Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DdPBJF5vS1itxFLQxz99XyuJVAZyaXPzsUE9bHw37a3n/1/3138312e3232342e35322e302f32322d3232203d3e20323636333132.roa
File:                     3138312e3232342e35322e302f32322d3232203d3e20323636333132.roa (raw, json)
Hash identifier:          ExheNQpEK0E9Do+dV52nBY7MmnbjZx58zvI98w2xuvM=
Subject key identifier:   38:97:2D:4A:F6:0F:E3:E5:02:46:FD:E9:40:78:40:1C:32:82:A3:B0
Certificate issuer:       /CN=0A2DC9F591D32599C3AB0561CB8DEF59C396C055
Certificate serial:       440BBDFA3F3E6024E540461847761A8CDF356B5B
Authority key identifier: 0A:2D:C9:F5:91:D3:25:99:C3:AB:05:61:CB:8D:EF:59:C3:96:C0:55
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0A2DC9F591D32599C3AB0561CB8DEF59C396C055.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DdPBJF5vS1itxFLQxz99XyuJVAZyaXPzsUE9bHw37a3n/1/3138312e3232342e35322e302f32322d3232203d3e20323636333132.roa
Signing time:             Thu 06 Mar 2025 13:00:35 +0000
ROA not before:           Thu 06 Mar 2025 12:55:35 +0000
ROA not after:            Thu 05 Mar 2026 13:00:35 +0000
asID:                     266312
IP address blocks:        181.224.52.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:0b:bd:fa:3f:3e:60:24:e5:40:46:18:47:76:1a:8c:df:35:6b:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0A2DC9F591D32599C3AB0561CB8DEF59C396C055
        Validity
            Not Before: Mar  6 12:55:35 2025 GMT
            Not After : Mar  5 13:00:35 2026 GMT
        Subject: CN=38972D4AF60FE3E50246FDE94078401C3282A3B0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:63:91:9f:d4:66:31:e4:d3:c6:bc:a3:c2:9a:
                    1b:2e:7f:0d:d3:3f:e6:e5:24:93:f5:71:c3:c2:6b:
                    ff:6c:77:c0:2d:ee:76:78:58:99:54:15:18:b4:d8:
                    4b:1e:9c:f6:2a:d8:2e:c4:99:1a:4b:d3:8f:ee:31:
                    80:32:f4:20:95:ea:1c:10:f8:98:5b:5a:f9:25:9d:
                    c5:4a:50:6d:4f:24:68:cf:30:84:08:13:e7:17:21:
                    ff:b6:f6:17:ee:41:dc:42:23:f2:55:33:13:73:5c:
                    e7:64:48:27:bc:b4:a2:c0:52:33:ad:2b:c3:01:8f:
                    4a:df:53:60:90:9b:33:30:67:ec:04:67:4f:43:c3:
                    5d:a2:cc:cf:04:84:b9:d8:8b:59:bc:0b:a0:20:33:
                    75:2b:b7:7e:d4:dc:65:11:e4:a7:0a:2c:e2:77:88:
                    32:64:72:80:1f:ed:66:e5:05:8a:36:5e:7f:34:e6:
                    26:cc:ab:e0:34:b5:26:2b:4f:c0:9d:7e:52:43:a5:
                    cd:26:6c:13:fe:ee:f0:b2:33:58:19:ad:08:fe:3a:
                    d2:b1:47:79:03:b5:8f:11:aa:1b:18:2f:d0:9b:a6:
                    77:dc:84:58:0a:b3:67:13:fd:62:cd:ee:be:95:bf:
                    a8:ac:91:93:75:30:3c:a0:37:52:43:b0:76:99:ee:
                    0a:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:97:2D:4A:F6:0F:E3:E5:02:46:FD:E9:40:78:40:1C:32:82:A3:B0
            X509v3 Authority Key Identifier:
                keyid:0A:2D:C9:F5:91:D3:25:99:C3:AB:05:61:CB:8D:EF:59:C3:96:C0:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DdPBJF5vS1itxFLQxz99XyuJVAZyaXPzsUE9bHw37a3n/1/0A2DC9F591D32599C3AB0561CB8DEF59C396C055.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0A2DC9F591D32599C3AB0561CB8DEF59C396C055.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DdPBJF5vS1itxFLQxz99XyuJVAZyaXPzsUE9bHw37a3n/1/3138312e3232342e35322e302f32322d3232203d3e20323636333132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.224.52.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1e:18:c4:97:86:00:89:5d:15:c0:de:e7:ca:cf:b2:db:5e:e5:
         72:8d:85:8a:34:56:27:d4:74:5c:3f:5f:39:c5:ef:b1:af:e6:
         d8:38:d3:30:5d:7a:2e:62:f9:5b:33:7b:88:d1:15:28:84:1f:
         57:de:f9:e8:89:da:da:cf:31:77:26:01:77:f7:b9:c6:d3:30:
         09:20:fc:d5:d9:59:12:3f:36:ed:40:54:85:cd:b2:aa:ce:ec:
         cc:d7:d2:70:ef:aa:08:fa:53:da:3b:0b:fe:fd:e5:83:62:87:
         fd:94:8d:16:91:64:06:ae:b0:42:49:c7:79:6a:3b:60:6a:cb:
         70:72:6a:41:8c:1e:5e:96:ba:2c:2c:9d:c4:e3:f6:aa:98:ad:
         57:98:6b:23:96:56:26:e5:23:11:52:82:ce:91:16:fb:81:26:
         c6:29:02:94:3c:a8:49:32:ef:bf:03:15:64:b4:1f:bd:3f:79:
         f1:98:2f:4d:a5:2f:91:ff:9e:99:05:f0:ef:c1:80:e7:e2:a6:
         2e:ec:a7:63:dc:70:01:f5:de:b3:59:e3:53:a2:e8:99:a6:bd:
         67:3b:03:f4:70:86:c6:49:c6:41:00:f4:8f:f4:4d:76:5b:86:
         12:9c:4e:d0:c8:49:c3:87:e3:a1:03:2e:32:44:cf:29:d3:c9:
         ab:e8:dc:12
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIURAu9+j8+YCTlQEYYR3YajN81a1swDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEEyREM5RjU5MUQzMjU5OUMzQUIwNTYxQ0I4REVGNTlD
Mzk2QzA1NTAeFw0yNTAzMDYxMjU1MzVaFw0yNjAzMDUxMzAwMzVaMDMxMTAvBgNV
BAMTKDM4OTcyRDRBRjYwRkUzRTUwMjQ2RkRFOTQwNzg0MDFDMzI4MkEzQjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8Y5Gf1GYx5NPGvKPCmhsufw3T
P+blJJP1ccPCa/9sd8At7nZ4WJlUFRi02EsenPYq2C7EmRpL04/uMYAy9CCV6hwQ
+JhbWvklncVKUG1PJGjPMIQIE+cXIf+29hfuQdxCI/JVMxNzXOdkSCe8tKLAUjOt
K8MBj0rfU2CQmzMwZ+wEZ09Dw12izM8EhLnYi1m8C6AgM3Urt37U3GUR5KcKLOJ3
iDJkcoAf7WblBYo2Xn805ibMq+A0tSYrT8CdflJDpc0mbBP+7vCyM1gZrQj+OtKx
R3kDtY8RqhsYL9CbpnfchFgKs2cT/WLN7r6Vv6iskZN1MDygN1JDsHaZ7grbAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUOJctSvYP4+UCRv3pQHhAHDKCo7AwHwYDVR0j
BBgwFoAUCi3J9ZHTJZnDqwVhy43vWcOWwFUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRGRQQkpGNXZTMWl0eEZMUXh6OTlYeXVKVkFaeWFYUHpzVUU5Ykh3Mzdh
M24vMS8wQTJEQzlGNTkxRDMyNTk5QzNBQjA1NjFDQjhERUY1OUMzOTZDMDU1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzBBMkRDOUY1OTFEMzI1OTlD
M0FCMDU2MUNCOERFRjU5QzM5NkMwNTUuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0RkUEJKRjV2UzFpdHhGTFF4ejk5WHl1SlZBWnlhWFB6c1VFOWJIdzM3YTNuLzEv
MzEzODMxMmUzMjMyMzQyZTM1MzIyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzMjM2
MzYzMzMxMzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAK14DQwDQYJKoZIhvcNAQELBQADggEBAB4YxJeG
AIldFcDe58rPstte5XKNhYo0VifUdFw/XznF77Gv5tg40zBdei5i+Vsze4jRFSiE
H1fe+eiJ2trPMXcmAXf3ucbTMAkg/NXZWRI/Nu1AVIXNsqrO7MzX0nDvqgj6U9o7
C/795YNih/2UjRaRZAausEJJx3lqO2Bqy3ByakGMHl6WuiwsncTj9qqYrVeYayOW
ViblIxFSgs6RFvuBJsYpApQ8qEky778DFWS0H70/efGYL02lL5H/npkF8O/BgOfi
pi7sp2PccAH13rNZ41Oi6JmmvWc7A/RwhsZJxkEA9I/0TXZbhhKcTtDIScOH46ED
LjJEzynTyavo3BI=
-----END CERTIFICATE-----
Generated at Sat Apr 5 14:30:34 2025 by rpki-client