Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3KXkan1P1xc7JNJjtPeLTmsGGQt8ifRtVZPYTuri3NUR/0/3138362e3233352e36342e302f32302d3230203d3e20323632373235.roa
File:                     3138362e3233352e36342e302f32302d3230203d3e20323632373235.roa (raw, json)
Hash identifier:          ESiNp0WFSMOxd9rMdm6AVc4wIxxNwfXkOpWcv9/Z5Ek=
Subject key identifier:   CE:A5:BA:94:F3:9F:0D:5F:0C:C8:76:28:69:99:60:BE:9F:BF:D4:CF
Certificate issuer:       /CN=20DE0E6E3D621F83173025848A78216A75E502CC
Certificate serial:       0F185ACF8FA0111F5405B3B1FE043B138A350D66
Authority key identifier: 20:DE:0E:6E:3D:62:1F:83:17:30:25:84:8A:78:21:6A:75:E5:02:CC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/20DE0E6E3D621F83173025848A78216A75E502CC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3KXkan1P1xc7JNJjtPeLTmsGGQt8ifRtVZPYTuri3NUR/0/3138362e3233352e36342e302f32302d3230203d3e20323632373235.roa
Signing time:             Mon 11 Nov 2024 21:01:51 +0000
ROA not before:           Mon 11 Nov 2024 20:56:51 +0000
ROA not after:            Mon 10 Nov 2025 21:01:51 +0000
asID:                     262725
IP address blocks:        186.235.64.0/20 maxlen: 20
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:18:5a:cf:8f:a0:11:1f:54:05:b3:b1:fe:04:3b:13:8a:35:0d:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20DE0E6E3D621F83173025848A78216A75E502CC
        Validity
            Not Before: Nov 11 20:56:51 2024 GMT
            Not After : Nov 10 21:01:51 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:d9:30:a2:88:73:c3:ec:79:3a:71:3c:8d:3e:
                    16:90:2c:f5:68:bc:c6:51:7a:2d:d3:e0:d5:a3:b1:
                    75:9f:e9:3f:a0:74:6d:9a:07:b8:ae:c6:40:69:73:
                    41:b6:0b:eb:0c:a3:d7:71:cf:0c:67:c5:8d:8f:63:
                    fa:9c:a9:a9:04:cd:c1:98:95:20:dc:34:e7:91:54:
                    5f:ec:da:33:ce:27:58:f6:50:36:d0:fb:3c:fe:a4:
                    7f:20:c0:73:b8:85:06:04:12:81:75:e7:59:2e:92:
                    5c:9f:68:d2:81:f5:25:d9:ca:7b:da:71:ff:ca:2c:
                    b0:3b:85:c9:c6:8d:0c:3b:7e:c9:61:4f:f2:5a:05:
                    d4:b9:9d:26:72:b1:4f:31:65:2e:53:85:9c:3c:b4:
                    00:a7:09:f4:c4:f7:c4:09:31:13:54:b2:94:2a:92:
                    5d:b6:af:57:09:90:e5:6e:aa:2c:ac:fa:4d:d2:c6:
                    8f:af:71:e6:77:0e:3c:e8:20:cf:7b:85:8c:dc:02:
                    1c:74:d8:55:01:22:57:cc:82:cb:45:35:25:2c:6a:
                    99:39:cf:ef:77:39:91:cd:87:d4:f9:d9:6b:ff:ce:
                    30:2c:0f:fe:c2:d4:cf:d2:ad:db:f8:9d:ec:86:65:
                    8c:dd:38:29:77:2d:97:bd:14:ca:c1:62:c9:ad:bd:
                    65:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:A5:BA:94:F3:9F:0D:5F:0C:C8:76:28:69:99:60:BE:9F:BF:D4:CF
            X509v3 Authority Key Identifier:
                keyid:20:DE:0E:6E:3D:62:1F:83:17:30:25:84:8A:78:21:6A:75:E5:02:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3KXkan1P1xc7JNJjtPeLTmsGGQt8ifRtVZPYTuri3NUR/0/20DE0E6E3D621F83173025848A78216A75E502CC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/20DE0E6E3D621F83173025848A78216A75E502CC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3KXkan1P1xc7JNJjtPeLTmsGGQt8ifRtVZPYTuri3NUR/0/3138362e3233352e36342e302f32302d3230203d3e20323632373235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.235.64.0/20

    Signature Algorithm: sha256WithRSAEncryption
         7f:11:ef:c0:30:38:f6:69:93:c7:1c:c6:d3:0a:8d:80:d9:b8:
         17:0c:37:16:a3:ae:97:0e:08:91:a7:18:eb:0f:d8:c5:3b:7f:
         af:f2:8b:41:23:21:55:52:44:66:3f:5e:8a:c6:60:b0:0c:22:
         fe:16:95:13:2a:09:73:9a:60:c8:b5:99:95:23:58:f7:e3:69:
         17:e8:6b:82:59:94:7b:78:33:09:df:5b:76:98:d8:5b:63:dd:
         03:ee:86:c3:fe:c7:2a:54:21:c5:dc:4b:45:86:1e:95:f1:19:
         47:83:7c:a0:28:52:3b:97:ae:1d:43:cd:87:a8:07:1e:8b:5c:
         dc:59:f3:e5:f4:8e:ab:0f:be:6b:19:32:14:bd:ad:3b:94:d9:
         d8:7c:fd:1e:12:73:16:24:b8:4e:29:ac:e0:88:6d:5c:a3:ba:
         35:09:49:78:6e:1b:de:2a:a7:e8:95:cd:4f:fd:ee:62:8e:de:
         84:5f:7f:b8:13:79:e2:c2:e5:4f:19:f9:9d:87:3c:bf:37:29:
         2f:6a:a3:37:ec:b6:f5:3e:83:52:08:ec:ae:e8:bd:37:41:4b:
         ad:2e:f8:7c:aa:5c:44:73:96:4e:2b:59:54:a4:45:48:0f:40:
         14:41:b9:41:66:7d:c4:e1:18:74:f1:ac:68:7d:8b:ed:1d:ae:
         59:34:1b:c0
-----BEGIN CERTIFICATE-----
MIIHQzCCBiugAwIBAgIUDxhaz4+gER9UBbOx/gQ7E4o1DWYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjBERTBFNkUzRDYyMUY4MzE3MzAyNTg0OEE3ODIxNkE3
NUU1MDJDQzAeFw0yNDExMTEyMDU2NTFaFw0yNTExMTAyMTAxNTFaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQTNEOTMwQTI4ODczQzNFQzc5
M0E3MTNDOEQzRTE2OTAyQ0Y1NjhCQ0M2NTE3QTJERDNFMEQ1QTNCMTc1OUZFOTNG
QTA3NDZEOUEwN0I4QUVDNjQwNjk3MzQxQjYwQkVCMENBM0Q3NzFDRjBDNjdDNThE
OEY2M0ZBOUNBOUE5MDRDREMxOTg5NTIwREMzNEU3OTE1NDVGRUNEQTMzQ0UyNzU4
RjY1MDM2RDBGQjNDRkVBNDdGMjBDMDczQjg4NTA2MDQxMjgxNzVFNzU5MkU5MjVD
OUY2OEQyODFGNTI1RDlDQTdCREE3MUZGQ0EyQ0IwM0I4NUM5QzY4RDBDM0I3RUM5
NjE0RkYyNUEwNUQ0Qjk5RDI2NzJCMTRGMzE2NTJFNTM4NTlDM0NCNDAwQTcwOUY0
QzRGN0M0MDkzMTEzNTRCMjk0MkE5MjVEQjZBRjU3MDk5MEU1NkVBQTJDQUNGQTRE
RDJDNjhGQUY3MUU2NzcwRTNDRTgyMENGN0I4NThDREMwMjFDNzREODU1MDEyMjU3
Q0M4MkNCNDUzNTI1MkM2QTk5MzlDRkVGNzczOTkxQ0Q4N0Q0RjlEOTZCRkZDRTMw
MkMwRkZFQzJENENGRDJBRERCRjg5REVDODY2NThDREQzODI5NzcyRDk3QkQxNENB
QzE2MkM5QURCRDY1QTEwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAo9kwoohzw+x5OnE8jT4WkCz1aLzGUXot0+DVo7F1n+k/oHRtmge4
rsZAaXNBtgvrDKPXcc8MZ8WNj2P6nKmpBM3BmJUg3DTnkVRf7NozzidY9lA20Ps8
/qR/IMBzuIUGBBKBdedZLpJcn2jSgfUl2cp72nH/yiywO4XJxo0MO37JYU/yWgXU
uZ0mcrFPMWUuU4WcPLQApwn0xPfECTETVLKUKpJdtq9XCZDlbqosrPpN0saPr3Hm
dw486CDPe4WM3AIcdNhVASJXzILLRTUlLGqZOc/vdzmRzYfU+dlr/84wLA/+wtTP
0q3b+J3shmWM3Tgpdy2XvRTKwWLJrb1loQIDAQABo4ICUTCCAk0wHQYDVR0OBBYE
FM6lupTznw1fDMh2KGmZYL6fv9TPMB8GA1UdIwQYMBaAFCDeDm49Yh+DFzAlhIp4
IWp15QLMMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzNLWGthbjFQMXhjN0pO
Smp0UGVMVG1zR0dRdDhpZlJ0VlpQWVR1cmkzTlVSLzAvMjBERTBFNkUzRDYyMUY4
MzE3MzAyNTg0OEE3ODIxNkE3NUU1MDJDQy5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS8yMERFMEU2RTNENjIxRjgzMTczMDI1ODQ4QTc4MjE2QTc1RTUw
MkNDLmNlcjCBrgYIKwYBBQUHAQsEgaEwgZ4wgZsGCCsGAQUFBzALhoGOcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby8zS1hrYW4xUDF4YzdKTkpqdFBl
TFRtc0dHUXQ4aWZSdFZaUFlUdXJpM05VUi8wLzMxMzgzNjJlMzIzMzM1MmUzNjM0
MmUzMDJmMzIzMDJkMzIzMDIwM2QzZTIwMzIzNjMyMzczMjM1LnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE
uutAMA0GCSqGSIb3DQEBCwUAA4IBAQB/Ee/AMDj2aZPHHMbTCo2A2bgXDDcWo66X
DgiRpxjrD9jFO3+v8otBIyFVUkRmP16KxmCwDCL+FpUTKglzmmDItZmVI1j342kX
6GuCWZR7eDMJ31t2mNhbY90D7obD/scqVCHF3EtFhh6V8RlHg3ygKFI7l64dQ82H
qAcei1zcWfPl9I6rD75rGTIUva07lNnYfP0eEnMWJLhOKazgiG1co7o1CUl4bhve
Kqfolc1P/e5ijt6EX3+4E3niwuVPGfmdhzy/NykvaqM37Lb1PoNSCOyu6L03QUut
Lvh8qlxEc5ZOK1lUpEVID0AUQblBZn3E4Rh08axofYvtHa5ZNBvA
-----END CERTIFICATE-----
Generated at Fri Mar 14 05:17:42 2025 by rpki-client