Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9hebRXADhirvrFCZNBoqiYkATwgccatBHEGtvUEGz3NG/0/3230312e3134382e39362e302f32322d3234203d3e203631383534.roa
File:                     3230312e3134382e39362e302f32322d3234203d3e203631383534.roa (raw, json)
Hash identifier:          9UaXDyum0WL+2oIM0v7rkzeZsG4q4uu7BPEC+WMp5gs=
Subject key identifier:   B3:A5:15:EB:47:CD:1E:16:0E:95:51:1E:F9:54:B5:F7:CB:8D:91:96
Certificate issuer:       /CN=7182A558E7EB248707BE29D291D0D4A0CEE8BDC5
Certificate serial:       7FA99A4FF52D30022DCA1EAAD09E6777C0739D1E
Authority key identifier: 71:82:A5:58:E7:EB:24:87:07:BE:29:D2:91:D0:D4:A0:CE:E8:BD:C5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7182A558E7EB248707BE29D291D0D4A0CEE8BDC5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9hebRXADhirvrFCZNBoqiYkATwgccatBHEGtvUEGz3NG/0/3230312e3134382e39362e302f32322d3234203d3e203631383534.roa
Signing time:             Mon 23 Dec 2024 14:12:56 +0000
ROA not before:           Mon 23 Dec 2024 14:07:56 +0000
ROA not after:            Mon 22 Dec 2025 14:12:56 +0000
asID:                     61854
IP address blocks:        201.148.96.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:a9:9a:4f:f5:2d:30:02:2d:ca:1e:aa:d0:9e:67:77:c0:73:9d:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7182A558E7EB248707BE29D291D0D4A0CEE8BDC5
        Validity
            Not Before: Dec 23 14:07:56 2024 GMT
            Not After : Dec 22 14:12:56 2025 GMT
        Subject: CN=B3A515EB47CD1E160E95511EF954B5F7CB8D9196
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:2a:6b:d2:ac:6f:00:0a:1a:0d:5c:7b:47:6a:
                    f5:b9:c6:c7:84:8b:b7:34:e5:e7:94:20:26:fd:df:
                    52:de:03:aa:c8:68:0a:aa:91:8e:ae:b3:1b:1f:3d:
                    c6:e2:cd:66:4d:01:64:77:f0:6e:be:3e:16:9e:bd:
                    e8:f8:2b:bf:f6:ee:98:f0:cc:0a:05:99:25:3b:aa:
                    12:30:23:9a:b6:ca:99:b2:cf:d8:01:4d:57:97:a1:
                    8e:3d:6d:a7:fb:6b:f7:f6:e0:5b:84:ab:56:b3:cd:
                    95:5b:c6:6d:12:ab:33:37:c2:0a:88:5d:fb:96:e5:
                    de:fb:fa:45:ef:ea:20:be:36:a6:04:29:0c:24:2e:
                    0d:83:bc:60:93:aa:bf:71:21:fa:74:ca:12:fd:0c:
                    d9:ed:49:6b:58:a6:52:20:a3:a5:04:ee:9c:08:d3:
                    09:74:86:87:7d:54:0c:73:b7:09:c0:85:3c:c8:75:
                    13:ed:76:92:9f:9e:4b:0e:ec:38:34:93:03:ca:38:
                    fa:18:2e:c6:bf:e4:8d:f1:5e:27:69:c7:83:09:42:
                    3e:56:65:b8:b7:d0:fc:7e:fb:23:ef:2e:14:af:09:
                    76:0a:9a:25:a8:e7:70:8d:4c:2d:9e:42:a2:74:a4:
                    87:e9:4a:48:61:2f:45:a4:1c:b5:b1:ad:4e:df:f5:
                    7e:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:A5:15:EB:47:CD:1E:16:0E:95:51:1E:F9:54:B5:F7:CB:8D:91:96
            X509v3 Authority Key Identifier:
                keyid:71:82:A5:58:E7:EB:24:87:07:BE:29:D2:91:D0:D4:A0:CE:E8:BD:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9hebRXADhirvrFCZNBoqiYkATwgccatBHEGtvUEGz3NG/0/7182A558E7EB248707BE29D291D0D4A0CEE8BDC5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7182A558E7EB248707BE29D291D0D4A0CEE8BDC5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9hebRXADhirvrFCZNBoqiYkATwgccatBHEGtvUEGz3NG/0/3230312e3134382e39362e302f32322d3234203d3e203631383534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.148.96.0/22

    Signature Algorithm: sha256WithRSAEncryption
         49:00:67:fc:87:d4:90:1b:c4:75:52:60:01:11:ee:7b:d6:08:
         24:3f:5b:26:ac:e3:34:91:30:53:89:b9:a7:10:4f:ae:54:bf:
         59:9d:58:d1:69:5c:99:64:2c:99:35:99:58:89:bf:9f:e1:cd:
         59:a1:7a:ce:96:8f:92:29:a2:d9:4c:f7:a2:76:84:2c:92:fe:
         76:ed:dc:5a:c2:bb:11:bf:a1:dc:02:7b:12:ed:21:40:b0:1d:
         b3:84:ce:92:ac:ca:2a:a7:2b:4d:1d:a1:ee:dc:bd:10:67:b0:
         49:31:d6:e3:5a:00:e0:c5:e5:56:17:8a:ae:d3:1b:02:9b:4f:
         23:99:65:bf:bc:da:54:ae:f3:3d:e9:1e:aa:4c:31:9d:90:f8:
         70:e5:8b:08:f1:b4:9a:25:3f:b4:f0:c3:06:be:ab:f9:97:71:
         d4:37:b5:c4:b9:92:ae:94:5a:26:e4:fc:8b:02:84:8b:14:d7:
         c8:8f:83:ac:1e:59:ac:42:2c:e3:e7:a7:a2:76:ac:95:b9:2c:
         26:54:ad:47:41:02:01:9e:d8:5c:cf:8e:12:57:15:64:2f:69:
         a0:09:d8:ac:cf:03:21:15:36:3a:55:a2:0d:d8:4b:3a:e9:26:
         71:e1:e0:2a:0a:20:dd:1c:b9:71:82:40:b1:d9:60:78:1e:02:
         67:f5:3f:97
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUf6maT/UtMAItyh6q0J5nd8BznR4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzE4MkE1NThFN0VCMjQ4NzA3QkUyOUQyOTFEMEQ0QTBD
RUU4QkRDNTAeFw0yNDEyMjMxNDA3NTZaFw0yNTEyMjIxNDEyNTZaMDMxMTAvBgNV
BAMTKEIzQTUxNUVCNDdDRDFFMTYwRTk1NTExRUY5NTRCNUY3Q0I4RDkxOTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDxKmvSrG8AChoNXHtHavW5xseE
i7c05eeUICb931LeA6rIaAqqkY6usxsfPcbizWZNAWR38G6+Phaevej4K7/27pjw
zAoFmSU7qhIwI5q2ypmyz9gBTVeXoY49baf7a/f24FuEq1azzZVbxm0SqzM3wgqI
XfuW5d77+kXv6iC+NqYEKQwkLg2DvGCTqr9xIfp0yhL9DNntSWtYplIgo6UE7pwI
0wl0hod9VAxztwnAhTzIdRPtdpKfnksO7Dg0kwPKOPoYLsa/5I3xXidpx4MJQj5W
Zbi30Px++yPvLhSvCXYKmiWo53CNTC2eQqJ0pIfpSkhhL0WkHLWxrU7f9X5lAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUs6UV60fNHhYOlVEe+VS198uNkZYwHwYDVR0j
BBgwFoAUcYKlWOfrJIcHvinSkdDUoM7ovcUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOWhlYlJYQURoaXJ2ckZDWk5Cb3FpWWtBVHdnY2NhdEJIRUd0dlVFR3oz
TkcvMC83MTgyQTU1OEU3RUIyNDg3MDdCRTI5RDI5MUQwRDRBMENFRThCREM1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzcxODJBNTU4RTdFQjI0ODcw
N0JFMjlEMjkxRDBENEEwQ0VFOEJEQzUuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzloZWJSWEFEaGlydnJGQ1pOQm9xaVlrQVR3Z2NjYXRCSEVHdHZVRUd6M05HLzAv
MzIzMDMxMmUzMTM0MzgyZTM5MzYyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzNjMx
MzgzNTM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCyZRgMA0GCSqGSIb3DQEBCwUAA4IBAQBJAGf8h9SQ
G8R1UmABEe571ggkP1smrOM0kTBTibmnEE+uVL9ZnVjRaVyZZCyZNZlYib+f4c1Z
oXrOlo+SKaLZTPeidoQskv527dxawrsRv6HcAnsS7SFAsB2zhM6SrMoqpytNHaHu
3L0QZ7BJMdbjWgDgxeVWF4qu0xsCm08jmWW/vNpUrvM96R6qTDGdkPhw5YsI8bSa
JT+08MMGvqv5l3HUN7XEuZKulFom5PyLAoSLFNfIj4OsHlmsQizj56eidqyVuSwm
VK1HQQIBnthcz44SVxVkL2mgCdiszwMhFTY6VaIN2Es66SZx4eAqCiDdHLlxgkCx
2WB4HgJn9T+X
-----END CERTIFICATE-----
Generated at Sat Apr 5 10:30:19 2025 by rpki-client