Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/C7VxR6cXBC13PZMVwSRRgpFaDNNufBiKaWHBGcMAKBw/0/3133382e35392e3135352e302f32342d3234203d3e20323730383730.roa
File:                     3133382e35392e3135352e302f32342d3234203d3e20323730383730.roa (raw, json)
Hash identifier:          gRDU6K1jrBfauXHfgbuHzuu60KzxIi1reL0n2PfzwiU=
Subject key identifier:   9E:D6:5C:A9:B3:44:06:3B:1E:DC:07:6F:51:54:7B:39:9E:DF:06:69
Certificate issuer:       /CN=E639161CD5EFFE22EB2260353F5BC3F13358E8C3
Certificate serial:       2BE088476903AFEEE9EBBA2D6A006378F6D73149
Authority key identifier: E6:39:16:1C:D5:EF:FE:22:EB:22:60:35:3F:5B:C3:F1:33:58:E8:C3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E639161CD5EFFE22EB2260353F5BC3F13358E8C3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C7VxR6cXBC13PZMVwSRRgpFaDNNufBiKaWHBGcMAKBw/0/3133382e35392e3135352e302f32342d3234203d3e20323730383730.roa
Signing time:             Wed 27 Nov 2024 17:36:10 +0000
ROA not before:           Wed 27 Nov 2024 17:31:10 +0000
ROA not after:            Wed 26 Nov 2025 17:36:10 +0000
asID:                     270870
IP address blocks:        138.59.155.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:e0:88:47:69:03:af:ee:e9:eb:ba:2d:6a:00:63:78:f6:d7:31:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E639161CD5EFFE22EB2260353F5BC3F13358E8C3
        Validity
            Not Before: Nov 27 17:31:10 2024 GMT
            Not After : Nov 26 17:36:10 2025 GMT
        Subject: CN=9ED65CA9B344063B1EDC076F51547B399EDF0669
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:47:03:ab:85:2b:c4:7d:00:66:e2:bf:67:a4:
                    36:ec:d9:30:0c:ee:1f:86:df:23:b4:5c:af:c7:47:
                    5f:81:ec:52:8e:19:97:68:ff:00:bf:15:93:16:44:
                    2f:ed:80:41:63:c3:14:32:e8:5b:67:1f:91:ee:3b:
                    a2:8a:25:d3:a1:b1:43:b9:c3:1c:2d:9c:f2:ef:89:
                    a6:71:19:00:0a:66:0f:6e:81:92:10:e3:c6:eb:e5:
                    af:db:57:e3:0b:0a:c8:61:ac:f3:bf:32:a8:e0:44:
                    0a:a8:0e:46:9d:20:94:97:10:25:c7:d6:ae:0d:90:
                    37:8f:d4:78:56:9e:29:e8:74:75:15:50:c4:b2:de:
                    7b:a6:9a:75:9a:d7:e4:e7:2b:e1:ef:f5:3c:6e:4e:
                    c9:00:4c:f0:1a:e3:9a:da:de:99:8e:65:53:8b:c6:
                    a2:ae:02:80:c5:ac:62:ec:eb:0c:c6:ae:62:4e:80:
                    cb:b7:35:96:44:ab:f9:ac:b7:5c:cb:60:35:97:4d:
                    7b:39:e3:7e:d4:f3:56:01:73:65:c1:6d:16:b5:f8:
                    fa:23:ed:72:1d:e2:e1:60:a1:ea:d6:82:84:95:77:
                    8d:74:f1:06:53:6f:63:03:29:2c:0f:7a:68:41:7b:
                    2d:19:2a:38:db:a7:7e:81:96:e0:50:b2:76:d9:8b:
                    f0:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:D6:5C:A9:B3:44:06:3B:1E:DC:07:6F:51:54:7B:39:9E:DF:06:69
            X509v3 Authority Key Identifier:
                keyid:E6:39:16:1C:D5:EF:FE:22:EB:22:60:35:3F:5B:C3:F1:33:58:E8:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C7VxR6cXBC13PZMVwSRRgpFaDNNufBiKaWHBGcMAKBw/0/E639161CD5EFFE22EB2260353F5BC3F13358E8C3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E639161CD5EFFE22EB2260353F5BC3F13358E8C3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C7VxR6cXBC13PZMVwSRRgpFaDNNufBiKaWHBGcMAKBw/0/3133382e35392e3135352e302f32342d3234203d3e20323730383730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.59.155.0/24

    Signature Algorithm: sha256WithRSAEncryption
         34:28:82:8b:2f:dd:61:5c:62:f8:f5:3e:b4:51:28:b0:f8:6a:
         e0:85:ef:53:ce:e2:ca:21:43:4d:88:7c:60:82:16:bd:34:92:
         43:74:76:64:e8:70:f8:02:38:11:64:16:b8:63:9d:1a:a1:c3:
         d7:ca:b3:6f:a9:28:1c:fc:5e:47:67:22:65:d6:ff:73:76:de:
         33:ce:d3:69:9d:9a:56:b6:a2:e4:6c:83:17:f4:48:b7:bb:f7:
         1d:12:a5:10:39:bd:f8:dc:d6:aa:d7:b5:a1:5f:f5:ca:0e:d7:
         bd:c1:b6:ad:34:ad:62:85:06:ff:4e:24:3b:ce:0f:c9:6d:5f:
         ce:13:6b:d6:74:97:8a:f6:7a:b0:83:ec:36:90:a1:75:e7:35:
         a4:48:6d:e2:fb:68:33:c3:59:65:e2:cb:cf:a2:5a:9b:f1:3d:
         ac:6e:2f:31:76:1e:f1:ff:65:50:d7:2b:e4:9e:25:1d:de:03:
         87:c6:06:08:5d:31:fe:98:07:17:58:98:60:af:11:5f:1e:aa:
         6b:7f:ca:dc:54:81:0f:d8:4a:be:35:03:7f:03:91:01:ff:40:
         53:c2:d7:f2:52:87:08:f9:8a:eb:3a:f4:3a:f8:61:e9:45:b9:
         d4:86:2c:72:ea:ca:a7:af:ba:bb:f4:5c:59:e1:df:54:4c:f0:
         d0:0a:a5:4a
-----BEGIN CERTIFICATE-----
MIIFRDCCBCygAwIBAgIUK+CIR2kDr+7p67otagBjePbXMUkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTYzOTE2MUNENUVGRkUyMkVCMjI2MDM1M0Y1QkMzRjEz
MzU4RThDMzAeFw0yNDExMjcxNzMxMTBaFw0yNTExMjYxNzM2MTBaMDMxMTAvBgNV
BAMTKDlFRDY1Q0E5QjM0NDA2M0IxRURDMDc2RjUxNTQ3QjM5OUVERjA2NjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCFRwOrhSvEfQBm4r9npDbs2TAM
7h+G3yO0XK/HR1+B7FKOGZdo/wC/FZMWRC/tgEFjwxQy6FtnH5HuO6KKJdOhsUO5
wxwtnPLviaZxGQAKZg9ugZIQ48br5a/bV+MLCshhrPO/MqjgRAqoDkadIJSXECXH
1q4NkDeP1HhWninodHUVUMSy3nummnWa1+TnK+Hv9TxuTskATPAa45ra3pmOZVOL
xqKuAoDFrGLs6wzGrmJOgMu3NZZEq/mst1zLYDWXTXs5437U81YBc2XBbRa1+Poj
7XId4uFgoerWgoSVd4108QZTb2MDKSwPemhBey0ZKjjbp36BluBQsnbZi/DDAgMB
AAGjggJOMIICSjAdBgNVHQ4EFgQUntZcqbNEBjse3AdvUVR7OZ7fBmkwHwYDVR0j
BBgwFoAU5jkWHNXv/iLrImA1P1vD8TNY6MMwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9DN1Z4UjZjWEJDMTNQWk1Wd1NSUmdwRmFETk51ZkJpS2FXSEJHY01BS0J3
LzAvRTYzOTE2MUNENUVGRkUyMkVCMjI2MDM1M0Y1QkMzRjEzMzU4RThDMy5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS9FNjM5MTYxQ0Q1RUZGRTIyRUIy
MjYwMzUzRjVCQzNGMTMzNThFOEMzLmNlcjCBrQYIKwYBBQUHAQsEgaAwgZ0wgZoG
CCsGAQUFBzALhoGNcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9D
N1Z4UjZjWEJDMTNQWk1Wd1NSUmdwRmFETk51ZkJpS2FXSEJHY01BS0J3LzAvMzEz
MzM4MmUzNTM5MmUzMTM1MzUyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM3MzAz
ODM3MzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcB
Af8EEDAOMAwEAgABMAYDBACKO5swDQYJKoZIhvcNAQELBQADggEBADQogosv3WFc
Yvj1PrRRKLD4auCF71PO4sohQ02IfGCCFr00kkN0dmTocPgCOBFkFrhjnRqhw9fK
s2+pKBz8XkdnImXW/3N23jPO02mdmla2ouRsgxf0SLe79x0SpRA5vfjc1qrXtaFf
9coO173Btq00rWKFBv9OJDvOD8ltX84Ta9Z0l4r2erCD7DaQoXXnNaRIbeL7aDPD
WWXiy8+iWpvxPaxuLzF2HvH/ZVDXK+SeJR3eA4fGBghdMf6YBxdYmGCvEV8eqmt/
ytxUgQ/YSr41A38DkQH/QFPC1/JShwj5ius69Dr4YelFudSGLHLqyqevurv0XFnh
31RM8NAKpUo=
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:34:06 2025 by rpki-client