Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3KyhStDUELmgmeEdfL97nv3dikuQxfC8pMAM5v4kVfVA/0/3138392e3132362e38372e302f32342d3234203d3e20323730353739.roa
File:                     3138392e3132362e38372e302f32342d3234203d3e20323730353739.roa (raw, json)
Hash identifier:          vuQII2OLJ9/5YOypA0TCjWhIfElstEzzJYZdMRspZGY=
Subject key identifier:   27:55:52:3B:72:34:6E:A5:46:78:CD:A5:AA:9F:E7:D0:D3:12:4F:A3
Certificate issuer:       /CN=3BEB08169B14107D9668F7CD71FD6569C8FA1613
Certificate serial:       2CA4E22F16BD58FC80E2EE1C7086B466DA53ED2E
Authority key identifier: 3B:EB:08:16:9B:14:10:7D:96:68:F7:CD:71:FD:65:69:C8:FA:16:13
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3BEB08169B14107D9668F7CD71FD6569C8FA1613.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3KyhStDUELmgmeEdfL97nv3dikuQxfC8pMAM5v4kVfVA/0/3138392e3132362e38372e302f32342d3234203d3e20323730353739.roa
Signing time:             Mon 04 Mar 2024 18:39:11 +0000
ROA not before:           Mon 04 Mar 2024 18:34:11 +0000
ROA not after:            Mon 03 Mar 2025 18:39:11 +0000
asID:                     270579
IP address blocks:        189.126.87.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:a4:e2:2f:16:bd:58:fc:80:e2:ee:1c:70:86:b4:66:da:53:ed:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3BEB08169B14107D9668F7CD71FD6569C8FA1613
        Validity
            Not Before: Mar  4 18:34:11 2024 GMT
            Not After : Mar  3 18:39:11 2025 GMT
        Subject: CN=2755523B72346EA54678CDA5AA9FE7D0D3124FA3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:71:b3:dc:59:78:46:02:ea:c2:8f:62:ca:3c:
                    e1:8d:16:74:1d:ed:de:27:a3:bd:17:a0:85:d4:f8:
                    eb:73:ee:8a:25:01:58:d4:f1:0e:52:ed:4b:56:33:
                    df:fe:76:0f:4e:55:99:b8:ca:29:e6:40:ef:68:f8:
                    d8:90:c2:d7:d3:29:ae:01:e1:f7:dd:8f:9d:e2:19:
                    30:12:a5:63:6d:a7:1e:ad:0d:12:5e:89:b9:62:25:
                    09:b5:f6:cf:29:ed:76:ca:0d:e1:f4:7b:c2:26:d0:
                    ba:6a:a4:13:aa:10:55:80:a4:be:90:39:c7:36:32:
                    f5:5a:00:a8:22:8d:d9:c6:3e:a1:13:97:4f:88:f2:
                    b2:3e:7b:8c:d3:7c:5f:b8:47:c5:7b:40:a2:a0:b5:
                    44:84:37:4d:08:a4:97:c2:47:50:f4:e6:cd:13:67:
                    03:ca:ed:2c:70:22:b2:a2:46:de:bc:ca:d4:79:e1:
                    a7:3b:86:07:d9:d8:c6:c2:e2:87:c3:01:76:14:ef:
                    2a:79:47:66:6d:d8:23:d9:c7:b9:2d:f4:09:de:48:
                    5a:97:7d:89:6e:8f:50:8c:4f:87:f2:5d:b7:1e:47:
                    15:dc:84:cd:7f:88:91:21:56:83:a3:5a:77:d4:0c:
                    af:d5:54:1c:d4:67:c2:78:09:8e:82:80:19:89:e2:
                    61:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:55:52:3B:72:34:6E:A5:46:78:CD:A5:AA:9F:E7:D0:D3:12:4F:A3
            X509v3 Authority Key Identifier:
                keyid:3B:EB:08:16:9B:14:10:7D:96:68:F7:CD:71:FD:65:69:C8:FA:16:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3KyhStDUELmgmeEdfL97nv3dikuQxfC8pMAM5v4kVfVA/0/3BEB08169B14107D9668F7CD71FD6569C8FA1613.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3BEB08169B14107D9668F7CD71FD6569C8FA1613.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3KyhStDUELmgmeEdfL97nv3dikuQxfC8pMAM5v4kVfVA/0/3138392e3132362e38372e302f32342d3234203d3e20323730353739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.126.87.0/24

    Signature Algorithm: sha256WithRSAEncryption
         aa:34:8e:ff:11:14:59:b3:60:02:c4:a7:8e:d2:3d:3b:1e:e2:
         70:d2:e3:9a:8a:1b:9e:5e:e8:96:2d:6a:c1:f7:46:00:df:39:
         fd:54:b8:09:0b:19:ba:e6:c9:3c:c4:d9:49:09:1d:91:f0:1b:
         bb:d8:53:11:35:4c:0f:0a:ec:bc:5f:c0:31:44:c8:47:b7:98:
         44:f0:85:e1:b3:0d:25:99:c5:81:e4:ac:69:97:b1:70:9e:ba:
         66:a9:3f:13:07:3c:ec:ea:05:1a:39:6a:0b:1b:3d:8d:2d:b8:
         be:65:ed:a5:a3:cf:a2:6d:78:18:d9:e6:2d:79:97:20:58:14:
         e6:b2:f3:80:12:56:a8:87:75:04:3c:28:7b:17:5d:52:1c:ec:
         63:12:87:4c:13:18:7e:6a:6b:24:2a:2f:ae:a6:72:c4:bf:c2:
         c0:79:4f:cc:29:ec:25:81:fb:d7:fc:ab:17:c5:b5:a3:98:bd:
         57:c3:c9:f7:c4:98:74:ca:2b:53:69:d0:e8:57:2c:56:2a:5a:
         5d:bf:b0:4b:b4:db:97:d7:60:a6:8f:35:53:99:6e:6b:b9:fb:
         fc:74:e1:14:53:be:a3:ec:ea:7f:5e:dd:3a:7a:37:08:f8:7f:
         61:f6:b9:30:20:f8:0a:82:d1:dc:2e:00:de:78:fa:41:87:72:
         2a:79:0f:5b
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIULKTiLxa9WPyA4u4ccIa0ZtpT7S4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0JFQjA4MTY5QjE0MTA3RDk2NjhGN0NENzFGRDY1NjlD
OEZBMTYxMzAeFw0yNDAzMDQxODM0MTFaFw0yNTAzMDMxODM5MTFaMDMxMTAvBgNV
BAMTKDI3NTU1MjNCNzIzNDZFQTU0Njc4Q0RBNUFBOUZFN0QwRDMxMjRGQTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6cbPcWXhGAurCj2LKPOGNFnQd
7d4no70XoIXU+Otz7oolAVjU8Q5S7UtWM9/+dg9OVZm4yinmQO9o+NiQwtfTKa4B
4ffdj53iGTASpWNtpx6tDRJeibliJQm19s8p7XbKDeH0e8Im0LpqpBOqEFWApL6Q
Occ2MvVaAKgijdnGPqETl0+I8rI+e4zTfF+4R8V7QKKgtUSEN00IpJfCR1D05s0T
ZwPK7SxwIrKiRt68ytR54ac7hgfZ2MbC4ofDAXYU7yp5R2Zt2CPZx7kt9AneSFqX
fYluj1CMT4fyXbceRxXchM1/iJEhVoOjWnfUDK/VVBzUZ8J4CY6CgBmJ4mHFAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUJ1VSO3I0bqVGeM2lqp/n0NMST6MwHwYDVR0j
BBgwFoAUO+sIFpsUEH2WaPfNcf1lacj6FhMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM0t5aFN0RFVFTG1nbWVFZGZMOTdudjNkaWt1UXhmQzhwTUFNNXY0a1Zm
VkEvMC8zQkVCMDgxNjlCMTQxMDdEOTY2OEY3Q0Q3MUZENjU2OUM4RkExNjEzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzNCRUIwODE2OUIxNDEwN0Q5
NjY4RjdDRDcxRkQ2NTY5QzhGQTE2MTMuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNLeWhTdERVRUxtZ21lRWRmTDk3bnYzZGlrdVF4ZkM4cE1BTTV2NGtWZlZBLzAv
MzEzODM5MmUzMTMyMzYyZTM4MzcyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM3
MzAzNTM3Mzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAC9flcwDQYJKoZIhvcNAQELBQADggEBAKo0jv8R
FFmzYALEp47SPTse4nDS45qKG55e6JYtasH3RgDfOf1UuAkLGbrmyTzE2UkJHZHw
G7vYUxE1TA8K7LxfwDFEyEe3mETwheGzDSWZxYHkrGmXsXCeumapPxMHPOzqBRo5
agsbPY0tuL5l7aWjz6JteBjZ5i15lyBYFOay84ASVqiHdQQ8KHsXXVIc7GMSh0wT
GH5qayQqL66mcsS/wsB5T8wp7CWB+9f8qxfFtaOYvVfDyffEmHTKK1Np0OhXLFYq
Wl2/sEu025fXYKaPNVOZbmu5+/x04RRTvqPs6n9e3Tp6Nwj4f2H2uTAg+AqC0dwu
AN54+kGHcip5D1s=
-----END CERTIFICATE-----
Generated at Thu May 15 15:06:09 2025 by rpki-client