Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Du9zTgyAyDMfAkiePdQLC3TJevrgMJKUzPLicW1PthzL/0/3133312e37322e3139382e302f32352d3235203d3e203532393734.roa
File:                     3133312e37322e3139382e302f32352d3235203d3e203532393734.roa (raw, json)
Hash identifier:          60MAvQVpfJmU/R7YDKAWyeGjFpuZtPRivwCURS3uMLA=
Subject key identifier:   0F:E7:02:B0:65:EE:81:77:E3:14:76:C6:FB:50:76:2B:57:DB:9F:87
Certificate issuer:       /CN=E0B78B98B4094A86E58E4FA9EAD0064F2A8CCF68
Certificate serial:       49D23069A2F45F1FD1EAE842584F22F35727D2AF
Authority key identifier: E0:B7:8B:98:B4:09:4A:86:E5:8E:4F:A9:EA:D0:06:4F:2A:8C:CF:68
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E0B78B98B4094A86E58E4FA9EAD0064F2A8CCF68.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Du9zTgyAyDMfAkiePdQLC3TJevrgMJKUzPLicW1PthzL/0/3133312e37322e3139382e302f32352d3235203d3e203532393734.roa
Signing time:             Fri 14 Mar 2025 13:13:51 +0000
ROA not before:           Fri 14 Mar 2025 13:08:51 +0000
ROA not after:            Fri 13 Mar 2026 13:13:51 +0000
asID:                     52974
IP address blocks:        131.72.198.0/25 maxlen: 25
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:d2:30:69:a2:f4:5f:1f:d1:ea:e8:42:58:4f:22:f3:57:27:d2:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E0B78B98B4094A86E58E4FA9EAD0064F2A8CCF68
        Validity
            Not Before: Mar 14 13:08:51 2025 GMT
            Not After : Mar 13 13:13:51 2026 GMT
        Subject: CN=0FE702B065EE8177E31476C6FB50762B57DB9F87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:38:8d:56:c5:dd:a5:f0:8d:6f:12:02:dc:e5:
                    5f:68:80:37:97:59:ee:a5:d0:f8:06:60:7e:0e:73:
                    62:2b:84:12:f9:99:76:95:8b:50:df:48:50:32:18:
                    d2:e1:49:6d:1a:a4:58:ff:a1:a5:43:1c:af:df:1b:
                    86:13:22:b3:13:f5:d5:99:6e:3b:c9:98:dc:d2:51:
                    92:c9:59:38:83:22:8d:dd:1f:b2:a9:54:c6:b9:04:
                    fd:f5:f4:8e:b6:d7:1b:80:34:19:13:13:9f:75:ba:
                    07:a8:47:d1:24:1b:94:58:f3:ee:93:59:7d:8c:11:
                    60:da:5e:a6:9a:0c:42:57:3a:1a:c8:7f:26:41:61:
                    4c:3e:59:cf:17:00:11:c3:86:3f:e6:5f:ed:70:5c:
                    4f:d9:fd:84:3f:cb:dd:76:3c:e7:94:16:48:c2:de:
                    be:de:3a:39:71:30:81:f3:67:3c:8d:d5:69:f5:9d:
                    43:21:af:fe:3a:a7:ef:df:2a:1c:45:99:d1:e5:1d:
                    9c:06:bd:85:46:ea:ba:fd:f7:f8:f0:a3:06:be:e3:
                    be:f8:09:d9:6a:0b:1d:5e:80:5e:57:9b:8a:33:73:
                    e7:37:9f:34:4f:ba:67:32:cc:66:98:7d:3a:fb:30:
                    c0:7a:86:01:00:5d:f8:6e:b1:fa:b5:b1:b6:38:f4:
                    59:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:E7:02:B0:65:EE:81:77:E3:14:76:C6:FB:50:76:2B:57:DB:9F:87
            X509v3 Authority Key Identifier:
                keyid:E0:B7:8B:98:B4:09:4A:86:E5:8E:4F:A9:EA:D0:06:4F:2A:8C:CF:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Du9zTgyAyDMfAkiePdQLC3TJevrgMJKUzPLicW1PthzL/0/E0B78B98B4094A86E58E4FA9EAD0064F2A8CCF68.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E0B78B98B4094A86E58E4FA9EAD0064F2A8CCF68.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Du9zTgyAyDMfAkiePdQLC3TJevrgMJKUzPLicW1PthzL/0/3133312e37322e3139382e302f32352d3235203d3e203532393734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.72.198.0/25

    Signature Algorithm: sha256WithRSAEncryption
         65:f8:61:da:d9:5f:32:81:7b:8f:aa:6f:cf:ce:9d:73:a3:15:
         59:24:c4:bc:ff:0c:96:d2:c7:84:5c:38:70:36:d9:52:07:80:
         16:31:8c:1c:9f:ed:a7:79:d5:9e:dc:a6:e2:a2:26:e6:c3:54:
         ce:8d:3e:f6:75:59:09:75:f1:59:b6:c7:a9:3f:a9:53:c4:9c:
         7a:5b:fc:26:f0:a1:27:56:00:4a:4a:1d:25:5c:48:8c:ed:1f:
         78:90:b5:b8:b8:b4:9b:6d:59:82:c9:42:c6:78:df:dd:e1:70:
         8b:50:83:fb:bf:37:87:e8:fa:70:29:3a:cb:46:cf:de:eb:63:
         fd:3c:9d:23:8a:0b:00:45:22:b9:ea:c9:e0:ae:f8:61:23:fc:
         51:e8:d9:71:bf:ed:c4:d0:5e:c0:84:62:84:7c:40:42:04:7f:
         6a:c9:c1:ab:b3:8e:a8:f3:ad:fb:39:ca:58:56:bf:a9:af:b9:
         8c:9e:75:a5:64:65:19:29:f6:67:55:dc:bb:60:33:14:3a:bc:
         93:e5:a7:0d:86:fa:73:e8:17:5a:6b:81:0e:00:80:c3:f6:5d:
         09:ba:46:32:96:dd:9b:81:0a:d7:de:27:5f:69:aa:38:ad:58:
         1a:b6:7c:d3:a9:c7:d1:38:83:a4:50:a6:62:18:d4:a7:f6:a4:
         0e:0d:2a:a0
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUSdIwaaL0Xx/R6uhCWE8i81cn0q8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTBCNzhCOThCNDA5NEE4NkU1OEU0RkE5RUFEMDA2NEYy
QThDQ0Y2ODAeFw0yNTAzMTQxMzA4NTFaFw0yNjAzMTMxMzEzNTFaMDMxMTAvBgNV
BAMTKDBGRTcwMkIwNjVFRTgxNzdFMzE0NzZDNkZCNTA3NjJCNTdEQjlGODcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPOI1Wxd2l8I1vEgLc5V9ogDeX
We6l0PgGYH4Oc2IrhBL5mXaVi1DfSFAyGNLhSW0apFj/oaVDHK/fG4YTIrMT9dWZ
bjvJmNzSUZLJWTiDIo3dH7KpVMa5BP319I621xuANBkTE591ugeoR9EkG5RY8+6T
WX2MEWDaXqaaDEJXOhrIfyZBYUw+Wc8XABHDhj/mX+1wXE/Z/YQ/y912POeUFkjC
3r7eOjlxMIHzZzyN1Wn1nUMhr/46p+/fKhxFmdHlHZwGvYVG6rr99/jwowa+4774
CdlqCx1egF5Xm4ozc+c3nzRPumcyzGaYfTr7MMB6hgEAXfhusfq1sbY49FknAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUD+cCsGXugXfjFHbG+1B2K1fbn4cwHwYDVR0j
BBgwFoAU4LeLmLQJSobljk+p6tAGTyqMz2gwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRHU5elRneUF5RE1mQWtpZVBkUUxDM1RKZXZyZ01KS1V6UExpY1cxUHRo
ekwvMC9FMEI3OEI5OEI0MDk0QTg2RTU4RTRGQTlFQUQwMDY0RjJBOENDRjY4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0UwQjc4Qjk4QjQwOTRBODZF
NThFNEZBOUVBRDAwNjRGMkE4Q0NGNjguY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0R1OXpUZ3lBeURNZkFraWVQZFFMQzNUSmV2cmdNSktVelBMaWNXMVB0aHpMLzAv
MzEzMzMxMmUzNzMyMmUzMTM5MzgyZTMwMmYzMjM1MmQzMjM1MjAzZDNlMjAzNTMy
MzkzNzM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAATAHAwUHg0jGADANBgkqhkiG9w0BAQsFAAOCAQEAZfhh2tlf
MoF7j6pvz86dc6MVWSTEvP8MltLHhFw4cDbZUgeAFjGMHJ/tp3nVntym4qIm5sNU
zo0+9nVZCXXxWbbHqT+pU8Scelv8JvChJ1YASkodJVxIjO0feJC1uLi0m21ZgslC
xnjf3eFwi1CD+783h+j6cCk6y0bP3utj/TydI4oLAEUiuerJ4K74YSP8UejZcb/t
xNBewIRihHxAQgR/asnBq7OOqPOt+znKWFa/qa+5jJ51pWRlGSn2Z1Xcu2AzFDq8
k+WnDYb6c+gXWmuBDgCAw/ZdCbpGMpbdm4EK194nX2mqOK1YGrZ806nH0TiDpFCm
YhjUp/akDg0qoA==
-----END CERTIFICATE-----
Generated at Sat Apr 5 23:45:00 2025 by rpki-client