Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EennRTSYfwGuDgSRTw2tFLKSMbE7e6MXh8WehGCE9Ta/0/3133382e3131372e33362e302f32322d3234203d3e20323634323231.roa
File:                     3133382e3131372e33362e302f32322d3234203d3e20323634323231.roa (raw, json)
Hash identifier:          dc2zzkPt/FrTmrlMWfPw/bh9Y+qsTsLgI5TLRMS0UTM=
Subject key identifier:   90:A8:70:92:83:12:B1:4D:93:EC:A3:79:DF:6A:22:0A:7C:25:7F:DA
Certificate issuer:       /CN=BEC2FF1EC8AC86D3B2252C937D13CB8E9D51FF33
Certificate serial:       51FF46F670DD4F422495ABB69E39044423F1AEC3
Authority key identifier: BE:C2:FF:1E:C8:AC:86:D3:B2:25:2C:93:7D:13:CB:8E:9D:51:FF:33
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BEC2FF1EC8AC86D3B2252C937D13CB8E9D51FF33.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EennRTSYfwGuDgSRTw2tFLKSMbE7e6MXh8WehGCE9Ta/0/3133382e3131372e33362e302f32322d3234203d3e20323634323231.roa
Signing time:             Mon 24 Feb 2025 14:36:22 +0000
ROA not before:           Mon 24 Feb 2025 14:31:22 +0000
ROA not after:            Mon 23 Feb 2026 14:36:22 +0000
asID:                     264221
IP address blocks:        138.117.36.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:ff:46:f6:70:dd:4f:42:24:95:ab:b6:9e:39:04:44:23:f1:ae:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BEC2FF1EC8AC86D3B2252C937D13CB8E9D51FF33
        Validity
            Not Before: Feb 24 14:31:22 2025 GMT
            Not After : Feb 23 14:36:22 2026 GMT
        Subject: CN=90A870928312B14D93ECA379DF6A220A7C257FDA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:32:e4:27:24:6c:69:0c:82:8a:d3:91:94:4f:
                    2c:79:f4:d0:84:90:d7:9e:a9:84:21:05:e9:f8:c9:
                    98:f6:ff:66:fc:01:5c:f1:3c:3e:66:e9:64:77:33:
                    d5:11:f6:d8:6e:24:ef:34:02:77:1b:41:29:49:74:
                    67:e8:7f:ee:98:09:fb:dd:87:83:71:df:cc:c9:ec:
                    23:22:63:a8:aa:61:92:38:02:fa:a0:3a:b1:e6:5f:
                    ba:0e:9f:76:7e:46:3a:45:10:d6:67:fd:9b:43:4e:
                    4a:e2:4e:fa:2e:ba:0f:ad:3c:8e:0b:c1:6b:fd:e0:
                    dc:3b:f6:a3:a7:bd:6e:89:c6:c6:e0:9d:e1:fd:b2:
                    f5:dd:52:1c:59:fe:2c:68:3c:05:4a:d8:91:c0:32:
                    eb:dd:1f:32:94:da:fc:bb:39:93:fd:76:49:74:22:
                    fa:89:60:c8:0b:90:09:9b:39:8d:d5:75:ee:26:0c:
                    74:a8:d1:3b:5b:20:b5:dc:82:72:7d:ee:ef:2a:91:
                    a4:6c:06:bf:b2:f6:68:d2:fb:a9:66:a7:c5:fd:18:
                    24:4e:51:3f:b2:1c:54:73:03:b8:3e:a3:46:53:c8:
                    d3:4c:28:c6:0a:fa:f2:ff:1b:6f:b6:de:9b:6e:c5:
                    b8:18:9c:e5:b6:c6:bb:bb:e3:70:57:a4:1e:91:83:
                    b1:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:A8:70:92:83:12:B1:4D:93:EC:A3:79:DF:6A:22:0A:7C:25:7F:DA
            X509v3 Authority Key Identifier:
                keyid:BE:C2:FF:1E:C8:AC:86:D3:B2:25:2C:93:7D:13:CB:8E:9D:51:FF:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EennRTSYfwGuDgSRTw2tFLKSMbE7e6MXh8WehGCE9Ta/0/BEC2FF1EC8AC86D3B2252C937D13CB8E9D51FF33.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BEC2FF1EC8AC86D3B2252C937D13CB8E9D51FF33.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EennRTSYfwGuDgSRTw2tFLKSMbE7e6MXh8WehGCE9Ta/0/3133382e3131372e33362e302f32322d3234203d3e20323634323231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.117.36.0/22

    Signature Algorithm: sha256WithRSAEncryption
         30:ac:82:92:5b:d6:bd:ca:5d:72:69:d9:b0:aa:74:30:41:0b:
         c1:54:8a:bb:39:6c:ce:6c:1b:df:40:d8:9f:1a:ad:9e:0c:5a:
         78:77:a9:77:61:2a:9b:07:58:e5:36:a0:4e:5b:e2:ad:3f:cf:
         0e:19:b4:3a:d5:56:54:cf:ef:99:d6:c3:93:ed:88:0d:bb:e5:
         20:b3:8c:ce:d4:56:9c:01:07:1e:da:40:70:e9:ef:14:09:a9:
         e5:b9:cc:ca:8f:21:4f:08:3a:54:6b:11:bb:09:c9:a0:cd:af:
         6f:91:e7:b3:a6:c9:8c:a0:dd:6e:f4:a9:3f:c5:58:9a:1e:71:
         3d:e8:cb:ef:9f:9c:5b:ec:87:ea:52:04:b5:ca:d9:26:bf:5d:
         5e:0f:be:86:7d:a0:20:f6:3d:63:7a:3c:c2:13:01:92:ab:62:
         35:7d:45:55:f1:af:d5:41:8b:6a:ab:24:12:4b:89:cc:89:3c:
         86:b9:71:6e:66:c1:84:75:10:4a:4a:1e:e5:61:d1:a0:f5:04:
         95:03:86:82:19:ee:69:f6:d0:3f:dc:b4:13:a2:b4:5b:50:46:
         81:15:f3:35:72:ef:bf:cf:6e:b5:99:42:31:ee:49:4c:60:c8:
         17:50:07:eb:19:68:71:8c:f9:14:6a:de:d5:75:f5:4f:37:f7:
         8a:15:45:81
-----BEGIN CERTIFICATE-----
MIIFRDCCBCygAwIBAgIUUf9G9nDdT0Iklau2njkERCPxrsMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkVDMkZGMUVDOEFDODZEM0IyMjUyQzkzN0QxM0NCOEU5
RDUxRkYzMzAeFw0yNTAyMjQxNDMxMjJaFw0yNjAyMjMxNDM2MjJaMDMxMTAvBgNV
BAMTKDkwQTg3MDkyODMxMkIxNEQ5M0VDQTM3OURGNkEyMjBBN0MyNTdGREEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCMMuQnJGxpDIKK05GUTyx59NCE
kNeeqYQhBen4yZj2/2b8AVzxPD5m6WR3M9UR9thuJO80AncbQSlJdGfof+6YCfvd
h4Nx38zJ7CMiY6iqYZI4AvqgOrHmX7oOn3Z+RjpFENZn/ZtDTkriTvouug+tPI4L
wWv94Nw79qOnvW6JxsbgneH9svXdUhxZ/ixoPAVK2JHAMuvdHzKU2vy7OZP9dkl0
IvqJYMgLkAmbOY3Vde4mDHSo0TtbILXcgnJ97u8qkaRsBr+y9mjS+6lmp8X9GCRO
UT+yHFRzA7g+o0ZTyNNMKMYK+vL/G2+23ptuxbgYnOW2xru743BXpB6Rg7FPAgMB
AAGjggJOMIICSjAdBgNVHQ4EFgQUkKhwkoMSsU2T7KN532oiCnwlf9owHwYDVR0j
BBgwFoAUvsL/HsishtOyJSyTfRPLjp1R/zMwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9FZW5uUlRTWWZ3R3VEZ1NSVHcydEZMS1NNYkU3ZTZNWGg4V2VoR0NFOVRh
LzAvQkVDMkZGMUVDOEFDODZEM0IyMjUyQzkzN0QxM0NCOEU5RDUxRkYzMy5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS9CRUMyRkYxRUM4QUM4NkQzQjIy
NTJDOTM3RDEzQ0I4RTlENTFGRjMzLmNlcjCBrQYIKwYBBQUHAQsEgaAwgZ0wgZoG
CCsGAQUFBzALhoGNcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9F
ZW5uUlRTWWZ3R3VEZ1NSVHcydEZMS1NNYkU3ZTZNWGg4V2VoR0NFOVRhLzAvMzEz
MzM4MmUzMTMxMzcyZTMzMzYyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM2MzQz
MjMyMzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcB
Af8EEDAOMAwEAgABMAYDBAKKdSQwDQYJKoZIhvcNAQELBQADggEBADCsgpJb1r3K
XXJp2bCqdDBBC8FUirs5bM5sG99A2J8arZ4MWnh3qXdhKpsHWOU2oE5b4q0/zw4Z
tDrVVlTP75nWw5PtiA275SCzjM7UVpwBBx7aQHDp7xQJqeW5zMqPIU8IOlRrEbsJ
yaDNr2+R57OmyYyg3W70qT/FWJoecT3oy++fnFvsh+pSBLXK2Sa/XV4PvoZ9oCD2
PWN6PMITAZKrYjV9RVXxr9VBi2qrJBJLicyJPIa5cW5mwYR1EEpKHuVh0aD1BJUD
hoIZ7mn20D/ctBOitFtQRoEV8zVy77/PbrWZQjHuSUxgyBdQB+sZaHGM+RRq3tV1
9U8394oVRYE=
-----END CERTIFICATE-----
Generated at Mon Apr 7 01:32:03 2025 by rpki-client