Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HMLbExkmsrQTi3GWpZU5g9phogpbGb6hJmX7ZV2W2MSJ/0/3138372e3132312e3134342e302f32312d3231203d3e203533313935.roa
File:                     3138372e3132312e3134342e302f32312d3231203d3e203533313935.roa (raw, json)
Hash identifier:          cTyHwnUaUciXQCwJozhWDfvxcXVxHvNSkaPJpTccEVI=
Subject key identifier:   15:6F:1A:24:C1:A1:8C:98:18:EA:3D:75:23:87:5D:6B:AF:A4:18:7F
Certificate issuer:       /CN=D5F6B7FF6F96819DAFFD6CEF219B89ADF3E3CF77
Certificate serial:       0C9A4C2D6CB4936A4D83C86BC624E052876C3850
Authority key identifier: D5:F6:B7:FF:6F:96:81:9D:AF:FD:6C:EF:21:9B:89:AD:F3:E3:CF:77
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D5F6B7FF6F96819DAFFD6CEF219B89ADF3E3CF77.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HMLbExkmsrQTi3GWpZU5g9phogpbGb6hJmX7ZV2W2MSJ/0/3138372e3132312e3134342e302f32312d3231203d3e203533313935.roa
Signing time:             Fri 23 Aug 2024 20:00:09 +0000
ROA not before:           Fri 23 Aug 2024 19:55:09 +0000
ROA not after:            Fri 22 Aug 2025 20:00:09 +0000
asID:                     53195
IP address blocks:        187.121.144.0/21 maxlen: 21
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:9a:4c:2d:6c:b4:93:6a:4d:83:c8:6b:c6:24:e0:52:87:6c:38:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D5F6B7FF6F96819DAFFD6CEF219B89ADF3E3CF77
        Validity
            Not Before: Aug 23 19:55:09 2024 GMT
            Not After : Aug 22 20:00:09 2025 GMT
        Subject: CN=156F1A24C1A18C9818EA3D7523875D6BAFA4187F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:04:3e:0d:6f:17:e3:fd:93:60:58:38:6d:40:
                    8a:ee:d5:b2:9c:c5:cf:a3:3e:ae:ae:b2:b8:e4:cd:
                    e2:2f:7d:61:d8:f9:26:47:84:62:ad:91:7e:72:7d:
                    66:68:6c:98:b4:03:91:9d:f8:2b:0f:d0:e5:08:4b:
                    de:72:fa:96:2d:f1:ff:ba:c1:aa:b7:36:72:ef:2b:
                    2d:e0:1f:9a:2d:d8:51:cd:bd:bc:ff:95:0e:f9:1b:
                    33:57:0b:ba:7a:dd:50:e3:13:82:9b:f7:cf:39:3c:
                    70:e5:5b:84:f4:18:e3:b7:46:63:36:1b:25:78:00:
                    08:18:c4:d3:4b:2b:e7:c4:3f:76:6b:77:fa:59:27:
                    d2:04:e9:8f:84:db:08:73:aa:66:3f:d1:7d:ed:24:
                    a9:ab:33:41:95:d7:6a:b1:6b:2b:95:e9:02:3d:87:
                    97:ae:aa:47:2c:f4:74:11:49:04:bb:b3:6a:a0:cb:
                    45:45:aa:05:3b:32:ac:3f:ef:ca:28:52:4c:b1:9e:
                    64:7b:c0:11:3d:4a:88:61:c9:71:a8:d7:f2:6e:26:
                    18:b8:d3:27:96:6e:18:68:76:33:ca:04:00:02:b7:
                    2b:05:c9:e6:95:8f:fd:d8:33:4b:e0:ba:df:98:74:
                    55:3e:76:3e:a5:8c:78:55:b7:f2:fa:da:f3:dc:24:
                    75:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:6F:1A:24:C1:A1:8C:98:18:EA:3D:75:23:87:5D:6B:AF:A4:18:7F
            X509v3 Authority Key Identifier:
                keyid:D5:F6:B7:FF:6F:96:81:9D:AF:FD:6C:EF:21:9B:89:AD:F3:E3:CF:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HMLbExkmsrQTi3GWpZU5g9phogpbGb6hJmX7ZV2W2MSJ/0/D5F6B7FF6F96819DAFFD6CEF219B89ADF3E3CF77.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D5F6B7FF6F96819DAFFD6CEF219B89ADF3E3CF77.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HMLbExkmsrQTi3GWpZU5g9phogpbGb6hJmX7ZV2W2MSJ/0/3138372e3132312e3134342e302f32312d3231203d3e203533313935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.121.144.0/21

    Signature Algorithm: sha256WithRSAEncryption
         67:38:58:f7:67:bc:c8:3d:3f:b7:4f:36:01:04:24:be:6b:de:
         01:3c:ca:3c:27:57:b3:3c:89:1c:38:72:14:59:a5:c2:24:a7:
         61:d6:69:e1:c1:b4:72:53:17:96:07:d8:47:5f:0c:c0:e2:e8:
         72:11:7a:7a:08:37:a8:31:00:07:43:40:f9:46:ee:67:1e:7e:
         b7:5a:1c:66:6a:8c:af:82:c4:16:16:e5:ff:de:30:97:18:5a:
         fd:e2:c2:f7:b3:a4:ab:0a:37:49:8f:a2:aa:2f:49:f8:35:c6:
         e3:c3:4c:36:9d:ca:d2:d1:80:fa:61:8d:45:2c:28:23:f8:6c:
         56:50:39:88:1b:61:1d:ce:38:f5:11:f3:e6:88:ac:85:a0:86:
         ff:4f:b7:15:01:f5:a8:23:44:e1:0e:b8:53:63:4b:33:41:8b:
         5d:2c:d3:f9:57:33:fb:1e:ec:c7:1f:a8:17:7a:8d:ea:2f:b5:
         87:c8:62:6f:12:be:2a:88:bf:5b:64:a9:d8:18:bf:0f:43:ff:
         f1:30:db:85:63:a7:0c:5d:75:da:3c:57:97:ac:c9:ed:c0:62:
         3d:d4:29:71:4a:96:8c:aa:a1:1b:73:aa:f9:46:85:51:86:f5:
         89:27:d2:8c:0c:57:84:34:b3:04:d7:69:a6:fa:23:de:32:9f:
         da:da:1b:3a
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUDJpMLWy0k2pNg8hrxiTgUodsOFAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDVGNkI3RkY2Rjk2ODE5REFGRkQ2Q0VGMjE5Qjg5QURG
M0UzQ0Y3NzAeFw0yNDA4MjMxOTU1MDlaFw0yNTA4MjIyMDAwMDlaMDMxMTAvBgNV
BAMTKDE1NkYxQTI0QzFBMThDOTgxOEVBM0Q3NTIzODc1RDZCQUZBNDE4N0YwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRBD4Nbxfj/ZNgWDhtQIru1bKc
xc+jPq6usrjkzeIvfWHY+SZHhGKtkX5yfWZobJi0A5Gd+CsP0OUIS95y+pYt8f+6
waq3NnLvKy3gH5ot2FHNvbz/lQ75GzNXC7p63VDjE4Kb9885PHDlW4T0GOO3RmM2
GyV4AAgYxNNLK+fEP3Zrd/pZJ9IE6Y+E2whzqmY/0X3tJKmrM0GV12qxayuV6QI9
h5euqkcs9HQRSQS7s2qgy0VFqgU7Mqw/78ooUkyxnmR7wBE9SohhyXGo1/JuJhi4
0yeWbhhodjPKBAACtysFyeaVj/3YM0vgut+YdFU+dj6ljHhVt/L62vPcJHVlAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUFW8aJMGhjJgY6j11I4dda6+kGH8wHwYDVR0j
BBgwFoAU1fa3/2+WgZ2v/WzvIZuJrfPjz3cwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSE1MYkV4a21zclFUaTNHV3BaVTVnOXBob2dwYkdiNmhKbVg3WlYyVzJN
U0ovMC9ENUY2QjdGRjZGOTY4MTlEQUZGRDZDRUYyMTlCODlBREYzRTNDRjc3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Q1RjZCN0ZGNkY5NjgxOURB
RkZENkNFRjIxOUI4OUFERjNFM0NGNzcuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0hNTGJFeGttc3JRVGkzR1dwWlU1ZzlwaG9ncGJHYjZoSm1YN1pWMlcyTVNKLzAv
MzEzODM3MmUzMTMyMzEyZTMxMzQzNDJlMzAyZjMyMzEyZDMyMzEyMDNkM2UyMDM1
MzMzMTM5MzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAO7eZAwDQYJKoZIhvcNAQELBQADggEBAGc4WPdn
vMg9P7dPNgEEJL5r3gE8yjwnV7M8iRw4chRZpcIkp2HWaeHBtHJTF5YH2EdfDMDi
6HIRenoIN6gxAAdDQPlG7mcefrdaHGZqjK+CxBYW5f/eMJcYWv3iwvezpKsKN0mP
oqovSfg1xuPDTDadytLRgPphjUUsKCP4bFZQOYgbYR3OOPUR8+aIrIWghv9PtxUB
9agjROEOuFNjSzNBi10s0/lXM/se7McfqBd6jeovtYfIYm8SviqIv1tkqdgYvw9D
//Ew24Vjpwxdddo8V5esye3AYj3UKXFKloyqoRtzqvlGhVGG9Ykn0owMV4Q0swTX
aab6I94yn9raGzo=
-----END CERTIFICATE-----
Generated at Fri Mar 14 04:43:53 2025 by rpki-client