Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9bBg1vrFNZEZAkqpceeU7eYWt2f2DP7Xoj74EKhD5rTx/0/3138372e3132302e31342e302f32332d3332203d3e203232333831.roa
File:                     3138372e3132302e31342e302f32332d3332203d3e203232333831.roa (raw, json)
Hash identifier:          s2453U0ZxvsI3ypufx1Ix8qh4Tf5j6Vgy+Y13buQJhM=
Subject key identifier:   97:E8:1A:5B:B8:E1:0D:A1:D1:74:9B:01:A4:CA:98:10:4C:44:E0:E2
Certificate issuer:       /CN=193432167D7CBAFA4E5DDE04019A8E57DEFE0AAC
Certificate serial:       1D11ADDA92E7A43F4414F56AABE2FEF29CF62DCC
Authority key identifier: 19:34:32:16:7D:7C:BA:FA:4E:5D:DE:04:01:9A:8E:57:DE:FE:0A:AC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/193432167D7CBAFA4E5DDE04019A8E57DEFE0AAC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9bBg1vrFNZEZAkqpceeU7eYWt2f2DP7Xoj74EKhD5rTx/0/3138372e3132302e31342e302f32332d3332203d3e203232333831.roa
Signing time:             Fri 07 Mar 2025 19:08:12 +0000
ROA not before:           Fri 07 Mar 2025 19:03:12 +0000
ROA not after:            Fri 06 Mar 2026 19:08:12 +0000
asID:                     22381
IP address blocks:        187.120.14.0/23 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:11:ad:da:92:e7:a4:3f:44:14:f5:6a:ab:e2:fe:f2:9c:f6:2d:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=193432167D7CBAFA4E5DDE04019A8E57DEFE0AAC
        Validity
            Not Before: Mar  7 19:03:12 2025 GMT
            Not After : Mar  6 19:08:12 2026 GMT
        Subject: CN=97E81A5BB8E10DA1D1749B01A4CA98104C44E0E2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:b1:57:85:44:0e:15:63:6d:31:d2:b1:99:a2:
                    07:26:c3:fd:2f:f5:a9:58:dd:35:fe:77:03:35:f3:
                    3a:6c:a1:35:a8:75:a0:f1:b8:6e:fc:5f:7e:4c:f3:
                    9b:b4:47:bf:7c:84:af:ce:e4:57:83:9c:38:29:4d:
                    5c:f0:57:ef:89:c8:05:39:01:47:8a:ed:23:d2:cf:
                    06:dc:f5:92:ff:ba:07:1f:1f:39:68:ee:60:df:46:
                    58:16:6c:ab:9f:29:ef:b8:da:ff:3f:d1:df:f7:95:
                    92:b1:4e:c9:ea:d6:96:70:af:78:09:92:0b:d0:88:
                    bb:05:72:85:9a:aa:75:e3:02:ca:21:a0:02:10:7d:
                    d0:1a:e8:0a:f1:6c:3f:68:47:0c:1f:48:6a:28:57:
                    7c:c7:b7:bb:f4:e1:e4:52:0e:a6:97:dc:19:a4:fa:
                    c4:2c:28:2e:f8:5b:12:18:44:c4:fd:3d:fc:8f:e8:
                    43:a7:e7:ca:26:14:f7:fe:d1:b3:92:1e:69:bc:54:
                    53:ca:e7:4c:55:08:8f:a3:55:26:96:65:ce:c1:95:
                    69:1d:22:f5:07:8c:0a:cf:6c:b6:f9:46:a4:1f:11:
                    97:48:c8:53:57:41:85:47:61:25:a9:a0:a9:53:6c:
                    b9:cd:d5:77:d3:28:84:78:0e:b4:ad:12:6d:3d:43:
                    6d:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:E8:1A:5B:B8:E1:0D:A1:D1:74:9B:01:A4:CA:98:10:4C:44:E0:E2
            X509v3 Authority Key Identifier:
                keyid:19:34:32:16:7D:7C:BA:FA:4E:5D:DE:04:01:9A:8E:57:DE:FE:0A:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9bBg1vrFNZEZAkqpceeU7eYWt2f2DP7Xoj74EKhD5rTx/0/193432167D7CBAFA4E5DDE04019A8E57DEFE0AAC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/193432167D7CBAFA4E5DDE04019A8E57DEFE0AAC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9bBg1vrFNZEZAkqpceeU7eYWt2f2DP7Xoj74EKhD5rTx/0/3138372e3132302e31342e302f32332d3332203d3e203232333831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.120.14.0/23

    Signature Algorithm: sha256WithRSAEncryption
         36:6a:49:a8:00:3d:5c:39:90:0f:8f:72:24:61:4c:24:7e:5c:
         d4:d8:5c:ff:7a:4b:56:89:e7:18:7b:cc:a6:e4:4b:1a:0f:db:
         74:64:37:46:a0:e8:a2:64:42:dc:c9:84:c7:83:ec:3d:9d:be:
         b2:71:77:3e:43:73:c4:9d:5f:6e:46:c3:4a:88:be:d7:4d:6c:
         ae:73:6d:c0:c3:cd:51:9c:5a:b7:60:d8:03:9a:70:e4:d9:31:
         74:9a:b1:17:9f:33:f8:3c:fa:b7:fa:21:e4:91:73:59:bc:0e:
         6d:c3:47:7e:5b:19:2b:de:c9:27:ae:6d:c4:39:51:c6:5f:d6:
         3f:1c:bd:33:42:9b:cd:e0:c8:ba:49:ee:ce:4b:e6:fb:5a:de:
         e1:60:82:7f:80:f1:9c:47:39:ad:f5:f7:7e:1c:6b:cc:58:c9:
         58:6d:83:5b:cf:00:4d:ec:f6:d0:62:7f:c8:27:f4:17:e6:6e:
         b6:a1:5d:ed:7e:ec:12:a5:32:37:a5:9b:e0:ea:4d:56:e0:10:
         77:a9:5c:8c:ea:fa:ad:84:12:d7:bf:66:40:2e:3e:43:af:10:
         23:8c:9d:8c:e5:cf:23:91:81:97:18:c4:b7:66:f0:43:2b:63:
         71:47:3a:6a:08:92:6f:2d:3a:79:6a:2d:0d:98:06:61:4e:9a:
         7b:57:56:55
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUHRGt2pLnpD9EFPVqq+L+8pz2LcwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTkzNDMyMTY3RDdDQkFGQTRFNURERTA0MDE5QThFNTdE
RUZFMEFBQzAeFw0yNTAzMDcxOTAzMTJaFw0yNjAzMDYxOTA4MTJaMDMxMTAvBgNV
BAMTKDk3RTgxQTVCQjhFMTBEQTFEMTc0OUIwMUE0Q0E5ODEwNEM0NEUwRTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDxsVeFRA4VY20x0rGZogcmw/0v
9alY3TX+dwM18zpsoTWodaDxuG78X35M85u0R798hK/O5FeDnDgpTVzwV++JyAU5
AUeK7SPSzwbc9ZL/ugcfHzlo7mDfRlgWbKufKe+42v8/0d/3lZKxTsnq1pZwr3gJ
kgvQiLsFcoWaqnXjAsohoAIQfdAa6ArxbD9oRwwfSGooV3zHt7v04eRSDqaX3Bmk
+sQsKC74WxIYRMT9PfyP6EOn58omFPf+0bOSHmm8VFPK50xVCI+jVSaWZc7BlWkd
IvUHjArPbLb5RqQfEZdIyFNXQYVHYSWpoKlTbLnN1XfTKIR4DrStEm09Q223AgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUl+gaW7jhDaHRdJsBpMqYEExE4OIwHwYDVR0j
BBgwFoAUGTQyFn18uvpOXd4EAZqOV97+CqwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOWJCZzF2ckZOWkVaQWtxcGNlZVU3ZVlXdDJmMkRQN1hvajc0RUtoRDVy
VHgvMC8xOTM0MzIxNjdEN0NCQUZBNEU1RERFMDQwMTlBOEU1N0RFRkUwQUFDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzE5MzQzMjE2N0Q3Q0JBRkE0
RTVEREUwNDAxOUE4RTU3REVGRTBBQUMuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzliQmcxdnJGTlpFWkFrcXBjZWVVN2VZV3QyZjJEUDdYb2o3NEVLaEQ1clR4LzAv
MzEzODM3MmUzMTMyMzAyZTMxMzQyZTMwMmYzMjMzMmQzMzMyMjAzZDNlMjAzMjMy
MzMzODMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQBu3gOMA0GCSqGSIb3DQEBCwUAA4IBAQA2akmoAD1c
OZAPj3IkYUwkflzU2Fz/ektWiecYe8ym5EsaD9t0ZDdGoOiiZELcyYTHg+w9nb6y
cXc+Q3PEnV9uRsNKiL7XTWyuc23Aw81RnFq3YNgDmnDk2TF0mrEXnzP4PPq3+iHk
kXNZvA5tw0d+Wxkr3sknrm3EOVHGX9Y/HL0zQpvN4Mi6Se7OS+b7Wt7hYIJ/gPGc
Rzmt9fd+HGvMWMlYbYNbzwBN7PbQYn/IJ/QX5m62oV3tfuwSpTI3pZvg6k1W4BB3
qVyM6vqthBLXv2ZALj5DrxAjjJ2M5c8jkYGXGMS3ZvBDK2NxRzpqCJJvLTp5ai0N
mAZhTpp7V1ZV
-----END CERTIFICATE-----
Generated at Sat Apr 5 11:43:40 2025 by rpki-client