Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Hm99MLVemgJZseUfGkM6GoLBbfvMXpphpvWe8U5U6iTn/0/3139312e3234332e3231322e302f32322d3232203d3e20323633353138.roa
File:                     3139312e3234332e3231322e302f32322d3232203d3e20323633353138.roa (raw, json)
Hash identifier:          x+hp+EnVnPJtGhGz+BeduIQy7RrjWd8XsZw33w0V630=
Subject key identifier:   FE:DE:47:76:44:E0:43:F0:29:77:8B:33:E0:B2:F4:12:9D:C8:3A:76
Certificate issuer:       /CN=2F4916C0EC5F1E6BFF1A64DC9604454738775E27
Certificate serial:       384D9068A3B598D602795579615EE897545B040C
Authority key identifier: 2F:49:16:C0:EC:5F:1E:6B:FF:1A:64:DC:96:04:45:47:38:77:5E:27
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F4916C0EC5F1E6BFF1A64DC9604454738775E27.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Hm99MLVemgJZseUfGkM6GoLBbfvMXpphpvWe8U5U6iTn/0/3139312e3234332e3231322e302f32322d3232203d3e20323633353138.roa
Signing time:             Thu 27 Mar 2025 17:28:50 +0000
ROA not before:           Thu 27 Mar 2025 17:23:50 +0000
ROA not after:            Thu 26 Mar 2026 17:28:50 +0000
asID:                     263518
IP address blocks:        191.243.212.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:4d:90:68:a3:b5:98:d6:02:79:55:79:61:5e:e8:97:54:5b:04:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2F4916C0EC5F1E6BFF1A64DC9604454738775E27
        Validity
            Not Before: Mar 27 17:23:50 2025 GMT
            Not After : Mar 26 17:28:50 2026 GMT
        Subject: CN=FEDE477644E043F029778B33E0B2F4129DC83A76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:14:39:06:72:96:5c:a7:24:e8:b9:39:3c:ec:
                    f2:ae:ee:ec:27:fd:2d:62:c4:61:a8:dd:21:78:8d:
                    79:04:92:fa:01:17:01:fc:57:b8:4c:72:c9:6d:c6:
                    25:f4:9b:6d:4b:16:72:e4:9b:b8:ac:99:da:52:da:
                    a7:73:50:f9:a7:bc:0c:2d:8c:f3:6b:7d:6e:be:22:
                    32:8d:1d:09:59:5a:24:e3:41:87:d8:ab:31:bf:84:
                    4a:73:28:32:f4:af:b6:d9:04:93:e8:ab:a2:49:8a:
                    dd:a0:2d:d9:a5:ce:53:52:74:ae:ae:f8:1c:60:c9:
                    5e:a9:ca:5a:6c:a8:f2:8c:48:fe:08:b7:98:2a:27:
                    30:ea:27:31:a2:3a:b4:0f:3e:61:ae:7e:45:18:9e:
                    73:27:c1:83:3f:79:23:66:f0:e6:e1:ef:32:5b:bc:
                    f4:37:d5:03:19:e1:01:0d:37:16:cf:53:25:f9:c4:
                    fa:0b:be:77:25:6a:fb:e5:05:09:85:c8:b9:cf:6b:
                    b2:f1:7b:ef:e3:f6:50:af:f8:31:36:90:19:2a:89:
                    e2:f1:a4:a0:f5:11:5b:eb:67:29:c0:71:61:76:b2:
                    19:a5:13:d9:8c:83:79:49:9a:33:73:23:27:2f:9b:
                    7b:5c:ff:f8:7e:c3:b4:71:c2:2a:20:8e:30:a8:f6:
                    11:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:DE:47:76:44:E0:43:F0:29:77:8B:33:E0:B2:F4:12:9D:C8:3A:76
            X509v3 Authority Key Identifier:
                keyid:2F:49:16:C0:EC:5F:1E:6B:FF:1A:64:DC:96:04:45:47:38:77:5E:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Hm99MLVemgJZseUfGkM6GoLBbfvMXpphpvWe8U5U6iTn/0/2F4916C0EC5F1E6BFF1A64DC9604454738775E27.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F4916C0EC5F1E6BFF1A64DC9604454738775E27.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Hm99MLVemgJZseUfGkM6GoLBbfvMXpphpvWe8U5U6iTn/0/3139312e3234332e3231322e302f32322d3232203d3e20323633353138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.243.212.0/22

    Signature Algorithm: sha256WithRSAEncryption
         04:41:b6:58:57:9b:47:55:4a:22:41:dc:03:8e:78:f6:a9:ea:
         33:32:3a:27:f7:18:3f:e8:3b:41:e4:40:bd:34:94:86:b4:15:
         36:34:f5:ac:43:fc:37:8c:ba:28:03:8c:1c:e7:91:67:cf:19:
         00:00:8d:6f:10:af:8a:87:1f:cd:97:0c:77:4e:f5:05:b2:e0:
         ff:cb:2c:23:e7:d7:91:85:26:79:18:a4:4d:85:8d:d2:c3:da:
         2a:d8:fa:5c:5a:57:c2:19:d9:75:89:b0:be:e9:8b:14:df:a0:
         90:24:52:8b:04:b7:c4:77:f1:76:37:3d:36:a2:fd:61:e3:9f:
         5f:a8:0b:51:81:ed:a1:a2:8a:a3:1c:d7:27:50:7f:20:a6:f4:
         ac:a4:51:33:31:9e:6f:84:8a:4e:6e:ee:37:cf:1b:b6:ab:92:
         a2:43:19:a6:fa:33:0a:03:f4:1e:3d:a2:1d:34:ad:ec:b2:7c:
         0b:8a:fb:b7:ab:b2:10:e8:85:2a:6d:d0:b2:81:54:ee:56:35:
         17:41:6a:c4:26:5c:2a:ab:1c:bd:9b:e7:32:10:ea:b6:03:ee:
         d5:48:5d:d5:d9:64:f6:4f:ee:21:d5:e7:fe:2f:1e:0b:f6:f9:
         63:fd:4e:1b:2d:3e:8e:82:c5:6c:f4:2e:2d:f1:7a:3e:3d:14:
         d7:b0:ea:f9
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUOE2QaKO1mNYCeVV5YV7ol1RbBAwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkY0OTE2QzBFQzVGMUU2QkZGMUE2NERDOTYwNDQ1NDcz
ODc3NUUyNzAeFw0yNTAzMjcxNzIzNTBaFw0yNjAzMjYxNzI4NTBaMDMxMTAvBgNV
BAMTKEZFREU0Nzc2NDRFMDQzRjAyOTc3OEIzM0UwQjJGNDEyOURDODNBNzYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhFDkGcpZcpyTouTk87PKu7uwn
/S1ixGGo3SF4jXkEkvoBFwH8V7hMcsltxiX0m21LFnLkm7ismdpS2qdzUPmnvAwt
jPNrfW6+IjKNHQlZWiTjQYfYqzG/hEpzKDL0r7bZBJPoq6JJit2gLdmlzlNSdK6u
+BxgyV6pylpsqPKMSP4It5gqJzDqJzGiOrQPPmGufkUYnnMnwYM/eSNm8Obh7zJb
vPQ31QMZ4QENNxbPUyX5xPoLvnclavvlBQmFyLnPa7Lxe+/j9lCv+DE2kBkqieLx
pKD1EVvrZynAcWF2shmlE9mMg3lJmjNzIycvm3tc//h+w7RxwiogjjCo9hEnAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQU/t5HdkTgQ/Apd4sz4LL0Ep3IOnYwHwYDVR0j
BBgwFoAUL0kWwOxfHmv/GmTclgRFRzh3XicwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSG05OU1MVmVtZ0pac2VVZkdrTTZHb0xCYmZ2TVhwcGhwdldlOFU1VTZp
VG4vMC8yRjQ5MTZDMEVDNUYxRTZCRkYxQTY0REM5NjA0NDU0NzM4Nzc1RTI3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJGNDkxNkMwRUM1RjFFNkJG
RjFBNjREQzk2MDQ0NTQ3Mzg3NzVFMjcuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0htOTlNTFZlbWdKWnNlVWZHa002R29MQmJmdk1YcHBocHZXZThVNVU2aVRuLzAv
MzEzOTMxMmUzMjM0MzMyZTMyMzEzMjJlMzAyZjMyMzIyZDMyMzIyMDNkM2UyMDMy
MzYzMzM1MzEzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAr/z1DANBgkqhkiG9w0BAQsFAAOCAQEABEG2
WFebR1VKIkHcA4549qnqMzI6J/cYP+g7QeRAvTSUhrQVNjT1rEP8N4y6KAOMHOeR
Z88ZAACNbxCviocfzZcMd071BbLg/8ssI+fXkYUmeRikTYWN0sPaKtj6XFpXwhnZ
dYmwvumLFN+gkCRSiwS3xHfxdjc9NqL9YeOfX6gLUYHtoaKKoxzXJ1B/IKb0rKRR
MzGeb4SKTm7uN88btquSokMZpvozCgP0Hj2iHTSt7LJ8C4r7t6uyEOiFKm3QsoFU
7lY1F0FqxCZcKqscvZvnMhDqtgPu1Uhd1dlk9k/uIdXn/i8eC/b5Y/1OGy0+joLF
bPQuLfF6Pj0U17Dq+Q==
-----END CERTIFICATE-----
Generated at Tue Apr 8 11:01:15 2025 by rpki-client