Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Jo2J67XSEhvTKFMyZYs7mfMYLcbtN1ui6dU1FvEaY6z/0/3133382e3131372e3134342e302f32322d3332203d3e20323634323432.roa
File:                     3133382e3131372e3134342e302f32322d3332203d3e20323634323432.roa (raw, json)
Hash identifier:          +U4DhVCuKc0XNVDbDCCzyQy+q2x3GWMEMF6rnMJiEyk=
Subject key identifier:   AD:11:F9:12:7C:49:FB:A8:34:7E:82:57:2E:B5:14:14:E6:F1:89:83
Certificate issuer:       /CN=EF4027F97A62AA37CB4E993440497A1C0AB87F51
Certificate serial:       1945B601AA41BDF8FECF827FDF933FC1BDB15ADE
Authority key identifier: EF:40:27:F9:7A:62:AA:37:CB:4E:99:34:40:49:7A:1C:0A:B8:7F:51
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF4027F97A62AA37CB4E993440497A1C0AB87F51.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Jo2J67XSEhvTKFMyZYs7mfMYLcbtN1ui6dU1FvEaY6z/0/3133382e3131372e3134342e302f32322d3332203d3e20323634323432.roa
Signing time:             Fri 14 Mar 2025 01:33:35 +0000
ROA not before:           Fri 14 Mar 2025 01:28:35 +0000
ROA not after:            Fri 13 Mar 2026 01:33:35 +0000
asID:                     264242
IP address blocks:        138.117.144.0/22 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:45:b6:01:aa:41:bd:f8:fe:cf:82:7f:df:93:3f:c1:bd:b1:5a:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EF4027F97A62AA37CB4E993440497A1C0AB87F51
        Validity
            Not Before: Mar 14 01:28:35 2025 GMT
            Not After : Mar 13 01:33:35 2026 GMT
        Subject: CN=AD11F9127C49FBA8347E82572EB51414E6F18983
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:e2:b7:11:4b:94:0c:ad:f9:3c:bb:99:44:25:
                    89:88:dc:0b:5c:82:cd:62:2c:79:3e:3d:91:36:f5:
                    a1:83:ff:75:3c:a7:09:5e:95:8e:f2:37:5b:32:30:
                    41:47:54:aa:16:cd:7d:9f:56:8d:10:7c:e6:e8:f4:
                    54:c0:b0:ac:d5:f4:d3:dc:81:c3:10:15:61:6d:0e:
                    14:63:77:d5:91:53:37:bd:97:55:4b:e7:c9:e9:94:
                    a6:e8:51:00:4f:34:c9:3e:ec:fe:2e:60:f5:a4:ea:
                    c0:15:53:c8:17:c0:c5:74:b2:2a:2f:db:fb:4a:31:
                    6b:3c:5f:f2:88:73:61:48:50:c9:ca:dd:f2:df:94:
                    73:66:36:6a:65:12:c3:8c:af:6e:51:8c:9c:58:44:
                    f0:ed:d7:74:31:72:e8:73:3d:61:cd:6c:9d:78:61:
                    7b:96:c2:c7:71:be:a2:25:7a:e7:aa:2e:91:b8:8a:
                    4a:ec:9e:a6:7b:74:2c:b6:5f:46:5e:8c:7f:7c:c0:
                    66:06:19:0d:1e:89:67:50:2a:ad:97:05:22:1a:d3:
                    2e:b7:61:5a:4a:44:ce:72:c9:ab:4f:38:c6:12:06:
                    ee:47:7c:d2:fe:80:5e:59:24:80:b5:b1:98:5b:ee:
                    5c:f1:fe:45:d7:bb:e3:18:90:17:f4:da:0d:2e:aa:
                    3f:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:11:F9:12:7C:49:FB:A8:34:7E:82:57:2E:B5:14:14:E6:F1:89:83
            X509v3 Authority Key Identifier:
                keyid:EF:40:27:F9:7A:62:AA:37:CB:4E:99:34:40:49:7A:1C:0A:B8:7F:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Jo2J67XSEhvTKFMyZYs7mfMYLcbtN1ui6dU1FvEaY6z/0/EF4027F97A62AA37CB4E993440497A1C0AB87F51.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF4027F97A62AA37CB4E993440497A1C0AB87F51.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Jo2J67XSEhvTKFMyZYs7mfMYLcbtN1ui6dU1FvEaY6z/0/3133382e3131372e3134342e302f32322d3332203d3e20323634323432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.117.144.0/22

    Signature Algorithm: sha256WithRSAEncryption
         74:80:3a:cf:0c:a0:e5:7e:de:05:50:c1:e1:57:e1:9f:f1:83:
         7d:e7:6a:83:22:97:08:0b:19:2f:63:dd:be:c9:a9:1a:77:be:
         40:28:3c:8c:ef:32:ec:2f:0b:5a:dd:dc:e3:9e:d5:e7:0e:6d:
         0c:5e:db:86:f5:d9:91:b0:5d:60:24:1a:62:d0:f2:76:bd:98:
         15:f0:15:68:9d:cd:5e:b1:d6:f0:f0:9d:fb:5e:67:01:60:a8:
         5c:a7:ee:75:86:08:27:2a:81:a9:fa:31:1d:f4:5f:48:bc:0c:
         d6:c0:3d:96:4b:3f:24:8e:2d:cc:3a:f6:82:d4:1f:bf:34:64:
         8b:22:33:17:ed:e9:17:dc:8e:0b:c9:02:d0:d1:9e:99:56:0b:
         51:b1:2b:cc:a0:ed:0c:31:5e:1e:7a:43:f3:8e:91:b7:92:e7:
         44:14:48:a9:d5:b1:32:47:f3:fe:2d:ca:b5:c0:73:22:b5:5b:
         80:c5:bc:01:5d:c3:67:67:a6:3c:29:fe:8c:ff:e0:46:da:5b:
         b5:5b:b5:38:a7:02:e9:a5:93:99:69:94:b4:22:3a:a2:4f:17:
         82:e5:5c:b0:c6:81:cc:6b:b5:5e:6b:f7:33:10:30:ac:1f:7a:
         dc:fd:e9:9b:28:48:65:e7:5f:84:74:02:90:cb:01:13:75:fc:
         65:ef:c9:2a
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUGUW2AapBvfj+z4J/35M/wb2xWt4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUY0MDI3Rjk3QTYyQUEzN0NCNEU5OTM0NDA0OTdBMUMw
QUI4N0Y1MTAeFw0yNTAzMTQwMTI4MzVaFw0yNjAzMTMwMTMzMzVaMDMxMTAvBgNV
BAMTKEFEMTFGOTEyN0M0OUZCQTgzNDdFODI1NzJFQjUxNDE0RTZGMTg5ODMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDG4rcRS5QMrfk8u5lEJYmI3Atc
gs1iLHk+PZE29aGD/3U8pwlelY7yN1syMEFHVKoWzX2fVo0QfObo9FTAsKzV9NPc
gcMQFWFtDhRjd9WRUze9l1VL58nplKboUQBPNMk+7P4uYPWk6sAVU8gXwMV0siov
2/tKMWs8X/KIc2FIUMnK3fLflHNmNmplEsOMr25RjJxYRPDt13QxcuhzPWHNbJ14
YXuWwsdxvqIleueqLpG4ikrsnqZ7dCy2X0ZejH98wGYGGQ0eiWdQKq2XBSIa0y63
YVpKRM5yyatPOMYSBu5HfNL+gF5ZJIC1sZhb7lzx/kXXu+MYkBf02g0uqj/9AgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUrRH5EnxJ+6g0foJXLrUUFObxiYMwHwYDVR0j
BBgwFoAU70An+XpiqjfLTpk0QEl6HAq4f1EwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9KbzJKNjdYU0VodlRLRk15WllzN21mTVlMY2J0TjF1aTZkVTFGdkVhWTZ6
LzAvRUY0MDI3Rjk3QTYyQUEzN0NCNEU5OTM0NDA0OTdBMUMwQUI4N0Y1MS5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS9FRjQwMjdGOTdBNjJBQTM3Q0I0
RTk5MzQ0MDQ5N0ExQzBBQjg3RjUxLmNlcjCBrwYIKwYBBQUHAQsEgaIwgZ8wgZwG
CCsGAQUFBzALhoGPcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9K
bzJKNjdYU0VodlRLRk15WllzN21mTVlMY2J0TjF1aTZkVTFGdkVhWTZ6LzAvMzEz
MzM4MmUzMTMxMzcyZTMxMzQzNDJlMzAyZjMyMzIyZDMzMzIyMDNkM2UyMDMyMzYz
NDMyMzQzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcB
BwEB/wQQMA4wDAQCAAEwBgMEAop1kDANBgkqhkiG9w0BAQsFAAOCAQEAdIA6zwyg
5X7eBVDB4Vfhn/GDfedqgyKXCAsZL2PdvsmpGne+QCg8jO8y7C8LWt3c457V5w5t
DF7bhvXZkbBdYCQaYtDydr2YFfAVaJ3NXrHW8PCd+15nAWCoXKfudYYIJyqBqfox
HfRfSLwM1sA9lks/JI4tzDr2gtQfvzRkiyIzF+3pF9yOC8kC0NGemVYLUbErzKDt
DDFeHnpD846Rt5LnRBRIqdWxMkfz/i3KtcBzIrVbgMW8AV3DZ2emPCn+jP/gRtpb
tVu1OKcC6aWTmWmUtCI6ok8XguVcsMaBzGu1Xmv3MxAwrB963P3pmyhIZedfhHQC
kMsBE3X8Ze/JKg==
-----END CERTIFICATE-----
Generated at Fri Apr 11 16:26:56 2025 by rpki-client