Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/E1L1grakzfreepv5Ydoqn2JBrWyyRPvYUJ1v1XmrzA1G/0/3133382e3132322e3234392e302f32342d3234203d3e20323632353930.roa
File:                     3133382e3132322e3234392e302f32342d3234203d3e20323632353930.roa (raw, json)
Hash identifier:          EbO/9LFTZrRb6D3xWrbth0t3LeOlOiGLcuokhb/D8gU=
Subject key identifier:   3E:FD:91:0D:48:D2:34:50:8D:7F:5E:FE:B8:83:45:6E:5B:09:AD:CB
Certificate issuer:       /CN=AC7596BD33B9167E922BE54B9B004B12EAD19D29
Certificate serial:       2FE636C68A8CC005E0FCFB28CBD98C599E009CEC
Authority key identifier: AC:75:96:BD:33:B9:16:7E:92:2B:E5:4B:9B:00:4B:12:EA:D1:9D:29
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC7596BD33B9167E922BE54B9B004B12EAD19D29.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E1L1grakzfreepv5Ydoqn2JBrWyyRPvYUJ1v1XmrzA1G/0/3133382e3132322e3234392e302f32342d3234203d3e20323632353930.roa
Signing time:             Tue 04 Mar 2025 13:33:49 +0000
ROA not before:           Tue 04 Mar 2025 13:28:49 +0000
ROA not after:            Tue 03 Mar 2026 13:33:49 +0000
asID:                     262590
IP address blocks:        138.122.249.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:e6:36:c6:8a:8c:c0:05:e0:fc:fb:28:cb:d9:8c:59:9e:00:9c:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC7596BD33B9167E922BE54B9B004B12EAD19D29
        Validity
            Not Before: Mar  4 13:28:49 2025 GMT
            Not After : Mar  3 13:33:49 2026 GMT
        Subject: CN=3EFD910D48D234508D7F5EFEB883456E5B09ADCB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:13:40:22:cd:0a:19:da:9c:0f:46:fc:7f:3c:
                    40:3e:2f:03:cb:c2:d3:d4:67:fb:97:83:43:a8:1b:
                    64:f3:6d:26:0a:4e:f9:e6:14:b7:17:29:d6:07:70:
                    c6:1b:d7:e1:e7:8c:d4:e0:be:98:d3:fb:71:88:a9:
                    47:65:26:76:88:60:a2:99:af:86:26:d5:64:cc:09:
                    3e:72:17:06:ef:7d:c6:26:7d:33:71:25:26:92:0a:
                    03:65:9f:1d:86:6a:c5:37:2a:6c:aa:06:15:64:9c:
                    cc:25:b1:42:50:a8:b7:b4:c9:a9:16:1b:0f:ff:e4:
                    0b:09:85:c2:39:74:48:2b:58:dd:d7:8b:40:e3:5c:
                    0f:ce:12:7b:da:61:bf:a9:29:d2:d2:9c:67:89:12:
                    a8:a9:bb:9c:ba:93:d9:91:55:ec:c2:49:a8:ae:b3:
                    0a:87:27:7b:df:33:80:14:ba:67:46:c0:35:2b:ae:
                    0e:12:a3:df:ae:0a:01:a0:07:89:3f:49:2f:ac:a1:
                    b8:37:ef:62:72:78:0d:58:a9:0f:ac:21:55:c6:0b:
                    d4:9f:07:4d:23:2e:44:d1:61:c1:c0:b8:22:3c:42:
                    ac:e2:2a:42:62:78:4e:94:5b:25:a7:9b:52:ca:61:
                    08:b4:42:1c:7e:89:14:9a:33:e5:89:69:6e:7a:6c:
                    b7:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:FD:91:0D:48:D2:34:50:8D:7F:5E:FE:B8:83:45:6E:5B:09:AD:CB
            X509v3 Authority Key Identifier:
                keyid:AC:75:96:BD:33:B9:16:7E:92:2B:E5:4B:9B:00:4B:12:EA:D1:9D:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E1L1grakzfreepv5Ydoqn2JBrWyyRPvYUJ1v1XmrzA1G/0/AC7596BD33B9167E922BE54B9B004B12EAD19D29.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC7596BD33B9167E922BE54B9B004B12EAD19D29.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E1L1grakzfreepv5Ydoqn2JBrWyyRPvYUJ1v1XmrzA1G/0/3133382e3132322e3234392e302f32342d3234203d3e20323632353930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.122.249.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a3:de:a5:dd:68:c9:46:bf:8e:c5:f6:3c:4d:13:46:cf:16:fb:
         5c:98:63:b1:b2:0d:e1:35:f2:73:ac:4f:0a:44:b4:88:fc:74:
         6f:39:ed:37:b9:18:22:af:95:1e:06:a7:ea:fe:0b:25:e0:ca:
         63:a2:15:bf:2f:35:14:d4:f2:e0:f0:02:c3:ae:75:bc:98:b0:
         49:94:9c:dc:4b:f6:0a:18:8a:91:b2:51:0f:1e:f6:f1:ee:7b:
         21:08:e7:ef:43:c3:6c:0d:12:cf:7c:12:b6:db:14:38:64:e3:
         af:4c:66:32:5a:07:0e:9b:7c:f5:f6:94:1d:4c:fd:18:73:5b:
         68:01:6a:63:6f:92:69:88:4b:b4:33:35:5d:b8:88:98:ba:31:
         02:1a:17:fa:ad:ad:78:e1:4b:d8:99:e2:8a:26:6c:a2:5c:b6:
         14:d0:6e:0c:fa:36:c9:53:27:0f:ff:c0:e8:f6:5a:43:37:29:
         56:88:29:80:78:43:ee:f6:d6:ba:f4:b9:2c:44:79:78:86:41:
         e1:16:b6:2f:2e:c2:fc:25:80:b4:14:ff:7e:c2:65:c8:04:24:
         ff:e2:a7:d2:52:3c:f0:d7:60:36:a2:de:4f:24:ed:ac:5f:cf:
         08:18:e4:d4:4c:0f:ce:a0:92:55:2c:93:ad:e4:fd:57:fa:e0:
         a3:10:b9:56
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUL+Y2xoqMwAXg/Psoy9mMWZ4AnOwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUM3NTk2QkQzM0I5MTY3RTkyMkJFNTRCOUIwMDRCMTJF
QUQxOUQyOTAeFw0yNTAzMDQxMzI4NDlaFw0yNjAzMDMxMzMzNDlaMDMxMTAvBgNV
BAMTKDNFRkQ5MTBENDhEMjM0NTA4RDdGNUVGRUI4ODM0NTZFNUIwOUFEQ0IwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnE0AizQoZ2pwPRvx/PEA+LwPL
wtPUZ/uXg0OoG2TzbSYKTvnmFLcXKdYHcMYb1+HnjNTgvpjT+3GIqUdlJnaIYKKZ
r4Ym1WTMCT5yFwbvfcYmfTNxJSaSCgNlnx2GasU3KmyqBhVknMwlsUJQqLe0yakW
Gw//5AsJhcI5dEgrWN3Xi0DjXA/OEnvaYb+pKdLSnGeJEqipu5y6k9mRVezCSaiu
swqHJ3vfM4AUumdGwDUrrg4So9+uCgGgB4k/SS+sobg372JyeA1YqQ+sIVXGC9Sf
B00jLkTRYcHAuCI8QqziKkJieE6UWyWnm1LKYQi0Qhx+iRSaM+WJaW56bLfvAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUPv2RDUjSNFCNf17+uINFblsJrcswHwYDVR0j
BBgwFoAUrHWWvTO5Fn6SK+VLmwBLEurRnSkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRTFMMWdyYWt6ZnJlZXB2NVlkb3FuMkpCcld5eVJQdllVSjF2MVhtcnpB
MUcvMC9BQzc1OTZCRDMzQjkxNjdFOTIyQkU1NEI5QjAwNEIxMkVBRDE5RDI5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0FDNzU5NkJEMzNCOTE2N0U5
MjJCRTU0QjlCMDA0QjEyRUFEMTlEMjkuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0UxTDFncmFremZyZWVwdjVZZG9xbjJKQnJXeXlSUHZZVUoxdjFYbXJ6QTFHLzAv
MzEzMzM4MmUzMTMyMzIyZTMyMzQzOTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzYzMjM1MzkzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAIp6+TANBgkqhkiG9w0BAQsFAAOCAQEAo96l
3WjJRr+OxfY8TRNGzxb7XJhjsbIN4TXyc6xPCkS0iPx0bzntN7kYIq+VHgan6v4L
JeDKY6IVvy81FNTy4PACw651vJiwSZSc3Ev2ChiKkbJRDx728e57IQjn70PDbA0S
z3wSttsUOGTjr0xmMloHDpt89faUHUz9GHNbaAFqY2+SaYhLtDM1XbiImLoxAhoX
+q2teOFL2JniiiZsoly2FNBuDPo2yVMnD//A6PZaQzcpVogpgHhD7vbWuvS5LER5
eIZB4Ra2Ly7C/CWAtBT/fsJlyAQk/+Kn0lI88NdgNqLeTyTtrF/PCBjk1EwPzqCS
VSyTreT9V/rgoxC5Vg==
-----END CERTIFICATE-----
Generated at Sun Apr 6 12:47:43 2025 by rpki-client