Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BN7qJxmo7eGC1j358Q8RB3nXCJX32EYM4Bx4Ca6BKypU/1/3138372e39352e302e302f32302d3234203d3e203533303830.roa
File:                     3138372e39352e302e302f32302d3234203d3e203533303830.roa (raw, json)
Hash identifier:          j6CJKPq6wq+CX2ry/v0U+b8kq4iLxdxV8XtbXhKmZKk=
Subject key identifier:   92:34:50:B0:66:55:69:EB:4D:AE:21:C6:E0:57:89:E1:1F:8C:66:AB
Certificate issuer:       /CN=AA9BC515E383756EA5295CF845F5D0BB08BCEA70
Certificate serial:       1932C218B03832D9D4A7E3A940E4086F9CF00F3D
Authority key identifier: AA:9B:C5:15:E3:83:75:6E:A5:29:5C:F8:45:F5:D0:BB:08:BC:EA:70
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AA9BC515E383756EA5295CF845F5D0BB08BCEA70.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BN7qJxmo7eGC1j358Q8RB3nXCJX32EYM4Bx4Ca6BKypU/1/3138372e39352e302e302f32302d3234203d3e203533303830.roa
Signing time:             Fri 03 May 2024 20:05:00 +0000
ROA not before:           Fri 03 May 2024 20:00:00 +0000
ROA not after:            Fri 02 May 2025 20:05:00 +0000
asID:                     53080
IP address blocks:        187.95.0.0/20 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:32:c2:18:b0:38:32:d9:d4:a7:e3:a9:40:e4:08:6f:9c:f0:0f:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AA9BC515E383756EA5295CF845F5D0BB08BCEA70
        Validity
            Not Before: May  3 20:00:00 2024 GMT
            Not After : May  2 20:05:00 2025 GMT
        Subject: CN=923450B0665569EB4DAE21C6E05789E11F8C66AB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:58:a1:8c:7c:78:f1:60:37:db:b4:fa:d5:03:
                    2b:5e:d7:1a:91:20:26:4e:39:ca:68:15:3c:be:fb:
                    72:1b:91:f8:cd:82:27:30:24:47:23:29:24:44:00:
                    51:66:e9:6e:af:2f:f6:39:96:e6:93:76:96:7f:f7:
                    c6:b7:78:a5:74:f0:bd:99:50:24:26:45:c7:cf:87:
                    84:e8:84:cd:5d:66:0c:7a:ae:cf:59:45:79:4c:d9:
                    d9:10:4a:c0:25:a8:f1:b1:15:4e:a4:65:15:0c:37:
                    c8:77:fb:79:bc:1f:c2:9b:b5:2f:75:ea:cc:f5:6f:
                    56:f8:0c:74:f7:d1:f7:0b:c9:e8:be:9d:c8:6e:26:
                    d5:95:59:aa:cc:57:2f:09:ab:1a:35:44:2d:b2:02:
                    0a:dd:ce:cf:87:25:10:43:70:02:c2:af:70:b0:58:
                    fa:85:f5:68:9f:4d:64:81:b6:06:65:01:6b:06:ff:
                    9d:d8:41:48:43:60:45:7a:1d:f9:b4:c0:50:15:6e:
                    34:94:f4:6e:27:c0:87:28:f2:5b:55:1c:65:cd:e4:
                    f7:fb:da:20:4c:6c:c6:4e:5e:5e:af:91:b9:08:8f:
                    0c:79:ff:ce:a6:37:da:9d:65:f4:e8:b9:5b:22:90:
                    6f:c7:9e:00:5a:ed:91:1d:29:ad:81:5f:0a:49:ac:
                    7b:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:34:50:B0:66:55:69:EB:4D:AE:21:C6:E0:57:89:E1:1F:8C:66:AB
            X509v3 Authority Key Identifier:
                keyid:AA:9B:C5:15:E3:83:75:6E:A5:29:5C:F8:45:F5:D0:BB:08:BC:EA:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BN7qJxmo7eGC1j358Q8RB3nXCJX32EYM4Bx4Ca6BKypU/1/AA9BC515E383756EA5295CF845F5D0BB08BCEA70.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AA9BC515E383756EA5295CF845F5D0BB08BCEA70.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BN7qJxmo7eGC1j358Q8RB3nXCJX32EYM4Bx4Ca6BKypU/1/3138372e39352e302e302f32302d3234203d3e203533303830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.95.0.0/20

    Signature Algorithm: sha256WithRSAEncryption
         18:51:55:d3:30:eb:60:6c:62:23:23:93:98:2c:72:8a:b7:6b:
         c1:4a:c1:dc:b9:fd:81:88:a4:02:78:76:b3:68:e6:39:39:d5:
         66:05:bd:23:d2:88:67:48:09:ae:fe:48:a6:b0:5c:26:ff:2b:
         7b:ff:41:7d:4c:f0:bc:73:12:6e:fc:23:ac:88:de:90:87:5d:
         3c:d2:39:e0:aa:93:47:7d:db:e5:09:e0:52:8b:fb:15:48:59:
         a0:36:cb:12:04:3d:e7:05:bc:a6:69:15:23:5a:ad:1e:af:4e:
         b4:06:bf:b6:82:04:0d:7a:d8:cf:b4:7b:ed:8d:d5:31:04:40:
         82:80:bd:a6:e2:05:45:e1:72:de:cf:c1:1f:41:c9:fe:df:92:
         ca:07:5c:b4:cd:15:76:99:f9:9c:39:41:22:3e:fc:57:40:da:
         62:9a:09:49:4c:5f:9b:4f:a2:98:46:63:4d:d2:cf:31:ec:51:
         96:6c:c3:3a:bb:ae:25:18:c4:43:60:36:62:a3:6e:95:6c:75:
         3f:18:66:5d:04:78:14:cd:d4:e9:8d:2d:95:c3:b1:42:67:f6:
         65:23:54:dd:a1:dd:08:db:97:79:79:49:17:07:b4:1d:dc:d4:
         cf:99:75:27:85:2a:83:e8:69:34:09:11:27:6b:5d:f1:ec:ae:
         b0:f5:71:f6
-----BEGIN CERTIFICATE-----
MIIFQTCCBCmgAwIBAgIUGTLCGLA4MtnUp+OpQOQIb5zwDz0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUE5QkM1MTVFMzgzNzU2RUE1Mjk1Q0Y4NDVGNUQwQkIw
OEJDRUE3MDAeFw0yNDA1MDMyMDAwMDBaFw0yNTA1MDIyMDA1MDBaMDMxMTAvBgNV
BAMTKDkyMzQ1MEIwNjY1NTY5RUI0REFFMjFDNkUwNTc4OUUxMUY4QzY2QUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCIWKGMfHjxYDfbtPrVAyte1xqR
ICZOOcpoFTy++3IbkfjNgicwJEcjKSREAFFm6W6vL/Y5luaTdpZ/98a3eKV08L2Z
UCQmRcfPh4TohM1dZgx6rs9ZRXlM2dkQSsAlqPGxFU6kZRUMN8h3+3m8H8KbtS91
6sz1b1b4DHT30fcLyei+nchuJtWVWarMVy8Jqxo1RC2yAgrdzs+HJRBDcALCr3Cw
WPqF9WifTWSBtgZlAWsG/53YQUhDYEV6Hfm0wFAVbjSU9G4nwIco8ltVHGXN5Pf7
2iBMbMZOXl6vkbkIjwx5/86mN9qdZfTouVsikG/HngBa7ZEdKa2BXwpJrHsDAgMB
AAGjggJLMIICRzAdBgNVHQ4EFgQUkjRQsGZVaetNriHG4FeJ4R+MZqswHwYDVR0j
BBgwFoAUqpvFFeODdW6lKVz4RfXQuwi86nAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQk43cUp4bW83ZUdDMWozNThROFJCM25YQ0pYMzJFWU00Qng0Q2E2Qkt5
cFUvMS9BQTlCQzUxNUUzODM3NTZFQTUyOTVDRjg0NUY1RDBCQjA4QkNFQTcwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0FBOUJDNTE1RTM4Mzc1NkVB
NTI5NUNGODQ1RjVEMEJCMDhCQ0VBNzAuY2VyMIGoBggrBgEFBQcBCwSBmzCBmDCB
lQYIKwYBBQUHMAuGgYhyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0JON3FKeG1vN2VHQzFqMzU4UThSQjNuWENKWDMyRVlNNEJ4NENhNkJLeXBVLzEv
MzEzODM3MmUzOTM1MmUzMDJlMzAyZjMyMzAyZDMyMzQyMDNkM2UyMDM1MzMzMDM4
MzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAS7XwAwDQYJKoZIhvcNAQELBQADggEBABhRVdMw62BsYiMj
k5gscoq3a8FKwdy5/YGIpAJ4drNo5jk51WYFvSPSiGdICa7+SKawXCb/K3v/QX1M
8LxzEm78I6yI3pCHXTzSOeCqk0d92+UJ4FKL+xVIWaA2yxIEPecFvKZpFSNarR6v
TrQGv7aCBA162M+0e+2N1TEEQIKAvabiBUXhct7PwR9Byf7fksoHXLTNFXaZ+Zw5
QSI+/FdA2mKaCUlMX5tPophGY03SzzHsUZZswzq7riUYxENgNmKjbpVsdT8YZl0E
eBTN1OmNLZXDsUJn9mUjVN2h3Qjbl3l5SRcHtB3c1M+ZdSeFKoPoaTQJESdrXfHs
rrD1cfY=
-----END CERTIFICATE-----
Generated at Wed Apr 9 06:09:28 2025 by rpki-client