Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BL8dbUynovJKpEEEty5HjmRpgiGYw29f1gs7KEUiRF8c/0/3138372e3132312e3135372e302f32342d3234203d3e20323730393138.roa
File:                     3138372e3132312e3135372e302f32342d3234203d3e20323730393138.roa (raw, json)
Hash identifier:          fFRwX3PaInYFrcNh6oLV2+d9N/HZtUAR4ziFBn9xJDE=
Subject key identifier:   ED:46:F2:C6:F0:D7:CF:F8:8A:4F:08:72:AB:60:28:CB:DF:51:F9:F8
Certificate issuer:       /CN=4F565A5812728624EE4199A0244BE5407F1AAAB0
Certificate serial:       70173982E8D8542037D63F5BBBD5A11CBB3E2F98
Authority key identifier: 4F:56:5A:58:12:72:86:24:EE:41:99:A0:24:4B:E5:40:7F:1A:AA:B0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4F565A5812728624EE4199A0244BE5407F1AAAB0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BL8dbUynovJKpEEEty5HjmRpgiGYw29f1gs7KEUiRF8c/0/3138372e3132312e3135372e302f32342d3234203d3e20323730393138.roa
Signing time:             Thu 13 Feb 2025 19:03:48 +0000
ROA not before:           Thu 13 Feb 2025 18:58:48 +0000
ROA not after:            Thu 12 Feb 2026 19:03:48 +0000
asID:                     270918
IP address blocks:        187.121.157.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:17:39:82:e8:d8:54:20:37:d6:3f:5b:bb:d5:a1:1c:bb:3e:2f:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4F565A5812728624EE4199A0244BE5407F1AAAB0
        Validity
            Not Before: Feb 13 18:58:48 2025 GMT
            Not After : Feb 12 19:03:48 2026 GMT
        Subject: CN=ED46F2C6F0D7CFF88A4F0872AB6028CBDF51F9F8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:bb:ec:a2:04:d5:0a:66:a8:56:ad:5c:cc:dd:
                    c8:e5:78:b6:05:7b:d3:c9:69:3a:e4:cf:23:5c:de:
                    98:1a:43:e8:4d:88:a2:28:ff:9f:5c:17:81:7a:04:
                    8e:8c:a0:53:40:19:48:8b:fe:e1:c7:81:70:ab:a2:
                    61:5b:a0:43:f8:96:de:7b:29:50:7d:27:86:2b:70:
                    ec:fb:12:8d:a8:51:ee:7d:d0:fa:fa:cc:b9:ab:4c:
                    4d:b5:a9:c9:b6:76:d8:29:18:b9:0c:cc:fa:f3:67:
                    ed:a2:60:9b:de:e8:60:00:49:1e:1d:b2:33:5b:99:
                    47:d2:8e:93:90:71:57:8e:03:46:13:92:6f:d0:78:
                    fa:5f:03:bb:36:c1:c9:02:01:4f:9e:f2:6d:32:cd:
                    8c:e1:6d:b7:50:c0:80:4d:70:7d:1c:7a:8a:88:9e:
                    a0:bc:45:b7:3e:d4:c1:f6:6c:46:9c:96:a9:a1:ad:
                    f9:ff:6b:1e:16:1c:62:53:7c:c7:9a:c8:16:02:1a:
                    47:3c:02:87:8b:97:5e:0a:f4:ca:0e:19:69:ba:4f:
                    73:a2:51:ad:79:2b:4f:ae:8c:3c:3f:d4:00:d2:b1:
                    35:20:cb:e9:5e:04:42:cd:00:21:a7:3b:c0:d2:fc:
                    12:e4:cb:bd:3e:3e:f6:71:8d:7f:94:56:3f:ec:5f:
                    78:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:46:F2:C6:F0:D7:CF:F8:8A:4F:08:72:AB:60:28:CB:DF:51:F9:F8
            X509v3 Authority Key Identifier:
                keyid:4F:56:5A:58:12:72:86:24:EE:41:99:A0:24:4B:E5:40:7F:1A:AA:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BL8dbUynovJKpEEEty5HjmRpgiGYw29f1gs7KEUiRF8c/0/4F565A5812728624EE4199A0244BE5407F1AAAB0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4F565A5812728624EE4199A0244BE5407F1AAAB0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BL8dbUynovJKpEEEty5HjmRpgiGYw29f1gs7KEUiRF8c/0/3138372e3132312e3135372e302f32342d3234203d3e20323730393138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.121.157.0/24

    Signature Algorithm: sha256WithRSAEncryption
         49:ef:bc:1f:5b:e4:3c:28:2c:4d:12:5a:76:32:e7:94:b8:d9:
         5e:1f:60:9b:ae:11:af:a7:fb:a4:2f:01:8b:51:21:5f:7e:1c:
         56:71:62:1a:5f:3e:d8:ed:9c:7f:76:f8:03:05:1d:3d:47:0a:
         51:53:e2:59:aa:4b:0f:f9:88:f0:51:3d:7c:13:52:af:c0:3c:
         9a:0b:ef:a2:d5:33:05:f1:05:e5:40:3c:f3:28:f4:37:28:4c:
         2d:59:60:1d:1f:2f:b1:52:06:b8:e2:80:16:d5:42:4e:a8:59:
         61:a6:02:be:c4:1e:41:4e:fe:d8:21:21:21:a6:bc:df:83:52:
         2b:e0:61:5c:42:22:28:06:95:f7:b9:5a:ca:b7:7e:9a:40:fb:
         df:b6:ce:96:ec:d4:e0:92:a3:aa:ca:38:cd:20:1e:64:b3:ec:
         f1:fd:48:6f:00:d7:9d:3e:bc:99:21:44:49:b1:cb:6d:c5:ed:
         4b:18:fc:13:be:c2:b5:46:ea:a5:79:4c:25:46:6b:1e:8d:8d:
         bc:d1:27:24:4b:6e:06:ca:53:4e:c5:1f:ce:1b:23:d1:01:c4:
         00:e4:88:d1:03:13:a8:da:b0:81:55:35:4a:31:ee:fb:04:cf:
         58:61:34:e6:e2:52:ca:7e:d7:bc:c0:8f:0c:b6:3d:b7:5a:d4:
         95:0d:a7:a4
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUcBc5gujYVCA31j9bu9WhHLs+L5gwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNEY1NjVBNTgxMjcyODYyNEVFNDE5OUEwMjQ0QkU1NDA3
RjFBQUFCMDAeFw0yNTAyMTMxODU4NDhaFw0yNjAyMTIxOTAzNDhaMDMxMTAvBgNV
BAMTKEVENDZGMkM2RjBEN0NGRjg4QTRGMDg3MkFCNjAyOENCREY1MUY5RjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvu+yiBNUKZqhWrVzM3cjleLYF
e9PJaTrkzyNc3pgaQ+hNiKIo/59cF4F6BI6MoFNAGUiL/uHHgXCromFboEP4lt57
KVB9J4YrcOz7Eo2oUe590Pr6zLmrTE21qcm2dtgpGLkMzPrzZ+2iYJve6GAASR4d
sjNbmUfSjpOQcVeOA0YTkm/QePpfA7s2wckCAU+e8m0yzYzhbbdQwIBNcH0ceoqI
nqC8Rbc+1MH2bEaclqmhrfn/ax4WHGJTfMeayBYCGkc8AoeLl14K9MoOGWm6T3Oi
Ua15K0+ujDw/1ADSsTUgy+leBELNACGnO8DS/BLky70+PvZxjX+UVj/sX3iVAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQU7UbyxvDXz/iKTwhyq2Aoy99R+fgwHwYDVR0j
BBgwFoAUT1ZaWBJyhiTuQZmgJEvlQH8aqrAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQkw4ZGJVeW5vdkpLcEVFRXR5NUhqbVJwZ2lHWXcyOWYxZ3M3S0VVaVJG
OGMvMC80RjU2NUE1ODEyNzI4NjI0RUU0MTk5QTAyNDRCRTU0MDdGMUFBQUIwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzRGNTY1QTU4MTI3Mjg2MjRF
RTQxOTlBMDI0NEJFNTQwN0YxQUFBQjAuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0JMOGRiVXlub3ZKS3BFRUV0eTVIam1ScGdpR1l3MjlmMWdzN0tFVWlSRjhjLzAv
MzEzODM3MmUzMTMyMzEyZTMxMzUzNzJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzczMDM5MzEzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEALt5nTANBgkqhkiG9w0BAQsFAAOCAQEASe+8
H1vkPCgsTRJadjLnlLjZXh9gm64Rr6f7pC8Bi1EhX34cVnFiGl8+2O2cf3b4AwUd
PUcKUVPiWapLD/mI8FE9fBNSr8A8mgvvotUzBfEF5UA88yj0NyhMLVlgHR8vsVIG
uOKAFtVCTqhZYaYCvsQeQU7+2CEhIaa834NSK+BhXEIiKAaV97layrd+mkD737bO
luzU4JKjqso4zSAeZLPs8f1IbwDXnT68mSFESbHLbcXtSxj8E77CtUbqpXlMJUZr
Ho2NvNEnJEtuBspTTsUfzhsj0QHEAOSI0QMTqNqwgVU1SjHu+wTPWGE05uJSyn7X
vMCPDLY9t1rUlQ2npA==
-----END CERTIFICATE-----
Generated at Mon Mar 10 23:32:21 2025 by rpki-client on console.sobornost.net