Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/3138362e3230392e39362e302f32302d3234203d3e20323033.roa
File:                     3138362e3230392e39362e302f32302d3234203d3e20323033.roa (raw, json)
Hash identifier:          9xZZlinHUa3v0NzsEJDnUYc1ZRv650Nik0weDPNboTQ=
Subject key identifier:   00:55:7E:BE:AE:7E:17:BC:15:D4:98:A4:FF:66:BC:C2:BC:11:46:A8
Certificate issuer:       /CN=F16C1087BB1A5260CB32E45FBAB05BFC61177DDE
Certificate serial:       5AA8C6198D4ECD5EE687813F5594604AC648A533
Authority key identifier: F1:6C:10:87:BB:1A:52:60:CB:32:E4:5F:BA:B0:5B:FC:61:17:7D:DE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F16C1087BB1A5260CB32E45FBAB05BFC61177DDE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/3138362e3230392e39362e302f32302d3234203d3e20323033.roa
Signing time:             Thu 23 Feb 2023 16:36:27 +0000
ROA not before:           Thu 23 Feb 2023 16:31:27 +0000
ROA not after:            Thu 22 Feb 2024 16:36:27 +0000
asID:                     203
IP address blocks:        186.209.96.0/20 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:a8:c6:19:8d:4e:cd:5e:e6:87:81:3f:55:94:60:4a:c6:48:a5:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F16C1087BB1A5260CB32E45FBAB05BFC61177DDE
        Validity
            Not Before: Feb 23 16:31:27 2023 GMT
            Not After : Feb 22 16:36:27 2024 GMT
        Subject: CN=00557EBEAE7E17BC15D498A4FF66BCC2BC1146A8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:af:ee:60:59:6a:ea:6f:d6:ac:e0:40:87:25:
                    29:0d:e9:b9:3f:91:05:cd:d9:04:d9:02:0a:82:4e:
                    b9:16:6f:f5:46:c8:69:1d:bd:17:ed:5a:03:ab:c5:
                    6b:8a:7e:eb:3f:89:1e:79:21:7f:4c:a5:c8:e4:cd:
                    ab:6f:2e:45:12:1d:21:ce:51:18:8c:59:04:ca:e9:
                    54:b9:a2:4b:f7:2c:bf:af:99:99:d1:19:66:9b:97:
                    24:72:2a:d6:ee:2b:30:eb:e6:be:76:35:0b:77:8a:
                    56:e8:85:77:39:ee:76:f0:90:13:39:39:8e:c9:f2:
                    71:d3:0b:ba:5e:26:45:cc:1f:68:66:2d:76:71:ee:
                    65:ca:3d:4b:f0:54:74:d5:cd:7c:b6:fa:57:94:de:
                    b9:fc:a4:2d:62:f5:51:26:99:47:23:dd:2f:cd:03:
                    70:bb:59:d1:39:58:cc:c0:e8:4f:19:91:22:a1:88:
                    a9:0b:4c:41:a0:1e:e8:91:58:54:ba:68:e3:c5:d3:
                    32:ab:76:a6:cb:44:d8:9b:c2:2d:8a:3d:8f:41:a9:
                    e7:05:54:1f:7c:87:3a:c4:56:ee:99:f7:d1:db:34:
                    42:f7:d1:16:7f:6b:da:03:6a:83:1d:1e:b2:65:88:
                    b1:4e:7e:28:7b:08:9b:14:a5:45:ab:f9:e7:c1:86:
                    86:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:55:7E:BE:AE:7E:17:BC:15:D4:98:A4:FF:66:BC:C2:BC:11:46:A8
            X509v3 Authority Key Identifier:
                keyid:F1:6C:10:87:BB:1A:52:60:CB:32:E4:5F:BA:B0:5B:FC:61:17:7D:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/F16C1087BB1A5260CB32E45FBAB05BFC61177DDE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F16C1087BB1A5260CB32E45FBAB05BFC61177DDE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/3138362e3230392e39362e302f32302d3234203d3e20323033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.209.96.0/20

    Signature Algorithm: sha256WithRSAEncryption
         2a:95:ed:06:26:bd:5b:9f:6b:81:94:4a:7d:8d:8b:8f:60:ef:
         17:bf:42:f7:6e:79:c2:ea:74:b0:80:0c:39:bc:3d:db:36:c3:
         78:ed:97:fc:a4:99:42:ed:21:95:65:fb:b7:1d:1d:90:32:25:
         c5:34:ac:f6:e8:dd:4d:6e:fe:d7:6e:56:fd:12:95:c0:fd:c3:
         a6:85:6b:e0:8d:ee:ae:09:f3:f1:80:38:6a:d8:3e:42:61:29:
         94:ac:73:3f:60:b1:e2:5b:41:03:c0:41:d8:70:8a:99:e7:52:
         46:7d:6c:fe:6b:36:a8:10:53:af:2a:23:10:34:21:64:f0:83:
         1a:7e:92:f5:90:62:fa:c1:c7:f0:1c:27:36:79:93:08:32:7c:
         52:c7:33:b5:a4:a4:99:10:4c:92:94:9a:11:57:6e:28:35:1f:
         48:f7:55:58:bf:46:63:0b:09:cc:d1:70:1a:fe:2e:89:a7:35:
         a6:1a:2b:cc:7a:f5:41:c0:c9:2b:91:f9:fa:67:f5:44:ef:93:
         ab:bd:26:3d:fe:d1:1b:96:87:73:58:e2:d9:f2:4c:d1:c4:d9:
         97:b4:01:51:49:c2:f0:ca:93:0c:7a:66:d3:b6:6a:1e:d4:6c:
         67:8e:d4:fe:b8:c6:fa:3e:cf:fa:31:fa:29:17:d6:32:42:44:
         e7:cc:69:06
-----BEGIN CERTIFICATE-----
MIIFQTCCBCmgAwIBAgIUWqjGGY1OzV7mh4E/VZRgSsZIpTMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjE2QzEwODdCQjFBNTI2MENCMzJFNDVGQkFCMDVCRkM2
MTE3N0RERTAeFw0yMzAyMjMxNjMxMjdaFw0yNDAyMjIxNjM2MjdaMDMxMTAvBgNV
BAMTKDAwNTU3RUJFQUU3RTE3QkMxNUQ0OThBNEZGNjZCQ0MyQkMxMTQ2QTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVr+5gWWrqb9as4ECHJSkN6bk/
kQXN2QTZAgqCTrkWb/VGyGkdvRftWgOrxWuKfus/iR55IX9MpcjkzatvLkUSHSHO
URiMWQTK6VS5okv3LL+vmZnRGWablyRyKtbuKzDr5r52NQt3ilbohXc57nbwkBM5
OY7J8nHTC7peJkXMH2hmLXZx7mXKPUvwVHTVzXy2+leU3rn8pC1i9VEmmUcj3S/N
A3C7WdE5WMzA6E8ZkSKhiKkLTEGgHuiRWFS6aOPF0zKrdqbLRNibwi2KPY9BqecF
VB98hzrEVu6Z99HbNEL30RZ/a9oDaoMdHrJliLFOfih7CJsUpUWr+efBhoa/AgMB
AAGjggJLMIICRzAdBgNVHQ4EFgQUAFV+vq5+F7wV1Jik/2a8wrwRRqgwHwYDVR0j
BBgwFoAU8WwQh7saUmDLMuRfurBb/GEXfd4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMm5zZHRMdG1xcEgzUFBtYnJzTHNIWGhtN2p4a1ByVHNkSnJudmdOelJC
SmgvMC9GMTZDMTA4N0JCMUE1MjYwQ0IzMkU0NUZCQUIwNUJGQzYxMTc3RERFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0YxNkMxMDg3QkIxQTUyNjBD
QjMyRTQ1RkJBQjA1QkZDNjExNzdEREUuY2VyMIGoBggrBgEFBQcBCwSBmzCBmDCB
lQYIKwYBBQUHMAuGgYhyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJuc2R0THRtcXBIM1BQbWJyc0xzSFhobTdqeGtQclRzZEpybnZnTnpSQkpoLzAv
MzEzODM2MmUzMjMwMzkyZTM5MzYyZTMwMmYzMjMwMmQzMjM0MjAzZDNlMjAzMjMw
MzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAS60WAwDQYJKoZIhvcNAQELBQADggEBACqV7QYmvVufa4GU
Sn2Ni49g7xe/QvduecLqdLCADDm8Pds2w3jtl/ykmULtIZVl+7cdHZAyJcU0rPbo
3U1u/tduVv0SlcD9w6aFa+CN7q4J8/GAOGrYPkJhKZSscz9gseJbQQPAQdhwipnn
UkZ9bP5rNqgQU68qIxA0IWTwgxp+kvWQYvrBx/AcJzZ5kwgyfFLHM7WkpJkQTJKU
mhFXbig1H0j3VVi/RmMLCczRcBr+LomnNaYaK8x69UHAySuR+fpn9UTvk6u9Jj3+
0RuWh3NY4tnyTNHE2Ze0AVFJwvDKkwx6ZtO2ah7UbGeO1P64xvo+z/ox+ikX1jJC
ROfMaQY=
-----END CERTIFICATE-----
Generated at Fri Mar 14 00:06:04 2025 by rpki-client