Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BZLAzuFWUys1X9pzvJFCobbQsBcwPBvRkfGTxELQ3fQU/0/3133382e39372e3139362e302f32322d3234203d3e20323634313935.roa
File:                     3133382e39372e3139362e302f32322d3234203d3e20323634313935.roa (raw, json)
Hash identifier:          uzLZqDdGPdt726GEtw+CEcIGFRMWbGLrhbqu3QUV65o=
Subject key identifier:   62:4B:F1:AC:C9:20:5C:D1:7E:DE:A5:AD:6C:DE:65:94:AA:8F:F8:F7
Certificate issuer:       /CN=FD35E26267D462E77D45761F566B9714993F96A0
Certificate serial:       5FD4A46CF1FC8DA07AF399E1EE6246F0FC3E3F93
Authority key identifier: FD:35:E2:62:67:D4:62:E7:7D:45:76:1F:56:6B:97:14:99:3F:96:A0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FD35E26267D462E77D45761F566B9714993F96A0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BZLAzuFWUys1X9pzvJFCobbQsBcwPBvRkfGTxELQ3fQU/0/3133382e39372e3139362e302f32322d3234203d3e20323634313935.roa
Signing time:             Sat 02 Aug 2025 19:26:47 +0000
ROA not before:           Sat 02 Aug 2025 19:21:47 +0000
ROA not after:            Sat 01 Aug 2026 19:26:47 +0000
asID:                     264195
IP address blocks:        138.97.196.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:d4:a4:6c:f1:fc:8d:a0:7a:f3:99:e1:ee:62:46:f0:fc:3e:3f:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FD35E26267D462E77D45761F566B9714993F96A0
        Validity
            Not Before: Aug  2 19:21:47 2025 GMT
            Not After : Aug  1 19:26:47 2026 GMT
        Subject: CN=624BF1ACC9205CD17EDEA5AD6CDE6594AA8FF8F7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:4d:07:de:8d:74:28:f5:ef:83:6f:3c:98:99:
                    0f:a3:d0:f3:81:bd:d1:98:52:f6:fc:54:a0:3a:1d:
                    a2:22:c1:2f:24:b6:95:50:02:6d:b1:cc:8f:7b:71:
                    35:fd:ab:4c:ad:c4:88:52:57:b5:a5:9f:f5:20:7a:
                    dc:7f:a4:2a:28:27:e6:c9:7d:af:f4:d0:cd:7c:e6:
                    75:ad:9c:66:16:17:62:87:eb:4d:8c:96:92:3c:18:
                    e8:e9:0e:3f:0c:c8:aa:6d:b9:e8:d0:5a:f6:c0:19:
                    9c:2a:d4:90:62:81:8f:5b:11:1a:a6:4c:36:36:16:
                    25:d9:cd:e4:5a:3a:56:48:59:5a:a1:ed:60:5c:b1:
                    5f:7f:22:c0:ad:57:3a:62:74:2e:31:ed:73:df:11:
                    91:9c:d5:dc:ac:e1:86:50:95:63:2c:35:e4:8b:54:
                    e8:eb:32:fb:b9:b5:07:b4:7f:35:d6:c0:a0:d7:cb:
                    1e:15:6a:ab:d7:5e:72:f9:65:f2:92:e2:4b:11:ea:
                    d3:fa:94:db:96:06:c7:e5:86:69:32:8b:ee:82:08:
                    84:f8:36:9c:f2:3c:f5:8b:ca:ef:85:7c:24:78:23:
                    35:01:d5:8a:b3:f3:27:e4:06:37:05:4b:ac:91:bf:
                    5c:17:2a:a4:d2:33:79:ef:9a:68:31:cb:9a:54:52:
                    94:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:4B:F1:AC:C9:20:5C:D1:7E:DE:A5:AD:6C:DE:65:94:AA:8F:F8:F7
            X509v3 Authority Key Identifier:
                keyid:FD:35:E2:62:67:D4:62:E7:7D:45:76:1F:56:6B:97:14:99:3F:96:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BZLAzuFWUys1X9pzvJFCobbQsBcwPBvRkfGTxELQ3fQU/0/FD35E26267D462E77D45761F566B9714993F96A0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FD35E26267D462E77D45761F566B9714993F96A0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BZLAzuFWUys1X9pzvJFCobbQsBcwPBvRkfGTxELQ3fQU/0/3133382e39372e3139362e302f32322d3234203d3e20323634313935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.97.196.0/22

    Signature Algorithm: sha256WithRSAEncryption
         23:e9:3c:3f:0a:c7:c3:f2:03:9b:1f:96:87:75:50:1d:a4:55:
         7e:5a:b4:b7:2d:2a:9f:af:59:25:a3:f1:53:6d:0b:ae:e0:34:
         f9:56:76:3a:ac:de:d1:92:e6:78:a9:52:e1:ce:f2:c4:a4:f3:
         e0:5b:11:cf:ba:48:d9:f7:52:68:f2:97:4b:b9:63:b6:c4:0a:
         96:90:fc:e6:37:4b:db:d8:e7:c8:f8:d2:14:c2:ed:5a:4e:7c:
         bc:da:43:51:aa:fd:96:bb:78:21:04:0c:4e:1b:be:e8:94:03:
         63:c9:69:11:6a:85:81:fc:4c:96:39:0f:f6:ea:5b:88:50:9c:
         9a:9e:25:52:1b:12:dd:ca:21:74:7e:db:a0:77:c5:09:70:f7:
         1d:22:6d:90:d7:aa:28:5c:14:ec:5b:42:fd:b4:f6:44:03:15:
         d6:1a:4a:1a:78:04:f6:45:e5:6a:a9:c2:4d:f0:1b:86:75:2a:
         1f:94:56:4b:fd:90:2e:1c:d7:6d:a9:26:a8:e6:1f:f6:4a:e0:
         3f:eb:58:04:6b:73:63:ec:41:28:21:8d:74:2d:56:ef:c6:d4:
         f1:29:d9:a2:07:a3:59:c5:8f:1b:ec:62:ab:7f:9c:51:90:a6:
         07:ad:bc:06:32:5a:8f:36:3b:5c:4c:63:ee:a4:aa:98:f3:ec:
         c0:1e:0f:c8
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUX9SkbPH8jaB685nh7mJG8Pw+P5MwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkQzNUUyNjI2N0Q0NjJFNzdENDU3NjFGNTY2Qjk3MTQ5
OTNGOTZBMDAeFw0yNTA4MDIxOTIxNDdaFw0yNjA4MDExOTI2NDdaMDMxMTAvBgNV
BAMTKDYyNEJGMUFDQzkyMDVDRDE3RURFQTVBRDZDREU2NTk0QUE4RkY4RjcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZTQfejXQo9e+DbzyYmQ+j0POB
vdGYUvb8VKA6HaIiwS8ktpVQAm2xzI97cTX9q0ytxIhSV7Wln/Ugetx/pCooJ+bJ
fa/00M185nWtnGYWF2KH602MlpI8GOjpDj8MyKptuejQWvbAGZwq1JBigY9bERqm
TDY2FiXZzeRaOlZIWVqh7WBcsV9/IsCtVzpidC4x7XPfEZGc1dys4YZQlWMsNeSL
VOjrMvu5tQe0fzXWwKDXyx4VaqvXXnL5ZfKS4ksR6tP6lNuWBsflhmkyi+6CCIT4
NpzyPPWLyu+FfCR4IzUB1Yqz8yfkBjcFS6yRv1wXKqTSM3nvmmgxy5pUUpRvAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUYkvxrMkgXNF+3qWtbN5llKqP+PcwHwYDVR0j
BBgwFoAU/TXiYmfUYud9RXYfVmuXFJk/lqAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQlpMQXp1RldVeXMxWDlwenZKRkNvYmJRc0Jjd1BCdlJrZkdUeEVMUTNm
UVUvMC9GRDM1RTI2MjY3RDQ2MkU3N0Q0NTc2MUY1NjZCOTcxNDk5M0Y5NkEwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0ZEMzVFMjYyNjdENDYyRTc3
RDQ1NzYxRjU2NkI5NzE0OTkzRjk2QTAuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0JaTEF6dUZXVXlzMVg5cHp2SkZDb2JiUXNCY3dQQnZSa2ZHVHhFTFEzZlFVLzAv
MzEzMzM4MmUzOTM3MmUzMTM5MzYyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM2
MzQzMTM5MzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAKKYcQwDQYJKoZIhvcNAQELBQADggEBACPpPD8K
x8PyA5sflod1UB2kVX5atLctKp+vWSWj8VNtC67gNPlWdjqs3tGS5nipUuHO8sSk
8+BbEc+6SNn3Umjyl0u5Y7bECpaQ/OY3S9vY58j40hTC7VpOfLzaQ1Gq/Za7eCEE
DE4bvuiUA2PJaRFqhYH8TJY5D/bqW4hQnJqeJVIbEt3KIXR+26B3xQlw9x0ibZDX
qihcFOxbQv209kQDFdYaShp4BPZF5Wqpwk3wG4Z1Kh+UVkv9kC4c122pJqjmH/ZK
4D/rWARrc2PsQSghjXQtVu/G1PEp2aIHo1nFjxvsYqt/nFGQpgetvAYyWo82O1xM
Y+6kqpjz7MAeD8g=
-----END CERTIFICATE-----
Generated at Tue Aug 12 18:57:38 2025 by rpki-client