Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ELYX2RgQuosNBPqmwTxvHZtfYfuRFa5iffCTbHcJEUpE/0/3133382e3235352e3233322e302f32322d3234203d3e20323633393832.roa
File:                     3133382e3235352e3233322e302f32322d3234203d3e20323633393832.roa (raw, json)
Hash identifier:          aIoPuJZvfBfakJ45jNmJUommv8Gn0bj/fwGi3h5Uui0=
Subject key identifier:   7D:C1:57:DE:58:81:73:6A:15:78:A6:15:25:D1:B2:78:96:90:A0:14
Certificate issuer:       /CN=0CD7FB62FCCB72E4D772B49EC2BC2834624D1CCE
Certificate serial:       5F3F44111506CCFBF991811307BA88D87D4E3DD4
Authority key identifier: 0C:D7:FB:62:FC:CB:72:E4:D7:72:B4:9E:C2:BC:28:34:62:4D:1C:CE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0CD7FB62FCCB72E4D772B49EC2BC2834624D1CCE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ELYX2RgQuosNBPqmwTxvHZtfYfuRFa5iffCTbHcJEUpE/0/3133382e3235352e3233322e302f32322d3234203d3e20323633393832.roa
Signing time:             Mon 24 Mar 2025 12:27:39 +0000
ROA not before:           Mon 24 Mar 2025 12:22:39 +0000
ROA not after:            Mon 23 Mar 2026 12:27:39 +0000
asID:                     263982
IP address blocks:        138.255.232.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:3f:44:11:15:06:cc:fb:f9:91:81:13:07:ba:88:d8:7d:4e:3d:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0CD7FB62FCCB72E4D772B49EC2BC2834624D1CCE
        Validity
            Not Before: Mar 24 12:22:39 2025 GMT
            Not After : Mar 23 12:27:39 2026 GMT
        Subject: CN=7DC157DE5881736A1578A61525D1B2789690A014
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:86:b1:0c:70:ea:29:2f:cd:84:62:5c:72:ce:
                    99:45:d7:78:99:23:be:b5:32:1e:f5:fe:ab:f3:2f:
                    99:aa:46:02:2c:92:a4:ca:3d:1f:a2:a5:a0:51:b4:
                    14:92:af:eb:8d:1b:10:4a:78:40:bf:da:85:47:8f:
                    58:2f:c4:8b:05:b5:90:e8:d2:68:c9:80:b9:26:37:
                    ba:1b:94:d5:ad:df:5e:f5:9b:e7:bb:df:03:39:12:
                    31:93:ee:89:53:04:6a:27:b3:45:10:07:d9:f9:07:
                    c3:69:ac:9a:66:4c:d5:00:a7:ab:a5:9b:2f:56:c5:
                    fe:26:4b:01:f0:e8:37:30:0c:20:cf:b2:1e:7f:2c:
                    87:04:96:2c:dd:14:49:35:43:41:4b:6b:ff:0e:1d:
                    61:fa:ca:1e:b2:48:f2:cf:ff:ad:90:14:0e:2c:9b:
                    5c:e7:cc:ce:23:a4:34:e6:71:f4:f7:60:0a:cb:de:
                    ad:d9:cd:e6:75:39:22:02:8b:d9:56:b0:ad:bc:ca:
                    22:67:55:23:7e:49:d8:99:cd:ff:6e:21:ed:82:31:
                    59:e6:dc:76:9a:10:0a:c5:7a:91:23:68:cc:d0:90:
                    25:a8:c3:5f:c8:49:0d:40:c2:fa:65:5e:7b:46:5e:
                    d4:ed:42:62:76:64:58:b1:93:8f:2b:73:95:da:02:
                    76:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:C1:57:DE:58:81:73:6A:15:78:A6:15:25:D1:B2:78:96:90:A0:14
            X509v3 Authority Key Identifier:
                keyid:0C:D7:FB:62:FC:CB:72:E4:D7:72:B4:9E:C2:BC:28:34:62:4D:1C:CE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ELYX2RgQuosNBPqmwTxvHZtfYfuRFa5iffCTbHcJEUpE/0/0CD7FB62FCCB72E4D772B49EC2BC2834624D1CCE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0CD7FB62FCCB72E4D772B49EC2BC2834624D1CCE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ELYX2RgQuosNBPqmwTxvHZtfYfuRFa5iffCTbHcJEUpE/0/3133382e3235352e3233322e302f32322d3234203d3e20323633393832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.255.232.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1b:28:6e:d8:86:dc:91:b9:f5:c8:b0:65:6f:b4:94:6d:7b:c0:
         b1:70:86:d1:80:e7:65:28:a4:8f:d0:fc:3a:28:63:fc:76:15:
         e5:9c:29:e9:27:cd:fe:35:fd:91:17:2e:c1:0a:56:78:af:1c:
         d3:6e:ef:08:f8:c6:71:04:6d:fc:b5:f5:dd:e5:ff:7c:7d:6a:
         b4:47:a7:84:2f:93:27:f2:b9:3c:7a:b8:cc:83:d2:1b:45:d9:
         b7:6a:a1:81:1a:00:26:22:8e:3f:de:81:18:6b:f8:ff:ae:37:
         8f:72:92:33:b3:c4:d9:14:35:ac:22:8a:54:57:fb:41:06:24:
         b1:58:d0:34:5a:aa:b9:48:20:94:04:44:df:4e:a0:5f:82:2c:
         8a:9b:09:be:72:aa:0f:9e:70:42:6a:2f:82:59:5d:67:9e:96:
         b9:fd:90:2a:7d:48:49:f6:25:b0:3b:89:94:09:00:11:25:f8:
         b7:c5:13:7e:8b:f2:34:4f:e0:9d:7e:e2:da:4b:ac:24:98:38:
         94:66:34:8d:41:e2:bf:44:f0:80:6b:bf:78:de:03:26:3c:b8:
         ce:5a:46:f1:a3:00:2e:6e:12:3b:87:e4:9e:72:c2:b5:cb:1e:
         aa:dc:75:48:b6:d9:d0:19:83:16:01:96:65:21:e1:3a:3a:dd:
         2a:38:05:28
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUXz9EERUGzPv5kYETB7qI2H1OPdQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMENEN0ZCNjJGQ0NCNzJFNEQ3NzJCNDlFQzJCQzI4MzQ2
MjREMUNDRTAeFw0yNTAzMjQxMjIyMzlaFw0yNjAzMjMxMjI3MzlaMDMxMTAvBgNV
BAMTKDdEQzE1N0RFNTg4MTczNkExNTc4QTYxNTI1RDFCMjc4OTY5MEEwMTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuhrEMcOopL82EYlxyzplF13iZ
I761Mh71/qvzL5mqRgIskqTKPR+ipaBRtBSSr+uNGxBKeEC/2oVHj1gvxIsFtZDo
0mjJgLkmN7oblNWt3171m+e73wM5EjGT7olTBGons0UQB9n5B8NprJpmTNUAp6ul
my9Wxf4mSwHw6DcwDCDPsh5/LIcElizdFEk1Q0FLa/8OHWH6yh6ySPLP/62QFA4s
m1znzM4jpDTmcfT3YArL3q3ZzeZ1OSICi9lWsK28yiJnVSN+SdiZzf9uIe2CMVnm
3HaaEArFepEjaMzQkCWow1/ISQ1AwvplXntGXtTtQmJ2ZFixk48rc5XaAnZvAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUfcFX3liBc2oVeKYVJdGyeJaQoBQwHwYDVR0j
BBgwFoAUDNf7YvzLcuTXcrSewrwoNGJNHM4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRUxZWDJSZ1F1b3NOQlBxbXdUeHZIWnRmWWZ1UkZhNWlmZkNUYkhjSkVV
cEUvMC8wQ0Q3RkI2MkZDQ0I3MkU0RDc3MkI0OUVDMkJDMjgzNDYyNEQxQ0NFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzBDRDdGQjYyRkNDQjcyRTRE
NzcyQjQ5RUMyQkMyODM0NjI0RDFDQ0UuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0VMWVgyUmdRdW9zTkJQcW13VHh2SFp0ZllmdVJGYTVpZmZDVGJIY0pFVXBFLzAv
MzEzMzM4MmUzMjM1MzUyZTMyMzMzMjJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDMy
MzYzMzM5MzgzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAor/6DANBgkqhkiG9w0BAQsFAAOCAQEAGyhu
2Ibckbn1yLBlb7SUbXvAsXCG0YDnZSikj9D8Oihj/HYV5Zwp6SfN/jX9kRcuwQpW
eK8c027vCPjGcQRt/LX13eX/fH1qtEenhC+TJ/K5PHq4zIPSG0XZt2qhgRoAJiKO
P96BGGv4/643j3KSM7PE2RQ1rCKKVFf7QQYksVjQNFqquUgglARE306gX4IsipsJ
vnKqD55wQmovglldZ56Wuf2QKn1ISfYlsDuJlAkAESX4t8UTfovyNE/gnX7i2kus
JJg4lGY0jUHiv0TwgGu/eN4DJjy4zlpG8aMALm4SO4fknnLCtcseqtx1SLbZ0BmD
FgGWZSHhOjrdKjgFKA==
-----END CERTIFICATE-----
Generated at Sun Apr 6 16:21:53 2025 by rpki-client