Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EDMAecSFF7DjTGqe8xLWpP2HkgYUTGMgmMa5Q7wNX4Z4/1/3138372e3130332e33322e302f32302d3234203d3e203137323232.roa
File:                     3138372e3130332e33322e302f32302d3234203d3e203137323232.roa (raw, json)
Hash identifier:          r0FGINOYcVdfzN38qnhZ6JmXZcfRqTIy4MOhCvPcc4Q=
Subject key identifier:   71:C3:8A:CD:3C:85:EE:56:A3:39:7E:86:19:21:38:9E:49:7F:85:A9
Certificate issuer:       /CN=1259CD7907D08E561037139E148D8385DFD916E2
Certificate serial:       1C131346D9840B83A0EE59B29C1D431A02BCB080
Authority key identifier: 12:59:CD:79:07:D0:8E:56:10:37:13:9E:14:8D:83:85:DF:D9:16:E2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1259CD7907D08E561037139E148D8385DFD916E2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EDMAecSFF7DjTGqe8xLWpP2HkgYUTGMgmMa5Q7wNX4Z4/1/3138372e3130332e33322e302f32302d3234203d3e203137323232.roa
Signing time:             Thu 06 Mar 2025 15:34:23 +0000
ROA not before:           Thu 06 Mar 2025 15:29:23 +0000
ROA not after:            Thu 05 Mar 2026 15:34:23 +0000
asID:                     17222
IP address blocks:        187.103.32.0/20 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:13:13:46:d9:84:0b:83:a0:ee:59:b2:9c:1d:43:1a:02:bc:b0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1259CD7907D08E561037139E148D8385DFD916E2
        Validity
            Not Before: Mar  6 15:29:23 2025 GMT
            Not After : Mar  5 15:34:23 2026 GMT
        Subject: CN=71C38ACD3C85EE56A3397E861921389E497F85A9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:ce:7b:2c:71:42:82:2e:11:93:bb:9d:08:81:
                    2b:ee:c8:21:22:45:79:5f:a2:0b:11:fb:2f:52:96:
                    0d:5f:f6:33:13:cc:a3:56:a9:e1:12:10:0f:60:a1:
                    69:32:4a:9c:37:44:af:14:59:79:cd:43:d9:4e:45:
                    e6:06:d6:4d:97:a8:6c:c5:bc:1f:04:dd:71:5c:22:
                    4e:37:c9:ce:bd:5d:43:74:c5:13:6c:fe:b3:a6:29:
                    d8:21:0b:ea:45:87:09:0b:48:46:43:c2:ce:5a:e9:
                    4d:55:31:9a:cc:56:4c:52:48:67:9d:2d:0a:41:80:
                    c7:34:c4:c1:c7:33:51:95:d7:ca:9f:48:b5:2e:8c:
                    3c:d1:8c:07:d3:08:73:66:59:c7:c0:be:49:d5:f9:
                    15:47:ef:2c:34:b8:43:f0:81:61:4d:7d:1b:e9:e9:
                    bd:35:20:ff:39:cb:79:f8:fd:c0:6d:a3:fe:90:24:
                    44:13:10:91:d3:ce:06:16:22:71:73:35:e4:56:d8:
                    21:cf:b1:dc:b8:dc:f1:1c:c2:d1:eb:81:a5:d2:f2:
                    30:e8:41:d4:cd:f4:69:40:42:4e:fc:9f:be:1d:31:
                    89:ba:d9:c3:b0:e9:a1:0e:90:62:65:8a:b5:44:bb:
                    37:07:e6:99:89:87:8d:5e:a3:bc:f5:bb:12:45:6b:
                    15:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:C3:8A:CD:3C:85:EE:56:A3:39:7E:86:19:21:38:9E:49:7F:85:A9
            X509v3 Authority Key Identifier:
                keyid:12:59:CD:79:07:D0:8E:56:10:37:13:9E:14:8D:83:85:DF:D9:16:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EDMAecSFF7DjTGqe8xLWpP2HkgYUTGMgmMa5Q7wNX4Z4/1/1259CD7907D08E561037139E148D8385DFD916E2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1259CD7907D08E561037139E148D8385DFD916E2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EDMAecSFF7DjTGqe8xLWpP2HkgYUTGMgmMa5Q7wNX4Z4/1/3138372e3130332e33322e302f32302d3234203d3e203137323232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.103.32.0/20

    Signature Algorithm: sha256WithRSAEncryption
         ad:86:c7:90:67:39:11:cf:4a:77:08:04:8c:48:da:78:87:39:
         f8:97:2c:41:ed:ac:a8:e7:a1:98:6e:4c:21:c8:12:4c:e7:aa:
         e6:a3:b2:01:5c:eb:4f:3f:55:61:65:a7:36:c2:25:e8:65:5c:
         e7:44:77:20:2c:40:67:60:ca:c3:ec:28:b3:54:63:e5:ff:b8:
         53:44:6a:b4:4c:ec:c5:12:ba:de:f6:9e:46:53:92:44:45:5b:
         67:1f:69:b7:2e:6c:83:b5:f0:96:a4:8c:c3:1f:77:66:7b:31:
         b5:41:fc:0a:cd:67:5c:a9:d2:65:17:9d:c2:9e:9c:fb:39:42:
         d5:29:e0:3c:58:25:d9:58:35:d8:27:44:82:06:23:0d:66:01:
         0f:94:96:a6:8e:d1:57:bc:28:89:5e:1e:3c:c2:6f:e9:ce:74:
         e8:82:2f:f1:35:ac:d0:db:f0:de:fc:bc:62:17:a8:d1:60:b8:
         d6:67:d7:88:7c:c1:00:f9:28:32:fb:bd:c0:b9:7a:eb:06:85:
         91:ae:d7:1b:f2:a9:04:99:7c:c4:8b:75:b5:c1:20:15:c5:86:
         bb:04:98:0f:97:a4:95:16:7b:ae:3e:06:1c:9d:3d:7e:a5:df:
         b5:3d:cb:f7:84:06:d8:2d:0b:c0:37:80:5f:4f:e6:ae:49:6f:
         bd:b6:a1:16
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUHBMTRtmEC4Og7lmynB1DGgK8sIAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTI1OUNENzkwN0QwOEU1NjEwMzcxMzlFMTQ4RDgzODVE
RkQ5MTZFMjAeFw0yNTAzMDYxNTI5MjNaFw0yNjAzMDUxNTM0MjNaMDMxMTAvBgNV
BAMTKDcxQzM4QUNEM0M4NUVFNTZBMzM5N0U4NjE5MjEzODlFNDk3Rjg1QTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClznsscUKCLhGTu50IgSvuyCEi
RXlfogsR+y9Slg1f9jMTzKNWqeESEA9goWkySpw3RK8UWXnNQ9lOReYG1k2XqGzF
vB8E3XFcIk43yc69XUN0xRNs/rOmKdghC+pFhwkLSEZDws5a6U1VMZrMVkxSSGed
LQpBgMc0xMHHM1GV18qfSLUujDzRjAfTCHNmWcfAvknV+RVH7yw0uEPwgWFNfRvp
6b01IP85y3n4/cBto/6QJEQTEJHTzgYWInFzNeRW2CHPsdy43PEcwtHrgaXS8jDo
QdTN9GlAQk78n74dMYm62cOw6aEOkGJlirVEuzcH5pmJh41eo7z1uxJFaxUtAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUccOKzTyF7lajOX6GGSE4nkl/hakwHwYDVR0j
BBgwFoAUElnNeQfQjlYQNxOeFI2Dhd/ZFuIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRURNQWVjU0ZGN0RqVEdxZTh4TFdwUDJIa2dZVVRHTWdtTWE1UTd3Tlg0
WjQvMS8xMjU5Q0Q3OTA3RDA4RTU2MTAzNzEzOUUxNDhEODM4NURGRDkxNkUyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzEyNTlDRDc5MDdEMDhFNTYx
MDM3MTM5RTE0OEQ4Mzg1REZEOTE2RTIuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0VETUFlY1NGRjdEalRHcWU4eExXcFAySGtnWVVUR01nbU1hNVE3d05YNFo0LzEv
MzEzODM3MmUzMTMwMzMyZTMzMzIyZTMwMmYzMjMwMmQzMjM0MjAzZDNlMjAzMTM3
MzIzMjMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQEu2cgMA0GCSqGSIb3DQEBCwUAA4IBAQCthseQZzkR
z0p3CASMSNp4hzn4lyxB7ayo56GYbkwhyBJM56rmo7IBXOtPP1VhZac2wiXoZVzn
RHcgLEBnYMrD7CizVGPl/7hTRGq0TOzFErre9p5GU5JERVtnH2m3LmyDtfCWpIzD
H3dmezG1QfwKzWdcqdJlF53Cnpz7OULVKeA8WCXZWDXYJ0SCBiMNZgEPlJamjtFX
vCiJXh48wm/pznTogi/xNazQ2/De/LxiF6jRYLjWZ9eIfMEA+Sgy+73AuXrrBoWR
rtcb8qkEmXzEi3W1wSAVxYa7BJgPl6SVFnuuPgYcnT1+pd+1Pcv3hAbYLQvAN4Bf
T+auSW+9tqEW
-----END CERTIFICATE-----
Generated at Sun Apr 6 02:36:43 2025 by rpki-client