Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HetaHitxLYfSDX6cL2hJyCcSCfRFbrciEvqTkNmRsc7k/0/3138362e3231392e3232342e302f32322d3234203d3e20323730353938.roa
File:                     3138362e3231392e3232342e302f32322d3234203d3e20323730353938.roa (raw, json)
Hash identifier:          avnBf8a3sUZLOX4Tn2JbTPoRoOUpFLayolP2VE+vV7g=
Subject key identifier:   7F:CD:BE:9B:71:39:3F:3E:71:9F:93:B3:3C:BF:4D:1A:1C:A9:F1:55
Certificate issuer:       /CN=940B94B8927D3C9CB302DD59BDDF8D98C74257B6
Certificate serial:       345AA2016C14F27AA1F0339F602DABC53F0EEB50
Authority key identifier: 94:0B:94:B8:92:7D:3C:9C:B3:02:DD:59:BD:DF:8D:98:C7:42:57:B6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/940B94B8927D3C9CB302DD59BDDF8D98C74257B6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HetaHitxLYfSDX6cL2hJyCcSCfRFbrciEvqTkNmRsc7k/0/3138362e3231392e3232342e302f32322d3234203d3e20323730353938.roa
Signing time:             Tue 05 Dec 2023 13:44:27 +0000
ROA not before:           Tue 05 Dec 2023 13:39:27 +0000
ROA not after:            Tue 03 Dec 2024 13:44:27 +0000
asID:                     270598
IP address blocks:        186.219.224.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:5a:a2:01:6c:14:f2:7a:a1:f0:33:9f:60:2d:ab:c5:3f:0e:eb:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=940B94B8927D3C9CB302DD59BDDF8D98C74257B6
        Validity
            Not Before: Dec  5 13:39:27 2023 GMT
            Not After : Dec  3 13:44:27 2024 GMT
        Subject: CN=7FCDBE9B71393F3E719F93B33CBF4D1A1CA9F155
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:5f:f6:2c:54:f8:49:30:3d:eb:ca:9a:da:6c:
                    a6:56:8c:a9:f4:d1:a4:92:74:61:12:69:ee:c7:1a:
                    fd:b9:dc:8d:15:be:2c:db:bd:f6:cf:7f:62:00:b8:
                    33:72:38:81:d6:d0:b5:41:45:61:66:ed:b7:e0:3c:
                    64:1a:37:a6:3a:31:a2:dd:94:87:23:34:47:a2:64:
                    6e:3f:35:c2:b7:5e:42:70:89:1f:ad:0c:32:77:ce:
                    a6:12:44:e0:32:f6:06:c1:c3:ea:70:81:25:7f:1f:
                    2d:4c:b7:ea:84:2f:8f:16:57:d0:4d:4d:93:23:1b:
                    bc:5a:c2:b5:b9:ae:23:9a:82:71:48:f0:2a:de:0f:
                    ca:4c:b2:61:50:e0:22:cb:4f:aa:aa:7e:e8:a0:0f:
                    40:a3:a7:99:23:1d:51:0f:0b:9a:f9:05:a5:00:bd:
                    81:56:be:ed:a0:5b:1a:91:33:12:e3:b7:30:fe:65:
                    be:a4:91:b2:b3:94:68:78:99:c0:14:e5:6b:27:93:
                    64:38:d6:af:8a:9e:06:14:f7:d6:7b:78:8f:2b:ae:
                    68:dd:d4:0f:7a:df:ab:59:1a:8f:92:8c:91:2a:27:
                    8c:39:bf:9c:47:31:91:25:09:45:7d:01:8b:9d:a7:
                    31:fa:f4:c4:f5:37:67:32:ca:8d:0b:19:34:5a:5e:
                    b4:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:CD:BE:9B:71:39:3F:3E:71:9F:93:B3:3C:BF:4D:1A:1C:A9:F1:55
            X509v3 Authority Key Identifier:
                keyid:94:0B:94:B8:92:7D:3C:9C:B3:02:DD:59:BD:DF:8D:98:C7:42:57:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HetaHitxLYfSDX6cL2hJyCcSCfRFbrciEvqTkNmRsc7k/0/940B94B8927D3C9CB302DD59BDDF8D98C74257B6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/940B94B8927D3C9CB302DD59BDDF8D98C74257B6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HetaHitxLYfSDX6cL2hJyCcSCfRFbrciEvqTkNmRsc7k/0/3138362e3231392e3232342e302f32322d3234203d3e20323730353938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.219.224.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1d:f8:09:ab:27:b7:19:ed:cb:32:2c:96:67:8f:cf:f4:1e:34:
         b1:61:bb:04:91:a5:22:bf:df:1a:e9:37:cf:49:df:76:fe:19:
         28:8c:d0:bd:45:11:c4:d2:0a:84:c2:e7:43:79:f0:21:14:97:
         b7:ed:80:6d:18:6d:68:d6:14:e5:a6:56:84:50:30:6c:60:a0:
         95:20:17:85:a1:44:a8:58:4a:e1:cf:45:34:91:2c:65:03:ef:
         39:ab:0d:fc:8a:10:75:05:ce:40:89:20:2d:ab:89:0e:32:3b:
         a5:e6:63:58:e7:23:b4:2f:6a:e8:3d:bf:28:2d:45:5c:2f:8d:
         50:f6:a7:71:cb:14:b1:d0:00:73:55:8a:50:60:c3:f6:ac:54:
         b9:d6:64:fe:11:f5:34:9d:c6:dd:7f:f9:20:bb:50:ba:5a:65:
         f5:1c:57:92:68:a3:80:9e:14:83:d0:d0:82:34:3e:b8:8e:e0:
         de:ab:84:da:13:e0:49:c1:ba:96:d5:3f:37:a2:b6:57:71:67:
         7d:fd:25:ec:0a:54:90:80:e9:6f:99:bf:d3:94:cd:70:68:5e:
         6d:c2:7d:52:03:2b:af:b5:1c:00:11:4c:69:ee:58:09:da:3a:
         6b:9e:d3:8f:ab:70:00:9c:05:1d:e0:38:77:51:30:0b:de:93:
         b3:bd:8f:4c
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUNFqiAWwU8nqh8DOfYC2rxT8O61AwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTQwQjk0Qjg5MjdEM0M5Q0IzMDJERDU5QkRERjhEOThD
NzQyNTdCNjAeFw0yMzEyMDUxMzM5MjdaFw0yNDEyMDMxMzQ0MjdaMDMxMTAvBgNV
BAMTKDdGQ0RCRTlCNzEzOTNGM0U3MTlGOTNCMzNDQkY0RDFBMUNBOUYxNTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgX/YsVPhJMD3ryprabKZWjKn0
0aSSdGESae7HGv253I0VvizbvfbPf2IAuDNyOIHW0LVBRWFm7bfgPGQaN6Y6MaLd
lIcjNEeiZG4/NcK3XkJwiR+tDDJ3zqYSROAy9gbBw+pwgSV/Hy1Mt+qEL48WV9BN
TZMjG7xawrW5riOagnFI8CreD8pMsmFQ4CLLT6qqfuigD0Cjp5kjHVEPC5r5BaUA
vYFWvu2gWxqRMxLjtzD+Zb6kkbKzlGh4mcAU5Wsnk2Q41q+KngYU99Z7eI8rrmjd
1A9636tZGo+SjJEqJ4w5v5xHMZElCUV9AYudpzH69MT1N2cyyo0LGTRaXrSlAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUf82+m3E5Pz5xn5OzPL9NGhyp8VUwHwYDVR0j
BBgwFoAUlAuUuJJ9PJyzAt1Zvd+NmMdCV7YwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSGV0YUhpdHhMWWZTRFg2Y0wyaEp5Q2NTQ2ZSRmJyY2lFdnFUa05tUnNj
N2svMC85NDBCOTRCODkyN0QzQzlDQjMwMkRENTlCRERGOEQ5OEM3NDI1N0I2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzk0MEI5NEI4OTI3RDNDOUNC
MzAyREQ1OUJEREY4RDk4Qzc0MjU3QjYuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0hldGFIaXR4TFlmU0RYNmNMMmhKeUNjU0NmUkZicmNpRXZxVGtObVJzYzdrLzAv
MzEzODM2MmUzMjMxMzkyZTMyMzIzNDJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDMy
MzczMDM1MzkzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEArrb4DANBgkqhkiG9w0BAQsFAAOCAQEAHfgJ
qye3Ge3LMiyWZ4/P9B40sWG7BJGlIr/fGuk3z0nfdv4ZKIzQvUURxNIKhMLnQ3nw
IRSXt+2AbRhtaNYU5aZWhFAwbGCglSAXhaFEqFhK4c9FNJEsZQPvOasN/IoQdQXO
QIkgLauJDjI7peZjWOcjtC9q6D2/KC1FXC+NUPanccsUsdAAc1WKUGDD9qxUudZk
/hH1NJ3G3X/5ILtQulpl9RxXkmijgJ4Ug9DQgjQ+uI7g3quE2hPgScG6ltU/N6K2
V3Fnff0l7ApUkIDpb5m/05TNcGhebcJ9UgMrr7UcABFMae5YCdo6a57Tj6twAJwF
HeA4d1EwC96Ts72PTA==
-----END CERTIFICATE-----
Generated at Thu Jul 24 23:38:41 2025 by rpki-client