Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AhcSVgA7GUH4qkAsksjrCbXFuGNxWSfkCMQZ5LUU6xvi/1/3133382e3235352e3232322e302f32332d3233203d3e20323633393934.roa
File:                     3133382e3235352e3232322e302f32332d3233203d3e20323633393934.roa (raw, json)
Hash identifier:          xCfMNNlfJRGJdybQOQ6TA499+s1V3nmlROUJcyt6ZDE=
Subject key identifier:   1C:39:DC:BB:03:4F:62:DC:77:91:89:71:C0:54:A2:65:E3:33:01:46
Certificate issuer:       /CN=6933A3E9616B92D4A6606885C3C206355CC19035
Certificate serial:       4AFCE644F92BF21A4417EA881B5A9159A6D20625
Authority key identifier: 69:33:A3:E9:61:6B:92:D4:A6:60:68:85:C3:C2:06:35:5C:C1:90:35
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6933A3E9616B92D4A6606885C3C206355CC19035.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AhcSVgA7GUH4qkAsksjrCbXFuGNxWSfkCMQZ5LUU6xvi/1/3133382e3235352e3232322e302f32332d3233203d3e20323633393934.roa
Signing time:             Wed 05 Mar 2025 19:00:00 +0000
ROA not before:           Wed 05 Mar 2025 18:55:00 +0000
ROA not after:            Wed 04 Mar 2026 19:00:00 +0000
asID:                     263994
IP address blocks:        138.255.222.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:fc:e6:44:f9:2b:f2:1a:44:17:ea:88:1b:5a:91:59:a6:d2:06:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6933A3E9616B92D4A6606885C3C206355CC19035
        Validity
            Not Before: Mar  5 18:55:00 2025 GMT
            Not After : Mar  4 19:00:00 2026 GMT
        Subject: CN=1C39DCBB034F62DC77918971C054A265E3330146
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:10:49:b2:1c:a4:d0:2f:c3:c8:f0:66:b3:9a:
                    03:7c:d1:4f:47:9a:92:3d:79:13:09:8a:c5:49:92:
                    f3:b3:3b:84:ba:6e:85:22:f5:e5:91:b3:b9:a3:c2:
                    30:90:87:a2:5c:61:a6:86:a5:ff:6f:e3:5f:e0:65:
                    e3:d8:1f:38:13:e1:ef:0c:44:d7:6d:e9:94:46:af:
                    49:7e:87:2b:d8:bb:1b:bf:85:97:43:d3:d4:71:db:
                    5c:dc:bc:71:29:bd:c5:36:22:82:17:72:43:12:43:
                    92:e8:11:87:7d:53:87:10:96:cd:c2:1d:60:dd:6f:
                    f5:34:df:ea:c0:84:81:c9:ee:77:46:4c:95:9e:c1:
                    c5:22:2e:5a:29:b5:3b:96:ea:9e:0b:74:59:a7:f3:
                    ce:03:46:f5:9e:a7:4d:4f:82:c0:77:3d:1d:01:ca:
                    56:be:c4:4e:21:76:58:be:a1:c5:71:6c:a5:bb:7c:
                    ef:fb:d3:96:18:63:fb:9d:88:30:b3:a7:57:2e:37:
                    56:4e:5e:ea:10:28:21:b3:8c:7c:f9:fc:f0:01:7e:
                    9e:97:e1:cd:6a:7b:5e:1a:3d:70:a0:e5:5d:71:5f:
                    13:23:ee:52:f8:ca:a3:6a:67:6f:fe:c1:49:4a:2d:
                    9c:6c:c0:92:ea:07:f9:a0:18:e3:5a:78:67:7f:5a:
                    16:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:39:DC:BB:03:4F:62:DC:77:91:89:71:C0:54:A2:65:E3:33:01:46
            X509v3 Authority Key Identifier:
                keyid:69:33:A3:E9:61:6B:92:D4:A6:60:68:85:C3:C2:06:35:5C:C1:90:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AhcSVgA7GUH4qkAsksjrCbXFuGNxWSfkCMQZ5LUU6xvi/1/6933A3E9616B92D4A6606885C3C206355CC19035.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6933A3E9616B92D4A6606885C3C206355CC19035.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AhcSVgA7GUH4qkAsksjrCbXFuGNxWSfkCMQZ5LUU6xvi/1/3133382e3235352e3232322e302f32332d3233203d3e20323633393934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.255.222.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3f:1d:13:51:bc:de:51:d3:6f:db:08:a6:d8:6f:6f:f1:b9:d1:
         ad:9f:c6:85:68:96:b1:a4:c7:ce:35:e3:35:17:e1:59:78:03:
         41:70:d6:3a:6c:83:0b:34:7a:da:6a:c6:55:7f:55:a3:dd:cd:
         81:38:8d:eb:c4:44:6f:41:1d:72:47:d6:14:5d:95:f2:5e:b1:
         d7:8c:da:e1:d7:63:18:eb:28:bc:aa:81:8b:d3:4f:ff:45:58:
         6d:23:38:15:dc:59:ab:07:49:68:6b:d9:59:30:a6:6d:81:ed:
         c1:61:7f:25:dc:cd:eb:fe:02:2a:21:fa:e3:70:37:78:d8:da:
         d0:4e:72:69:9d:12:ba:e1:95:cc:4c:4a:9b:1c:32:b0:33:92:
         16:92:f1:b4:98:5b:32:6b:33:dd:e9:4d:11:25:29:c1:f6:09:
         fa:a4:6e:b3:cd:ba:49:fb:63:eb:e8:5e:7a:98:a9:db:3c:11:
         55:8d:65:4d:f9:32:94:92:df:30:a1:5a:66:ef:b7:38:f7:7b:
         a9:a5:5a:67:5b:a2:06:84:0a:25:e2:79:c7:1e:31:90:b6:3b:
         bf:58:13:d9:64:40:12:4c:e6:94:b0:6f:d5:b8:b8:d5:6c:c1:
         09:86:76:df:a8:da:39:bc:b8:8c:44:7c:36:ae:54:8a:e8:07:
         8d:8e:89:ba
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUSvzmRPkr8hpEF+qIG1qRWabSBiUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjkzM0EzRTk2MTZCOTJENEE2NjA2ODg1QzNDMjA2MzU1
Q0MxOTAzNTAeFw0yNTAzMDUxODU1MDBaFw0yNjAzMDQxOTAwMDBaMDMxMTAvBgNV
BAMTKDFDMzlEQ0JCMDM0RjYyREM3NzkxODk3MUMwNTRBMjY1RTMzMzAxNDYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDiEEmyHKTQL8PI8GazmgN80U9H
mpI9eRMJisVJkvOzO4S6boUi9eWRs7mjwjCQh6JcYaaGpf9v41/gZePYHzgT4e8M
RNdt6ZRGr0l+hyvYuxu/hZdD09Rx21zcvHEpvcU2IoIXckMSQ5LoEYd9U4cQls3C
HWDdb/U03+rAhIHJ7ndGTJWewcUiLloptTuW6p4LdFmn884DRvWep01PgsB3PR0B
yla+xE4hdli+ocVxbKW7fO/705YYY/udiDCzp1cuN1ZOXuoQKCGzjHz5/PABfp6X
4c1qe14aPXCg5V1xXxMj7lL4yqNqZ2/+wUlKLZxswJLqB/mgGONaeGd/WhYXAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUHDncuwNPYtx3kYlxwFSiZeMzAUYwHwYDVR0j
BBgwFoAUaTOj6WFrktSmYGiFw8IGNVzBkDUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQWhjU1ZnQTdHVUg0cWtBc2tzanJDYlhGdUdOeFdTZmtDTVFaNUxVVTZ4
dmkvMS82OTMzQTNFOTYxNkI5MkQ0QTY2MDY4ODVDM0MyMDYzNTVDQzE5MDM1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzY5MzNBM0U5NjE2QjkyRDRB
NjYwNjg4NUMzQzIwNjM1NUNDMTkwMzUuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0FoY1NWZ0E3R1VINHFrQXNrc2pyQ2JYRnVHTnhXU2ZrQ01RWjVMVVU2eHZpLzEv
MzEzMzM4MmUzMjM1MzUyZTMyMzIzMjJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDMy
MzYzMzM5MzkzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAYr/3jANBgkqhkiG9w0BAQsFAAOCAQEAPx0T
UbzeUdNv2wim2G9v8bnRrZ/GhWiWsaTHzjXjNRfhWXgDQXDWOmyDCzR62mrGVX9V
o93NgTiN68REb0EdckfWFF2V8l6x14za4ddjGOsovKqBi9NP/0VYbSM4FdxZqwdJ
aGvZWTCmbYHtwWF/JdzN6/4CKiH643A3eNja0E5yaZ0SuuGVzExKmxwysDOSFpLx
tJhbMmsz3elNESUpwfYJ+qRus826Sftj6+heepip2zwRVY1lTfkylJLfMKFaZu+3
OPd7qaVaZ1uiBoQKJeJ5xx4xkLY7v1gT2WRAEkzmlLBv1bi41WzBCYZ236jaOby4
jER8Nq5UiugHjY6Jug==
-----END CERTIFICATE-----
Generated at Sun Apr 6 16:39:28 2025 by rpki-client