Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/B4rPNBX7spKw9VEFGts5bGrgMhgYgmpQ3S6QUfdN7v45/0/3230312e3133312e3135342e302f32332d3233203d3e203631373835.roa
File:                     3230312e3133312e3135342e302f32332d3233203d3e203631373835.roa (raw, json)
Hash identifier:          GHScWzVeaB6hFtvYXiNGneTDYssLXnQK+xSYmZCwWXw=
Subject key identifier:   D0:1A:96:C3:3D:C9:C9:89:39:56:5B:4D:DD:D1:BF:C8:6A:50:DE:5F
Certificate issuer:       /CN=78DCBCCBBA458183D7705328DD214CA0953E3E21
Certificate serial:       3BA80F1A8A358310B5BED888BD745091E508A5E1
Authority key identifier: 78:DC:BC:CB:BA:45:81:83:D7:70:53:28:DD:21:4C:A0:95:3E:3E:21
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/78DCBCCBBA458183D7705328DD214CA0953E3E21.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/B4rPNBX7spKw9VEFGts5bGrgMhgYgmpQ3S6QUfdN7v45/0/3230312e3133312e3135342e302f32332d3233203d3e203631373835.roa
Signing time:             Tue 31 Dec 2024 16:16:55 +0000
ROA not before:           Tue 31 Dec 2024 16:11:55 +0000
ROA not after:            Tue 30 Dec 2025 16:16:55 +0000
asID:                     61785
IP address blocks:        201.131.154.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:a8:0f:1a:8a:35:83:10:b5:be:d8:88:bd:74:50:91:e5:08:a5:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78DCBCCBBA458183D7705328DD214CA0953E3E21
        Validity
            Not Before: Dec 31 16:11:55 2024 GMT
            Not After : Dec 30 16:16:55 2025 GMT
        Subject: CN=D01A96C33DC9C98939565B4DDDD1BFC86A50DE5F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:18:48:05:5b:2a:01:31:0e:6b:b2:0a:11:9b:
                    0c:22:c4:cb:16:87:74:e2:e8:ed:11:ca:0f:65:59:
                    0f:fd:e8:c5:68:fa:c9:a4:13:08:15:f3:92:3a:12:
                    eb:f1:d0:47:f2:95:de:3a:3e:b8:26:c4:9b:be:92:
                    a5:e4:5f:a1:09:a6:e8:e8:97:5f:a0:06:e7:49:6d:
                    ce:5c:75:ab:c8:c5:fb:6e:80:94:91:84:2f:39:4c:
                    c4:5c:e7:dc:06:c7:c9:ad:8f:36:c3:35:a8:e3:da:
                    ae:05:ce:e3:c7:19:98:fb:ae:8f:c7:ad:08:34:34:
                    06:28:61:04:e0:91:04:20:bf:c1:00:ab:c0:95:ac:
                    a7:46:9d:e6:18:ac:da:3f:44:76:4b:c2:59:df:fb:
                    a2:68:4f:3a:98:9b:44:ca:84:a8:b9:83:98:57:99:
                    08:96:b9:0b:6c:c6:e0:0c:8f:f8:35:28:5c:c3:2e:
                    55:1c:a8:0e:cc:10:24:eb:4b:0f:e5:e3:f6:15:ea:
                    52:cd:93:b1:f9:22:fd:9f:e6:3a:10:67:45:08:60:
                    c3:ab:ee:e7:33:4d:5c:46:59:73:67:9e:8d:a5:c4:
                    4f:ad:9a:a9:71:44:cb:80:52:2b:97:94:1a:31:27:
                    71:a9:90:8f:50:c0:e6:1f:90:0b:08:0e:a3:59:65:
                    bc:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:1A:96:C3:3D:C9:C9:89:39:56:5B:4D:DD:D1:BF:C8:6A:50:DE:5F
            X509v3 Authority Key Identifier:
                keyid:78:DC:BC:CB:BA:45:81:83:D7:70:53:28:DD:21:4C:A0:95:3E:3E:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/B4rPNBX7spKw9VEFGts5bGrgMhgYgmpQ3S6QUfdN7v45/0/78DCBCCBBA458183D7705328DD214CA0953E3E21.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/78DCBCCBBA458183D7705328DD214CA0953E3E21.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/B4rPNBX7spKw9VEFGts5bGrgMhgYgmpQ3S6QUfdN7v45/0/3230312e3133312e3135342e302f32332d3233203d3e203631373835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.131.154.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2f:0a:6d:be:5e:26:39:2f:f9:a8:50:9e:e0:ad:1f:42:7a:55:
         38:50:32:d4:8a:c3:4c:bb:b6:c9:54:12:e9:ec:4c:4a:09:b7:
         e8:f1:55:bb:78:8f:a0:ca:fd:6c:ab:47:08:88:56:1d:d1:11:
         0c:2c:2d:03:f7:19:ea:13:ad:7f:6a:da:f8:cb:cd:02:7a:12:
         da:46:49:2c:e5:e9:43:78:15:8b:d9:e8:aa:b5:90:4e:2e:5e:
         fb:ea:43:2d:54:d5:c4:b8:99:88:2f:9f:15:c5:dc:e8:67:5e:
         af:cb:2e:db:7d:c9:a3:a9:6a:74:0d:a9:46:33:90:fe:29:73:
         5f:ca:0a:55:5b:8f:94:76:64:1a:8d:46:61:72:60:90:3a:b8:
         92:70:2c:3e:02:8b:d7:0c:5e:6f:1e:e8:59:9c:d8:7d:4a:1a:
         e7:6e:a0:35:be:3b:89:d6:84:c9:45:55:af:03:92:b3:34:5a:
         86:ea:7a:63:cb:32:90:2c:6e:40:7f:6f:77:f5:ec:cf:e9:c8:
         52:36:29:97:97:b6:bf:db:f6:1e:16:86:22:c6:b9:40:8b:31:
         6d:03:3c:7c:a1:8c:97:f1:6a:26:bf:36:75:f3:47:df:38:58:
         fc:ab:40:67:2c:01:8c:07:51:2b:cc:5e:75:14:47:52:28:61:
         62:8d:f6:f2
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUO6gPGoo1gxC1vtiIvXRQkeUIpeEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzhEQ0JDQ0JCQTQ1ODE4M0Q3NzA1MzI4REQyMTRDQTA5
NTNFM0UyMTAeFw0yNDEyMzExNjExNTVaFw0yNTEyMzAxNjE2NTVaMDMxMTAvBgNV
BAMTKEQwMUE5NkMzM0RDOUM5ODkzOTU2NUI0RERERDFCRkM4NkE1MERFNUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhGEgFWyoBMQ5rsgoRmwwixMsW
h3Ti6O0Ryg9lWQ/96MVo+smkEwgV85I6Euvx0Efyld46PrgmxJu+kqXkX6EJpujo
l1+gBudJbc5cdavIxftugJSRhC85TMRc59wGx8mtjzbDNajj2q4FzuPHGZj7ro/H
rQg0NAYoYQTgkQQgv8EAq8CVrKdGneYYrNo/RHZLwlnf+6JoTzqYm0TKhKi5g5hX
mQiWuQtsxuAMj/g1KFzDLlUcqA7MECTrSw/l4/YV6lLNk7H5Iv2f5joQZ0UIYMOr
7uczTVxGWXNnno2lxE+tmqlxRMuAUiuXlBoxJ3GpkI9QwOYfkAsIDqNZZbzHAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU0BqWwz3JyYk5VltN3dG/yGpQ3l8wHwYDVR0j
BBgwFoAUeNy8y7pFgYPXcFMo3SFMoJU+PiEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQjRyUE5CWDdzcEt3OVZFRkd0czViR3JnTWhnWWdtcFEzUzZRVWZkTjd2
NDUvMC83OERDQkNDQkJBNDU4MTgzRDc3MDUzMjhERDIxNENBMDk1M0UzRTIxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzc4RENCQ0NCQkE0NTgxODNE
NzcwNTMyOEREMjE0Q0EwOTUzRTNFMjEuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0I0clBOQlg3c3BLdzlWRUZHdHM1YkdyZ01oZ1lnbXBRM1M2UVVmZE43djQ1LzAv
MzIzMDMxMmUzMTMzMzEyZTMxMzUzNDJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDM2
MzEzNzM4MzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAHJg5owDQYJKoZIhvcNAQELBQADggEBAC8Kbb5e
Jjkv+ahQnuCtH0J6VThQMtSKw0y7tslUEunsTEoJt+jxVbt4j6DK/WyrRwiIVh3R
EQwsLQP3GeoTrX9q2vjLzQJ6EtpGSSzl6UN4FYvZ6Kq1kE4uXvvqQy1U1cS4mYgv
nxXF3OhnXq/LLtt9yaOpanQNqUYzkP4pc1/KClVbj5R2ZBqNRmFyYJA6uJJwLD4C
i9cMXm8e6Fmc2H1KGuduoDW+O4nWhMlFVa8DkrM0WobqemPLMpAsbkB/b3f17M/p
yFI2KZeXtr/b9h4WhiLGuUCLMW0DPHyhjJfxaia/NnXzR984WPyrQGcsAYwHUSvM
XnUUR1IoYWKN9vI=
-----END CERTIFICATE-----
Generated at Thu May 1 21:15:09 2025 by rpki-client