Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/3133382e39342e3130382e302f32322d3234203d3e20323632323933.roa
File:                     3133382e39342e3130382e302f32322d3234203d3e20323632323933.roa (raw, json)
Hash identifier:          ooWHqOyffnNYCUY5KV9wpHCR4r+5pp0XEYYWVLWByIo=
Subject key identifier:   E9:B1:E0:BC:4E:D6:5C:1D:5E:F9:E0:AE:6D:F9:40:E3:3E:7E:CA:5F
Certificate issuer:       /CN=8EA97C26E58799D3765EA8E38C553BF596FE990E
Certificate serial:       77ADF3A47ED0CEA1A74E164680DACE6C18FC6AAF
Authority key identifier: 8E:A9:7C:26:E5:87:99:D3:76:5E:A8:E3:8C:55:3B:F5:96:FE:99:0E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8EA97C26E58799D3765EA8E38C553BF596FE990E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/3133382e39342e3130382e302f32322d3234203d3e20323632323933.roa
Signing time:             Fri 05 Jul 2024 15:18:00 +0000
ROA not before:           Fri 05 Jul 2024 15:13:00 +0000
ROA not after:            Fri 04 Jul 2025 15:18:00 +0000
asID:                     262293
IP address blocks:        138.94.108.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:ad:f3:a4:7e:d0:ce:a1:a7:4e:16:46:80:da:ce:6c:18:fc:6a:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8EA97C26E58799D3765EA8E38C553BF596FE990E
        Validity
            Not Before: Jul  5 15:13:00 2024 GMT
            Not After : Jul  4 15:18:00 2025 GMT
        Subject: CN=E9B1E0BC4ED65C1D5EF9E0AE6DF940E33E7ECA5F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:93:31:74:9e:a4:10:b5:d8:55:62:f9:2c:87:
                    78:fb:3f:ea:92:08:ff:b9:d1:ac:de:fc:6f:9c:9a:
                    35:bc:4c:c9:a5:9e:cc:44:ce:69:eb:64:e6:99:77:
                    9a:01:ba:c2:88:a9:e1:79:5e:67:26:93:ed:39:9c:
                    34:43:4f:21:45:3a:d2:57:9a:e1:56:e1:d8:9b:c4:
                    4d:1b:33:0e:25:95:44:0e:b2:28:8c:83:07:7c:94:
                    97:ad:7f:d0:11:5f:1c:40:88:3f:4c:17:b4:eb:d8:
                    82:2c:42:6e:d8:fa:1e:d7:ba:5a:3b:f3:18:92:1a:
                    cc:4c:da:f3:cc:66:9b:7a:88:a8:77:6d:0f:1d:e9:
                    d1:db:7a:4a:b5:a5:58:3e:9d:c3:c1:d7:6a:26:2d:
                    03:30:e4:ed:4b:66:27:b4:25:66:f9:c0:8a:69:a1:
                    26:c2:58:dd:5d:73:2f:4b:e6:79:a5:8e:99:49:8b:
                    28:d8:db:4a:fb:b9:76:98:34:79:f7:ff:ea:56:91:
                    6f:46:99:e0:a1:e0:f9:2c:c5:05:e9:68:1d:90:71:
                    08:70:43:07:70:42:4c:9d:fe:54:70:6b:b2:da:24:
                    0b:4f:95:9b:10:1d:a0:4f:8d:3c:f2:5f:86:94:52:
                    03:00:6c:5a:07:80:87:0e:af:f9:5d:30:06:9e:f7:
                    fa:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:B1:E0:BC:4E:D6:5C:1D:5E:F9:E0:AE:6D:F9:40:E3:3E:7E:CA:5F
            X509v3 Authority Key Identifier:
                keyid:8E:A9:7C:26:E5:87:99:D3:76:5E:A8:E3:8C:55:3B:F5:96:FE:99:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/8EA97C26E58799D3765EA8E38C553BF596FE990E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8EA97C26E58799D3765EA8E38C553BF596FE990E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/3133382e39342e3130382e302f32322d3234203d3e20323632323933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.94.108.0/22

    Signature Algorithm: sha256WithRSAEncryption
         49:34:68:e2:08:2a:2b:11:9a:ec:e2:9d:83:fe:8c:b9:67:34:
         f8:b4:dd:81:42:12:3c:04:e2:07:73:c7:8b:53:77:aa:cc:5b:
         8b:10:75:11:03:29:a7:a8:64:49:c6:11:3c:c8:a8:3a:12:83:
         7c:0b:b1:1e:ad:93:b9:ef:83:6e:d9:92:42:f2:62:b6:0d:b2:
         89:c8:a6:32:f0:0d:ef:42:50:77:43:ae:7a:db:fe:9d:ba:d3:
         dc:87:47:fb:9e:df:4e:3e:f5:6a:1e:68:5d:e9:a4:a2:9d:53:
         ea:a6:47:04:a1:39:47:5d:f7:8c:e2:8a:d7:aa:b3:c7:28:4b:
         6e:f9:94:99:c5:b3:07:cc:c3:11:0a:ca:3e:52:ac:5b:50:0b:
         9d:5e:59:43:19:88:81:4f:6a:fb:2a:b2:69:6b:c5:3b:a6:74:
         f7:15:48:83:81:7e:e0:22:14:1a:8c:5b:7e:80:11:5b:ff:25:
         9a:71:02:92:f6:b9:50:4a:d7:ad:6b:f2:b0:7a:bf:55:b1:8c:
         67:0c:3a:9b:89:c0:51:3a:8d:03:7c:55:5a:ef:a6:9d:6c:c5:
         f1:34:2b:b1:bd:b7:1f:94:12:ca:6e:9f:03:96:54:95:c0:ce:
         77:00:a4:93:fc:ef:4f:da:82:0c:48:8d:e0:28:12:2c:0f:6e:
         d6:a5:a6:90
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUd63zpH7QzqGnThZGgNrObBj8aq8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEVBOTdDMjZFNTg3OTlEMzc2NUVBOEUzOEM1NTNCRjU5
NkZFOTkwRTAeFw0yNDA3MDUxNTEzMDBaFw0yNTA3MDQxNTE4MDBaMDMxMTAvBgNV
BAMTKEU5QjFFMEJDNEVENjVDMUQ1RUY5RTBBRTZERjk0MEUzM0U3RUNBNUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7kzF0nqQQtdhVYvksh3j7P+qS
CP+50aze/G+cmjW8TMmlnsxEzmnrZOaZd5oBusKIqeF5Xmcmk+05nDRDTyFFOtJX
muFW4dibxE0bMw4llUQOsiiMgwd8lJetf9ARXxxAiD9MF7Tr2IIsQm7Y+h7Xulo7
8xiSGsxM2vPMZpt6iKh3bQ8d6dHbekq1pVg+ncPB12omLQMw5O1LZie0JWb5wIpp
oSbCWN1dcy9L5nmljplJiyjY20r7uXaYNHn3/+pWkW9GmeCh4PksxQXpaB2QcQhw
QwdwQkyd/lRwa7LaJAtPlZsQHaBPjTzyX4aUUgMAbFoHgIcOr/ldMAae9/pDAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU6bHgvE7WXB1e+eCubflA4z5+yl8wHwYDVR0j
BBgwFoAUjql8JuWHmdN2XqjjjFU79Zb+mQ4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQXpyeUE1M3ZyZ3RRd3hFTkFjdzRzOXhFZlF2cmh6VEdUS243V1ZYTERk
SGgvMC84RUE5N0MyNkU1ODc5OUQzNzY1RUE4RTM4QzU1M0JGNTk2RkU5OTBFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzhFQTk3QzI2RTU4Nzk5RDM3
NjVFQThFMzhDNTUzQkY1OTZGRTk5MEUuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0F6cnlBNTN2cmd0UXd4RU5BY3c0czl4RWZRdnJoelRHVEtuN1dWWExEZEhoLzAv
MzEzMzM4MmUzOTM0MmUzMTMwMzgyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM2
MzIzMjM5MzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAKKXmwwDQYJKoZIhvcNAQELBQADggEBAEk0aOII
KisRmuzinYP+jLlnNPi03YFCEjwE4gdzx4tTd6rMW4sQdREDKaeoZEnGETzIqDoS
g3wLsR6tk7nvg27ZkkLyYrYNsonIpjLwDe9CUHdDrnrb/p2609yHR/ue304+9Woe
aF3ppKKdU+qmRwShOUdd94ziiteqs8coS275lJnFswfMwxEKyj5SrFtQC51eWUMZ
iIFPavsqsmlrxTumdPcVSIOBfuAiFBqMW36AEVv/JZpxApL2uVBK161r8rB6v1Wx
jGcMOpuJwFE6jQN8VVrvpp1sxfE0K7G9tx+UEspunwOWVJXAzncApJP870/aggxI
jeAoEiwPbtalppA=
-----END CERTIFICATE-----
Generated at Tue Apr 8 21:50:29 2025 by rpki-client