Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Gn8VNxiYMQJR8fdq6EUMKZRJvQEtbFY4KWidtneeDQH6/1/3133312e3130382e3232352e302f32342d3234203d3e20323633353232.roa
File:                     3133312e3130382e3232352e302f32342d3234203d3e20323633353232.roa (raw, json)
Hash identifier:          vNNS5uDMOnlyxT+MKAzJo2Z1NQwvNipS413/VnscI1E=
Subject key identifier:   59:FF:8A:CD:65:C9:AA:97:C0:88:9D:A9:E7:2C:0B:83:B9:E7:29:15
Certificate issuer:       /CN=ADE62729B7C2F675CBB616815CBA292A798BEB4B
Certificate serial:       2F9B22C78D1F767A151717B2949B5FBC1E8C32FC
Authority key identifier: AD:E6:27:29:B7:C2:F6:75:CB:B6:16:81:5C:BA:29:2A:79:8B:EB:4B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ADE62729B7C2F675CBB616815CBA292A798BEB4B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Gn8VNxiYMQJR8fdq6EUMKZRJvQEtbFY4KWidtneeDQH6/1/3133312e3130382e3232352e302f32342d3234203d3e20323633353232.roa
Signing time:             Thu 06 Mar 2025 16:16:35 +0000
ROA not before:           Thu 06 Mar 2025 16:11:35 +0000
ROA not after:            Thu 05 Mar 2026 16:16:35 +0000
asID:                     263522
IP address blocks:        131.108.225.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:9b:22:c7:8d:1f:76:7a:15:17:17:b2:94:9b:5f:bc:1e:8c:32:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ADE62729B7C2F675CBB616815CBA292A798BEB4B
        Validity
            Not Before: Mar  6 16:11:35 2025 GMT
            Not After : Mar  5 16:16:35 2026 GMT
        Subject: CN=59FF8ACD65C9AA97C0889DA9E72C0B83B9E72915
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:bb:ec:9d:97:d2:ff:ad:cd:9c:d4:6e:cf:71:
                    db:59:2a:2c:18:7d:e6:8d:6f:2f:46:bd:a5:a4:c5:
                    88:d9:21:58:df:f1:94:93:9a:0c:cd:4d:da:bd:55:
                    a7:09:36:cb:d1:4a:54:f7:e2:c8:cb:6d:61:22:aa:
                    b1:47:21:70:81:4f:20:06:21:16:3f:93:14:6e:4d:
                    cf:40:de:7d:ea:28:3e:01:12:60:e6:a9:d6:79:a7:
                    77:a1:53:b1:fa:ee:4c:7c:a4:0e:54:a8:e5:71:18:
                    f4:75:24:4f:e6:55:b9:17:14:4c:12:c6:d8:35:9f:
                    0c:b3:93:ba:aa:a7:82:9c:a5:1a:09:65:dc:45:3a:
                    66:8b:35:43:46:02:d0:3a:44:79:44:b8:60:fa:c5:
                    0f:17:04:06:dc:3a:c2:31:3f:b5:55:27:41:26:df:
                    75:bd:c9:80:22:d7:88:51:88:80:c6:a5:f0:9d:74:
                    e7:b7:88:5c:66:71:1a:2d:c3:0f:d9:86:99:6a:c0:
                    52:c4:68:d7:9f:81:96:08:0b:46:20:4c:73:7e:4b:
                    0b:11:ec:1d:48:9d:f9:c0:99:21:38:bf:e4:cd:ee:
                    62:85:75:90:32:73:49:62:a5:d6:a4:ed:67:2f:82:
                    0f:ba:87:4e:68:6c:84:c9:c7:a8:b3:89:12:d2:00:
                    1a:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:FF:8A:CD:65:C9:AA:97:C0:88:9D:A9:E7:2C:0B:83:B9:E7:29:15
            X509v3 Authority Key Identifier:
                keyid:AD:E6:27:29:B7:C2:F6:75:CB:B6:16:81:5C:BA:29:2A:79:8B:EB:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Gn8VNxiYMQJR8fdq6EUMKZRJvQEtbFY4KWidtneeDQH6/1/ADE62729B7C2F675CBB616815CBA292A798BEB4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ADE62729B7C2F675CBB616815CBA292A798BEB4B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gn8VNxiYMQJR8fdq6EUMKZRJvQEtbFY4KWidtneeDQH6/1/3133312e3130382e3232352e302f32342d3234203d3e20323633353232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.108.225.0/24

    Signature Algorithm: sha256WithRSAEncryption
         90:96:95:43:d2:15:bc:8e:8e:91:99:fc:3e:d0:fa:b3:98:cc:
         d7:a9:22:58:8c:03:88:84:73:21:e8:56:54:66:f9:eb:28:c6:
         99:95:57:90:7e:10:37:59:c7:73:55:dd:5c:28:79:f2:c9:bf:
         c3:12:05:1f:87:d8:54:ac:29:22:2f:c5:4b:79:47:7e:55:36:
         04:87:75:57:ce:40:91:91:c7:49:2e:60:45:ad:ea:1f:d6:a4:
         17:a0:4d:05:33:75:28:26:ad:f3:a8:2c:cb:d9:d5:f3:4e:30:
         7a:bb:18:6f:ba:21:71:d6:7c:0a:90:ae:f3:16:f8:db:fd:f3:
         08:c7:9e:81:a7:cf:9d:52:fb:f7:c2:68:99:11:44:34:cd:63:
         d1:0c:0d:aa:27:77:cc:50:3e:09:09:c2:73:03:66:12:d5:6f:
         7c:66:2e:d4:ca:a8:21:e9:7a:cf:24:2d:97:dc:98:19:83:cb:
         f4:2a:fd:d1:f9:80:51:06:ce:06:5a:6e:5c:dc:7e:d2:26:de:
         b9:92:6c:d7:52:72:fe:69:13:31:84:9b:b1:92:c5:4f:4d:ac:
         73:a3:27:30:43:a5:e6:9a:3f:65:31:25:25:5d:cd:de:46:3f:
         29:30:a1:83:d3:c0:15:ee:3b:8e:88:53:71:25:57:69:37:be:
         4e:7f:b6:6e
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUL5six40fdnoVFxeylJtfvB6MMvwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQURFNjI3MjlCN0MyRjY3NUNCQjYxNjgxNUNCQTI5MkE3
OThCRUI0QjAeFw0yNTAzMDYxNjExMzVaFw0yNjAzMDUxNjE2MzVaMDMxMTAvBgNV
BAMTKDU5RkY4QUNENjVDOUFBOTdDMDg4OURBOUU3MkMwQjgzQjlFNzI5MTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVu+ydl9L/rc2c1G7PcdtZKiwY
feaNby9GvaWkxYjZIVjf8ZSTmgzNTdq9VacJNsvRSlT34sjLbWEiqrFHIXCBTyAG
IRY/kxRuTc9A3n3qKD4BEmDmqdZ5p3ehU7H67kx8pA5UqOVxGPR1JE/mVbkXFEwS
xtg1nwyzk7qqp4KcpRoJZdxFOmaLNUNGAtA6RHlEuGD6xQ8XBAbcOsIxP7VVJ0Em
33W9yYAi14hRiIDGpfCddOe3iFxmcRotww/ZhplqwFLEaNefgZYIC0YgTHN+SwsR
7B1InfnAmSE4v+TN7mKFdZAyc0lipdak7Wcvgg+6h05obITJx6iziRLSABqvAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUWf+KzWXJqpfAiJ2p5ywLg7nnKRUwHwYDVR0j
BBgwFoAUreYnKbfC9nXLthaBXLopKnmL60swDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR244Vk54aVlNUUpSOGZkcTZFVU1LWlJKdlFFdGJGWTRLV2lkdG5lZURR
SDYvMS9BREU2MjcyOUI3QzJGNjc1Q0JCNjE2ODE1Q0JBMjkyQTc5OEJFQjRCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0FERTYyNzI5QjdDMkY2NzVD
QkI2MTY4MTVDQkEyOTJBNzk4QkVCNEIuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0duOFZOeGlZTVFKUjhmZHE2RVVNS1pSSnZRRXRiRlk0S1dpZHRuZWVEUUg2LzEv
MzEzMzMxMmUzMTMwMzgyZTMyMzIzNTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzYzMzM1MzIzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAINs4TANBgkqhkiG9w0BAQsFAAOCAQEAkJaV
Q9IVvI6OkZn8PtD6s5jM16kiWIwDiIRzIehWVGb56yjGmZVXkH4QN1nHc1XdXCh5
8sm/wxIFH4fYVKwpIi/FS3lHflU2BId1V85AkZHHSS5gRa3qH9akF6BNBTN1KCat
86gsy9nV804wersYb7ohcdZ8CpCu8xb42/3zCMeegafPnVL798JomRFENM1j0QwN
qid3zFA+CQnCcwNmEtVvfGYu1MqoIel6zyQtl9yYGYPL9Cr90fmAUQbOBlpuXNx+
0ibeuZJs11Jy/mkTMYSbsZLFT02sc6MnMEOl5po/ZTElJV3N3kY/KTChg9PAFe47
johTcSVXaTe+Tn+2bg==
-----END CERTIFICATE-----
Generated at Tue Apr 8 12:56:45 2025 by rpki-client