Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EFFX5sEJyQ7UeNRytpu7c81Kt8XgDp7SrNMmSLUfQ18f/0/3138362e3235312e39382e302f32342d3234203d3e20323632383238.roa
File:                     3138362e3235312e39382e302f32342d3234203d3e20323632383238.roa (raw, json)
Hash identifier:          gyi5Hh7fU2mD7pF6q7Tsu5brQN/+m0L1E3of+9UzAAw=
Subject key identifier:   3E:D4:6F:12:75:DC:27:E1:A6:AA:9B:17:87:46:B5:1A:78:DE:23:35
Certificate issuer:       /CN=2ACA27717E82C4618B8C9B8809209FD48E26847B
Certificate serial:       345BFE97E1511CE1370F1F410A8EEC1D4E41FC50
Authority key identifier: 2A:CA:27:71:7E:82:C4:61:8B:8C:9B:88:09:20:9F:D4:8E:26:84:7B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2ACA27717E82C4618B8C9B8809209FD48E26847B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EFFX5sEJyQ7UeNRytpu7c81Kt8XgDp7SrNMmSLUfQ18f/0/3138362e3235312e39382e302f32342d3234203d3e20323632383238.roa
Signing time:             Tue 11 Mar 2025 17:53:24 +0000
ROA not before:           Tue 11 Mar 2025 17:48:24 +0000
ROA not after:            Tue 10 Mar 2026 17:53:24 +0000
asID:                     262828
IP address blocks:        186.251.98.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:5b:fe:97:e1:51:1c:e1:37:0f:1f:41:0a:8e:ec:1d:4e:41:fc:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ACA27717E82C4618B8C9B8809209FD48E26847B
        Validity
            Not Before: Mar 11 17:48:24 2025 GMT
            Not After : Mar 10 17:53:24 2026 GMT
        Subject: CN=3ED46F1275DC27E1A6AA9B178746B51A78DE2335
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:39:cf:63:1b:13:d4:c4:44:0c:f4:de:7d:21:
                    52:35:dc:85:1c:61:b5:c3:ae:e5:06:de:4c:f2:ac:
                    85:c8:c7:49:47:16:dd:cf:58:e6:88:be:f7:fa:c2:
                    73:2c:43:de:11:6e:d5:88:4c:c0:02:53:9e:3c:bf:
                    ed:c0:a7:af:c6:96:14:b4:6f:64:46:93:ae:61:61:
                    a2:c0:66:99:66:fa:06:9a:28:5c:de:a7:3c:6a:2c:
                    6e:7f:57:f0:61:90:d9:aa:07:7a:f0:00:7d:1e:92:
                    7c:ba:43:bc:75:af:2c:e8:0e:3b:b3:b8:d1:6b:ef:
                    63:32:79:ef:5e:57:f2:c7:54:ee:8c:ec:3e:eb:b7:
                    88:9f:c4:93:28:b4:a4:c0:23:5c:0b:51:9e:56:cf:
                    eb:03:0b:0d:fb:3a:a3:d6:16:29:88:50:53:20:5b:
                    8e:4b:06:30:83:04:c7:a6:7c:ab:87:f0:70:3e:a6:
                    09:08:a8:f0:e3:1f:34:c3:8a:95:2b:9e:b1:7a:55:
                    09:ac:d4:c7:4e:b4:cb:ec:1b:7c:5d:90:52:33:4b:
                    f3:37:0f:f5:dc:09:0f:f2:3d:76:86:c8:43:70:83:
                    d1:da:12:93:6a:df:d8:51:ab:24:6a:9c:ed:ed:64:
                    35:fc:17:36:db:c5:f9:68:9d:b0:4f:cc:91:f5:34:
                    9b:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:D4:6F:12:75:DC:27:E1:A6:AA:9B:17:87:46:B5:1A:78:DE:23:35
            X509v3 Authority Key Identifier:
                keyid:2A:CA:27:71:7E:82:C4:61:8B:8C:9B:88:09:20:9F:D4:8E:26:84:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EFFX5sEJyQ7UeNRytpu7c81Kt8XgDp7SrNMmSLUfQ18f/0/2ACA27717E82C4618B8C9B8809209FD48E26847B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2ACA27717E82C4618B8C9B8809209FD48E26847B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EFFX5sEJyQ7UeNRytpu7c81Kt8XgDp7SrNMmSLUfQ18f/0/3138362e3235312e39382e302f32342d3234203d3e20323632383238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.251.98.0/24

    Signature Algorithm: sha256WithRSAEncryption
         20:ba:60:f0:33:f5:96:59:ea:96:2b:d9:89:74:76:8e:b4:c1:
         91:5c:2d:71:f6:cc:a1:37:08:a9:54:3c:cf:c2:22:d4:45:ac:
         cf:fb:85:c5:ca:b5:6f:1f:c1:06:4a:94:89:03:a4:fb:38:14:
         14:26:02:27:61:4d:ac:65:9d:f6:11:93:66:f5:fc:81:94:b1:
         4f:57:a9:0e:3a:6f:7d:95:79:03:fd:81:c9:60:ce:54:3c:21:
         0c:52:bd:10:3a:83:b2:96:39:45:a4:c0:85:97:b5:fe:d4:25:
         fe:06:27:2a:13:4a:80:b5:31:97:cd:df:80:ec:46:f0:4a:e6:
         f1:d0:b2:47:ea:2b:12:55:c5:5e:31:c2:61:b9:7b:1b:0f:15:
         41:90:85:50:72:bc:ba:55:f5:cc:28:dd:4d:53:0e:27:63:82:
         5a:87:2c:26:d8:be:17:24:53:3d:60:06:46:c2:2f:17:73:f3:
         f9:d7:74:77:af:9b:a8:51:74:05:02:17:01:65:9e:8a:5e:3e:
         cb:13:79:ee:c2:ef:06:2b:8e:78:0f:a8:51:a7:07:4b:0e:05:
         99:fa:6b:35:77:00:ee:42:92:aa:9b:4e:f4:dc:02:4c:d1:1a:
         d4:5b:96:ce:f0:0e:7c:56:03:1b:30:30:52:1f:0f:38:91:e4:
         5c:a8:bd:bc
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUNFv+l+FRHOE3Dx9BCo7sHU5B/FAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkFDQTI3NzE3RTgyQzQ2MThCOEM5Qjg4MDkyMDlGRDQ4
RTI2ODQ3QjAeFw0yNTAzMTExNzQ4MjRaFw0yNjAzMTAxNzUzMjRaMDMxMTAvBgNV
BAMTKDNFRDQ2RjEyNzVEQzI3RTFBNkFBOUIxNzg3NDZCNTFBNzhERTIzMzUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMOc9jGxPUxEQM9N59IVI13IUc
YbXDruUG3kzyrIXIx0lHFt3PWOaIvvf6wnMsQ94RbtWITMACU548v+3Ap6/GlhS0
b2RGk65hYaLAZplm+gaaKFzepzxqLG5/V/BhkNmqB3rwAH0ekny6Q7x1ryzoDjuz
uNFr72Myee9eV/LHVO6M7D7rt4ifxJMotKTAI1wLUZ5Wz+sDCw37OqPWFimIUFMg
W45LBjCDBMemfKuH8HA+pgkIqPDjHzTDipUrnrF6VQms1MdOtMvsG3xdkFIzS/M3
D/XcCQ/yPXaGyENwg9HaEpNq39hRqyRqnO3tZDX8FzbbxflonbBPzJH1NJtLAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUPtRvEnXcJ+GmqpsXh0a1GnjeIzUwHwYDVR0j
BBgwFoAUKsoncX6CxGGLjJuICSCf1I4mhHswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRUZGWDVzRUp5UTdVZU5SeXRwdTdjODFLdDhYZ0RwN1NyTk1tU0xVZlEx
OGYvMC8yQUNBMjc3MTdFODJDNDYxOEI4QzlCODgwOTIwOUZENDhFMjY4NDdCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJBQ0EyNzcxN0U4MkM0NjE4
QjhDOUI4ODA5MjA5RkQ0OEUyNjg0N0IuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0VGRlg1c0VKeVE3VWVOUnl0cHU3YzgxS3Q4WGdEcDdTck5NbVNMVWZRMThmLzAv
MzEzODM2MmUzMjM1MzEyZTM5MzgyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzIzODMyMzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAC6+2IwDQYJKoZIhvcNAQELBQADggEBACC6YPAz
9ZZZ6pYr2Yl0do60wZFcLXH2zKE3CKlUPM/CItRFrM/7hcXKtW8fwQZKlIkDpPs4
FBQmAidhTaxlnfYRk2b1/IGUsU9XqQ46b32VeQP9gclgzlQ8IQxSvRA6g7KWOUWk
wIWXtf7UJf4GJyoTSoC1MZfN34DsRvBK5vHQskfqKxJVxV4xwmG5exsPFUGQhVBy
vLpV9cwo3U1TDidjglqHLCbYvhckUz1gBkbCLxdz8/nXdHevm6hRdAUCFwFlnope
PssTee7C7wYrjngPqFGnB0sOBZn6azV3AO5CkqqbTvTcAkzRGtRbls7wDnxWAxsw
MFIfDziR5Fyovbw=
-----END CERTIFICATE-----
Generated at Sun Apr 6 15:29:18 2025 by rpki-client