Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EszSqXU6su93trtn878XarKoRMGuTgTSwkRxVzm8xiu2/1/3138372e3130382e3234302e302f32302d3234203d3e20323633343135.roa
File:                     3138372e3130382e3234302e302f32302d3234203d3e20323633343135.roa (raw, json)
Hash identifier:          XQBB+iN7n3TO3mhu5axWPFgN6ziYmPQ5KsZLIvRhdz4=
Subject key identifier:   DE:0F:46:BB:1F:4C:DF:E9:65:72:31:5E:5C:76:40:4D:5E:9A:D3:F4
Certificate issuer:       /CN=0D48E03F31640B05A5550FBA2E206DC75A155B20
Certificate serial:       33A68E8833C91A1297B9C5064F0C787E255E8307
Authority key identifier: 0D:48:E0:3F:31:64:0B:05:A5:55:0F:BA:2E:20:6D:C7:5A:15:5B:20
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0D48E03F31640B05A5550FBA2E206DC75A155B20.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EszSqXU6su93trtn878XarKoRMGuTgTSwkRxVzm8xiu2/1/3138372e3130382e3234302e302f32302d3234203d3e20323633343135.roa
Signing time:             Fri 29 Nov 2024 12:47:02 +0000
ROA not before:           Fri 29 Nov 2024 12:42:02 +0000
ROA not after:            Fri 28 Nov 2025 12:47:02 +0000
asID:                     263415
IP address blocks:        187.108.240.0/20 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:a6:8e:88:33:c9:1a:12:97:b9:c5:06:4f:0c:78:7e:25:5e:83:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D48E03F31640B05A5550FBA2E206DC75A155B20
        Validity
            Not Before: Nov 29 12:42:02 2024 GMT
            Not After : Nov 28 12:47:02 2025 GMT
        Subject: CN=DE0F46BB1F4CDFE96572315E5C76404D5E9AD3F4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:3f:8c:8c:e3:78:8f:65:f4:98:86:97:c0:79:
                    27:cb:0c:10:4c:ff:0e:49:a3:88:ab:94:a3:3e:94:
                    3a:ff:87:a0:19:af:dc:96:a0:b6:21:d0:62:26:28:
                    90:81:73:36:2f:cd:de:8c:7a:31:21:67:c0:a7:2b:
                    d1:5f:7f:f1:b0:6f:8c:60:a7:a4:63:7d:b9:c2:20:
                    ab:2f:8e:d1:69:a9:f8:3f:ca:4d:09:4d:b7:e0:68:
                    f8:30:fa:e4:3e:e0:60:a0:b8:df:61:6b:2e:a0:0a:
                    71:85:eb:01:f5:c7:3f:93:d9:34:95:85:7b:31:11:
                    f1:96:70:69:5e:7c:86:62:44:b9:1f:88:bf:30:e4:
                    c2:a5:10:87:45:94:59:26:3d:80:2f:e7:59:a1:f8:
                    46:2e:fb:d9:32:e4:bc:6f:1c:bb:fe:64:c5:de:d2:
                    ae:30:4a:95:60:a5:64:f3:49:39:b5:03:7c:b4:37:
                    d7:fb:54:7c:72:b4:d8:b4:8e:a7:33:b1:60:e5:a7:
                    d8:af:63:76:ee:54:17:af:7e:8d:a7:c9:01:26:f7:
                    92:82:b2:85:bd:a7:f4:be:ed:bb:94:b4:7b:ab:d0:
                    a8:39:74:cf:7a:ab:47:2f:0f:3b:b0:b3:57:e5:9f:
                    aa:13:9f:6b:4a:78:cd:43:17:f1:b6:aa:2a:61:4e:
                    3e:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:0F:46:BB:1F:4C:DF:E9:65:72:31:5E:5C:76:40:4D:5E:9A:D3:F4
            X509v3 Authority Key Identifier:
                keyid:0D:48:E0:3F:31:64:0B:05:A5:55:0F:BA:2E:20:6D:C7:5A:15:5B:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EszSqXU6su93trtn878XarKoRMGuTgTSwkRxVzm8xiu2/1/0D48E03F31640B05A5550FBA2E206DC75A155B20.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0D48E03F31640B05A5550FBA2E206DC75A155B20.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EszSqXU6su93trtn878XarKoRMGuTgTSwkRxVzm8xiu2/1/3138372e3130382e3234302e302f32302d3234203d3e20323633343135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.108.240.0/20

    Signature Algorithm: sha256WithRSAEncryption
         6d:34:65:78:c4:2f:e2:5a:4c:84:df:e0:d4:db:a6:c1:60:f9:
         00:db:cb:39:44:23:7a:1b:6a:01:96:58:f8:df:10:09:54:bc:
         33:85:18:31:f4:11:54:c1:ad:ac:56:09:52:af:59:88:55:18:
         40:d3:fc:be:a3:e7:91:e9:c7:35:20:e9:40:7e:e9:b7:19:5d:
         b5:fe:00:d1:48:06:dc:bd:75:12:c9:ae:2e:8d:cd:55:3d:d6:
         4f:42:fa:21:34:ff:0b:09:c1:d9:5d:f0:79:61:d0:34:33:2f:
         03:33:ed:4d:5a:e1:41:5d:aa:71:be:f3:70:f9:b5:12:fd:b6:
         ed:7d:f2:b8:df:d8:44:1e:e3:fd:ba:d6:5d:cb:97:43:ad:bd:
         e7:c7:24:5a:b6:59:b1:57:22:fc:39:a7:a7:e3:4d:5d:c2:9e:
         bd:39:65:88:d5:fd:85:15:84:d6:c5:59:fc:ee:b3:4a:7a:32:
         bd:fa:09:8f:cb:63:af:2a:a0:08:7c:73:7f:e2:40:8e:21:f9:
         7d:5e:9f:fb:69:54:08:8a:15:61:34:68:4b:03:bf:91:7e:14:
         41:40:d6:08:e6:c8:31:4e:03:a1:89:f3:eb:04:24:44:9c:e2:
         e5:7e:18:ff:4b:2a:da:7f:10:4f:14:1d:19:92:e6:cd:56:51:
         7d:95:27:f5
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUM6aOiDPJGhKXucUGTwx4fiVegwcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEQ0OEUwM0YzMTY0MEIwNUE1NTUwRkJBMkUyMDZEQzc1
QTE1NUIyMDAeFw0yNDExMjkxMjQyMDJaFw0yNTExMjgxMjQ3MDJaMDMxMTAvBgNV
BAMTKERFMEY0NkJCMUY0Q0RGRTk2NTcyMzE1RTVDNzY0MDRENUU5QUQzRjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZP4yM43iPZfSYhpfAeSfLDBBM
/w5Jo4irlKM+lDr/h6AZr9yWoLYh0GImKJCBczYvzd6MejEhZ8CnK9Fff/Gwb4xg
p6RjfbnCIKsvjtFpqfg/yk0JTbfgaPgw+uQ+4GCguN9hay6gCnGF6wH1xz+T2TSV
hXsxEfGWcGlefIZiRLkfiL8w5MKlEIdFlFkmPYAv51mh+EYu+9ky5LxvHLv+ZMXe
0q4wSpVgpWTzSTm1A3y0N9f7VHxytNi0jqczsWDlp9ivY3buVBevfo2nyQEm95KC
soW9p/S+7buUtHur0Kg5dM96q0cvDzuws1fln6oTn2tKeM1DF/G2qiphTj4nAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQU3g9Gux9M3+llcjFeXHZATV6a0/QwHwYDVR0j
BBgwFoAUDUjgPzFkCwWlVQ+6LiBtx1oVWyAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRXN6U3FYVTZzdTkzdHJ0bjg3OFhhcktvUk1HdVRnVFN3a1J4VnptOHhp
dTIvMS8wRDQ4RTAzRjMxNjQwQjA1QTU1NTBGQkEyRTIwNkRDNzVBMTU1QjIwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzBENDhFMDNGMzE2NDBCMDVB
NTU1MEZCQTJFMjA2REM3NUExNTVCMjAuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0VzelNxWFU2c3U5M3RydG44NzhYYXJLb1JNR3VUZ1RTd2tSeFZ6bTh4aXUyLzEv
MzEzODM3MmUzMTMwMzgyZTMyMzQzMDJlMzAyZjMyMzAyZDMyMzQyMDNkM2UyMDMy
MzYzMzM0MzEzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEBLts8DANBgkqhkiG9w0BAQsFAAOCAQEAbTRl
eMQv4lpMhN/g1NumwWD5ANvLOUQjehtqAZZY+N8QCVS8M4UYMfQRVMGtrFYJUq9Z
iFUYQNP8vqPnkenHNSDpQH7ptxldtf4A0UgG3L11EsmuLo3NVT3WT0L6ITT/CwnB
2V3weWHQNDMvAzPtTVrhQV2qcb7zcPm1Ev227X3yuN/YRB7j/brWXcuXQ62958ck
WrZZsVci/Dmnp+NNXcKevTlliNX9hRWE1sVZ/O6zSnoyvfoJj8tjryqgCHxzf+JA
jiH5fV6f+2lUCIoVYTRoSwO/kX4UQUDWCObIMU4DoYnz6wQkRJzi5X4Y/0sq2n8Q
TxQdGZLmzVZRfZUn9Q==
-----END CERTIFICATE-----
Generated at Sat Apr 26 07:52:21 2025 by rpki-client