Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/3136382e3232382e32362e302f32342d3234203d3e20323733333039.roa
File:                     3136382e3232382e32362e302f32342d3234203d3e20323733333039.roa (raw, json)
Hash identifier:          XCtJE5Ko4ZHT9GFNwY64u/4u63R+O1b40jrx6D6o38g=
Subject key identifier:   C3:ED:E8:11:F4:AF:B7:54:A1:E3:57:98:82:9B:AB:6F:3E:6F:FE:98
Certificate issuer:       /CN=11C40A54AEA8862C23E5838BA28E2EC6317D1116
Certificate serial:       73DFF2ADB8181DF325FB55088E4508BE41F4724E
Authority key identifier: 11:C4:0A:54:AE:A8:86:2C:23:E5:83:8B:A2:8E:2E:C6:31:7D:11:16
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11C40A54AEA8862C23E5838BA28E2EC6317D1116.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/3136382e3232382e32362e302f32342d3234203d3e20323733333039.roa
Signing time:             Wed 22 Jan 2025 18:52:09 +0000
ROA not before:           Wed 22 Jan 2025 18:47:09 +0000
ROA not after:            Wed 21 Jan 2026 18:52:09 +0000
asID:                     273309
IP address blocks:        168.228.26.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:df:f2:ad:b8:18:1d:f3:25:fb:55:08:8e:45:08:be:41:f4:72:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11C40A54AEA8862C23E5838BA28E2EC6317D1116
        Validity
            Not Before: Jan 22 18:47:09 2025 GMT
            Not After : Jan 21 18:52:09 2026 GMT
        Subject: CN=C3EDE811F4AFB754A1E35798829BAB6F3E6FFE98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:b0:61:76:9e:16:cd:ac:32:0f:b8:82:5b:dd:
                    2c:72:00:ac:84:c4:3e:37:1f:fe:b3:c3:97:e9:f1:
                    b8:be:9a:9c:7e:b1:5d:d7:80:0d:b7:ac:ac:97:a3:
                    2f:fc:c5:8a:67:41:4a:86:da:c2:38:38:4f:b8:fb:
                    ce:4f:31:54:d9:4e:9e:94:4e:7c:6f:60:5a:c7:2f:
                    f1:9e:b6:12:89:d2:14:27:c4:cb:f5:60:af:9e:2f:
                    0e:29:c5:47:d2:1e:0f:23:c5:3e:c6:db:05:43:0c:
                    f1:35:a1:c6:38:ba:3a:1a:8d:fc:4f:5c:e4:59:2a:
                    8c:f0:ee:39:90:b4:a9:5c:0d:85:28:11:92:c5:b2:
                    05:05:bf:40:d6:44:e9:a8:f5:5d:1d:02:c2:36:23:
                    d1:9b:44:d2:0a:63:e2:bc:a6:07:86:fa:05:43:6c:
                    49:fe:27:d7:ca:cd:47:1f:49:91:5e:09:9a:f3:8e:
                    cd:f7:70:36:5c:88:a0:ae:05:e9:c8:a3:3a:f0:9e:
                    ab:75:09:06:76:c7:20:a2:d9:52:d2:14:b0:6b:c0:
                    9c:fa:ba:3e:f6:d8:37:32:cb:fc:c5:4e:ca:a1:38:
                    0e:df:50:ec:9b:13:83:90:e5:27:77:76:08:ee:13:
                    21:1a:b6:bc:ae:15:74:b9:3b:79:b2:c1:43:28:cd:
                    3f:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:ED:E8:11:F4:AF:B7:54:A1:E3:57:98:82:9B:AB:6F:3E:6F:FE:98
            X509v3 Authority Key Identifier:
                keyid:11:C4:0A:54:AE:A8:86:2C:23:E5:83:8B:A2:8E:2E:C6:31:7D:11:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/11C40A54AEA8862C23E5838BA28E2EC6317D1116.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11C40A54AEA8862C23E5838BA28E2EC6317D1116.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/3136382e3232382e32362e302f32342d3234203d3e20323733333039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.228.26.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7b:39:47:83:a0:f7:4e:8f:af:72:cf:57:ae:0f:57:10:67:07:
         25:44:ca:4a:3d:74:38:38:46:c7:21:07:ec:05:5f:5a:f4:a5:
         54:13:a2:14:27:33:81:83:c8:6b:c9:82:a9:55:fa:46:1f:02:
         08:40:da:5e:04:a7:27:33:f0:cd:09:e2:d6:69:03:54:c0:a0:
         e8:f2:3b:b7:78:5c:c8:be:c4:e4:8c:35:2e:42:bb:51:4a:2f:
         92:15:24:19:80:85:45:88:60:36:48:84:83:16:d2:b6:28:2d:
         63:49:2e:d6:9b:9a:bf:a9:12:51:5a:a4:b7:69:f6:4b:80:26:
         67:4d:c5:5f:00:d5:14:af:a6:5c:6e:8b:66:dc:93:51:1d:25:
         3f:2b:f1:e8:6f:af:f6:71:0d:b7:0b:a3:5a:39:8a:15:7c:1d:
         de:62:58:1c:fe:b8:d9:d5:69:64:4b:6f:12:ae:ab:1c:b3:89:
         00:6b:c0:42:1a:61:02:71:d9:65:c8:4e:d2:f5:74:3a:5d:c3:
         1c:e7:43:4b:a3:95:7d:96:b7:71:ee:84:72:0d:79:50:15:8c:
         63:dc:40:8e:0f:91:7e:c4:6c:12:61:5e:da:a6:d4:ab:cd:48:
         39:15:0a:e1:79:07:47:4f:00:c7:7d:d4:79:f0:93:77:d2:4d:
         4f:99:0a:cb
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUc9/yrbgYHfMl+1UIjkUIvkH0ck4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTFDNDBBNTRBRUE4ODYyQzIzRTU4MzhCQTI4RTJFQzYz
MTdEMTExNjAeFw0yNTAxMjIxODQ3MDlaFw0yNjAxMjExODUyMDlaMDMxMTAvBgNV
BAMTKEMzRURFODExRjRBRkI3NTRBMUUzNTc5ODgyOUJBQjZGM0U2RkZFOTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDosGF2nhbNrDIPuIJb3SxyAKyE
xD43H/6zw5fp8bi+mpx+sV3XgA23rKyXoy/8xYpnQUqG2sI4OE+4+85PMVTZTp6U
TnxvYFrHL/GethKJ0hQnxMv1YK+eLw4pxUfSHg8jxT7G2wVDDPE1ocY4ujoajfxP
XORZKozw7jmQtKlcDYUoEZLFsgUFv0DWROmo9V0dAsI2I9GbRNIKY+K8pgeG+gVD
bEn+J9fKzUcfSZFeCZrzjs33cDZciKCuBenIozrwnqt1CQZ2xyCi2VLSFLBrwJz6
uj722Dcyy/zFTsqhOA7fUOybE4OQ5Sd3dgjuEyEatryuFXS5O3mywUMozT8pAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUw+3oEfSvt1Sh41eYgpurbz5v/pgwHwYDVR0j
BBgwFoAUEcQKVK6ohiwj5YOLoo4uxjF9ERYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRFNpalBXWUY1dWNBRGg2NWl2TnNZOGV5a2VVWTdQdnQzeEZWYzFkQ0xa
R0MvMC8xMUM0MEE1NEFFQTg4NjJDMjNFNTgzOEJBMjhFMkVDNjMxN0QxMTE2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzExQzQwQTU0QUVBODg2MkMy
M0U1ODM4QkEyOEUyRUM2MzE3RDExMTYuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0RTaWpQV1lGNXVjQURoNjVpdk5zWThleWtlVVk3UHZ0M3hGVmMxZENMWkdDLzAv
MzEzNjM4MmUzMjMyMzgyZTMyMzYyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM3
MzMzMzMwMzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBACo5BowDQYJKoZIhvcNAQELBQADggEBAHs5R4Og
906Pr3LPV64PVxBnByVEyko9dDg4RschB+wFX1r0pVQTohQnM4GDyGvJgqlV+kYf
AghA2l4Epycz8M0J4tZpA1TAoOjyO7d4XMi+xOSMNS5Cu1FKL5IVJBmAhUWIYDZI
hIMW0rYoLWNJLtabmr+pElFapLdp9kuAJmdNxV8A1RSvplxui2bck1EdJT8r8ehv
r/ZxDbcLo1o5ihV8Hd5iWBz+uNnVaWRLbxKuqxyziQBrwEIaYQJx2WXITtL1dDpd
wxznQ0ujlX2Wt3HuhHINeVAVjGPcQI4PkX7EbBJhXtqm1KvNSDkVCuF5B0dPAMd9
1Hnwk3fSTU+ZCss=
-----END CERTIFICATE-----
Generated at Wed Apr 9 09:47:55 2025 by rpki-client