Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BfHJA72CBUa7YWcZ1sPGbJgQmtPDRvxFJ5eXDwW7i9K5/1/3139322e3134312e3130362e302f32342d3234203d3e20323637353335.roa
File:                     3139322e3134312e3130362e302f32342d3234203d3e20323637353335.roa (raw, json)
Hash identifier:          6gfshdBfSPVtj4nZ8lifJ9kblruBbIJTliI/YQEEgrs=
Subject key identifier:   28:EC:2E:73:AE:2B:2F:51:4C:5F:97:94:2A:9B:87:1E:C9:7B:B5:C0
Certificate issuer:       /CN=24B76CD87395C0B9E7F969993DB4701E0DFBE8E3
Certificate serial:       75F3AE7D6091BC8C9CAFAF035BA52253BD396177
Authority key identifier: 24:B7:6C:D8:73:95:C0:B9:E7:F9:69:99:3D:B4:70:1E:0D:FB:E8:E3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/24B76CD87395C0B9E7F969993DB4701E0DFBE8E3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BfHJA72CBUa7YWcZ1sPGbJgQmtPDRvxFJ5eXDwW7i9K5/1/3139322e3134312e3130362e302f32342d3234203d3e20323637353335.roa
Signing time:             Thu 06 Mar 2025 09:52:47 +0000
ROA not before:           Thu 06 Mar 2025 09:47:47 +0000
ROA not after:            Thu 05 Mar 2026 09:52:47 +0000
asID:                     267535
IP address blocks:        192.141.106.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:f3:ae:7d:60:91:bc:8c:9c:af:af:03:5b:a5:22:53:bd:39:61:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24B76CD87395C0B9E7F969993DB4701E0DFBE8E3
        Validity
            Not Before: Mar  6 09:47:47 2025 GMT
            Not After : Mar  5 09:52:47 2026 GMT
        Subject: CN=28EC2E73AE2B2F514C5F97942A9B871EC97BB5C0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:f4:c2:f8:16:3b:fc:e0:cc:3e:33:7c:d5:ab:
                    ea:a3:47:69:05:7d:c4:ae:f9:73:21:11:ef:51:3b:
                    96:bf:52:de:e9:73:f7:57:93:1b:4f:a3:f2:62:e9:
                    41:14:58:1c:8d:51:0a:78:b9:f3:4e:37:89:5f:1c:
                    3d:a4:94:c8:36:83:4b:57:10:4b:f7:da:6a:db:2f:
                    30:48:5d:7a:43:2b:90:4d:4a:03:06:6c:34:31:76:
                    f0:64:2e:79:e2:05:a4:74:d4:46:c8:03:98:28:53:
                    6b:65:6e:18:a4:1e:1f:b9:3a:5c:f5:53:0a:84:ed:
                    7b:ba:61:63:5f:03:3b:80:0a:4e:5c:3e:da:39:29:
                    68:fd:e4:c5:69:de:4c:fd:f9:44:b9:8f:78:1c:fd:
                    08:15:a2:8a:69:7c:6d:ff:1e:6d:73:bb:96:8a:6d:
                    63:cf:35:80:60:f9:ca:97:eb:84:68:61:c9:52:14:
                    3f:c9:a7:0b:89:9e:aa:90:e9:4f:e7:b1:80:4f:fe:
                    cb:95:23:fb:4a:42:e4:33:93:bd:20:da:33:6f:9c:
                    75:69:29:96:92:fb:5e:71:d7:91:7d:b3:ea:d1:f4:
                    69:5a:fb:9d:c4:9e:ec:39:0e:1e:20:4c:fd:11:be:
                    ae:58:43:9d:a4:8b:24:2f:54:09:12:9b:29:e6:2f:
                    5f:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:EC:2E:73:AE:2B:2F:51:4C:5F:97:94:2A:9B:87:1E:C9:7B:B5:C0
            X509v3 Authority Key Identifier:
                keyid:24:B7:6C:D8:73:95:C0:B9:E7:F9:69:99:3D:B4:70:1E:0D:FB:E8:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BfHJA72CBUa7YWcZ1sPGbJgQmtPDRvxFJ5eXDwW7i9K5/1/24B76CD87395C0B9E7F969993DB4701E0DFBE8E3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/24B76CD87395C0B9E7F969993DB4701E0DFBE8E3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BfHJA72CBUa7YWcZ1sPGbJgQmtPDRvxFJ5eXDwW7i9K5/1/3139322e3134312e3130362e302f32342d3234203d3e20323637353335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.141.106.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0f:51:4d:e0:93:25:10:7a:71:87:b6:34:ac:ba:0e:f9:6e:40:
         23:6d:b1:2a:cf:eb:07:2a:ea:09:c3:6c:13:ab:ee:14:de:82:
         c1:fb:bd:ed:d8:1b:d4:9e:f5:50:97:4f:c1:7b:77:fc:62:34:
         00:97:64:7c:bc:72:02:0e:07:6d:e7:ff:ae:85:e3:dd:4a:6f:
         a9:9c:97:be:b3:07:56:18:01:4d:b1:90:66:44:b6:4a:52:fe:
         48:4e:cc:23:70:07:6e:24:20:3e:e0:43:ac:ff:5d:c6:50:70:
         b4:ce:a4:40:c9:9a:3e:46:50:12:83:0e:30:2a:e0:8b:27:8a:
         59:cc:5a:e6:ed:2a:1e:15:2f:18:62:ce:ab:4e:a5:69:21:5f:
         83:68:19:bb:23:60:a7:da:e8:13:ea:2e:b0:22:50:0f:19:b7:
         77:50:d0:b9:e5:a6:97:f3:15:46:55:7f:ac:f2:4b:b9:b8:c6:
         40:70:28:f6:e2:17:0a:94:31:ee:e9:24:ef:4d:c8:80:27:a4:
         f5:10:48:a5:a4:b1:19:e3:d0:b2:01:24:0d:eb:74:fe:62:f8:
         bf:1e:db:91:08:80:c6:76:cd:15:92:a1:ad:89:9b:ec:5c:25:
         9a:fa:26:54:72:7e:a5:19:5b:ea:2f:0e:3e:88:23:e2:58:3a:
         28:80:99:b6
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUdfOufWCRvIycr68DW6UiU705YXcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjRCNzZDRDg3Mzk1QzBCOUU3Rjk2OTk5M0RCNDcwMUUw
REZCRThFMzAeFw0yNTAzMDYwOTQ3NDdaFw0yNjAzMDUwOTUyNDdaMDMxMTAvBgNV
BAMTKDI4RUMyRTczQUUyQjJGNTE0QzVGOTc5NDJBOUI4NzFFQzk3QkI1QzAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDO9ML4Fjv84Mw+M3zVq+qjR2kF
fcSu+XMhEe9RO5a/Ut7pc/dXkxtPo/Ji6UEUWByNUQp4ufNON4lfHD2klMg2g0tX
EEv32mrbLzBIXXpDK5BNSgMGbDQxdvBkLnniBaR01EbIA5goU2tlbhikHh+5Olz1
UwqE7Xu6YWNfAzuACk5cPto5KWj95MVp3kz9+US5j3gc/QgVooppfG3/Hm1zu5aK
bWPPNYBg+cqX64RoYclSFD/JpwuJnqqQ6U/nsYBP/suVI/tKQuQzk70g2jNvnHVp
KZaS+15x15F9s+rR9Gla+53Enuw5Dh4gTP0Rvq5YQ52kiyQvVAkSmynmL1/hAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUKOwuc64rL1FMX5eUKpuHHsl7tcAwHwYDVR0j
BBgwFoAUJLds2HOVwLnn+WmZPbRwHg376OMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQmZISkE3MkNCVWE3WVdjWjFzUEdiSmdRbXRQRFJ2eEZKNWVYRHdXN2k5
SzUvMS8yNEI3NkNEODczOTVDMEI5RTdGOTY5OTkzREI0NzAxRTBERkJFOEUzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzI0Qjc2Q0Q4NzM5NUMwQjlF
N0Y5Njk5OTNEQjQ3MDFFMERGQkU4RTMuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0JmSEpBNzJDQlVhN1lXY1oxc1BHYkpnUW10UERSdnhGSjVlWER3VzdpOUs1LzEv
MzEzOTMyMmUzMTM0MzEyZTMxMzAzNjJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzYzNzM1MzMzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAMCNajANBgkqhkiG9w0BAQsFAAOCAQEAD1FN
4JMlEHpxh7Y0rLoO+W5AI22xKs/rByrqCcNsE6vuFN6Cwfu97dgb1J71UJdPwXt3
/GI0AJdkfLxyAg4Hbef/roXj3UpvqZyXvrMHVhgBTbGQZkS2SlL+SE7MI3AHbiQg
PuBDrP9dxlBwtM6kQMmaPkZQEoMOMCrgiyeKWcxa5u0qHhUvGGLOq06laSFfg2gZ
uyNgp9roE+ousCJQDxm3d1DQueWml/MVRlV/rPJLubjGQHAo9uIXCpQx7ukk703I
gCek9RBIpaSxGePQsgEkDet0/mL4vx7bkQiAxnbNFZKhrYmb7FwlmvomVHJ+pRlb
6i8OPogj4lg6KICZtg==
-----END CERTIFICATE-----
Generated at Sun Apr 13 02:00:18 2025 by rpki-client