Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EcJrPRXVZchaNbzuEzRXeitZgQTK5tHk8SkLXtgVqKfS/0/3136382e3139372e3233352e302f32342d3332203d3e20323635343836.roa
File:                     3136382e3139372e3233352e302f32342d3332203d3e20323635343836.roa (raw, json)
Hash identifier:          poIdGFh38fjGbw0+ojS5wWVZWbSHSRfroewjBJwTCxs=
Subject key identifier:   55:36:74:BB:2A:CA:37:C7:82:91:38:C8:EE:FA:19:65:AB:EB:5D:A7
Certificate issuer:       /CN=27632DA3487449475BFE4ADEE3C17ADDED4EC60F
Certificate serial:       4B7485C8D18C987996A408E7CEEEBBD90AADD3A9
Authority key identifier: 27:63:2D:A3:48:74:49:47:5B:FE:4A:DE:E3:C1:7A:DD:ED:4E:C6:0F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/27632DA3487449475BFE4ADEE3C17ADDED4EC60F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EcJrPRXVZchaNbzuEzRXeitZgQTK5tHk8SkLXtgVqKfS/0/3136382e3139372e3233352e302f32342d3332203d3e20323635343836.roa
Signing time:             Thu 09 Jan 2025 22:19:39 +0000
ROA not before:           Thu 09 Jan 2025 22:14:39 +0000
ROA not after:            Thu 08 Jan 2026 22:19:39 +0000
asID:                     265486
IP address blocks:        168.197.235.0/24 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:74:85:c8:d1:8c:98:79:96:a4:08:e7:ce:ee:bb:d9:0a:ad:d3:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27632DA3487449475BFE4ADEE3C17ADDED4EC60F
        Validity
            Not Before: Jan  9 22:14:39 2025 GMT
            Not After : Jan  8 22:19:39 2026 GMT
        Subject: CN=553674BB2ACA37C7829138C8EEFA1965ABEB5DA7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:ed:a8:11:68:b5:1d:92:16:c8:3e:8a:7b:2c:
                    f5:aa:7b:25:52:7d:99:c7:7a:c0:5a:6a:ee:07:d6:
                    61:9c:f3:5f:82:dd:f8:7e:7e:ff:de:45:a1:db:e4:
                    42:5e:1a:ed:0a:5b:60:a6:95:47:ec:74:1e:74:b9:
                    2b:3a:53:b8:7c:e9:ff:e5:23:49:33:ed:3f:6d:2d:
                    2b:46:38:fc:fd:60:ca:5b:03:34:85:da:42:05:2a:
                    04:6a:8c:40:ff:44:75:34:a7:4e:e5:a9:03:a6:96:
                    2e:7b:44:38:b9:28:db:ba:5f:36:8f:14:8b:b4:53:
                    8e:ac:69:4e:93:8f:d6:fd:c7:4c:2f:4c:c9:b6:b1:
                    50:4d:29:43:f4:76:ae:fe:c1:86:0d:11:70:87:0e:
                    40:ce:60:d4:8c:4c:0f:79:44:1a:19:32:ab:fd:44:
                    38:c4:bb:55:88:24:72:66:42:2f:82:fc:b6:f3:26:
                    68:1c:38:3d:ad:2b:8a:30:c1:16:70:31:38:c2:94:
                    b5:fc:6c:e1:03:d5:7d:1a:27:09:b2:93:0c:74:9a:
                    ae:d2:94:99:7a:bb:8e:25:8f:4a:e5:a7:6a:ba:40:
                    a6:f2:fc:90:2e:3e:b1:20:07:f0:69:e6:c1:d9:6a:
                    05:ac:79:84:1b:4a:28:94:51:19:39:9f:f8:2b:35:
                    d6:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:36:74:BB:2A:CA:37:C7:82:91:38:C8:EE:FA:19:65:AB:EB:5D:A7
            X509v3 Authority Key Identifier:
                keyid:27:63:2D:A3:48:74:49:47:5B:FE:4A:DE:E3:C1:7A:DD:ED:4E:C6:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EcJrPRXVZchaNbzuEzRXeitZgQTK5tHk8SkLXtgVqKfS/0/27632DA3487449475BFE4ADEE3C17ADDED4EC60F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/27632DA3487449475BFE4ADEE3C17ADDED4EC60F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EcJrPRXVZchaNbzuEzRXeitZgQTK5tHk8SkLXtgVqKfS/0/3136382e3139372e3233352e302f32342d3332203d3e20323635343836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.197.235.0/24

    Signature Algorithm: sha256WithRSAEncryption
         37:16:c2:2c:ab:a2:e5:bc:bd:d9:f0:10:23:09:4a:c3:a1:69:
         40:42:4b:64:02:ad:4f:2e:aa:50:6f:23:02:44:93:45:53:8f:
         90:b2:91:dc:26:c9:6d:e8:b8:bb:ba:24:93:42:e7:33:89:a9:
         7d:39:a4:d9:4e:6f:56:cc:ab:af:65:4c:aa:33:8d:63:c9:8d:
         54:26:20:f9:48:b0:42:25:b4:5e:b0:33:8f:98:d0:63:2d:61:
         2c:8e:58:f7:48:5a:9a:72:99:bf:6b:1c:43:08:71:14:4b:f7:
         71:6d:9a:4d:71:18:35:f2:e1:bb:99:53:89:da:77:60:02:21:
         0f:b1:d5:1c:6c:7a:6f:16:5f:d6:24:3d:23:7f:ea:fb:b5:9d:
         2c:09:1e:2f:58:ed:35:dd:eb:3a:6b:1c:34:4f:3d:2e:32:c4:
         8d:e1:f2:af:92:c7:c1:1c:35:5d:ac:11:a6:79:9d:7d:3c:69:
         63:24:8a:78:f3:74:13:6c:a0:a8:5e:83:9a:39:1a:79:9a:fb:
         05:46:ff:45:01:86:3a:8e:5d:a1:73:cd:a4:5f:be:bb:1b:3a:
         e3:e7:f5:42:be:47:bb:0b:ea:dc:c8:0b:99:f9:5d:74:8e:a0:
         84:45:33:af:29:bc:11:cb:08:2e:c9:ac:26:c2:86:7f:25:35:
         56:ed:08:38
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUS3SFyNGMmHmWpAjnzu672Qqt06kwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjc2MzJEQTM0ODc0NDk0NzVCRkU0QURFRTNDMTdBRERF
RDRFQzYwRjAeFw0yNTAxMDkyMjE0MzlaFw0yNjAxMDgyMjE5MzlaMDMxMTAvBgNV
BAMTKDU1MzY3NEJCMkFDQTM3Qzc4MjkxMzhDOEVFRkExOTY1QUJFQjVEQTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCc7agRaLUdkhbIPop7LPWqeyVS
fZnHesBaau4H1mGc81+C3fh+fv/eRaHb5EJeGu0KW2CmlUfsdB50uSs6U7h86f/l
I0kz7T9tLStGOPz9YMpbAzSF2kIFKgRqjED/RHU0p07lqQOmli57RDi5KNu6XzaP
FIu0U46saU6Tj9b9x0wvTMm2sVBNKUP0dq7+wYYNEXCHDkDOYNSMTA95RBoZMqv9
RDjEu1WIJHJmQi+C/LbzJmgcOD2tK4owwRZwMTjClLX8bOED1X0aJwmykwx0mq7S
lJl6u44lj0rlp2q6QKby/JAuPrEgB/Bp5sHZagWseYQbSiiUURk5n/grNdZZAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUVTZ0uyrKN8eCkTjI7voZZavrXacwHwYDVR0j
BBgwFoAUJ2Mto0h0SUdb/kre48F63e1Oxg8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRWNKclBSWFZaY2hhTmJ6dUV6UlhlaXRaZ1FUSzV0SGs4U2tMWHRnVnFL
ZlMvMC8yNzYzMkRBMzQ4NzQ0OTQ3NUJGRTRBREVFM0MxN0FEREVENEVDNjBGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzI3NjMyREEzNDg3NDQ5NDc1
QkZFNEFERUUzQzE3QURERUQ0RUM2MEYuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0VjSnJQUlhWWmNoYU5ienVFelJYZWl0WmdRVEs1dEhrOFNrTFh0Z1ZxS2ZTLzAv
MzEzNjM4MmUzMTM5MzcyZTMyMzMzNTJlMzAyZjMyMzQyZDMzMzIyMDNkM2UyMDMy
MzYzNTM0MzgzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAKjF6zANBgkqhkiG9w0BAQsFAAOCAQEANxbC
LKui5by92fAQIwlKw6FpQEJLZAKtTy6qUG8jAkSTRVOPkLKR3CbJbei4u7okk0Ln
M4mpfTmk2U5vVsyrr2VMqjONY8mNVCYg+UiwQiW0XrAzj5jQYy1hLI5Y90hamnKZ
v2scQwhxFEv3cW2aTXEYNfLhu5lTidp3YAIhD7HVHGx6bxZf1iQ9I3/q+7WdLAke
L1jtNd3rOmscNE89LjLEjeHyr5LHwRw1XawRpnmdfTxpYySKePN0E2ygqF6Dmjka
eZr7BUb/RQGGOo5doXPNpF++uxs64+f1Qr5Huwvq3MgLmflddI6ghEUzrym8EcsI
LsmsJsKGfyU1Vu0IOA==
-----END CERTIFICATE-----
Generated at Sat Apr 5 10:05:24 2025 by rpki-client