Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HuCgVrcvhRTrNBYRiAKD9Sbs5J9b133TvJsoSUZDpjf7/0/3138392e39312e3137322e302f32322d3332203d3e20323731333030.roa
File:                     3138392e39312e3137322e302f32322d3332203d3e20323731333030.roa (raw, json)
Hash identifier:          6JK+R09SAFrbsveS+Q3sQ2depWH1NTU2Jx6qQ5aGOsI=
Subject key identifier:   B6:95:9B:7A:CA:1C:04:D9:37:AF:20:54:A9:A3:8C:52:8B:BE:43:75
Certificate issuer:       /CN=4FE40A6F50732749EF4639D0CD3746356543A732
Certificate serial:       1AAA2AFF02C26998ED37CDB22B732CCAB589D509
Authority key identifier: 4F:E4:0A:6F:50:73:27:49:EF:46:39:D0:CD:37:46:35:65:43:A7:32
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4FE40A6F50732749EF4639D0CD3746356543A732.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HuCgVrcvhRTrNBYRiAKD9Sbs5J9b133TvJsoSUZDpjf7/0/3138392e39312e3137322e302f32322d3332203d3e20323731333030.roa
Signing time:             Thu 05 Dec 2024 19:56:25 +0000
ROA not before:           Thu 05 Dec 2024 19:51:25 +0000
ROA not after:            Thu 04 Dec 2025 19:56:25 +0000
asID:                     271300
IP address blocks:        189.91.172.0/22 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:aa:2a:ff:02:c2:69:98:ed:37:cd:b2:2b:73:2c:ca:b5:89:d5:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4FE40A6F50732749EF4639D0CD3746356543A732
        Validity
            Not Before: Dec  5 19:51:25 2024 GMT
            Not After : Dec  4 19:56:25 2025 GMT
        Subject: CN=B6959B7ACA1C04D937AF2054A9A38C528BBE4375
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:5c:3c:71:cd:a1:20:ad:54:93:0a:65:a1:41:
                    20:25:0f:81:92:53:55:f1:1b:20:57:8f:36:f2:d3:
                    be:c8:2f:36:91:2f:26:bb:ec:1b:a9:5d:26:11:5a:
                    a9:ef:67:a3:29:0d:c8:45:57:aa:27:7e:67:03:c3:
                    9f:65:b9:f9:74:b3:84:a5:c7:f3:40:dc:1f:db:42:
                    0b:ca:43:6b:7b:ac:24:e6:4f:d6:46:c2:98:14:b7:
                    d8:41:63:48:6c:0d:f1:0b:b8:57:c5:10:c1:0e:a8:
                    7a:a2:2d:73:20:db:31:0a:ef:c6:80:e3:38:5f:b1:
                    e5:e8:4d:56:ad:03:5a:c7:8d:df:2f:1c:1c:e8:3f:
                    0b:8c:6a:18:45:8f:cc:06:46:31:1a:a3:bd:92:bf:
                    49:a1:6c:5a:d2:9e:99:e7:3c:54:80:2e:f1:5e:e9:
                    c9:d2:67:f4:32:e9:91:48:11:6d:17:7a:b8:de:ec:
                    c0:a7:68:bc:7c:2c:fe:04:2c:a0:5a:39:37:ec:9a:
                    ea:f2:6c:a5:23:3e:c8:30:84:27:0f:da:96:8f:8f:
                    3e:2e:30:f0:26:24:2a:b5:4f:58:70:95:7b:40:59:
                    29:ec:6c:d5:f3:01:30:bb:d8:3c:a5:2d:af:cd:23:
                    1c:57:ab:1c:90:21:18:a5:07:84:98:e8:ea:1a:e2:
                    19:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:95:9B:7A:CA:1C:04:D9:37:AF:20:54:A9:A3:8C:52:8B:BE:43:75
            X509v3 Authority Key Identifier:
                keyid:4F:E4:0A:6F:50:73:27:49:EF:46:39:D0:CD:37:46:35:65:43:A7:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HuCgVrcvhRTrNBYRiAKD9Sbs5J9b133TvJsoSUZDpjf7/0/4FE40A6F50732749EF4639D0CD3746356543A732.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4FE40A6F50732749EF4639D0CD3746356543A732.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HuCgVrcvhRTrNBYRiAKD9Sbs5J9b133TvJsoSUZDpjf7/0/3138392e39312e3137322e302f32322d3332203d3e20323731333030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.91.172.0/22

    Signature Algorithm: sha256WithRSAEncryption
         46:3a:5c:68:00:b3:d9:94:5d:ad:b2:6a:10:a0:e5:06:cf:32:
         fa:69:77:94:e0:4a:ad:f0:b9:c1:fc:8c:13:75:69:7f:63:dd:
         f7:7f:e3:e8:c9:37:42:e6:96:dd:39:c7:ed:dc:7c:d7:cb:42:
         2f:32:4f:d0:9b:99:39:23:5f:e9:47:15:e1:91:96:70:11:bc:
         a3:c8:8e:68:00:6a:bd:36:91:01:4c:1f:c9:91:9e:f6:21:3d:
         85:20:b8:6f:5c:ad:68:20:2a:ec:14:96:ff:36:7b:21:a7:6b:
         f0:0e:8f:2d:7d:a5:7e:09:86:a7:e8:20:d8:f7:4d:1c:25:24:
         0e:50:46:d9:7f:d6:95:d6:ef:82:b1:27:22:7f:e3:94:8f:fa:
         46:a5:e2:be:5c:9a:e1:85:8a:e4:3f:10:55:f3:72:54:c8:f3:
         d0:8c:b0:d9:25:1e:8c:48:df:6c:14:48:fd:65:35:ee:7c:44:
         0f:f4:9c:4b:61:db:ad:33:e2:ce:ec:a7:06:1c:5c:10:71:43:
         9d:19:c3:c1:ac:af:62:13:7a:cf:95:bb:6c:11:aa:29:8c:0e:
         dc:4d:7a:00:fe:b3:01:d2:5b:48:04:91:bc:4c:77:14:c9:6c:
         74:1f:2a:7b:ed:dc:c3:3d:1d:b0:ec:a8:9a:f0:5d:85:80:27:
         b1:79:a5:64
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUGqoq/wLCaZjtN82yK3MsyrWJ1QkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNEZFNDBBNkY1MDczMjc0OUVGNDYzOUQwQ0QzNzQ2MzU2
NTQzQTczMjAeFw0yNDEyMDUxOTUxMjVaFw0yNTEyMDQxOTU2MjVaMDMxMTAvBgNV
BAMTKEI2OTU5QjdBQ0ExQzA0RDkzN0FGMjA1NEE5QTM4QzUyOEJCRTQzNzUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDqXDxxzaEgrVSTCmWhQSAlD4GS
U1XxGyBXjzby077ILzaRLya77BupXSYRWqnvZ6MpDchFV6onfmcDw59lufl0s4Sl
x/NA3B/bQgvKQ2t7rCTmT9ZGwpgUt9hBY0hsDfELuFfFEMEOqHqiLXMg2zEK78aA
4zhfseXoTVatA1rHjd8vHBzoPwuMahhFj8wGRjEao72Sv0mhbFrSnpnnPFSALvFe
6cnSZ/Qy6ZFIEW0Xerje7MCnaLx8LP4ELKBaOTfsmurybKUjPsgwhCcP2paPjz4u
MPAmJCq1T1hwlXtAWSnsbNXzATC72DylLa/NIxxXqxyQIRilB4SY6Ooa4hk9AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUtpWbesocBNk3ryBUqaOMUou+Q3UwHwYDVR0j
BBgwFoAUT+QKb1BzJ0nvRjnQzTdGNWVDpzIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSHVDZ1ZyY3ZoUlRyTkJZUmlBS0Q5U2JzNUo5YjEzM1R2SnNvU1VaRHBq
ZjcvMC80RkU0MEE2RjUwNzMyNzQ5RUY0NjM5RDBDRDM3NDYzNTY1NDNBNzMyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzRGRTQwQTZGNTA3MzI3NDlF
RjQ2MzlEMENEMzc0NjM1NjU0M0E3MzIuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0h1Q2dWcmN2aFJUck5CWVJpQUtEOVNiczVKOWIxMzNUdkpzb1NVWkRwamY3LzAv
MzEzODM5MmUzOTMxMmUzMTM3MzIyZTMwMmYzMjMyMmQzMzMyMjAzZDNlMjAzMjM3
MzEzMzMwMzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAK9W6wwDQYJKoZIhvcNAQELBQADggEBAEY6XGgA
s9mUXa2yahCg5QbPMvppd5TgSq3wucH8jBN1aX9j3fd/4+jJN0Lmlt05x+3cfNfL
Qi8yT9CbmTkjX+lHFeGRlnARvKPIjmgAar02kQFMH8mRnvYhPYUguG9crWggKuwU
lv82eyGna/AOjy19pX4JhqfoINj3TRwlJA5QRtl/1pXW74KxJyJ/45SP+kal4r5c
muGFiuQ/EFXzclTI89CMsNklHoxI32wUSP1lNe58RA/0nEth260z4s7spwYcXBBx
Q50Zw8Gsr2ITes+Vu2wRqimMDtxNegD+swHSW0gEkbxMdxTJbHQfKnvt3MM9HbDs
qJrwXYWAJ7F5pWQ=
-----END CERTIFICATE-----
Generated at Sat Apr 12 06:02:46 2025 by rpki-client