Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9bBg1vrFNZEZAkqpceeU7eYWt2f2DP7Xoj74EKhD5rTx/0/3138392e33392e3232302e302f32322d3332203d3e203232333831.roa
File:                     3138392e33392e3232302e302f32322d3332203d3e203232333831.roa (raw, json)
Hash identifier:          PHxvGUcrJb7dzeQLacQtL5tDcf0pJ/Q3TtqmcYXDFAM=
Subject key identifier:   EE:68:83:F9:40:61:4A:9F:21:B6:6D:84:D2:02:95:A3:B8:EE:BA:E5
Certificate issuer:       /CN=193432167D7CBAFA4E5DDE04019A8E57DEFE0AAC
Certificate serial:       724B8AA49DFE50572E4D8C5FF2142FC9B7727F8A
Authority key identifier: 19:34:32:16:7D:7C:BA:FA:4E:5D:DE:04:01:9A:8E:57:DE:FE:0A:AC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/193432167D7CBAFA4E5DDE04019A8E57DEFE0AAC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9bBg1vrFNZEZAkqpceeU7eYWt2f2DP7Xoj74EKhD5rTx/0/3138392e33392e3232302e302f32322d3332203d3e203232333831.roa
Signing time:             Fri 07 Mar 2025 19:09:58 +0000
ROA not before:           Fri 07 Mar 2025 19:04:58 +0000
ROA not after:            Fri 06 Mar 2026 19:09:58 +0000
asID:                     22381
IP address blocks:        189.39.220.0/22 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:4b:8a:a4:9d:fe:50:57:2e:4d:8c:5f:f2:14:2f:c9:b7:72:7f:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=193432167D7CBAFA4E5DDE04019A8E57DEFE0AAC
        Validity
            Not Before: Mar  7 19:04:58 2025 GMT
            Not After : Mar  6 19:09:58 2026 GMT
        Subject: CN=EE6883F940614A9F21B66D84D20295A3B8EEBAE5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:d4:07:75:0d:a5:69:e5:bf:9b:5f:f5:81:a9:
                    d9:92:a8:16:4a:e4:e1:a0:1f:69:cf:fa:ee:9f:b5:
                    43:0e:59:43:30:3e:6d:2d:75:cd:3f:2c:7b:c2:27:
                    4c:af:15:ee:5f:10:1e:87:8b:8d:f2:23:a9:1d:47:
                    84:27:6a:97:bc:cf:59:af:e8:9b:d1:ff:16:73:c0:
                    28:18:dc:cd:dd:33:bd:16:b3:e6:7d:2f:5e:05:26:
                    f0:82:17:86:2d:25:1a:d6:39:9f:f6:e1:85:23:16:
                    70:06:56:28:e8:73:4b:3e:43:61:04:52:6e:24:be:
                    66:a3:66:fb:40:7f:83:b2:2f:3e:26:15:5d:12:b7:
                    89:bb:fd:1d:2e:11:5d:bc:3f:d7:bc:fb:93:5c:7a:
                    30:03:d4:80:41:7c:85:b9:22:61:15:a4:34:0f:11:
                    c3:f2:4c:3d:9f:8d:7f:0c:92:67:cf:46:12:12:c8:
                    19:5c:a2:73:81:32:5b:cf:3a:0c:85:3c:da:b6:2b:
                    af:eb:34:4d:89:54:ba:dc:15:80:8b:ff:8d:3c:be:
                    5f:9c:d6:04:b9:10:dc:8f:a9:5b:79:d0:5f:29:73:
                    80:5d:00:c4:a9:62:2d:ed:61:34:7f:8c:7e:64:d0:
                    d3:e8:d8:93:47:83:63:78:e6:1e:b1:70:ab:cb:91:
                    74:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:68:83:F9:40:61:4A:9F:21:B6:6D:84:D2:02:95:A3:B8:EE:BA:E5
            X509v3 Authority Key Identifier:
                keyid:19:34:32:16:7D:7C:BA:FA:4E:5D:DE:04:01:9A:8E:57:DE:FE:0A:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9bBg1vrFNZEZAkqpceeU7eYWt2f2DP7Xoj74EKhD5rTx/0/193432167D7CBAFA4E5DDE04019A8E57DEFE0AAC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/193432167D7CBAFA4E5DDE04019A8E57DEFE0AAC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9bBg1vrFNZEZAkqpceeU7eYWt2f2DP7Xoj74EKhD5rTx/0/3138392e33392e3232302e302f32322d3332203d3e203232333831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.39.220.0/22

    Signature Algorithm: sha256WithRSAEncryption
         34:fe:6a:33:88:73:66:bc:81:a1:df:ab:9f:11:59:2f:16:80:
         f5:8a:44:f0:6c:7a:d1:32:26:a0:6e:37:14:d0:dc:d8:30:93:
         b7:e5:f6:cf:a1:49:ce:07:3f:6e:64:8f:aa:48:11:c7:d7:42:
         f6:59:3f:91:0d:f9:c3:1a:fd:b3:d1:dc:c2:78:48:67:7f:6d:
         74:bd:fa:d4:96:84:0f:9a:88:5e:79:24:a8:63:db:a5:49:bc:
         63:58:85:51:bc:76:68:01:22:54:3d:bc:d0:c4:4e:ad:3b:55:
         dc:1c:5e:2f:dc:16:a0:9f:35:61:a7:bf:c8:87:5a:6c:0d:37:
         3d:44:ed:82:b7:1b:c1:7f:50:2d:5d:74:ca:e4:7c:93:00:6a:
         e8:70:25:be:27:74:28:73:0f:73:fa:c6:44:8f:d0:e9:64:0a:
         91:3e:cf:8a:94:a0:de:a7:98:80:0d:7b:7a:2d:78:ad:d5:3d:
         80:20:e1:91:f2:35:80:5c:c2:eb:55:26:93:95:1c:7f:73:c1:
         b3:c9:5d:38:be:3b:42:b1:50:4f:62:05:f3:a0:3b:8c:e6:3e:
         3f:a2:63:af:71:9c:32:47:d4:ea:2a:34:86:b5:40:36:ee:76:
         23:fb:e0:4b:1e:ce:5f:c1:e4:53:9a:10:1a:da:93:91:fa:56:
         ad:04:4f:07
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUckuKpJ3+UFcuTYxf8hQvybdyf4owDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTkzNDMyMTY3RDdDQkFGQTRFNURERTA0MDE5QThFNTdE
RUZFMEFBQzAeFw0yNTAzMDcxOTA0NThaFw0yNjAzMDYxOTA5NThaMDMxMTAvBgNV
BAMTKEVFNjg4M0Y5NDA2MTRBOUYyMUI2NkQ4NEQyMDI5NUEzQjhFRUJBRTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCL1Ad1DaVp5b+bX/WBqdmSqBZK
5OGgH2nP+u6ftUMOWUMwPm0tdc0/LHvCJ0yvFe5fEB6Hi43yI6kdR4Qnape8z1mv
6JvR/xZzwCgY3M3dM70Ws+Z9L14FJvCCF4YtJRrWOZ/24YUjFnAGVijoc0s+Q2EE
Um4kvmajZvtAf4OyLz4mFV0St4m7/R0uEV28P9e8+5NcejAD1IBBfIW5ImEVpDQP
EcPyTD2fjX8MkmfPRhISyBlconOBMlvPOgyFPNq2K6/rNE2JVLrcFYCL/408vl+c
1gS5ENyPqVt50F8pc4BdAMSpYi3tYTR/jH5k0NPo2JNHg2N45h6xcKvLkXTRAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQU7miD+UBhSp8htm2E0gKVo7juuuUwHwYDVR0j
BBgwFoAUGTQyFn18uvpOXd4EAZqOV97+CqwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOWJCZzF2ckZOWkVaQWtxcGNlZVU3ZVlXdDJmMkRQN1hvajc0RUtoRDVy
VHgvMC8xOTM0MzIxNjdEN0NCQUZBNEU1RERFMDQwMTlBOEU1N0RFRkUwQUFDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzE5MzQzMjE2N0Q3Q0JBRkE0
RTVEREUwNDAxOUE4RTU3REVGRTBBQUMuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzliQmcxdnJGTlpFWkFrcXBjZWVVN2VZV3QyZjJEUDdYb2o3NEVLaEQ1clR4LzAv
MzEzODM5MmUzMzM5MmUzMjMyMzAyZTMwMmYzMjMyMmQzMzMyMjAzZDNlMjAzMjMy
MzMzODMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCvSfcMA0GCSqGSIb3DQEBCwUAA4IBAQA0/moziHNm
vIGh36ufEVkvFoD1ikTwbHrRMiagbjcU0NzYMJO35fbPoUnOBz9uZI+qSBHH10L2
WT+RDfnDGv2z0dzCeEhnf210vfrUloQPmoheeSSoY9ulSbxjWIVRvHZoASJUPbzQ
xE6tO1XcHF4v3BagnzVhp7/Ih1psDTc9RO2CtxvBf1AtXXTK5HyTAGrocCW+J3Qo
cw9z+sZEj9DpZAqRPs+KlKDep5iADXt6LXit1T2AIOGR8jWAXMLrVSaTlRx/c8Gz
yV04vjtCsVBPYgXzoDuM5j4/omOvcZwyR9TqKjSGtUA27nYj++BLHs5fweRTmhAa
2pOR+latBE8H
-----END CERTIFICATE-----
Generated at Sun Apr 6 16:20:43 2025 by rpki-client