Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CCmwsTH3gqtQGHweVDkVV5zEwQKRdPvUAcDajAQt9WRf/1/3133382e3132322e3130322e302f32332d3233203d3e20323634333131.roa
File:                     3133382e3132322e3130322e302f32332d3233203d3e20323634333131.roa (raw, json)
Hash identifier:          1wXdktCXk26yKI6J/1FgzEYImAW32cbeend63ugIAjE=
Subject key identifier:   94:46:5F:91:91:C4:F7:B0:F7:F3:D5:32:DC:FC:FA:B7:D9:23:C9:5B
Certificate issuer:       /CN=B5E0BE3C4F73F852BFF3535537037CAE482A4EFA
Certificate serial:       6909819E46741EB64C497231886C6ADA682AFBED
Authority key identifier: B5:E0:BE:3C:4F:73:F8:52:BF:F3:53:55:37:03:7C:AE:48:2A:4E:FA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5E0BE3C4F73F852BFF3535537037CAE482A4EFA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CCmwsTH3gqtQGHweVDkVV5zEwQKRdPvUAcDajAQt9WRf/1/3133382e3132322e3130322e302f32332d3233203d3e20323634333131.roa
Signing time:             Wed 05 Mar 2025 19:00:02 +0000
ROA not before:           Wed 05 Mar 2025 18:55:02 +0000
ROA not after:            Wed 04 Mar 2026 19:00:02 +0000
asID:                     264311
IP address blocks:        138.122.102.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:09:81:9e:46:74:1e:b6:4c:49:72:31:88:6c:6a:da:68:2a:fb:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B5E0BE3C4F73F852BFF3535537037CAE482A4EFA
        Validity
            Not Before: Mar  5 18:55:02 2025 GMT
            Not After : Mar  4 19:00:02 2026 GMT
        Subject: CN=3082010A0282010100FBAB61EF7488A7F729B43062A7B0FB98B911F591189F7607860A7275D17F06FC52DEA4B6EFD4871EB4F4E5185D88117C31EB15E3F557B3F4897B8928173DC20E5AFF97F1F89118368E11823BE25937CC1812F68A50FDE5D5A16517AA61524FC100AA89D58781D9CFE19BAA4266871328D79E0965C89848C053BD98024562EB057B3D748E93CCD96C10E5E775FE05DBE9222A990D6ED3DB1BB6BB37B2A3E1035173C6E03AF180F470E54A2FC3C38A8BC877D4CFA5F5FDD905AFFD35CBB8CE885FD0F4459700484CB906338567F1102E087B2AC1C0232BD67E7E3CBBCEBB3E466D051B9ACC9D1BEE855C926BE89F7F8689072019123D9CA8C941A9AE2C3FE72A2D0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fb:ab:61:ef:74:88:a7:f7:29:b4:30:62:a7:b0:
                    fb:98:b9:11:f5:91:18:9f:76:07:86:0a:72:75:d1:
                    7f:06:fc:52:de:a4:b6:ef:d4:87:1e:b4:f4:e5:18:
                    5d:88:11:7c:31:eb:15:e3:f5:57:b3:f4:89:7b:89:
                    28:17:3d:c2:0e:5a:ff:97:f1:f8:91:18:36:8e:11:
                    82:3b:e2:59:37:cc:18:12:f6:8a:50:fd:e5:d5:a1:
                    65:17:aa:61:52:4f:c1:00:aa:89:d5:87:81:d9:cf:
                    e1:9b:aa:42:66:87:13:28:d7:9e:09:65:c8:98:48:
                    c0:53:bd:98:02:45:62:eb:05:7b:3d:74:8e:93:cc:
                    d9:6c:10:e5:e7:75:fe:05:db:e9:22:2a:99:0d:6e:
                    d3:db:1b:b6:bb:37:b2:a3:e1:03:51:73:c6:e0:3a:
                    f1:80:f4:70:e5:4a:2f:c3:c3:8a:8b:c8:77:d4:cf:
                    a5:f5:fd:d9:05:af:fd:35:cb:b8:ce:88:5f:d0:f4:
                    45:97:00:48:4c:b9:06:33:85:67:f1:10:2e:08:7b:
                    2a:c1:c0:23:2b:d6:7e:7e:3c:bb:ce:bb:3e:46:6d:
                    05:1b:9a:cc:9d:1b:ee:85:5c:92:6b:e8:9f:7f:86:
                    89:07:20:19:12:3d:9c:a8:c9:41:a9:ae:2c:3f:e7:
                    2a:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:46:5F:91:91:C4:F7:B0:F7:F3:D5:32:DC:FC:FA:B7:D9:23:C9:5B
            X509v3 Authority Key Identifier:
                keyid:B5:E0:BE:3C:4F:73:F8:52:BF:F3:53:55:37:03:7C:AE:48:2A:4E:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CCmwsTH3gqtQGHweVDkVV5zEwQKRdPvUAcDajAQt9WRf/1/B5E0BE3C4F73F852BFF3535537037CAE482A4EFA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5E0BE3C4F73F852BFF3535537037CAE482A4EFA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CCmwsTH3gqtQGHweVDkVV5zEwQKRdPvUAcDajAQt9WRf/1/3133382e3132322e3130322e302f32332d3233203d3e20323634333131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.122.102.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4c:2e:a1:30:2f:8e:fd:91:b2:2b:2b:26:17:f1:23:16:bd:40:
         24:3e:3d:d4:df:d8:74:85:65:7d:e3:8b:7b:a1:47:c9:80:54:
         9b:fb:3f:f1:d2:0e:c9:10:b5:13:5f:13:2e:3a:a7:ba:56:1a:
         18:aa:cd:75:72:de:c1:21:dd:2a:63:be:dc:29:89:c2:2e:e6:
         9a:75:67:e1:2a:d3:12:d1:8c:b8:3a:1e:ff:78:9c:17:00:88:
         b1:b7:17:57:23:23:c4:53:37:88:78:bf:22:64:b3:bd:83:67:
         a6:72:6b:74:d4:cb:ed:a8:12:03:e3:d2:85:f2:90:e6:5c:82:
         75:2b:68:44:3f:05:37:46:57:4d:90:db:d3:2f:5d:58:b6:6c:
         67:55:a8:ce:11:cf:ae:2e:df:50:0c:8a:03:d9:c7:4d:34:7b:
         6e:36:47:a7:c1:c4:d2:91:cb:a9:3f:87:9a:e3:81:aa:70:5a:
         72:eb:07:3c:2a:41:c8:f2:c4:96:97:e4:f6:72:23:70:38:68:
         79:51:00:d4:85:08:93:8c:a9:5c:43:bf:70:95:d7:f7:c6:20:
         2a:d9:dc:10:60:69:8d:27:bb:d1:20:5b:01:3d:82:ad:5c:77:
         15:94:49:83:ca:9a:20:83:44:aa:b5:47:06:b3:d7:9a:ab:18:
         98:00:c8:bf
-----BEGIN CERTIFICATE-----
MIIHRTCCBi2gAwIBAgIUaQmBnkZ0HrZMSXIxiGxq2mgq++0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjVFMEJFM0M0RjczRjg1MkJGRjM1MzU1MzcwMzdDQUU0
ODJBNEVGQTAeFw0yNTAzMDUxODU1MDJaFw0yNjAzMDQxOTAwMDJaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwRkJBQjYxRUY3NDg4QTdGNzI5
QjQzMDYyQTdCMEZCOThCOTExRjU5MTE4OUY3NjA3ODYwQTcyNzVEMTdGMDZGQzUy
REVBNEI2RUZENDg3MUVCNEY0RTUxODVEODgxMTdDMzFFQjE1RTNGNTU3QjNGNDg5
N0I4OTI4MTczREMyMEU1QUZGOTdGMUY4OTExODM2OEUxMTgyM0JFMjU5MzdDQzE4
MTJGNjhBNTBGREU1RDVBMTY1MTdBQTYxNTI0RkMxMDBBQTg5RDU4NzgxRDlDRkUx
OUJBQTQyNjY4NzEzMjhENzlFMDk2NUM4OTg0OEMwNTNCRDk4MDI0NTYyRUIwNTdC
M0Q3NDhFOTNDQ0Q5NkMxMEU1RTc3NUZFMDVEQkU5MjIyQTk5MEQ2RUQzREIxQkI2
QkIzN0IyQTNFMTAzNTE3M0M2RTAzQUYxODBGNDcwRTU0QTJGQzNDMzhBOEJDODc3
RDRDRkE1RjVGREQ5MDVBRkZEMzVDQkI4Q0U4ODVGRDBGNDQ1OTcwMDQ4NENCOTA2
MzM4NTY3RjExMDJFMDg3QjJBQzFDMDIzMkJENjdFN0UzQ0JCQ0VCQjNFNDY2RDA1
MUI5QUNDOUQxQkVFODU1QzkyNkJFODlGN0Y4Njg5MDcyMDE5MTIzRDlDQThDOTQx
QTlBRTJDM0ZFNzJBMkQwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEA+6th73SIp/cptDBip7D7mLkR9ZEYn3YHhgpyddF/BvxS3qS279SH
HrT05RhdiBF8MesV4/VXs/SJe4koFz3CDlr/l/H4kRg2jhGCO+JZN8wYEvaKUP3l
1aFlF6phUk/BAKqJ1YeB2c/hm6pCZocTKNeeCWXImEjAU72YAkVi6wV7PXSOk8zZ
bBDl53X+BdvpIiqZDW7T2xu2uzeyo+EDUXPG4DrxgPRw5Uovw8OKi8h31M+l9f3Z
Ba/9Ncu4zohf0PRFlwBITLkGM4Vn8RAuCHsqwcAjK9Z+fjy7zrs+Rm0FG5rMnRvu
hVySa+iff4aJByAZEj2cqMlBqa4sP+cqLQIDAQABo4ICUzCCAk8wHQYDVR0OBBYE
FJRGX5GRxPew9/PVMtz8+rfZI8lbMB8GA1UdIwQYMBaAFLXgvjxPc/hSv/NTVTcD
fK5IKk76MA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0NDbXdzVEgzZ3F0UUdI
d2VWRGtWVjV6RXdRS1JkUHZVQWNEYWpBUXQ5V1JmLzEvQjVFMEJFM0M0RjczRjg1
MkJGRjM1MzU1MzcwMzdDQUU0ODJBNEVGQS5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS9CNUUwQkUzQzRGNzNGODUyQkZGMzUzNTUzNzAzN0NBRTQ4MkE0
RUZBLmNlcjCBsAYIKwYBBQUHAQsEgaMwgaAwgZ0GCCsGAQUFBzALhoGQcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9DQ213c1RIM2dxdFFHSHdlVkRr
VlY1ekV3UUtSZFB2VUFjRGFqQVF0OVdSZi8xLzMxMzMzODJlMzEzMjMyMmUzMTMw
MzIyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzMjM2MzQzMzMxMzEucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAGKemYwDQYJKoZIhvcNAQELBQADggEBAEwuoTAvjv2RsisrJhfxIxa9QCQ+PdTf
2HSFZX3ji3uhR8mAVJv7P/HSDskQtRNfEy46p7pWGhiqzXVy3sEh3SpjvtwpicIu
5pp1Z+Eq0xLRjLg6Hv94nBcAiLG3F1cjI8RTN4h4vyJks72DZ6Zya3TUy+2oEgPj
0oXykOZcgnUraEQ/BTdGV02Q29MvXVi2bGdVqM4Rz64u31AMigPZx000e242R6fB
xNKRy6k/h5rjgapwWnLrBzwqQcjyxJaX5PZyI3A4aHlRANSFCJOMqVxDv3CV1/fG
ICrZ3BBgaY0nu9EgWwE9gq1cdxWUSYPKmiCDRKq1Rwaz15qrGJgAyL8=
-----END CERTIFICATE-----
Generated at Sun Apr 6 23:35:12 2025 by rpki-client