Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3KXkan1P1xc7JNJjtPeLTmsGGQt8ifRtVZPYTuri3NUR/0/3138362e3139322e31342e302f32342d3234203d3e20323632373235.roa
File:                     3138362e3139322e31342e302f32342d3234203d3e20323632373235.roa (raw, json)
Hash identifier:          06oC+f2LDzQXLm+LVx22vnaFvKkQ+ervmaoTl90xHxQ=
Subject key identifier:   E2:22:32:C2:CE:CB:D4:4D:83:C1:D2:7D:05:6E:24:7F:E5:C9:BD:1B
Certificate issuer:       /CN=9305E92687D8CE4B1D3846CC7DDA49EC54E3CFBE
Certificate serial:       10EAA648108CFF0D4816CB1970C3F6ED835DE56A
Authority key identifier: 93:05:E9:26:87:D8:CE:4B:1D:38:46:CC:7D:DA:49:EC:54:E3:CF:BE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9305E92687D8CE4B1D3846CC7DDA49EC54E3CFBE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3KXkan1P1xc7JNJjtPeLTmsGGQt8ifRtVZPYTuri3NUR/0/3138362e3139322e31342e302f32342d3234203d3e20323632373235.roa
Signing time:             Tue 10 Sep 2024 18:13:16 +0000
ROA not before:           Tue 10 Sep 2024 18:08:16 +0000
ROA not after:            Tue 09 Sep 2025 18:13:16 +0000
asID:                     262725
IP address blocks:        186.192.14.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:ea:a6:48:10:8c:ff:0d:48:16:cb:19:70:c3:f6:ed:83:5d:e5:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9305E92687D8CE4B1D3846CC7DDA49EC54E3CFBE
        Validity
            Not Before: Sep 10 18:08:16 2024 GMT
            Not After : Sep  9 18:13:16 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:7c:14:b4:9b:3c:e7:c9:26:85:9b:47:99:d8:
                    fb:1b:25:de:29:3c:18:1a:b0:33:bd:28:5a:5b:07:
                    ce:95:57:35:b8:25:6f:a9:6a:73:55:01:05:18:d9:
                    d3:bf:85:73:e7:ed:47:0a:df:b1:a2:30:70:92:96:
                    dc:f3:f6:83:62:c5:cd:22:e3:e5:7c:49:2a:33:97:
                    ee:d1:e7:c1:23:72:a7:8e:09:79:78:d5:9b:00:b0:
                    9f:51:24:72:a0:e4:b2:3a:b1:fc:7e:62:75:28:ac:
                    48:30:18:79:4f:8d:5e:1c:e3:f1:42:82:dd:0b:5f:
                    56:26:e6:16:80:c8:6f:0a:0a:4c:c9:63:57:93:39:
                    1a:87:4e:14:ea:5e:f8:8a:9e:2f:93:8c:4e:2e:b7:
                    fb:3d:6e:49:c4:71:fe:13:ce:69:da:35:11:bb:6e:
                    c7:8a:d1:e6:92:c9:2b:f1:01:ef:c2:76:e3:e6:31:
                    39:1c:72:48:7b:32:66:ec:4e:05:24:d5:f4:96:b1:
                    de:51:c7:04:28:b6:7d:93:62:0e:51:d3:bc:82:d5:
                    5c:10:d3:18:08:6b:77:7a:47:73:12:1f:f4:44:dd:
                    8c:fe:07:86:5a:e9:07:64:e1:a5:26:6e:dd:ed:fb:
                    98:6c:c3:a0:41:3c:22:88:70:c5:82:ee:b9:eb:9a:
                    11:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:22:32:C2:CE:CB:D4:4D:83:C1:D2:7D:05:6E:24:7F:E5:C9:BD:1B
            X509v3 Authority Key Identifier:
                keyid:93:05:E9:26:87:D8:CE:4B:1D:38:46:CC:7D:DA:49:EC:54:E3:CF:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3KXkan1P1xc7JNJjtPeLTmsGGQt8ifRtVZPYTuri3NUR/0/9305E92687D8CE4B1D3846CC7DDA49EC54E3CFBE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9305E92687D8CE4B1D3846CC7DDA49EC54E3CFBE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3KXkan1P1xc7JNJjtPeLTmsGGQt8ifRtVZPYTuri3NUR/0/3138362e3139322e31342e302f32342d3234203d3e20323632373235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.192.14.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ad:6d:35:17:c3:7e:56:55:1c:b7:a0:c5:27:ea:d0:2b:d2:c2:
         79:d5:2f:15:a9:e7:3c:8e:56:d1:a0:83:c5:ba:df:eb:10:c5:
         4e:43:f3:9d:be:ec:74:be:a7:9f:20:c3:a0:05:cd:f8:ee:9e:
         74:54:92:6f:0b:b7:7b:5b:d3:1f:fe:ff:b0:bc:c3:d7:63:5d:
         d1:7e:a5:a0:86:c4:81:07:2c:32:11:f1:3a:84:06:09:15:4b:
         05:3a:79:72:7d:01:2f:ef:59:77:36:b0:bf:33:56:bc:4a:8e:
         52:42:6e:89:79:5b:ff:f6:34:42:b5:24:14:c1:a5:e6:d2:89:
         80:32:39:8b:fd:72:6d:3b:65:aa:1d:ed:b0:4e:1e:d1:df:44:
         cc:9b:af:6b:2c:e6:31:4b:74:8b:7c:28:27:91:cd:23:2f:c1:
         5f:b8:d2:e7:ae:7c:7e:89:67:d0:05:57:6d:7e:78:a0:5a:cc:
         22:f1:07:29:27:55:91:2f:2a:dc:df:fd:bd:f9:e3:87:8f:1b:
         0b:76:d9:e8:98:7b:fa:29:82:5e:76:35:17:74:34:38:e3:df:
         8f:72:ce:0b:a0:b1:08:2f:93:5b:46:f2:37:94:af:07:05:18:
         1b:d9:3d:35:6a:b4:4d:c0:23:e4:1a:60:b5:fc:27:22:40:18:
         ff:fe:35:60
-----BEGIN CERTIFICATE-----
MIIHQzCCBiugAwIBAgIUEOqmSBCM/w1IFssZcMP27YNd5WowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTMwNUU5MjY4N0Q4Q0U0QjFEMzg0NkNDN0REQTQ5RUM1
NEUzQ0ZCRTAeFw0yNDA5MTAxODA4MTZaFw0yNTA5MDkxODEzMTZaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQjI3QzE0QjQ5QjNDRTdDOTI2
ODU5QjQ3OTlEOEZCMUIyNURFMjkzQzE4MUFCMDMzQkQyODVBNUIwN0NFOTU1NzM1
QjgyNTZGQTk2QTczNTUwMTA1MThEOUQzQkY4NTczRTdFRDQ3MEFERkIxQTIzMDcw
OTI5NkRDRjNGNjgzNjJDNUNEMjJFM0U1N0M0OTJBMzM5N0VFRDFFN0MxMjM3MkE3
OEUwOTc5NzhENTlCMDBCMDlGNTEyNDcyQTBFNEIyM0FCMUZDN0U2Mjc1MjhBQzQ4
MzAxODc5NEY4RDVFMUNFM0YxNDI4MkREMEI1RjU2MjZFNjE2ODBDODZGMEEwQTRD
Qzk2MzU3OTMzOTFBODc0RTE0RUE1RUY4OEE5RTJGOTM4QzRFMkVCN0ZCM0Q2RTQ5
QzQ3MUZFMTNDRTY5REEzNTExQkI2RUM3OEFEMUU2OTJDOTJCRjEwMUVGQzI3NkUz
RTYzMTM5MUM3MjQ4N0IzMjY2RUM0RTA1MjRENUY0OTZCMURFNTFDNzA0MjhCNjdE
OTM2MjBFNTFEM0JDODJENTVDMTBEMzE4MDg2Qjc3N0E0NzczMTIxRkY0NDRERDhD
RkUwNzg2NUFFOTA3NjRFMUE1MjY2RURERURGQjk4NkNDM0EwNDEzQzIyODg3MEM1
ODJFRUI5RUI5QTExQjMwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAsnwUtJs858kmhZtHmdj7GyXeKTwYGrAzvShaWwfOlVc1uCVvqWpz
VQEFGNnTv4Vz5+1HCt+xojBwkpbc8/aDYsXNIuPlfEkqM5fu0efBI3Knjgl5eNWb
ALCfUSRyoOSyOrH8fmJ1KKxIMBh5T41eHOPxQoLdC19WJuYWgMhvCgpMyWNXkzka
h04U6l74ip4vk4xOLrf7PW5JxHH+E85p2jURu27HitHmkskr8QHvwnbj5jE5HHJI
ezJm7E4FJNX0lrHeUccEKLZ9k2IOUdO8gtVcENMYCGt3ekdzEh/0RN2M/geGWukH
ZOGlJm7d7fuYbMOgQTwiiHDFgu6565oRswIDAQABo4ICUTCCAk0wHQYDVR0OBBYE
FOIiMsLOy9RNg8HSfQVuJH/lyb0bMB8GA1UdIwQYMBaAFJMF6SaH2M5LHThGzH3a
SexU48++MA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzNLWGthbjFQMXhjN0pO
Smp0UGVMVG1zR0dRdDhpZlJ0VlpQWVR1cmkzTlVSLzAvOTMwNUU5MjY4N0Q4Q0U0
QjFEMzg0NkNDN0REQTQ5RUM1NEUzQ0ZCRS5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS85MzA1RTkyNjg3RDhDRTRCMUQzODQ2Q0M3RERBNDlFQzU0RTND
RkJFLmNlcjCBrgYIKwYBBQUHAQsEgaEwgZ4wgZsGCCsGAQUFBzALhoGOcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby8zS1hrYW4xUDF4YzdKTkpqdFBl
TFRtc0dHUXQ4aWZSdFZaUFlUdXJpM05VUi8wLzMxMzgzNjJlMzEzOTMyMmUzMTM0
MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjMyMzczMjM1LnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA
usAOMA0GCSqGSIb3DQEBCwUAA4IBAQCtbTUXw35WVRy3oMUn6tAr0sJ51S8Vqec8
jlbRoIPFut/rEMVOQ/Odvux0vqefIMOgBc347p50VJJvC7d7W9Mf/v+wvMPXY13R
fqWghsSBBywyEfE6hAYJFUsFOnlyfQEv71l3NrC/M1a8So5SQm6JeVv/9jRCtSQU
waXm0omAMjmL/XJtO2WqHe2wTh7R30TMm69rLOYxS3SLfCgnkc0jL8FfuNLnrnx+
iWfQBVdtfnigWswi8QcpJ1WRLyrc3/29+eOHjxsLdtnomHv6KYJedjUXdDQ449+P
cs4LoLEIL5NbRvI3lK8HBRgb2T01arRNwCPkGmC1/CciQBj//jVg
-----END CERTIFICATE-----
Generated at Tue Apr 8 14:52:11 2025 by rpki-client