Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/He7bPZqear8UkEq3odf9SEZSYvbQ9uP444qhs5qZbJGQ/1/3136382e3139342e31352e302f32342d3234203d3e20323635333737.roa
File:                     3136382e3139342e31352e302f32342d3234203d3e20323635333737.roa (raw, json)
Hash identifier:          SFhNwyQ6LySzb+/Q4IyKtUPgm+4R71Wb4v91grXygUo=
Subject key identifier:   06:A4:BE:2A:9E:20:BF:19:14:3E:07:97:24:20:BE:E7:1E:54:7C:FA
Certificate issuer:       /CN=A4C9B133126401D92DA5457C573EA0078BF42BA8
Certificate serial:       47C62BCBC0AAE423442DD0081E3CEB8B8F6C6EE6
Authority key identifier: A4:C9:B1:33:12:64:01:D9:2D:A5:45:7C:57:3E:A0:07:8B:F4:2B:A8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A4C9B133126401D92DA5457C573EA0078BF42BA8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/He7bPZqear8UkEq3odf9SEZSYvbQ9uP444qhs5qZbJGQ/1/3136382e3139342e31352e302f32342d3234203d3e20323635333737.roa
Signing time:             Thu 06 Mar 2025 22:52:52 +0000
ROA not before:           Thu 06 Mar 2025 22:47:52 +0000
ROA not after:            Thu 05 Mar 2026 22:52:52 +0000
asID:                     265377
IP address blocks:        168.194.15.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:c6:2b:cb:c0:aa:e4:23:44:2d:d0:08:1e:3c:eb:8b:8f:6c:6e:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A4C9B133126401D92DA5457C573EA0078BF42BA8
        Validity
            Not Before: Mar  6 22:47:52 2025 GMT
            Not After : Mar  5 22:52:52 2026 GMT
        Subject: CN=06A4BE2A9E20BF19143E07972420BEE71E547CFA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:43:8c:fe:31:aa:78:5e:f4:4b:f1:6a:73:f7:
                    79:54:4e:53:5e:c1:e8:21:65:d9:80:92:19:56:cd:
                    fc:0d:c0:7b:ad:44:f8:2a:9a:bf:6e:b2:d6:62:64:
                    fd:6a:0e:7d:f0:ca:85:1e:99:a6:51:99:1d:69:eb:
                    50:ce:d4:7b:c6:a2:f4:fb:fe:d8:b1:b7:29:e0:d9:
                    b3:d3:6f:e2:1e:64:95:5f:2f:46:70:10:e7:31:c4:
                    82:eb:64:08:ef:92:67:6c:27:63:6a:ce:0b:96:ba:
                    6c:69:1f:d8:9e:60:90:3e:62:6d:b0:cb:bb:58:8a:
                    47:f5:c2:0c:85:3d:e5:8e:da:d4:e5:d9:97:b1:fb:
                    7a:56:eb:4f:12:6d:c8:32:88:8f:dd:35:d5:0d:75:
                    77:ea:a4:9b:be:9c:63:05:5b:e8:7a:02:52:7e:95:
                    2e:f0:50:65:6a:a7:5c:2c:a9:15:c8:b3:e1:8b:eb:
                    16:2e:77:2c:2e:41:74:34:5d:b7:ff:67:2d:9f:fa:
                    fe:f2:50:a0:ba:93:ea:8c:22:24:d5:b9:8b:d2:43:
                    2c:e5:27:f5:5e:34:5e:b9:fc:a1:1b:af:30:cd:b3:
                    d9:13:39:76:81:0a:76:6a:9b:27:43:dd:ef:82:6e:
                    d1:1c:6f:9b:09:dd:7a:e5:a7:06:5f:26:24:51:93:
                    42:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:A4:BE:2A:9E:20:BF:19:14:3E:07:97:24:20:BE:E7:1E:54:7C:FA
            X509v3 Authority Key Identifier:
                keyid:A4:C9:B1:33:12:64:01:D9:2D:A5:45:7C:57:3E:A0:07:8B:F4:2B:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/He7bPZqear8UkEq3odf9SEZSYvbQ9uP444qhs5qZbJGQ/1/A4C9B133126401D92DA5457C573EA0078BF42BA8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A4C9B133126401D92DA5457C573EA0078BF42BA8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/He7bPZqear8UkEq3odf9SEZSYvbQ9uP444qhs5qZbJGQ/1/3136382e3139342e31352e302f32342d3234203d3e20323635333737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.194.15.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a6:0b:a0:a0:c0:18:3e:11:61:a9:95:13:1d:2f:15:7a:9e:94:
         4c:04:aa:67:6e:35:a7:cd:85:61:57:43:85:3c:48:26:7f:bf:
         4a:4a:26:ed:df:63:c3:f5:e4:da:67:6c:76:4e:5f:c9:61:1d:
         c5:e4:4a:ce:4d:bc:dc:9e:01:79:75:04:9b:b2:58:dc:93:1c:
         88:b2:67:61:9a:aa:9b:a0:28:2e:b6:65:0d:a2:60:db:7b:79:
         5f:77:27:bf:cb:77:5a:a3:ec:50:48:db:12:84:73:a5:be:55:
         b0:91:2f:c3:0d:06:f1:3c:53:e0:1e:9b:3c:9c:fd:87:89:87:
         f7:c7:06:7b:d5:f9:75:a3:03:de:b9:ad:f1:47:3d:55:ca:97:
         b2:31:98:62:ce:56:67:92:8e:26:cc:a4:8e:4d:03:87:e8:b1:
         6f:2e:b6:3a:8e:af:34:8e:be:4b:4c:1d:0a:eb:f8:24:ed:4d:
         0f:1b:59:6a:0b:c6:1d:df:0b:6f:a6:f7:c7:10:94:ee:07:56:
         ff:5c:46:9c:6b:ee:85:6c:4a:55:97:88:85:cd:bf:c8:02:70:
         0e:94:72:2f:40:1e:da:47:b9:16:bc:8b:46:1f:05:53:89:d9:
         c1:01:e3:36:1c:5f:b3:ea:f5:71:b5:90:b7:83:96:80:25:e2:
         80:a9:7d:f9
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUR8Yry8Cq5CNELdAIHjzri49sbuYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTRDOUIxMzMxMjY0MDFEOTJEQTU0NTdDNTczRUEwMDc4
QkY0MkJBODAeFw0yNTAzMDYyMjQ3NTJaFw0yNjAzMDUyMjUyNTJaMDMxMTAvBgNV
BAMTKDA2QTRCRTJBOUUyMEJGMTkxNDNFMDc5NzI0MjBCRUU3MUU1NDdDRkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNQ4z+Map4XvRL8Wpz93lUTlNe
weghZdmAkhlWzfwNwHutRPgqmr9ustZiZP1qDn3wyoUemaZRmR1p61DO1HvGovT7
/tixtyng2bPTb+IeZJVfL0ZwEOcxxILrZAjvkmdsJ2NqzguWumxpH9ieYJA+Ym2w
y7tYikf1wgyFPeWO2tTl2Zex+3pW608SbcgyiI/dNdUNdXfqpJu+nGMFW+h6AlJ+
lS7wUGVqp1wsqRXIs+GL6xYudywuQXQ0Xbf/Zy2f+v7yUKC6k+qMIiTVuYvSQyzl
J/VeNF65/KEbrzDNs9kTOXaBCnZqmydD3e+CbtEcb5sJ3XrlpwZfJiRRk0LpAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUBqS+Kp4gvxkUPgeXJCC+5x5UfPowHwYDVR0j
BBgwFoAUpMmxMxJkAdktpUV8Vz6gB4v0K6gwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSGU3YlBacWVhcjhVa0VxM29kZjlTRVpTWXZiUTl1UDQ0NHFoczVxWmJK
R1EvMS9BNEM5QjEzMzEyNjQwMUQ5MkRBNTQ1N0M1NzNFQTAwNzhCRjQyQkE4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0E0QzlCMTMzMTI2NDAxRDky
REE1NDU3QzU3M0VBMDA3OEJGNDJCQTguY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0hlN2JQWnFlYXI4VWtFcTNvZGY5U0VaU1l2YlE5dVA0NDRxaHM1cVpiSkdRLzEv
MzEzNjM4MmUzMTM5MzQyZTMxMzUyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzUzMzM3Mzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBACowg8wDQYJKoZIhvcNAQELBQADggEBAKYLoKDA
GD4RYamVEx0vFXqelEwEqmduNafNhWFXQ4U8SCZ/v0pKJu3fY8P15NpnbHZOX8lh
HcXkSs5NvNyeAXl1BJuyWNyTHIiyZ2GaqpugKC62ZQ2iYNt7eV93J7/Ld1qj7FBI
2xKEc6W+VbCRL8MNBvE8U+Aemzyc/YeJh/fHBnvV+XWjA965rfFHPVXKl7IxmGLO
VmeSjibMpI5NA4fosW8utjqOrzSOvktMHQrr+CTtTQ8bWWoLxh3fC2+m98cQlO4H
Vv9cRpxr7oVsSlWXiIXNv8gCcA6Uci9AHtpHuRa8i0YfBVOJ2cEB4zYcX7Pq9XG1
kLeDloAl4oCpffk=
-----END CERTIFICATE-----
Generated at Mon Apr 7 00:31:01 2025 by rpki-client