Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/E9oyEp4tb4o919JSuBJDqKMhG9Eb95VdAiUBY5si6eMd/0/3133382e3132322e3132302e302f32332d3233203d3e20323634333230.roa
File:                     3133382e3132322e3132302e302f32332d3233203d3e20323634333230.roa (raw, json)
Hash identifier:          t5PnmyncqGEKvff25+ul5AwovDgZuTYK1rpyJ6Zo17k=
Subject key identifier:   DD:18:C9:67:ED:B8:45:0B:34:6B:98:CF:8D:AB:06:B4:E7:5D:56:BD
Certificate issuer:       /CN=4EEF1755CA1280766B487C66444CFF2032B2AE77
Certificate serial:       39C70D0B3494A887DA96AEBB95D4C20790A40367
Authority key identifier: 4E:EF:17:55:CA:12:80:76:6B:48:7C:66:44:4C:FF:20:32:B2:AE:77
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4EEF1755CA1280766B487C66444CFF2032B2AE77.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E9oyEp4tb4o919JSuBJDqKMhG9Eb95VdAiUBY5si6eMd/0/3133382e3132322e3132302e302f32332d3233203d3e20323634333230.roa
Signing time:             Tue 03 Jun 2025 13:15:39 +0000
ROA not before:           Tue 03 Jun 2025 13:10:39 +0000
ROA not after:            Tue 02 Jun 2026 13:15:39 +0000
asID:                     264320
IP address blocks:        138.122.120.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:c7:0d:0b:34:94:a8:87:da:96:ae:bb:95:d4:c2:07:90:a4:03:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4EEF1755CA1280766B487C66444CFF2032B2AE77
        Validity
            Not Before: Jun  3 13:10:39 2025 GMT
            Not After : Jun  2 13:15:39 2026 GMT
        Subject: CN=DD18C967EDB8450B346B98CF8DAB06B4E75D56BD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:d6:54:d7:34:b8:c1:82:f7:c6:ca:e7:ee:48:
                    27:b7:e7:c2:0f:af:26:b3:1d:97:c3:f3:c7:30:d4:
                    a3:b0:0a:49:32:c9:86:eb:94:ae:97:50:64:bd:d1:
                    66:26:b5:98:c8:6a:0f:44:44:bc:51:5b:36:63:0a:
                    83:e3:22:de:82:3e:61:02:ad:9c:5e:f1:7c:69:61:
                    91:33:1d:a8:27:c9:8c:fc:5a:3e:3c:48:02:2f:b9:
                    44:8a:52:1a:03:8c:de:ca:7c:8d:e1:b6:23:e0:d6:
                    b7:83:d7:2f:80:86:41:b6:df:d1:6a:02:36:c8:47:
                    8d:00:9d:01:bc:f7:f6:ed:33:3c:b0:6a:b1:72:2c:
                    ed:49:c3:1c:2b:48:64:a1:a5:cd:cf:c6:89:c9:1b:
                    7e:ed:57:28:5c:f1:56:68:77:a7:47:e6:86:56:c4:
                    b4:82:24:09:02:7a:66:15:48:44:d9:d0:df:5a:4b:
                    d0:9d:e5:86:b8:d4:b2:92:4e:07:e7:ce:e0:f5:ce:
                    70:80:da:9f:b8:6d:84:eb:8b:63:f9:1d:8e:3e:56:
                    ff:33:99:ab:fa:90:2a:85:8f:27:9b:bf:78:4b:4b:
                    43:44:a1:f5:d0:1b:a0:0f:7a:a9:bc:ef:c2:db:8d:
                    fc:1d:4b:c3:c8:77:8a:b1:63:8f:14:1a:58:1a:39:
                    04:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:18:C9:67:ED:B8:45:0B:34:6B:98:CF:8D:AB:06:B4:E7:5D:56:BD
            X509v3 Authority Key Identifier:
                keyid:4E:EF:17:55:CA:12:80:76:6B:48:7C:66:44:4C:FF:20:32:B2:AE:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E9oyEp4tb4o919JSuBJDqKMhG9Eb95VdAiUBY5si6eMd/0/4EEF1755CA1280766B487C66444CFF2032B2AE77.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4EEF1755CA1280766B487C66444CFF2032B2AE77.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E9oyEp4tb4o919JSuBJDqKMhG9Eb95VdAiUBY5si6eMd/0/3133382e3132322e3132302e302f32332d3233203d3e20323634333230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.122.120.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4d:65:7a:9f:00:b0:35:39:f8:13:30:dd:11:b7:75:3f:38:4c:
         e8:f1:02:0c:1f:6a:ea:a3:88:a7:73:6a:53:99:8f:0b:d4:e1:
         80:1f:83:a0:86:e5:89:f9:70:1d:ff:5b:9e:41:3e:4b:f1:4a:
         0a:e4:59:7f:f1:65:1a:5b:86:8c:ea:c6:87:49:68:82:73:6f:
         12:66:69:01:9d:88:fb:75:17:d6:43:77:3d:a6:ef:01:17:54:
         a9:c6:6b:9c:3b:2d:91:e8:bd:a8:4e:13:32:32:58:e8:ac:28:
         7e:12:74:dd:b9:ab:71:7d:9b:0d:6f:ec:bb:7b:5c:95:34:36:
         a4:c0:dc:8c:8a:51:73:e6:e0:99:1e:99:01:39:8b:89:46:c2:
         9f:37:38:c3:0d:9f:87:0b:84:60:0a:a0:01:e0:bc:bb:53:d9:
         07:47:0e:f6:9e:e8:4c:b7:b1:c5:ad:48:00:ea:f7:b2:88:91:
         36:a8:8f:73:76:36:e4:c5:67:e1:01:ff:c2:ba:e0:bb:91:0f:
         15:22:80:ad:b9:0f:a5:b7:1f:5e:9e:49:2d:15:00:37:18:73:
         6b:04:6f:63:b2:fa:32:cc:b7:da:44:42:b5:5a:76:12:8f:b1:
         a4:74:c8:68:9a:98:0b:b8:39:ce:c0:61:a6:bd:50:8c:1c:ab:
         74:a1:ff:ef
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUOccNCzSUqIfalq67ldTCB5CkA2cwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNEVFRjE3NTVDQTEyODA3NjZCNDg3QzY2NDQ0Q0ZGMjAz
MkIyQUU3NzAeFw0yNTA2MDMxMzEwMzlaFw0yNjA2MDIxMzE1MzlaMDMxMTAvBgNV
BAMTKEREMThDOTY3RURCODQ1MEIzNDZCOThDRjhEQUIwNkI0RTc1RDU2QkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCp1lTXNLjBgvfGyufuSCe358IP
ryazHZfD88cw1KOwCkkyyYbrlK6XUGS90WYmtZjIag9ERLxRWzZjCoPjIt6CPmEC
rZxe8XxpYZEzHagnyYz8Wj48SAIvuUSKUhoDjN7KfI3htiPg1reD1y+AhkG239Fq
AjbIR40AnQG89/btMzywarFyLO1JwxwrSGShpc3PxonJG37tVyhc8VZod6dH5oZW
xLSCJAkCemYVSETZ0N9aS9Cd5Ya41LKSTgfnzuD1znCA2p+4bYTri2P5HY4+Vv8z
mav6kCqFjyebv3hLS0NEofXQG6APeqm878LbjfwdS8PId4qxY48UGlgaOQS1AgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQU3RjJZ+24RQs0a5jPjasGtOddVr0wHwYDVR0j
BBgwFoAUTu8XVcoSgHZrSHxmREz/IDKyrncwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRTlveUVwNHRiNG85MTlKU3VCSkRxS01oRzlFYjk1VmRBaVVCWTVzaTZl
TWQvMC80RUVGMTc1NUNBMTI4MDc2NkI0ODdDNjY0NDRDRkYyMDMyQjJBRTc3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzRFRUYxNzU1Q0ExMjgwNzY2
QjQ4N0M2NjQ0NENGRjIwMzJCMkFFNzcuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0U5b3lFcDR0YjRvOTE5SlN1QkpEcUtNaEc5RWI5NVZkQWlVQlk1c2k2ZU1kLzAv
MzEzMzM4MmUzMTMyMzIyZTMxMzIzMDJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDMy
MzYzNDMzMzIzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAYp6eDANBgkqhkiG9w0BAQsFAAOCAQEATWV6
nwCwNTn4EzDdEbd1PzhM6PECDB9q6qOIp3NqU5mPC9ThgB+DoIbliflwHf9bnkE+
S/FKCuRZf/FlGluGjOrGh0lognNvEmZpAZ2I+3UX1kN3PabvARdUqcZrnDstkei9
qE4TMjJY6KwofhJ03bmrcX2bDW/su3tclTQ2pMDcjIpRc+bgmR6ZATmLiUbCnzc4
ww2fhwuEYAqgAeC8u1PZB0cO9p7oTLexxa1IAOr3soiRNqiPc3Y25MVn4QH/wrrg
u5EPFSKArbkPpbcfXp5JLRUANxhzawRvY7L6Msy32kRCtVp2Eo+xpHTIaJqYC7g5
zsBhpr1QjByrdKH/7w==
-----END CERTIFICATE-----
Generated at Tue Jun 17 23:47:31 2025 by rpki-client