Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EvDVEY7dwA7k7PfxUPur62it5Nb3K54UD5UHkoLF5QGM/0/3133312e3139362e34342e302f32322d3332203d3e20323635393034.roa
File:                     3133312e3139362e34342e302f32322d3332203d3e20323635393034.roa (raw, json)
Hash identifier:          TwRxlMH5SVpIWp9LcGBebnKpjSHM2m49VPxOETdoJY8=
Subject key identifier:   31:07:41:A8:6A:A1:25:C9:0F:82:3B:40:C9:2F:3B:F5:95:4F:23:07
Certificate issuer:       /CN=354A7D2E5655BD8DC81E7B22296D28E7FE5450F4
Certificate serial:       504CD552DF281FF7D9C674F06484B41A7BFF9C12
Authority key identifier: 35:4A:7D:2E:56:55:BD:8D:C8:1E:7B:22:29:6D:28:E7:FE:54:50:F4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/354A7D2E5655BD8DC81E7B22296D28E7FE5450F4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EvDVEY7dwA7k7PfxUPur62it5Nb3K54UD5UHkoLF5QGM/0/3133312e3139362e34342e302f32322d3332203d3e20323635393034.roa
Signing time:             Wed 14 Aug 2024 18:32:10 +0000
ROA not before:           Wed 14 Aug 2024 18:27:10 +0000
ROA not after:            Wed 13 Aug 2025 18:32:10 +0000
asID:                     265904
IP address blocks:        131.196.44.0/22 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:4c:d5:52:df:28:1f:f7:d9:c6:74:f0:64:84:b4:1a:7b:ff:9c:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=354A7D2E5655BD8DC81E7B22296D28E7FE5450F4
        Validity
            Not Before: Aug 14 18:27:10 2024 GMT
            Not After : Aug 13 18:32:10 2025 GMT
        Subject: CN=310741A86AA125C90F823B40C92F3BF5954F2307
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:fc:2c:2e:c1:1f:b9:56:47:b2:bd:8d:c3:8c:
                    0e:aa:a1:59:49:81:ac:a2:7f:de:62:c2:96:96:f9:
                    47:5b:9b:d2:06:9b:7e:0c:86:89:72:d7:b5:cb:57:
                    aa:73:6d:49:b1:cc:74:2d:bf:d9:4e:44:6f:0a:a1:
                    34:f2:0f:b3:d3:fd:4b:cc:a2:37:54:9f:b8:1c:2d:
                    98:42:c5:4e:74:03:0f:88:73:02:d2:59:ce:24:b0:
                    2c:46:14:82:62:bf:a7:84:38:ac:f8:9f:a0:19:d5:
                    8a:f3:7a:e3:0d:cc:b2:47:0c:ab:ce:10:3c:20:92:
                    17:cf:1d:3a:03:51:27:60:57:d2:86:01:d9:1b:2f:
                    8f:ec:e6:c4:98:b8:76:59:1f:40:df:c5:32:c7:12:
                    5b:4b:1a:eb:cc:98:f6:d2:e9:4c:c8:10:ca:f9:96:
                    14:3b:97:db:a0:53:b4:9e:03:7e:33:b5:af:21:0d:
                    5b:13:5a:6a:f5:8a:3d:21:5c:48:05:91:c7:a5:c3:
                    ab:23:cd:88:d6:9b:1f:44:ca:5f:64:86:db:54:56:
                    c6:1c:5f:04:f9:5c:0b:77:fa:21:e1:2f:21:82:ec:
                    2b:58:c6:86:da:5d:46:ff:b9:7a:cc:6b:ca:cd:31:
                    08:f3:7e:89:50:a1:79:bb:43:0e:19:fb:73:32:00:
                    bf:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:07:41:A8:6A:A1:25:C9:0F:82:3B:40:C9:2F:3B:F5:95:4F:23:07
            X509v3 Authority Key Identifier:
                keyid:35:4A:7D:2E:56:55:BD:8D:C8:1E:7B:22:29:6D:28:E7:FE:54:50:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EvDVEY7dwA7k7PfxUPur62it5Nb3K54UD5UHkoLF5QGM/0/354A7D2E5655BD8DC81E7B22296D28E7FE5450F4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/354A7D2E5655BD8DC81E7B22296D28E7FE5450F4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EvDVEY7dwA7k7PfxUPur62it5Nb3K54UD5UHkoLF5QGM/0/3133312e3139362e34342e302f32322d3332203d3e20323635393034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.196.44.0/22

    Signature Algorithm: sha256WithRSAEncryption
         70:3d:88:1c:31:19:20:72:53:dd:d4:0f:31:2a:c4:24:32:6b:
         59:2b:28:28:7e:df:83:3b:0b:1f:96:26:a4:45:f9:f3:37:14:
         a1:21:67:9a:5e:f0:90:0b:98:b0:05:5e:9b:71:cd:45:c8:96:
         88:b1:69:f9:44:a9:35:18:69:b8:a5:34:8f:2f:79:eb:2a:6f:
         b8:46:3f:f8:7c:ee:fe:ab:7b:4d:15:50:28:c3:1a:5b:26:6b:
         cf:14:40:c3:4e:ce:07:7b:ba:36:3b:df:3e:f9:e2:8b:8e:7b:
         13:e9:48:c8:c5:a8:ee:0e:3e:db:58:bc:0e:3a:88:1c:e9:d6:
         94:4a:59:a7:27:2a:16:69:52:f7:63:c0:7e:c6:a9:d4:d9:43:
         02:dd:95:5c:6c:67:8d:e3:98:4b:57:1d:42:c1:6a:26:95:41:
         de:0d:7f:de:1b:2f:f2:2f:6c:2e:ec:3a:e4:78:df:c9:ab:d0:
         57:46:fa:91:59:0c:49:95:f7:24:76:a4:a3:bb:b6:9d:17:9e:
         77:57:02:c1:e9:68:59:bc:16:3f:1a:2e:11:eb:6a:43:9b:60:
         42:b0:88:cf:ad:3d:db:31:27:85:0a:78:66:35:87:eb:17:27:
         be:e3:f8:49:a3:cd:22:be:f1:11:91:43:62:b0:fc:46:9e:43:
         d6:b7:66:cb
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUUEzVUt8oH/fZxnTwZIS0Gnv/nBIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzU0QTdEMkU1NjU1QkQ4REM4MUU3QjIyMjk2RDI4RTdG
RTU0NTBGNDAeFw0yNDA4MTQxODI3MTBaFw0yNTA4MTMxODMyMTBaMDMxMTAvBgNV
BAMTKDMxMDc0MUE4NkFBMTI1QzkwRjgyM0I0MEM5MkYzQkY1OTU0RjIzMDcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCg/CwuwR+5VkeyvY3DjA6qoVlJ
gayif95iwpaW+Udbm9IGm34Mholy17XLV6pzbUmxzHQtv9lORG8KoTTyD7PT/UvM
ojdUn7gcLZhCxU50Aw+IcwLSWc4ksCxGFIJiv6eEOKz4n6AZ1YrzeuMNzLJHDKvO
EDwgkhfPHToDUSdgV9KGAdkbL4/s5sSYuHZZH0DfxTLHEltLGuvMmPbS6UzIEMr5
lhQ7l9ugU7SeA34zta8hDVsTWmr1ij0hXEgFkcelw6sjzYjWmx9Eyl9khttUVsYc
XwT5XAt3+iHhLyGC7CtYxobaXUb/uXrMa8rNMQjzfolQoXm7Qw4Z+3MyAL97AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUMQdBqGqhJckPgjtAyS879ZVPIwcwHwYDVR0j
BBgwFoAUNUp9LlZVvY3IHnsiKW0o5/5UUPQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRXZEVkVZN2R3QTdrN1BmeFVQdXI2Mml0NU5iM0s1NFVENVVIa29MRjVR
R00vMC8zNTRBN0QyRTU2NTVCRDhEQzgxRTdCMjIyOTZEMjhFN0ZFNTQ1MEY0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzM1NEE3RDJFNTY1NUJEOERD
ODFFN0IyMjI5NkQyOEU3RkU1NDUwRjQuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0V2RFZFWTdkd0E3azdQZnhVUHVyNjJpdDVOYjNLNTRVRDVVSGtvTEY1UUdNLzAv
MzEzMzMxMmUzMTM5MzYyZTM0MzQyZTMwMmYzMjMyMmQzMzMyMjAzZDNlMjAzMjM2
MzUzOTMwMzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAKDxCwwDQYJKoZIhvcNAQELBQADggEBAHA9iBwx
GSByU93UDzEqxCQya1krKCh+34M7Cx+WJqRF+fM3FKEhZ5pe8JALmLAFXptxzUXI
loixaflEqTUYabilNI8veesqb7hGP/h87v6re00VUCjDGlsma88UQMNOzgd7ujY7
3z754ouOexPpSMjFqO4OPttYvA46iBzp1pRKWacnKhZpUvdjwH7GqdTZQwLdlVxs
Z43jmEtXHULBaiaVQd4Nf94bL/IvbC7sOuR438mr0FdG+pFZDEmV9yR2pKO7tp0X
nndXAsHpaFm8Fj8aLhHrakObYEKwiM+tPdsxJ4UKeGY1h+sXJ77j+EmjzSK+8RGR
Q2Kw/EaeQ9a3Zss=
-----END CERTIFICATE-----
Generated at Tue Feb 18 13:30:39 2025 by rpki-client