QjY2ODUxNUI3
MTVERDI1QzAzNjA5MjE1MEI2NTVDNjFGQUU0ODRCNkY4NkE4M0ZFQ0Q4MzJCRkVD
MTIyNkI1RDFDRjI3RUQwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAm+x9MMsLTBtgwpx9nQHWrybmb6mMSsgCt+4/lRj5Hwtet+7ntloi
H9DZy5dfJot6VMZBRPI7EZBMZLca5vXjiSBx67DvD5PiI/NKSp06dAmadNlCZ8IC
qrxJKRIB8CplUbVKHN9gYiQ0mJAlfVNyKJWHMEVSOtw31icWoeqOsRRG23neLtM5
vHIrJ6oNHALOKreKiodNk2K4bHmqgjFeV8NsrjmH/YW8CsX72vZWpJhDkZGpc4oS
Do81RPNOnPfUhp9SGzTOlmxJCxBaTC0CyhEDvBh0StqY7Wox+JtmhRW3Fd0lwDYJ
IVC2VcYfrkhLb4aoP+zYMr/sEia10c8n7QIDAQABo4ICUzCCAk8wHQYDVR0OBBYE
FBDf4LuFaU9keuw4OCOON9FWxb/OMB8GA1UdIwQYMBaAFC/oplnbS+2h4LnPYxzS
uoAqd8ZUMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzhuRkRjcFFCSE1NZmV6
MnZ5dTNCalRITWlKRHlhM2dLdVNwcHhlTHRHNVRYLzEvMkZFOEE2NTlEQjRCRURB
MUUwQjlDRjYzMUNEMkJBODAyQTc3QzY1NC5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS8yRkU4QTY1OURCNEJFREExRTBCOUNGNjMxQ0QyQkE4MDJBNzdD
NjU0LmNlcjCBsAYIKwYBBQUHAQsEgaMwgaAwgZ0GCCsGAQUFBzALhoGQcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby84bkZEY3BRQkhNTWZlejJ2eXUz
QmpUSE1pSkR5YTNnS3VTcHB4ZUx0RzVUWC8xLzMxMzgzOTJlMzEzMjM3MmUzMTMz
MzgyZTMwMmYzMjMzMmQzMjM0MjAzZDNlMjAzMjM3MzAzNzM3MzAucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAG9f4owDQYJKoZIhvcNAQELBQADggEBAIyvvuldOVXTABXa6wzMRyBR68LXUubr
Lfp/G/zv0IZibm6oLMint3PC9zWcS2/cz4H1jsCN5ffdltG9X6NfPVuQYK9z7Rw/
ihnepbEaqtAUTlq7yFqOxVYI4kNa1lIudtwYsdpovmbm0T5fMPYqH2VOrkzNLPPB
tnUwuDtHDpT/AYlp3iuMuvEZlNBozduyRBUS/5u+3awOVZbM0Bjpf9q2H+xrsuhC
jMzE5S9PLFhJ2Avssm9+nfzLfAHC947VnqkxQO3nKGbqQEzKRKt3gzWQVSOkX+eA
fG7YKHqc5xy2RqKgatpsoiEvn3gmUePxtQfie/PYd/rW740Ig/QakyA=
-----END CERTIFICATE-----
Generated at Thu Apr 10 04:49:07 2025 by rpki-client