Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Hm99MLVemgJZseUfGkM6GoLBbfvMXpphpvWe8U5U6iTn/0/3139312e3234332e3231352e302f32342d3234203d3e20323633353138.roa
File:                     3139312e3234332e3231352e302f32342d3234203d3e20323633353138.roa (raw, json)
Hash identifier:          AW03y4MUuY1uKhEVPq8ITiLkmbil+0Xsyfp4eNEyBUA=
Subject key identifier:   97:F6:10:51:40:94:DD:27:4A:6A:02:A0:4E:FE:97:CA:0F:6F:F3:54
Certificate issuer:       /CN=2F4916C0EC5F1E6BFF1A64DC9604454738775E27
Certificate serial:       71F5A39BCFA2D0EEDE4D5D673E796753EBA41E9B
Authority key identifier: 2F:49:16:C0:EC:5F:1E:6B:FF:1A:64:DC:96:04:45:47:38:77:5E:27
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F4916C0EC5F1E6BFF1A64DC9604454738775E27.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Hm99MLVemgJZseUfGkM6GoLBbfvMXpphpvWe8U5U6iTn/0/3139312e3234332e3231352e302f32342d3234203d3e20323633353138.roa
Signing time:             Thu 23 Jan 2025 20:46:17 +0000
ROA not before:           Thu 23 Jan 2025 20:41:17 +0000
ROA not after:            Thu 22 Jan 2026 20:46:17 +0000
asID:                     263518
IP address blocks:        191.243.215.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:f5:a3:9b:cf:a2:d0:ee:de:4d:5d:67:3e:79:67:53:eb:a4:1e:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2F4916C0EC5F1E6BFF1A64DC9604454738775E27
        Validity
            Not Before: Jan 23 20:41:17 2025 GMT
            Not After : Jan 22 20:46:17 2026 GMT
        Subject: CN=97F610514094DD274A6A02A04EFE97CA0F6FF354
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:4b:24:c8:5e:01:2d:2c:36:e4:d3:27:ac:a4:
                    cb:35:e6:88:71:12:4a:2e:fd:eb:da:f5:31:5f:c5:
                    cb:98:fd:42:22:57:30:41:71:dc:03:16:31:d8:b3:
                    9f:0c:09:ff:3c:66:da:97:ee:1e:6d:5d:e6:97:50:
                    4c:43:f5:06:13:df:37:a1:4d:34:8a:ad:42:4f:05:
                    38:78:ef:dc:6b:45:94:73:0d:6e:88:93:aa:57:fe:
                    d9:22:ca:ed:56:67:83:f9:cf:bb:bb:72:db:93:12:
                    89:2d:43:93:a5:b6:b1:f7:4d:f3:19:0c:ea:74:54:
                    67:8d:e4:b7:7b:86:6f:e0:a6:f3:e7:ee:0c:de:7b:
                    37:a4:ca:63:2d:50:7f:91:93:52:25:0a:4f:da:72:
                    2e:49:f2:da:4e:13:e3:29:77:2c:25:50:fa:06:da:
                    fd:ed:ac:95:91:03:f6:f1:b2:d8:78:10:ba:25:85:
                    48:de:a5:ba:bf:90:5d:61:6c:c8:e8:a5:c8:71:53:
                    00:20:b5:26:99:b7:94:a2:bf:c7:fc:5e:7c:b7:5f:
                    08:73:d5:c9:2e:0d:79:83:85:f2:65:3d:b4:d3:7f:
                    bb:b0:e6:b5:0c:9c:9b:aa:b2:0d:f9:11:b1:fb:dc:
                    a6:3d:32:5c:d1:3d:11:e4:72:5b:fe:86:e1:e5:2f:
                    f1:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:F6:10:51:40:94:DD:27:4A:6A:02:A0:4E:FE:97:CA:0F:6F:F3:54
            X509v3 Authority Key Identifier:
                keyid:2F:49:16:C0:EC:5F:1E:6B:FF:1A:64:DC:96:04:45:47:38:77:5E:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Hm99MLVemgJZseUfGkM6GoLBbfvMXpphpvWe8U5U6iTn/0/2F4916C0EC5F1E6BFF1A64DC9604454738775E27.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F4916C0EC5F1E6BFF1A64DC9604454738775E27.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Hm99MLVemgJZseUfGkM6GoLBbfvMXpphpvWe8U5U6iTn/0/3139312e3234332e3231352e302f32342d3234203d3e20323633353138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.243.215.0/24

    Signature Algorithm: sha256WithRSAEncryption
         47:53:24:fc:7f:04:25:dc:1b:0e:77:49:b4:f4:25:c0:66:80:
         18:c6:cf:21:5d:a6:3d:28:98:f4:f9:da:be:4a:d9:ca:66:43:
         79:e1:5a:84:6c:b4:d2:8f:cc:06:25:f5:5d:78:98:3a:e3:0d:
         93:a8:ac:32:2e:5b:0e:08:24:58:25:49:48:7f:7e:73:4f:c0:
         5c:e7:95:48:10:42:6d:9d:48:58:27:4a:b0:89:03:60:2f:b7:
         07:a6:db:7f:98:bc:d1:fa:99:10:80:d5:25:43:75:a9:72:85:
         9e:1c:78:1d:0e:7d:45:18:a5:72:e1:f2:95:6e:e2:ef:e7:4f:
         62:38:96:ce:46:f6:ac:4e:d7:31:ae:ed:12:8c:d0:0f:62:8f:
         8d:28:38:5b:df:6c:a2:04:5b:56:04:7b:de:f2:47:64:f6:66:
         a2:20:e8:19:d5:4c:5b:9e:4c:29:5b:96:2c:3b:d4:8a:44:e7:
         fc:77:06:6c:fb:2a:e8:c1:12:04:fa:01:df:23:ba:40:e7:ce:
         78:53:12:1e:17:3f:81:f1:4d:05:02:26:3b:a5:0d:51:00:a2:
         68:84:aa:c5:7e:1e:82:d0:1d:52:50:94:77:26:d6:52:e2:0a:
         de:37:c6:ae:87:93:97:3b:e6:d1:02:25:ed:07:35:31:b6:00:
         27:30:5b:36
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUcfWjm8+i0O7eTV1nPnlnU+ukHpswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkY0OTE2QzBFQzVGMUU2QkZGMUE2NERDOTYwNDQ1NDcz
ODc3NUUyNzAeFw0yNTAxMjMyMDQxMTdaFw0yNjAxMjIyMDQ2MTdaMDMxMTAvBgNV
BAMTKDk3RjYxMDUxNDA5NEREMjc0QTZBMDJBMDRFRkU5N0NBMEY2RkYzNTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiSyTIXgEtLDbk0yespMs15ohx
Ekou/eva9TFfxcuY/UIiVzBBcdwDFjHYs58MCf88ZtqX7h5tXeaXUExD9QYT3zeh
TTSKrUJPBTh479xrRZRzDW6Ik6pX/tkiyu1WZ4P5z7u7ctuTEoktQ5OltrH3TfMZ
DOp0VGeN5Ld7hm/gpvPn7gzeezekymMtUH+Rk1IlCk/aci5J8tpOE+MpdywlUPoG
2v3trJWRA/bxsth4ELolhUjepbq/kF1hbMjopchxUwAgtSaZt5Siv8f8Xny3Xwhz
1ckuDXmDhfJlPbTTf7uw5rUMnJuqsg35EbH73KY9MlzRPRHkclv+huHlL/FPAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUl/YQUUCU3SdKagKgTv6Xyg9v81QwHwYDVR0j
BBgwFoAUL0kWwOxfHmv/GmTclgRFRzh3XicwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSG05OU1MVmVtZ0pac2VVZkdrTTZHb0xCYmZ2TVhwcGhwdldlOFU1VTZp
VG4vMC8yRjQ5MTZDMEVDNUYxRTZCRkYxQTY0REM5NjA0NDU0NzM4Nzc1RTI3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJGNDkxNkMwRUM1RjFFNkJG
RjFBNjREQzk2MDQ0NTQ3Mzg3NzVFMjcuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0htOTlNTFZlbWdKWnNlVWZHa002R29MQmJmdk1YcHBocHZXZThVNVU2aVRuLzAv
MzEzOTMxMmUzMjM0MzMyZTMyMzEzNTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzYzMzM1MzEzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAL/z1zANBgkqhkiG9w0BAQsFAAOCAQEAR1Mk
/H8EJdwbDndJtPQlwGaAGMbPIV2mPSiY9PnavkrZymZDeeFahGy00o/MBiX1XXiY
OuMNk6isMi5bDggkWCVJSH9+c0/AXOeVSBBCbZ1IWCdKsIkDYC+3B6bbf5i80fqZ
EIDVJUN1qXKFnhx4HQ59RRilcuHylW7i7+dPYjiWzkb2rE7XMa7tEozQD2KPjSg4
W99sogRbVgR73vJHZPZmoiDoGdVMW55MKVuWLDvUikTn/HcGbPsq6MESBPoB3yO6
QOfOeFMSHhc/gfFNBQImO6UNUQCiaISqxX4egtAdUlCUdybWUuIK3jfGroeTlzvm
0QIl7Qc1MbYAJzBbNg==
-----END CERTIFICATE-----
Generated at Fri May 9 13:00:22 2025 by rpki-client