Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AyUgM7WkFgAw9ptNDnsqo5ndHVSpWCuXTAo5BRz37HjB/2/3134332e3133372e3232342e302f32322d3234203d3e20323634303534.roa
File:                     3134332e3133372e3232342e302f32322d3234203d3e20323634303534.roa (raw, json)
Hash identifier:          MLr/e726DlmXGpAXi3TDxN6Kuf0F9Ycgojy5hk1Go0U=
Subject key identifier:   4D:DE:CC:A5:51:D1:5C:29:97:6E:F0:94:95:34:D3:0E:46:B2:92:9B
Certificate issuer:       /CN=E8870E286595E32BD9C475F51CDD6E36EF81A6FA
Certificate serial:       01C25707223A1C9D8AE9AD87F22393AD73673D50
Authority key identifier: E8:87:0E:28:65:95:E3:2B:D9:C4:75:F5:1C:DD:6E:36:EF:81:A6:FA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E8870E286595E32BD9C475F51CDD6E36EF81A6FA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AyUgM7WkFgAw9ptNDnsqo5ndHVSpWCuXTAo5BRz37HjB/2/3134332e3133372e3232342e302f32322d3234203d3e20323634303534.roa
Signing time:             Thu 06 Mar 2025 06:09:42 +0000
ROA not before:           Thu 06 Mar 2025 06:04:42 +0000
ROA not after:            Thu 05 Mar 2026 06:09:42 +0000
asID:                     264054
IP address blocks:        143.137.224.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:c2:57:07:22:3a:1c:9d:8a:e9:ad:87:f2:23:93:ad:73:67:3d:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E8870E286595E32BD9C475F51CDD6E36EF81A6FA
        Validity
            Not Before: Mar  6 06:04:42 2025 GMT
            Not After : Mar  5 06:09:42 2026 GMT
        Subject: CN=4DDECCA551D15C29976EF0949534D30E46B2929B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:74:82:b3:27:22:58:66:fe:63:20:69:e7:c9:
                    f1:a0:c4:32:53:dd:9c:68:29:20:91:1c:a2:6a:16:
                    cb:81:9b:95:0d:a5:fc:e5:1d:d5:34:ab:d2:4a:34:
                    49:50:a1:35:e5:8e:7e:68:24:8f:2a:38:63:d4:31:
                    43:86:bf:b8:1a:5e:83:27:29:51:2b:e4:21:e1:00:
                    84:0d:63:97:90:35:ca:ca:ca:d7:63:cd:7e:e6:76:
                    4e:56:6c:67:20:64:88:e0:89:69:be:c6:d0:6e:c4:
                    73:74:93:f2:2f:21:dc:10:8f:e1:30:b0:35:43:28:
                    7f:7f:38:9a:eb:51:43:66:2a:33:c6:e5:73:7a:9a:
                    68:47:96:be:42:68:59:5f:ab:87:cf:42:3f:98:d0:
                    d7:92:fd:41:3f:5e:90:83:3a:4f:44:b3:0d:0b:03:
                    74:5c:7a:8a:d8:69:a5:8d:a9:c5:f2:87:53:a1:d3:
                    68:9a:65:43:da:cc:d2:cd:fb:69:d9:19:4d:36:f4:
                    2b:dc:74:12:2d:96:30:d8:0c:ad:42:c8:3a:19:6a:
                    08:f9:f8:76:b3:a2:bf:c3:41:43:da:f6:75:12:a3:
                    e0:fc:a2:3c:62:6a:6d:e1:a0:28:05:80:7e:6f:ca:
                    48:9d:26:3b:75:09:9c:25:ce:03:38:7d:a7:87:a3:
                    e5:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:DE:CC:A5:51:D1:5C:29:97:6E:F0:94:95:34:D3:0E:46:B2:92:9B
            X509v3 Authority Key Identifier:
                keyid:E8:87:0E:28:65:95:E3:2B:D9:C4:75:F5:1C:DD:6E:36:EF:81:A6:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AyUgM7WkFgAw9ptNDnsqo5ndHVSpWCuXTAo5BRz37HjB/2/E8870E286595E32BD9C475F51CDD6E36EF81A6FA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E8870E286595E32BD9C475F51CDD6E36EF81A6FA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AyUgM7WkFgAw9ptNDnsqo5ndHVSpWCuXTAo5BRz37HjB/2/3134332e3133372e3232342e302f32322d3234203d3e20323634303534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.137.224.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a3:8f:9d:09:e6:f1:d3:39:d1:40:b1:d9:94:31:0c:3e:a2:1f:
         18:4b:82:10:8f:b1:cf:9e:0b:9b:59:0f:1d:8b:42:70:21:d4:
         49:42:32:73:1b:6f:f3:21:bc:5c:2a:49:c2:06:2e:23:08:0b:
         c6:f1:68:ee:e6:44:55:22:21:6b:91:bb:c1:a8:95:91:71:db:
         70:14:21:95:31:09:b2:cd:3e:cf:82:8e:b5:3b:af:de:4d:55:
         08:39:ef:f0:40:8e:2f:e1:4e:91:17:7c:05:0c:e8:2a:3a:9d:
         46:4e:d0:fd:f9:8b:5d:74:33:e4:8c:7b:56:bf:8b:7f:50:72:
         e4:87:7f:72:72:d9:9c:20:66:4f:a7:af:0e:90:9e:a0:c2:b3:
         2b:8d:f6:42:2c:38:c4:f8:c2:48:58:7a:8c:5d:56:3f:da:2e:
         63:95:60:f9:41:53:a8:f4:19:c8:33:df:35:13:e9:d1:51:57:
         dd:3d:90:65:78:c9:d3:49:18:92:6d:f4:76:0b:0a:b3:9a:b9:
         37:80:7e:89:6b:1c:d8:06:0d:32:dd:c1:65:36:9a:7a:b7:eb:
         0c:2b:b9:d7:50:92:6d:7a:c0:22:93:00:d4:49:ca:31:eb:f6:
         10:f0:67:50:62:48:36:c0:56:83:b0:01:59:13:b2:c4:bb:2d:
         fe:9c:65:b2
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUAcJXByI6HJ2K6a2H8iOTrXNnPVAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTg4NzBFMjg2NTk1RTMyQkQ5QzQ3NUY1MUNERDZFMzZF
RjgxQTZGQTAeFw0yNTAzMDYwNjA0NDJaFw0yNjAzMDUwNjA5NDJaMDMxMTAvBgNV
BAMTKDREREVDQ0E1NTFEMTVDMjk5NzZFRjA5NDk1MzREMzBFNDZCMjkyOUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDldIKzJyJYZv5jIGnnyfGgxDJT
3ZxoKSCRHKJqFsuBm5UNpfzlHdU0q9JKNElQoTXljn5oJI8qOGPUMUOGv7gaXoMn
KVEr5CHhAIQNY5eQNcrKytdjzX7mdk5WbGcgZIjgiWm+xtBuxHN0k/IvIdwQj+Ew
sDVDKH9/OJrrUUNmKjPG5XN6mmhHlr5CaFlfq4fPQj+Y0NeS/UE/XpCDOk9Esw0L
A3RceorYaaWNqcXyh1Oh02iaZUPazNLN+2nZGU029CvcdBItljDYDK1CyDoZagj5
+Hazor/DQUPa9nUSo+D8ojxiam3hoCgFgH5vykidJjt1CZwlzgM4faeHo+WLAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUTd7MpVHRXCmXbvCUlTTTDkaykpswHwYDVR0j
BBgwFoAU6IcOKGWV4yvZxHX1HN1uNu+BpvowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQXlVZ003V2tGZ0F3OXB0TkRuc3FvNW5kSFZTcFdDdVhUQW81QlJ6MzdI
akIvMi9FODg3MEUyODY1OTVFMzJCRDlDNDc1RjUxQ0RENkUzNkVGODFBNkZBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0U4ODcwRTI4NjU5NUUzMkJE
OUM0NzVGNTFDREQ2RTM2RUY4MUE2RkEuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0F5VWdNN1drRmdBdzlwdE5EbnNxbzVuZEhWU3BXQ3VYVEFvNUJSejM3SGpCLzIv
MzEzNDMzMmUzMTMzMzcyZTMyMzIzNDJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDMy
MzYzNDMwMzUzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAo+J4DANBgkqhkiG9w0BAQsFAAOCAQEAo4+d
Cebx0znRQLHZlDEMPqIfGEuCEI+xz54Lm1kPHYtCcCHUSUIycxtv8yG8XCpJwgYu
IwgLxvFo7uZEVSIha5G7waiVkXHbcBQhlTEJss0+z4KOtTuv3k1VCDnv8ECOL+FO
kRd8BQzoKjqdRk7Q/fmLXXQz5Ix7Vr+Lf1By5Id/cnLZnCBmT6evDpCeoMKzK432
Qiw4xPjCSFh6jF1WP9ouY5Vg+UFTqPQZyDPfNRPp0VFX3T2QZXjJ00kYkm30dgsK
s5q5N4B+iWsc2AYNMt3BZTaaerfrDCu511CSbXrAIpMA1EnKMev2EPBnUGJINsBW
g7ABWROyxLst/pxlsg==
-----END CERTIFICATE-----
Generated at Mon Apr 7 03:14:05 2025 by rpki-client