Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2MiTSyS2dWcUZonFui1ZsgbSTJqTrE4bcAY6pRkhuRCd/0/3138362e3139342e3137322e302f32342d3234203d3e203237303636.roa
File:                     3138362e3139342e3137322e302f32342d3234203d3e203237303636.roa (raw, json)
Hash identifier:          zIljlDxg4ZdmVJuJ2a7zxR5FzpSxBxm7oKLaoix09fA=
Subject key identifier:   47:85:F9:64:74:C1:24:9D:E3:55:5A:74:92:4E:8E:44:B5:28:8F:BE
Certificate issuer:       /CN=F7181E90C19D9180E438899EF8D4E3E5A2BF2CD0
Certificate serial:       7C8E31B997592BD449CC651A013739253E18B758
Authority key identifier: F7:18:1E:90:C1:9D:91:80:E4:38:89:9E:F8:D4:E3:E5:A2:BF:2C:D0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F7181E90C19D9180E438899EF8D4E3E5A2BF2CD0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2MiTSyS2dWcUZonFui1ZsgbSTJqTrE4bcAY6pRkhuRCd/0/3138362e3139342e3137322e302f32342d3234203d3e203237303636.roa
Signing time:             Sat 14 Dec 2024 23:05:11 +0000
ROA not before:           Sat 14 Dec 2024 23:00:11 +0000
ROA not after:            Sat 13 Dec 2025 23:05:11 +0000
asID:                     27066
IP address blocks:        186.194.172.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:8e:31:b9:97:59:2b:d4:49:cc:65:1a:01:37:39:25:3e:18:b7:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F7181E90C19D9180E438899EF8D4E3E5A2BF2CD0
        Validity
            Not Before: Dec 14 23:00:11 2024 GMT
            Not After : Dec 13 23:05:11 2025 GMT
        Subject: CN=4785F96474C1249DE3555A74924E8E44B5288FBE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:50:d3:6a:77:7b:b3:95:64:42:15:30:c7:ae:
                    fa:a3:e4:64:de:4d:d7:36:28:c9:e9:58:fe:f2:ec:
                    63:cb:50:da:d8:fa:bc:7a:5a:51:87:8b:e4:8e:72:
                    14:39:79:09:77:75:1d:6e:4e:7d:6e:32:70:e7:d8:
                    01:27:93:d7:8f:de:83:23:1b:ff:fc:b2:4d:52:12:
                    09:a6:27:6a:04:4e:83:f7:b1:6d:c4:ae:54:cb:ae:
                    d6:d2:b2:32:b7:05:bd:75:5e:3d:61:9c:df:cf:45:
                    33:03:4d:ab:09:8c:01:1f:e9:ce:c9:c5:70:e8:e6:
                    02:68:9d:ce:4a:6e:c2:03:5f:c2:0c:b0:4c:94:4f:
                    91:c7:1b:54:3c:45:7d:b5:e9:43:c6:b6:96:c3:b1:
                    e2:1b:dc:c4:2c:a6:3b:86:e4:35:63:db:57:95:e6:
                    50:80:0b:25:9e:06:cc:44:b6:0d:1c:23:13:84:9b:
                    2d:2b:ea:ff:e9:eb:7f:e2:bc:2c:29:09:4c:ea:e1:
                    b2:9e:4c:63:ce:4a:b4:d2:1c:07:8a:14:6c:6f:28:
                    d4:70:89:c6:c6:fc:dd:8a:b7:38:62:a0:dd:48:81:
                    02:6d:03:2a:06:88:af:29:33:c5:64:72:24:cc:76:
                    cb:7b:ac:f6:27:d1:13:49:84:d1:50:2c:6d:a1:5e:
                    90:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:85:F9:64:74:C1:24:9D:E3:55:5A:74:92:4E:8E:44:B5:28:8F:BE
            X509v3 Authority Key Identifier:
                keyid:F7:18:1E:90:C1:9D:91:80:E4:38:89:9E:F8:D4:E3:E5:A2:BF:2C:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2MiTSyS2dWcUZonFui1ZsgbSTJqTrE4bcAY6pRkhuRCd/0/F7181E90C19D9180E438899EF8D4E3E5A2BF2CD0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F7181E90C19D9180E438899EF8D4E3E5A2BF2CD0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2MiTSyS2dWcUZonFui1ZsgbSTJqTrE4bcAY6pRkhuRCd/0/3138362e3139342e3137322e302f32342d3234203d3e203237303636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.194.172.0/24

    Signature Algorithm: sha256WithRSAEncryption
         07:b9:aa:a5:57:c7:e8:dd:21:f3:63:df:8c:93:cd:ee:52:0f:
         b3:05:ed:6d:e8:40:4a:61:f1:00:10:ba:4e:24:f2:dc:7c:ff:
         75:61:2d:26:c6:74:d8:ca:09:c5:bc:44:e9:67:07:61:0b:f8:
         bf:9d:b4:20:41:91:b5:24:f6:69:cf:e5:a7:55:c2:07:40:fe:
         11:09:59:25:69:35:25:73:e4:db:a5:d5:0d:e5:bd:84:56:56:
         ae:9a:72:35:57:1f:4c:14:e1:9d:6e:7d:46:62:43:12:ec:7d:
         d9:93:34:b2:83:fa:17:c6:2c:58:4e:d1:3b:39:2e:05:30:0d:
         d8:f9:74:39:74:be:3e:ca:38:2e:bd:11:9a:d5:7c:d1:26:af:
         1d:ed:ec:1a:39:50:91:13:1c:cf:33:13:17:a2:ea:c9:03:5f:
         a9:83:85:64:de:35:bd:77:ec:0b:97:cd:39:08:81:b5:58:d8:
         e8:d1:14:f6:ce:32:5f:1c:33:7e:f0:8e:0a:95:a7:72:85:29:
         d5:a8:de:08:00:75:e6:11:b1:91:8f:85:b7:f2:8b:80:1c:f8:
         da:1f:c2:f0:1b:99:3a:e9:13:77:a4:8f:ab:6b:d9:ee:0f:a9:
         95:e2:14:8d:63:9b:45:c6:7b:9e:ec:cb:de:b9:15:1c:1c:c1:
         da:13:1b:f2
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUfI4xuZdZK9RJzGUaATc5JT4Yt1gwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjcxODFFOTBDMTlEOTE4MEU0Mzg4OTlFRjhENEUzRTVB
MkJGMkNEMDAeFw0yNDEyMTQyMzAwMTFaFw0yNTEyMTMyMzA1MTFaMDMxMTAvBgNV
BAMTKDQ3ODVGOTY0NzRDMTI0OURFMzU1NUE3NDkyNEU4RTQ0QjUyODhGQkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLUNNqd3uzlWRCFTDHrvqj5GTe
Tdc2KMnpWP7y7GPLUNrY+rx6WlGHi+SOchQ5eQl3dR1uTn1uMnDn2AEnk9eP3oMj
G//8sk1SEgmmJ2oEToP3sW3ErlTLrtbSsjK3Bb11Xj1hnN/PRTMDTasJjAEf6c7J
xXDo5gJonc5KbsIDX8IMsEyUT5HHG1Q8RX216UPGtpbDseIb3MQspjuG5DVj21eV
5lCACyWeBsxEtg0cIxOEmy0r6v/p63/ivCwpCUzq4bKeTGPOSrTSHAeKFGxvKNRw
icbG/N2KtzhioN1IgQJtAyoGiK8pM8VkciTMdst7rPYn0RNJhNFQLG2hXpD/AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUR4X5ZHTBJJ3jVVp0kk6ORLUoj74wHwYDVR0j
BBgwFoAU9xgekMGdkYDkOIme+NTj5aK/LNAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMk1pVFN5UzJkV2NVWm9uRnVpMVpzZ2JTVEpxVHJFNGJjQVk2cFJraHVS
Q2QvMC9GNzE4MUU5MEMxOUQ5MTgwRTQzODg5OUVGOEQ0RTNFNUEyQkYyQ0QwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Y3MTgxRTkwQzE5RDkxODBF
NDM4ODk5RUY4RDRFM0U1QTJCRjJDRDAuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJNaVRTeVMyZFdjVVpvbkZ1aTFac2diU1RKcVRyRTRiY0FZNnBSa2h1UkNkLzAv
MzEzODM2MmUzMTM5MzQyZTMxMzczMjJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzczMDM2MzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAC6wqwwDQYJKoZIhvcNAQELBQADggEBAAe5qqVX
x+jdIfNj34yTze5SD7MF7W3oQEph8QAQuk4k8tx8/3VhLSbGdNjKCcW8ROlnB2EL
+L+dtCBBkbUk9mnP5adVwgdA/hEJWSVpNSVz5Nul1Q3lvYRWVq6acjVXH0wU4Z1u
fUZiQxLsfdmTNLKD+hfGLFhO0Ts5LgUwDdj5dDl0vj7KOC69EZrVfNEmrx3t7Bo5
UJETHM8zExei6skDX6mDhWTeNb137AuXzTkIgbVY2OjRFPbOMl8cM37wjgqVp3KF
KdWo3ggAdeYRsZGPhbfyi4Ac+NofwvAbmTrpE3ekj6tr2e4PqZXiFI1jm0XGe57s
y965FRwcwdoTG/I=
-----END CERTIFICATE-----
Generated at Mon Apr 7 13:42:50 2025 by rpki-client