Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H7Zct25mSfitRpBN2oXhLPG5njvZTQskH8L2nNHvhaZe/0/3138392e3131332e34342e302f32342d3234203d3e20323632383735.roa
File:                     3138392e3131332e34342e302f32342d3234203d3e20323632383735.roa (raw, json)
Hash identifier:          CpLAd/FlYevjipIs3JOVyY5A1dsyAchtS+FtzETN+V8=
Subject key identifier:   68:E9:B6:D9:EE:BD:75:D3:4B:13:54:20:BA:30:AC:2A:B0:5B:B0:51
Certificate issuer:       /CN=EAC126E206D08430A13EDA2DFEA9B6F9C61BBF41
Certificate serial:       14A1821789424CFF00ACFD56DFE9CD18C71F4C25
Authority key identifier: EA:C1:26:E2:06:D0:84:30:A1:3E:DA:2D:FE:A9:B6:F9:C6:1B:BF:41
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EAC126E206D08430A13EDA2DFEA9B6F9C61BBF41.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H7Zct25mSfitRpBN2oXhLPG5njvZTQskH8L2nNHvhaZe/0/3138392e3131332e34342e302f32342d3234203d3e20323632383735.roa
Signing time:             Thu 02 Jan 2025 13:09:08 +0000
ROA not before:           Thu 02 Jan 2025 13:04:08 +0000
ROA not after:            Thu 01 Jan 2026 13:09:08 +0000
asID:                     262875
IP address blocks:        189.113.44.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:a1:82:17:89:42:4c:ff:00:ac:fd:56:df:e9:cd:18:c7:1f:4c:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EAC126E206D08430A13EDA2DFEA9B6F9C61BBF41
        Validity
            Not Before: Jan  2 13:04:08 2025 GMT
            Not After : Jan  1 13:09:08 2026 GMT
        Subject: CN=68E9B6D9EEBD75D34B135420BA30AC2AB05BB051
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:85:91:b6:30:85:ee:ef:5e:9c:dd:73:e7:d4:
                    82:7b:7e:e1:d9:7a:f4:35:bb:6c:96:de:25:d0:f9:
                    e6:a8:6b:45:3d:f8:5d:3e:68:c1:30:8d:51:42:b6:
                    92:12:e6:b4:b4:1d:c8:5e:de:ff:97:c4:f7:49:0d:
                    83:62:46:bc:99:b1:87:cf:04:17:ee:92:f7:43:be:
                    fe:03:f1:33:d8:5d:51:e3:ae:b6:77:ac:c2:64:97:
                    0d:50:0e:9e:09:3a:15:89:be:8c:a2:e1:31:76:d1:
                    23:8a:f6:1e:de:60:7c:54:0d:85:51:27:9f:cc:bb:
                    17:e5:19:96:d1:bc:e0:6d:5c:bb:c1:49:84:a7:2e:
                    b5:ff:d2:37:cc:d0:e9:79:a4:38:e5:49:4f:1c:93:
                    ac:2c:a2:c5:7f:16:aa:2b:89:e6:83:3c:ea:52:1b:
                    ba:fb:86:29:e6:2b:d1:06:1a:36:b8:9f:38:59:69:
                    97:cf:21:6a:e0:3e:4d:e0:d5:4f:12:8f:1e:06:45:
                    3d:3f:fe:40:24:05:71:55:a2:9f:6a:51:61:15:02:
                    cd:1a:41:29:d6:51:a5:14:1a:8c:fa:88:28:74:0c:
                    08:04:61:79:03:ec:65:4e:ab:4b:27:b2:e7:18:de:
                    b7:c3:28:d2:8f:cf:ba:93:c0:64:86:8a:c5:e6:fb:
                    1b:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:E9:B6:D9:EE:BD:75:D3:4B:13:54:20:BA:30:AC:2A:B0:5B:B0:51
            X509v3 Authority Key Identifier:
                keyid:EA:C1:26:E2:06:D0:84:30:A1:3E:DA:2D:FE:A9:B6:F9:C6:1B:BF:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H7Zct25mSfitRpBN2oXhLPG5njvZTQskH8L2nNHvhaZe/0/EAC126E206D08430A13EDA2DFEA9B6F9C61BBF41.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EAC126E206D08430A13EDA2DFEA9B6F9C61BBF41.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H7Zct25mSfitRpBN2oXhLPG5njvZTQskH8L2nNHvhaZe/0/3138392e3131332e34342e302f32342d3234203d3e20323632383735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.113.44.0/24

    Signature Algorithm: sha256WithRSAEncryption
         79:a7:0b:71:1d:8b:7b:63:91:3c:48:c3:e7:d7:12:cf:b0:4e:
         6d:12:02:72:75:ca:fc:c6:65:7c:78:da:e5:a4:31:09:61:ce:
         49:36:25:81:d4:4d:a4:0c:1a:84:fa:a4:32:d2:68:d8:79:4e:
         78:92:a1:d6:c1:2b:34:05:a1:d4:60:62:f5:3e:b9:63:35:45:
         2f:66:5b:0a:6e:c7:de:4d:9d:f6:96:37:55:d4:48:ec:3f:2b:
         83:b4:f0:86:ed:96:37:9b:10:18:9a:13:dd:1c:04:a5:39:91:
         21:c1:3e:aa:88:60:41:eb:48:51:0d:b4:30:da:2b:a4:88:d2:
         db:98:d4:5f:0e:f2:98:58:71:a3:7e:e8:37:a4:e7:07:1d:c8:
         55:12:b3:69:0b:24:d0:0f:69:09:3a:82:c2:d5:67:28:5f:d7:
         30:bc:1d:34:d7:22:37:88:fe:c2:2b:7c:4e:e0:88:3e:71:0d:
         d8:13:88:45:c3:93:bc:61:81:62:f8:54:7d:22:3e:ca:02:ce:
         4a:5f:1c:07:9b:f6:4d:eb:2d:f1:8b:1a:de:f5:8f:b2:ca:a1:
         68:52:cf:24:a2:88:8f:2f:7c:1c:a6:43:90:87:7e:a8:9b:24:
         ff:c8:dd:40:fb:25:51:d0:7d:4a:9a:09:ff:2b:25:5f:c9:5e:
         b9:53:ea:e5
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUFKGCF4lCTP8ArP1W3+nNGMcfTCUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUFDMTI2RTIwNkQwODQzMEExM0VEQTJERkVBOUI2RjlD
NjFCQkY0MTAeFw0yNTAxMDIxMzA0MDhaFw0yNjAxMDExMzA5MDhaMDMxMTAvBgNV
BAMTKDY4RTlCNkQ5RUVCRDc1RDM0QjEzNTQyMEJBMzBBQzJBQjA1QkIwNTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYhZG2MIXu716c3XPn1IJ7fuHZ
evQ1u2yW3iXQ+eaoa0U9+F0+aMEwjVFCtpIS5rS0Hche3v+XxPdJDYNiRryZsYfP
BBfukvdDvv4D8TPYXVHjrrZ3rMJklw1QDp4JOhWJvoyi4TF20SOK9h7eYHxUDYVR
J5/MuxflGZbRvOBtXLvBSYSnLrX/0jfM0Ol5pDjlSU8ck6wsosV/FqorieaDPOpS
G7r7hinmK9EGGja4nzhZaZfPIWrgPk3g1U8Sjx4GRT0//kAkBXFVop9qUWEVAs0a
QSnWUaUUGoz6iCh0DAgEYXkD7GVOq0snsucY3rfDKNKPz7qTwGSGisXm+xuzAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUaOm22e69ddNLE1QgujCsKrBbsFEwHwYDVR0j
BBgwFoAU6sEm4gbQhDChPtot/qm2+cYbv0EwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSDdaY3QyNW1TZml0UnBCTjJvWGhMUEc1bmp2WlRRc2tIOEwybk5Idmhh
WmUvMC9FQUMxMjZFMjA2RDA4NDMwQTEzRURBMkRGRUE5QjZGOUM2MUJCRjQxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0VBQzEyNkUyMDZEMDg0MzBB
MTNFREEyREZFQTlCNkY5QzYxQkJGNDEuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0g3WmN0MjVtU2ZpdFJwQk4yb1hoTFBHNW5qdlpUUXNrSDhMMm5OSHZoYVplLzAv
MzEzODM5MmUzMTMxMzMyZTM0MzQyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzIzODM3MzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAC9cSwwDQYJKoZIhvcNAQELBQADggEBAHmnC3Ed
i3tjkTxIw+fXEs+wTm0SAnJ1yvzGZXx42uWkMQlhzkk2JYHUTaQMGoT6pDLSaNh5
TniSodbBKzQFodRgYvU+uWM1RS9mWwpux95NnfaWN1XUSOw/K4O08IbtljebEBia
E90cBKU5kSHBPqqIYEHrSFENtDDaK6SI0tuY1F8O8phYcaN+6Dek5wcdyFUSs2kL
JNAPaQk6gsLVZyhf1zC8HTTXIjeI/sIrfE7giD5xDdgTiEXDk7xhgWL4VH0iPsoC
zkpfHAeb9k3rLfGLGt71j7LKoWhSzySiiI8vfBymQ5CHfqibJP/I3UD7JVHQfUqa
Cf8rJV/JXrlT6uU=
-----END CERTIFICATE-----
Generated at Fri Apr 11 16:50:30 2025 by rpki-client