Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HUHzM3xDLQ8k82m7ZnQ9rqqTGSD4Sjv1ca4dC1riVezV/1/3134332e302e3134342e302f32322d3232203d3e20323634303230.roa
File:                     3134332e302e3134342e302f32322d3232203d3e20323634303230.roa (raw, json)
Hash identifier:          b3cvcwKquwpK1l5mBgEOaBuQsCqZEJ40vKIADP2S5QM=
Subject key identifier:   5F:FC:56:F6:9A:76:96:EF:7B:2F:60:4B:64:CE:C7:0E:55:A0:95:59
Certificate issuer:       /CN=3E3293CF66479CC79346F97DCC606E532A1DA675
Certificate serial:       14AF76A44057695318F4755B719B57759B8F3028
Authority key identifier: 3E:32:93:CF:66:47:9C:C7:93:46:F9:7D:CC:60:6E:53:2A:1D:A6:75
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3E3293CF66479CC79346F97DCC606E532A1DA675.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HUHzM3xDLQ8k82m7ZnQ9rqqTGSD4Sjv1ca4dC1riVezV/1/3134332e302e3134342e302f32322d3232203d3e20323634303230.roa
Signing time:             Thu 06 Mar 2025 19:57:48 +0000
ROA not before:           Thu 06 Mar 2025 19:52:48 +0000
ROA not after:            Thu 05 Mar 2026 19:57:48 +0000
asID:                     264020
IP address blocks:        143.0.144.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:af:76:a4:40:57:69:53:18:f4:75:5b:71:9b:57:75:9b:8f:30:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3E3293CF66479CC79346F97DCC606E532A1DA675
        Validity
            Not Before: Mar  6 19:52:48 2025 GMT
            Not After : Mar  5 19:57:48 2026 GMT
        Subject: CN=5FFC56F69A7696EF7B2F604B64CEC70E55A09559
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:1d:83:9f:e8:5b:71:e7:eb:82:f8:98:9a:bc:
                    79:d6:67:14:bf:b1:26:05:41:0b:50:3a:94:f1:fa:
                    a9:9f:e4:4c:24:1e:22:20:e2:fb:27:c6:e9:92:e6:
                    bd:c8:d2:76:73:0e:40:b3:c3:64:e4:ce:0e:48:11:
                    44:a7:66:1f:84:8d:54:6d:fa:13:f8:76:d9:de:3c:
                    95:55:e7:c3:61:3d:3b:e4:7c:ce:4a:1d:34:7c:78:
                    5f:6b:60:07:6a:14:de:1a:cc:ed:33:08:22:79:b1:
                    10:3e:35:56:d7:4d:51:5b:25:92:a7:d8:69:7f:66:
                    3a:5e:67:b6:3b:d4:8e:5a:60:d0:be:c2:be:b8:dc:
                    1f:fb:de:29:6b:8d:fb:85:4b:ac:01:00:b8:c6:df:
                    28:7f:f9:5f:18:c0:a7:ea:0a:24:fb:c7:d5:1c:f9:
                    f5:a0:15:1f:34:5f:94:aa:df:7f:9a:f7:a9:b1:4c:
                    c1:37:5f:1e:0c:bd:44:53:6a:35:0f:dd:e5:b6:59:
                    9c:88:a4:49:7e:e5:ab:e4:c9:57:01:e8:6e:85:55:
                    78:c6:ad:0e:1d:35:07:26:0e:4a:5f:24:74:fe:8e:
                    35:b5:35:10:bc:2b:75:14:19:be:ac:93:54:9f:c9:
                    37:7f:05:cd:68:c0:ad:5d:e4:16:91:4a:93:4f:35:
                    de:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:FC:56:F6:9A:76:96:EF:7B:2F:60:4B:64:CE:C7:0E:55:A0:95:59
            X509v3 Authority Key Identifier:
                keyid:3E:32:93:CF:66:47:9C:C7:93:46:F9:7D:CC:60:6E:53:2A:1D:A6:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HUHzM3xDLQ8k82m7ZnQ9rqqTGSD4Sjv1ca4dC1riVezV/1/3E3293CF66479CC79346F97DCC606E532A1DA675.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3E3293CF66479CC79346F97DCC606E532A1DA675.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HUHzM3xDLQ8k82m7ZnQ9rqqTGSD4Sjv1ca4dC1riVezV/1/3134332e302e3134342e302f32322d3232203d3e20323634303230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.0.144.0/22

    Signature Algorithm: sha256WithRSAEncryption
         02:03:f8:9c:6e:e5:47:e7:cd:c2:52:b7:cb:7e:fe:31:d0:5b:
         72:e0:00:ac:97:c4:49:83:99:f6:ff:86:1d:77:e6:47:02:04:
         95:ed:c6:77:44:ea:b8:5f:23:ac:17:40:94:5a:2f:74:f9:da:
         6e:9c:ef:a7:66:32:d4:23:a8:cf:c2:93:c1:6a:8d:6b:b3:8f:
         e2:c2:e0:96:dc:23:79:c8:e6:d6:54:72:81:23:69:65:da:09:
         dc:ae:2b:03:b6:23:bd:8b:d7:7a:4f:ca:9c:cf:11:bf:ac:88:
         98:63:2d:6c:c3:5e:ae:14:ae:c4:95:bc:1f:45:da:81:b4:c0:
         a2:71:bb:9c:99:1c:fd:18:c8:ee:1d:4d:3e:02:0c:90:6a:c6:
         c8:f5:ba:06:33:0d:71:73:e2:d5:d3:18:fd:7b:7e:18:4f:45:
         d1:17:5d:f2:74:36:92:9f:65:55:39:6f:83:be:05:91:ab:1f:
         45:e3:8e:c6:a5:86:b7:f1:eb:bc:a6:26:e4:3e:7b:d7:7a:2d:
         58:fe:56:71:da:80:d0:04:ce:e8:46:cb:83:94:f1:69:da:92:
         f9:a2:1d:38:38:f9:8d:a6:d8:07:8a:68:12:07:74:8d:b9:f9:
         2d:b1:5d:d6:9c:65:68:71:06:d2:dd:27:b1:5d:04:d0:93:4f:
         b6:c4:8f:78
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUFK92pEBXaVMY9HVbcZtXdZuPMCgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0UzMjkzQ0Y2NjQ3OUNDNzkzNDZGOTdEQ0M2MDZFNTMy
QTFEQTY3NTAeFw0yNTAzMDYxOTUyNDhaFw0yNjAzMDUxOTU3NDhaMDMxMTAvBgNV
BAMTKDVGRkM1NkY2OUE3Njk2RUY3QjJGNjA0QjY0Q0VDNzBFNTVBMDk1NTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8HYOf6Ftx5+uC+JiavHnWZxS/
sSYFQQtQOpTx+qmf5EwkHiIg4vsnxumS5r3I0nZzDkCzw2Tkzg5IEUSnZh+EjVRt
+hP4dtnePJVV58NhPTvkfM5KHTR8eF9rYAdqFN4azO0zCCJ5sRA+NVbXTVFbJZKn
2Gl/ZjpeZ7Y71I5aYNC+wr643B/73ilrjfuFS6wBALjG3yh/+V8YwKfqCiT7x9Uc
+fWgFR80X5Sq33+a96mxTME3Xx4MvURTajUP3eW2WZyIpEl+5avkyVcB6G6FVXjG
rQ4dNQcmDkpfJHT+jjW1NRC8K3UUGb6sk1SfyTd/Bc1owK1d5BaRSpNPNd4JAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUX/xW9pp2lu97L2BLZM7HDlWglVkwHwYDVR0j
BBgwFoAUPjKTz2ZHnMeTRvl9zGBuUyodpnUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSFVIek0zeERMUThrODJtN1puUTlycXFUR1NENFNqdjFjYTRkQzFyaVZl
elYvMS8zRTMyOTNDRjY2NDc5Q0M3OTM0NkY5N0RDQzYwNkU1MzJBMURBNjc1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzNFMzI5M0NGNjY0NzlDQzc5
MzQ2Rjk3RENDNjA2RTUzMkExREE2NzUuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0hVSHpNM3hETFE4azgybTdablE5cnFxVEdTRDRTanYxY2E0ZEMxcmlWZXpWLzEv
MzEzNDMzMmUzMDJlMzEzNDM0MmUzMDJmMzIzMjJkMzIzMjIwM2QzZTIwMzIzNjM0
MzAzMjMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCjwCQMA0GCSqGSIb3DQEBCwUAA4IBAQACA/icbuVH
583CUrfLfv4x0Fty4ACsl8RJg5n2/4Ydd+ZHAgSV7cZ3ROq4XyOsF0CUWi90+dpu
nO+nZjLUI6jPwpPBao1rs4/iwuCW3CN5yObWVHKBI2ll2gncrisDtiO9i9d6T8qc
zxG/rIiYYy1sw16uFK7ElbwfRdqBtMCicbucmRz9GMjuHU0+AgyQasbI9boGMw1x
c+LV0xj9e34YT0XRF13ydDaSn2VVOW+DvgWRqx9F447GpYa38eu8pibkPnvXei1Y
/lZx2oDQBM7oRsuDlPFp2pL5oh04OPmNptgHimgSB3SNufktsV3WnGVocQbS3Sex
XQTQk0+2xI94
-----END CERTIFICATE-----
Generated at Mon Apr 7 07:51:05 2025 by rpki-client