Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/3138372e3130382e3233342e302f32342d3234203d3e203238313234.roa
File:                     3138372e3130382e3233342e302f32342d3234203d3e203238313234.roa (raw, json)
Hash identifier:          vtquHlMDqJgDjjfVY4lE/qhh+qyq3A2n8pw3kL5Zy7Y=
Subject key identifier:   59:18:B3:47:DB:66:FD:CA:78:1F:66:46:85:CA:0D:69:52:A5:19:79
Certificate issuer:       /CN=AE248C80EA5C4C5779C1297121D0BD8D2DC379F0
Certificate serial:       7C1CFAF9275A6C494B11C61DA11B15B40FAF67A5
Authority key identifier: AE:24:8C:80:EA:5C:4C:57:79:C1:29:71:21:D0:BD:8D:2D:C3:79:F0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/3138372e3130382e3233342e302f32342d3234203d3e203238313234.roa
Signing time:             Tue 11 Feb 2025 12:13:16 +0000
ROA not before:           Tue 11 Feb 2025 12:08:16 +0000
ROA not after:            Tue 10 Feb 2026 12:13:16 +0000
asID:                     28124
IP address blocks:        187.108.234.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:1c:fa:f9:27:5a:6c:49:4b:11:c6:1d:a1:1b:15:b4:0f:af:67:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AE248C80EA5C4C5779C1297121D0BD8D2DC379F0
        Validity
            Not Before: Feb 11 12:08:16 2025 GMT
            Not After : Feb 10 12:13:16 2026 GMT
        Subject: CN=3082010A0282010100A58A299F42858A96DA733909CD482A4C537EE98B4B6691A11FBBB93B4F26CEE04BDBE18A13C66772627B60D5594333D06D1C8ABEB029E19F39CE3E12D4E5166F19AEBD10BA4F2BA6D90EA048D51A66E90E0D1B665BD9D1D4F0E25353935F22ABA2010BC648548A993838BDE521995C7D38AA5A626D96F1C5CDE9DEC7346AAA6D95978568919E7D1516D9A62B27AB305EB583C3A4D05FF8DB10BC1B6CFE4E62ED56EB0C959A96E4AB1B3F9F030E0D57DF6882040EB5857BBB3FE3D2DE223941C9DF87C0D5839270BA757A42A0FA9236422193B013246003F3A32AE38BD7F21FDBBA6C8E2A051728CD09EEF1668213945FB9FB3DADD95DFF7440F90BBC7E3C1B510203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:8a:29:9f:42:85:8a:96:da:73:39:09:cd:48:
                    2a:4c:53:7e:e9:8b:4b:66:91:a1:1f:bb:b9:3b:4f:
                    26:ce:e0:4b:db:e1:8a:13:c6:67:72:62:7b:60:d5:
                    59:43:33:d0:6d:1c:8a:be:b0:29:e1:9f:39:ce:3e:
                    12:d4:e5:16:6f:19:ae:bd:10:ba:4f:2b:a6:d9:0e:
                    a0:48:d5:1a:66:e9:0e:0d:1b:66:5b:d9:d1:d4:f0:
                    e2:53:53:93:5f:22:ab:a2:01:0b:c6:48:54:8a:99:
                    38:38:bd:e5:21:99:5c:7d:38:aa:5a:62:6d:96:f1:
                    c5:cd:e9:de:c7:34:6a:aa:6d:95:97:85:68:91:9e:
                    7d:15:16:d9:a6:2b:27:ab:30:5e:b5:83:c3:a4:d0:
                    5f:f8:db:10:bc:1b:6c:fe:4e:62:ed:56:eb:0c:95:
                    9a:96:e4:ab:1b:3f:9f:03:0e:0d:57:df:68:82:04:
                    0e:b5:85:7b:bb:3f:e3:d2:de:22:39:41:c9:df:87:
                    c0:d5:83:92:70:ba:75:7a:42:a0:fa:92:36:42:21:
                    93:b0:13:24:60:03:f3:a3:2a:e3:8b:d7:f2:1f:db:
                    ba:6c:8e:2a:05:17:28:cd:09:ee:f1:66:82:13:94:
                    5f:b9:fb:3d:ad:d9:5d:ff:74:40:f9:0b:bc:7e:3c:
                    1b:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:18:B3:47:DB:66:FD:CA:78:1F:66:46:85:CA:0D:69:52:A5:19:79
            X509v3 Authority Key Identifier:
                keyid:AE:24:8C:80:EA:5C:4C:57:79:C1:29:71:21:D0:BD:8D:2D:C3:79:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/3138372e3130382e3233342e302f32342d3234203d3e203238313234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.108.234.0/24

    Signature Algorithm: sha256WithRSAEncryption
         19:d7:d1:10:0c:a2:76:17:34:d0:16:8d:a0:81:37:9d:85:11:
         7b:d4:e7:6d:b5:46:a5:ae:d9:69:5d:c1:ec:82:cc:82:e7:1b:
         f9:d0:73:8c:5c:a6:88:0a:54:4f:a5:2b:ae:9b:de:ae:1e:13:
         bb:94:71:de:e9:e3:64:3d:4d:da:3c:1b:df:37:67:32:23:89:
         9c:17:ee:e4:91:35:a2:4c:30:18:35:e7:60:5e:69:c9:c8:83:
         aa:c8:ae:7a:2c:56:32:b5:fb:4c:da:4a:a1:28:2a:b4:e9:ef:
         db:5d:c8:05:42:71:01:ab:7c:ec:34:eb:33:bd:a5:78:99:c1:
         e2:ea:4d:f4:b7:b5:45:bf:c5:47:7f:63:7d:f3:77:25:e7:3f:
         cc:11:7a:ce:ed:bd:05:a5:f9:8c:4f:31:1b:bb:d9:d3:8d:8f:
         67:c4:0b:99:25:4e:3d:02:28:74:d6:06:91:eb:ed:13:97:b9:
         cc:88:f8:75:6a:45:f9:ef:d1:f9:40:d2:06:46:d1:0b:41:e8:
         93:80:b0:1a:8d:58:9b:c9:c6:4c:0d:53:df:88:53:76:aa:07:
         7c:71:0c:2e:31:d6:f6:bf:b2:01:91:80:38:0b:65:9f:da:15:
         e0:d7:9b:c4:f7:06:b8:7a:9f:99:51:0c:a0:ff:61:6d:1a:0b:
         96:81:f4:dd
-----BEGIN CERTIFICATE-----
MIIHQzCCBiugAwIBAgIUfBz6+SdabElLEcYdoRsVtA+vZ6UwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUUyNDhDODBFQTVDNEM1Nzc5QzEyOTcxMjFEMEJEOEQy
REMzNzlGMDAeFw0yNTAyMTExMjA4MTZaFw0yNjAyMTAxMjEzMTZaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQTU4QTI5OUY0Mjg1OEE5NkRB
NzMzOTA5Q0Q0ODJBNEM1MzdFRTk4QjRCNjY5MUExMUZCQkI5M0I0RjI2Q0VFMDRC
REJFMThBMTNDNjY3NzI2MjdCNjBENTU5NDMzM0QwNkQxQzhBQkVCMDI5RTE5RjM5
Q0UzRTEyRDRFNTE2NkYxOUFFQkQxMEJBNEYyQkE2RDkwRUEwNDhENTFBNjZFOTBF
MEQxQjY2NUJEOUQxRDRGMEUyNTM1MzkzNUYyMkFCQTIwMTBCQzY0ODU0OEE5OTM4
MzhCREU1MjE5OTVDN0QzOEFBNUE2MjZEOTZGMUM1Q0RFOURFQzczNDZBQUE2RDk1
OTc4NTY4OTE5RTdEMTUxNkQ5QTYyQjI3QUIzMDVFQjU4M0MzQTREMDVGRjhEQjEw
QkMxQjZDRkU0RTYyRUQ1NkVCMEM5NTlBOTZFNEFCMUIzRjlGMDMwRTBENTdERjY4
ODIwNDBFQjU4NTdCQkIzRkUzRDJERTIyMzk0MUM5REY4N0MwRDU4MzkyNzBCQTc1
N0E0MkEwRkE5MjM2NDIyMTkzQjAxMzI0NjAwM0YzQTMyQUUzOEJEN0YyMUZEQkJB
NkM4RTJBMDUxNzI4Q0QwOUVFRjE2NjgyMTM5NDVGQjlGQjNEQUREOTVERkY3NDQw
RjkwQkJDN0UzQzFCNTEwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEApYopn0KFipbaczkJzUgqTFN+6YtLZpGhH7u5O08mzuBL2+GKE8Zn
cmJ7YNVZQzPQbRyKvrAp4Z85zj4S1OUWbxmuvRC6Tyum2Q6gSNUaZukODRtmW9nR
1PDiU1OTXyKrogELxkhUipk4OL3lIZlcfTiqWmJtlvHFzenexzRqqm2Vl4VokZ59
FRbZpisnqzBetYPDpNBf+NsQvBts/k5i7VbrDJWaluSrGz+fAw4NV99oggQOtYV7
uz/j0t4iOUHJ34fA1YOScLp1ekKg+pI2QiGTsBMkYAPzoyrji9fyH9u6bI4qBRco
zQnu8WaCE5Rfufs9rdld/3RA+Qu8fjwbUQIDAQABo4ICUTCCAk0wHQYDVR0OBBYE
FFkYs0fbZv3KeB9mRoXKDWlSpRl5MB8GA1UdIwQYMBaAFK4kjIDqXExXecEpcSHQ
vY0tw3nwMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0Z5eTl0N2JBYVkxU1J0
TWpqa1h3VU1uRWN4WXVlcTY1ZFo5TGFWMU5EMnlBLzEvQUUyNDhDODBFQTVDNEM1
Nzc5QzEyOTcxMjFEMEJEOEQyREMzNzlGMC5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS9BRTI0OEM4MEVBNUM0QzU3NzlDMTI5NzEyMUQwQkQ4RDJEQzM3
OUYwLmNlcjCBrgYIKwYBBQUHAQsEgaEwgZ4wgZsGCCsGAQUFBzALhoGOcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9GeXk5dDdiQWFZMVNSdE1qamtY
d1VNbkVjeFl1ZXE2NWRaOUxhVjFORDJ5QS8xLzMxMzgzNzJlMzEzMDM4MmUzMjMz
MzQyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM4MzEzMjM0LnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA
u2zqMA0GCSqGSIb3DQEBCwUAA4IBAQAZ19EQDKJ2FzTQFo2ggTedhRF71OdttUal
rtlpXcHsgsyC5xv50HOMXKaIClRPpSuum96uHhO7lHHe6eNkPU3aPBvfN2cyI4mc
F+7kkTWiTDAYNedgXmnJyIOqyK56LFYytftM2kqhKCq06e/bXcgFQnEBq3zsNOsz
vaV4mcHi6k30t7VFv8VHf2N983cl5z/MEXrO7b0FpfmMTzEbu9nTjY9nxAuZJU49
Aih01gaR6+0Tl7nMiPh1akX579H5QNIGRtELQeiTgLAajVibycZMDVPfiFN2qgd8
cQwuMdb2v7IBkYA4C2Wf2hXg15vE9wa4ep+ZUQyg/2FtGguWgfTd
-----END CERTIFICATE-----
Generated at Sun Apr 6 22:12:23 2025 by rpki-client