Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/0/3133382e35392e3135312e302f32342d3234203d3e203238313635.roa
File:                     3133382e35392e3135312e302f32342d3234203d3e203238313635.roa (raw, json)
Hash identifier:          NjCpnfqqMHwwX3ngu5hw74GgVTHhiqBXs3+BHZHQ45E=
Subject key identifier:   47:18:1F:00:D1:11:8F:62:B3:45:85:FE:11:95:08:CC:5E:6D:D3:FA
Certificate issuer:       /CN=89EF2DA30C1DF0F2B786B1EC264091574F54E272
Certificate serial:       AF4B58031521F1091F0C311305FCAF4625A2E1
Authority key identifier: 89:EF:2D:A3:0C:1D:F0:F2:B7:86:B1:EC:26:40:91:57:4F:54:E2:72
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/89EF2DA30C1DF0F2B786B1EC264091574F54E272.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/0/3133382e35392e3135312e302f32342d3234203d3e203238313635.roa
Signing time:             Mon 01 Jul 2024 18:45:54 +0000
ROA not before:           Mon 01 Jul 2024 18:40:54 +0000
ROA not after:            Mon 30 Jun 2025 18:45:54 +0000
asID:                     28165
IP address blocks:        138.59.151.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            af:4b:58:03:15:21:f1:09:1f:0c:31:13:05:fc:af:46:25:a2:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89EF2DA30C1DF0F2B786B1EC264091574F54E272
        Validity
            Not Before: Jul  1 18:40:54 2024 GMT
            Not After : Jun 30 18:45:54 2025 GMT
        Subject: CN=47181F00D1118F62B34585FE119508CC5E6DD3FA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:5e:79:a0:df:ea:32:57:04:e8:fb:ad:f5:fa:
                    8d:75:bf:3d:c7:b3:7c:22:58:b2:8b:48:67:c4:7e:
                    f6:7a:18:a5:99:e7:de:a4:98:54:2b:a2:ba:d6:97:
                    3c:e7:1c:ce:a9:be:c2:80:47:70:0b:19:fe:1d:aa:
                    46:ab:51:57:64:aa:e7:e8:34:a3:db:cc:7e:50:ef:
                    0d:d6:96:53:36:5b:9b:8f:4a:7d:64:71:ad:09:21:
                    4e:5c:bf:fa:53:77:a4:24:d1:e5:43:06:6e:6c:d5:
                    99:55:46:83:6b:aa:7d:02:1e:5a:c6:74:6c:55:5d:
                    35:01:e8:fb:e5:02:f0:87:ec:2c:8c:c7:ff:c9:9f:
                    d4:84:93:52:3b:0c:d3:e8:4c:98:30:5d:e1:cd:2f:
                    35:61:c2:1a:29:50:12:04:88:13:39:77:7e:6b:56:
                    53:ac:29:22:81:84:1f:ca:fb:4f:00:06:69:81:e6:
                    56:fd:b4:a4:3c:4c:84:89:62:fb:54:32:f5:16:84:
                    f8:3d:bd:fd:c3:04:eb:af:41:a0:0d:4e:b7:7e:2a:
                    16:f9:5d:1c:60:b5:2b:94:80:37:5b:04:12:94:a5:
                    cb:95:cc:45:49:da:75:76:74:84:36:62:4b:96:18:
                    8c:d3:85:62:df:7c:7c:c2:20:74:22:e4:b6:dc:9c:
                    ab:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:18:1F:00:D1:11:8F:62:B3:45:85:FE:11:95:08:CC:5E:6D:D3:FA
            X509v3 Authority Key Identifier:
                keyid:89:EF:2D:A3:0C:1D:F0:F2:B7:86:B1:EC:26:40:91:57:4F:54:E2:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/0/89EF2DA30C1DF0F2B786B1EC264091574F54E272.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/89EF2DA30C1DF0F2B786B1EC264091574F54E272.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/0/3133382e35392e3135312e302f32342d3234203d3e203238313635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.59.151.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a7:04:71:71:70:75:18:f1:23:8d:54:5f:0b:35:bf:65:0e:7e:
         f7:ee:4c:9a:1e:f1:3d:b1:7b:17:c5:85:ca:0c:b8:b0:b1:c3:
         0b:4e:16:3e:19:34:73:8a:95:a8:ce:f0:75:56:91:5e:e9:d5:
         15:9f:16:d3:2a:86:8a:e4:43:68:b4:d4:c4:3d:a2:ef:41:04:
         ef:a6:ca:ca:5f:3b:dc:55:6f:e5:7b:8f:a0:98:47:c3:32:fd:
         a1:cf:ee:e5:4f:05:44:1d:a0:05:5b:94:3c:55:2d:a6:25:5d:
         54:ad:c7:bc:fb:bc:b0:9c:8c:e1:33:34:ac:5f:16:c5:60:95:
         4f:19:a5:be:72:f8:c1:e7:5e:e0:ae:c2:78:36:8e:92:c3:34:
         1b:1d:4e:77:2f:d4:c4:41:c7:86:4b:b2:b0:b6:14:4e:05:fc:
         7d:64:49:82:e4:1a:f6:bd:2a:92:ed:0f:3c:2e:81:4c:05:3f:
         73:c4:26:54:ce:17:ac:dd:ee:61:9e:4c:50:04:d6:6d:b3:14:
         8a:fb:14:f1:26:1f:8e:af:b1:ec:6a:11:28:e3:96:d4:8c:1b:
         fc:7f:e5:28:3f:ec:0d:e3:54:bd:d5:91:e8:9f:54:22:a3:70:
         5c:ad:da:e2:4b:40:36:99:88:e5:46:19:a3:be:ed:fc:2b:a0:
         1b:b4:4b:c6
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUAK9LWAMVIfEJHwwxEwX8r0YlouEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODlFRjJEQTMwQzFERjBGMkI3ODZCMUVDMjY0MDkxNTc0
RjU0RTI3MjAeFw0yNDA3MDExODQwNTRaFw0yNTA2MzAxODQ1NTRaMDMxMTAvBgNV
BAMTKDQ3MTgxRjAwRDExMThGNjJCMzQ1ODVGRTExOTUwOENDNUU2REQzRkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKXnmg3+oyVwTo+631+o11vz3H
s3wiWLKLSGfEfvZ6GKWZ596kmFQrorrWlzznHM6pvsKAR3ALGf4dqkarUVdkqufo
NKPbzH5Q7w3WllM2W5uPSn1kca0JIU5cv/pTd6Qk0eVDBm5s1ZlVRoNrqn0CHlrG
dGxVXTUB6PvlAvCH7CyMx//Jn9SEk1I7DNPoTJgwXeHNLzVhwhopUBIEiBM5d35r
VlOsKSKBhB/K+08ABmmB5lb9tKQ8TISJYvtUMvUWhPg9vf3DBOuvQaANTrd+Khb5
XRxgtSuUgDdbBBKUpcuVzEVJ2nV2dIQ2YkuWGIzThWLffHzCIHQi5LbcnKt9AgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQURxgfANERj2KzRYX+EZUIzF5t0/owHwYDVR0j
BBgwFoAUie8towwd8PK3hrHsJkCRV09U4nIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRDJNUlZWOFd3SkVEYUROcFR6bTlqckg2N050dDNIQ0xHM1Yyd1dmRXpr
b0QvMC84OUVGMkRBMzBDMURGMEYyQjc4NkIxRUMyNjQwOTE1NzRGNTRFMjcyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzg5RUYyREEzMEMxREYwRjJC
Nzg2QjFFQzI2NDA5MTU3NEY1NEUyNzIuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0QyTVJWVjhXd0pFRGFETnBUem05anJINjdOdHQzSENMRzNWMndXZkV6a29ELzAv
MzEzMzM4MmUzNTM5MmUzMTM1MzEyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM4
MzEzNjM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAijuXMA0GCSqGSIb3DQEBCwUAA4IBAQCnBHFxcHUY
8SONVF8LNb9lDn737kyaHvE9sXsXxYXKDLiwscMLThY+GTRzipWozvB1VpFe6dUV
nxbTKoaK5ENotNTEPaLvQQTvpsrKXzvcVW/le4+gmEfDMv2hz+7lTwVEHaAFW5Q8
VS2mJV1Urce8+7ywnIzhMzSsXxbFYJVPGaW+cvjB517grsJ4No6SwzQbHU53L9TE
QceGS7KwthROBfx9ZEmC5Br2vSqS7Q88LoFMBT9zxCZUzhes3e5hnkxQBNZtsxSK
+xTxJh+Or7HsahEo45bUjBv8f+UoP+wN41S91ZHon1Qio3BcrdriS0A2mYjlRhmj
vu38K6AbtEvG
-----END CERTIFICATE-----
Generated at Wed Apr 23 08:01:49 2025 by rpki-client