Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GoD9d75DyMEocGkKALy93pPyV7Hh2Fy4FeuPtyFJmNmn/0/3138312e3138392e33362e302f32342d3234203d3e20323731333633.roa
File:                     3138312e3138392e33362e302f32342d3234203d3e20323731333633.roa (raw, json)
Hash identifier:          B1MHcjXQCUGEsADwyaFSOLtn65crTopqhbU9++J6Vb0=
Subject key identifier:   B5:15:AE:06:DF:5A:3E:B8:AE:18:D3:B9:36:A8:FC:CE:CA:55:C3:10
Certificate issuer:       /CN=CB8B5B9F537D71AAF7422F603CAD3715D99F65F2
Certificate serial:       461DB56E453DDFE312B54965ABD89402DE06EB0A
Authority key identifier: CB:8B:5B:9F:53:7D:71:AA:F7:42:2F:60:3C:AD:37:15:D9:9F:65:F2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CB8B5B9F537D71AAF7422F603CAD3715D99F65F2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GoD9d75DyMEocGkKALy93pPyV7Hh2Fy4FeuPtyFJmNmn/0/3138312e3138392e33362e302f32342d3234203d3e20323731333633.roa
Signing time:             Tue 18 Mar 2025 00:01:04 +0000
ROA not before:           Mon 17 Mar 2025 23:56:04 +0000
ROA not after:            Tue 17 Mar 2026 00:01:04 +0000
asID:                     271363
IP address blocks:        181.189.36.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:1d:b5:6e:45:3d:df:e3:12:b5:49:65:ab:d8:94:02:de:06:eb:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CB8B5B9F537D71AAF7422F603CAD3715D99F65F2
        Validity
            Not Before: Mar 17 23:56:04 2025 GMT
            Not After : Mar 17 00:01:04 2026 GMT
        Subject: CN=B515AE06DF5A3EB8AE18D3B936A8FCCECA55C310
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:b5:48:bb:3d:6a:5b:89:17:81:be:4e:b7:99:
                    27:29:4a:c4:ea:1e:89:16:ff:61:4e:7e:23:27:17:
                    df:a2:88:8d:6c:2e:76:f7:58:69:80:f1:74:8b:5f:
                    65:d6:04:8a:07:16:7d:58:ab:64:4e:ce:92:7f:1e:
                    11:c5:7f:92:a2:c1:99:52:39:a5:9c:74:fc:6e:91:
                    96:e1:68:2d:4a:aa:91:ef:39:0a:27:74:c8:3a:51:
                    63:1f:bb:e0:0a:ef:e7:a2:62:b6:66:e5:08:92:c9:
                    57:25:a0:b1:ae:ba:30:b4:77:e3:54:88:0b:1f:36:
                    a6:38:d4:c9:f9:38:d3:f6:12:76:a4:89:84:3e:3b:
                    ce:f4:2c:69:24:f3:c5:88:6d:9f:01:af:bb:00:97:
                    d3:2c:7e:46:4c:d5:3c:d7:fc:ea:9c:50:f4:61:91:
                    69:92:d1:8c:41:ca:05:c7:1f:af:5f:51:2e:21:6e:
                    63:03:48:87:50:aa:21:c9:66:03:c1:fc:0f:0b:ae:
                    65:10:7a:61:8e:7c:5d:6d:13:14:a5:18:b3:8f:f6:
                    4d:36:8e:85:db:f6:6b:38:95:c8:01:ee:47:41:86:
                    ce:3c:93:4f:92:f6:cd:0a:33:b8:e6:0a:42:40:27:
                    8c:42:c8:f3:dc:04:ae:17:38:5e:c9:9a:e1:99:71:
                    43:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:15:AE:06:DF:5A:3E:B8:AE:18:D3:B9:36:A8:FC:CE:CA:55:C3:10
            X509v3 Authority Key Identifier:
                keyid:CB:8B:5B:9F:53:7D:71:AA:F7:42:2F:60:3C:AD:37:15:D9:9F:65:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GoD9d75DyMEocGkKALy93pPyV7Hh2Fy4FeuPtyFJmNmn/0/CB8B5B9F537D71AAF7422F603CAD3715D99F65F2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CB8B5B9F537D71AAF7422F603CAD3715D99F65F2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GoD9d75DyMEocGkKALy93pPyV7Hh2Fy4FeuPtyFJmNmn/0/3138312e3138392e33362e302f32342d3234203d3e20323731333633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.189.36.0/24

    Signature Algorithm: sha256WithRSAEncryption
         90:99:32:e8:2a:7d:46:dc:ef:7c:15:77:f9:ca:7f:41:fa:08:
         bc:43:dc:0a:05:5b:81:a5:5f:7a:f8:b0:1f:df:16:df:ba:36:
         3b:60:d6:db:e9:26:2d:6e:18:1a:65:7d:5f:ac:9e:a4:df:e4:
         7e:e8:e3:b5:36:c6:86:5d:71:22:8d:c7:87:e9:79:08:cf:eb:
         d5:23:05:c9:8e:11:ba:ba:09:09:6a:1a:e8:ea:47:44:74:94:
         c5:98:9a:e3:e8:f6:c8:6d:76:97:9d:c6:ad:01:e9:3c:c5:2a:
         fc:b5:24:21:2a:6f:5c:8e:66:a1:b9:65:13:46:fa:42:4b:ad:
         20:1a:1a:a4:a4:b1:9c:8d:20:da:3f:eb:dd:7a:4c:4d:79:c6:
         6a:34:ae:b3:1c:1d:97:10:2b:eb:81:3c:25:c7:e6:22:b0:ad:
         4f:e5:48:a5:c7:8e:d0:9d:93:9c:d1:ed:50:5a:2b:43:a2:5e:
         2a:55:14:5f:33:e8:54:eb:0b:3b:51:ab:d5:9a:70:34:87:0a:
         fd:e0:7d:ed:c0:4e:b7:92:f9:e5:44:b8:9e:d8:7e:00:0b:99:
         8d:ad:fa:0d:9b:88:e1:4d:42:a8:79:00:20:27:bf:dd:10:e0:
         86:38:73:a2:a3:3b:79:9a:65:1f:8b:df:d5:20:0f:d1:43:09:
         b1:51:08:89
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIURh21bkU93+MStUllq9iUAt4G6wowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0I4QjVCOUY1MzdENzFBQUY3NDIyRjYwM0NBRDM3MTVE
OTlGNjVGMjAeFw0yNTAzMTcyMzU2MDRaFw0yNjAzMTcwMDAxMDRaMDMxMTAvBgNV
BAMTKEI1MTVBRTA2REY1QTNFQjhBRTE4RDNCOTM2QThGQ0NFQ0E1NUMzMTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCotUi7PWpbiReBvk63mScpSsTq
HokW/2FOfiMnF9+iiI1sLnb3WGmA8XSLX2XWBIoHFn1Yq2ROzpJ/HhHFf5KiwZlS
OaWcdPxukZbhaC1KqpHvOQondMg6UWMfu+AK7+eiYrZm5QiSyVcloLGuujC0d+NU
iAsfNqY41Mn5ONP2EnakiYQ+O870LGkk88WIbZ8Br7sAl9MsfkZM1TzX/OqcUPRh
kWmS0YxBygXHH69fUS4hbmMDSIdQqiHJZgPB/A8LrmUQemGOfF1tExSlGLOP9k02
joXb9ms4lcgB7kdBhs48k0+S9s0KM7jmCkJAJ4xCyPPcBK4XOF7JmuGZcUMVAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUtRWuBt9aPriuGNO5Nqj8zspVwxAwHwYDVR0j
BBgwFoAUy4tbn1N9car3Qi9gPK03FdmfZfIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR29EOWQ3NUR5TUVvY0drS0FMeTkzcFB5VjdIaDJGeTRGZXVQdHlGSm1O
bW4vMC9DQjhCNUI5RjUzN0Q3MUFBRjc0MjJGNjAzQ0FEMzcxNUQ5OUY2NUYyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NCOEI1QjlGNTM3RDcxQUFG
NzQyMkY2MDNDQUQzNzE1RDk5RjY1RjIuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0dvRDlkNzVEeU1Fb2NHa0tBTHk5M3BQeVY3SGgyRnk0RmV1UHR5RkptTm1uLzAv
MzEzODMxMmUzMTM4MzkyZTMzMzYyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM3
MzEzMzM2MzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAC1vSQwDQYJKoZIhvcNAQELBQADggEBAJCZMugq
fUbc73wVd/nKf0H6CLxD3AoFW4GlX3r4sB/fFt+6Njtg1tvpJi1uGBplfV+snqTf
5H7o47U2xoZdcSKNx4fpeQjP69UjBcmOEbq6CQlqGujqR0R0lMWYmuPo9shtdped
xq0B6TzFKvy1JCEqb1yOZqG5ZRNG+kJLrSAaGqSksZyNINo/6916TE15xmo0rrMc
HZcQK+uBPCXH5iKwrU/lSKXHjtCdk5zR7VBaK0OiXipVFF8z6FTrCztRq9WacDSH
Cv3gfe3ATreS+eVEuJ7YfgALmY2t+g2biOFNQqh5ACAnv90Q4IY4c6KjO3maZR+L
39UgD9FDCbFRCIk=
-----END CERTIFICATE-----
Generated at Tue Apr 8 14:50:04 2025 by rpki-client