Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3KXkan1P1xc7JNJjtPeLTmsGGQt8ifRtVZPYTuri3NUR/0/3138362e3233352e36362e302f32332d3233203d3e20323632373235.roa
File:                     3138362e3233352e36362e302f32332d3233203d3e20323632373235.roa (raw, json)
Hash identifier:          Pz2uUwZ5neQtOUqllTtxpvdvxASa8DRnl4yUhglzh70=
Subject key identifier:   34:7A:B5:80:F5:0C:D7:3D:79:30:6D:3B:F3:3D:BE:EB:76:79:9E:21
Certificate issuer:       /CN=20DE0E6E3D621F83173025848A78216A75E502CC
Certificate serial:       013215FA5D0479C44B6961DD9784CFB2712A01B7
Authority key identifier: 20:DE:0E:6E:3D:62:1F:83:17:30:25:84:8A:78:21:6A:75:E5:02:CC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/20DE0E6E3D621F83173025848A78216A75E502CC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3KXkan1P1xc7JNJjtPeLTmsGGQt8ifRtVZPYTuri3NUR/0/3138362e3233352e36362e302f32332d3233203d3e20323632373235.roa
Signing time:             Mon 11 Nov 2024 21:01:49 +0000
ROA not before:           Mon 11 Nov 2024 20:56:49 +0000
ROA not after:            Mon 10 Nov 2025 21:01:49 +0000
asID:                     262725
IP address blocks:        186.235.66.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:32:15:fa:5d:04:79:c4:4b:69:61:dd:97:84:cf:b2:71:2a:01:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20DE0E6E3D621F83173025848A78216A75E502CC
        Validity
            Not Before: Nov 11 20:56:49 2024 GMT
            Not After : Nov 10 21:01:49 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:db:a0:f2:2f:7d:e7:e8:9b:db:3e:9f:32:28:
                    f1:bb:ad:29:4a:fc:e4:0a:11:a1:2a:41:3c:c3:ac:
                    f9:2b:2c:a3:d0:a1:2f:5e:6a:51:c5:ba:13:d9:80:
                    da:aa:e9:fa:df:9b:c1:59:29:fa:06:fc:a0:d4:a8:
                    4a:df:26:39:c9:b6:76:72:40:90:24:ff:f5:70:b2:
                    28:01:c3:4a:b7:bf:b4:cf:5a:a1:63:32:69:65:a3:
                    6e:8a:83:75:73:46:bb:b8:da:88:05:7b:3a:5a:15:
                    cd:ce:64:f6:d6:61:8e:32:9e:fb:a6:6a:f5:87:dc:
                    3b:38:9a:9f:b1:97:bb:28:a3:af:05:8c:d1:82:b5:
                    06:ea:ab:b6:98:cc:5e:ce:43:71:eb:cd:b2:e6:5a:
                    4b:9d:2c:5c:21:b0:0b:01:33:da:1a:2f:81:16:79:
                    70:00:06:2c:70:e9:9e:72:eb:e6:b9:bf:ca:da:66:
                    54:af:8c:50:88:10:4f:fd:6c:34:55:e0:35:00:4f:
                    15:24:15:a0:d5:fc:08:cc:1f:4f:ba:23:27:ce:7c:
                    f0:19:c9:17:8f:b0:8a:8b:85:c8:30:a7:9b:d2:6a:
                    b6:54:1c:7c:06:d3:7d:26:0d:34:de:08:1f:78:70:
                    7c:9a:71:5a:84:53:c4:27:0f:f6:c5:53:2e:da:5d:
                    cb:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:7A:B5:80:F5:0C:D7:3D:79:30:6D:3B:F3:3D:BE:EB:76:79:9E:21
            X509v3 Authority Key Identifier:
                keyid:20:DE:0E:6E:3D:62:1F:83:17:30:25:84:8A:78:21:6A:75:E5:02:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3KXkan1P1xc7JNJjtPeLTmsGGQt8ifRtVZPYTuri3NUR/0/20DE0E6E3D621F83173025848A78216A75E502CC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/20DE0E6E3D621F83173025848A78216A75E502CC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3KXkan1P1xc7JNJjtPeLTmsGGQt8ifRtVZPYTuri3NUR/0/3138362e3233352e36362e302f32332d3233203d3e20323632373235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.235.66.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6c:fe:f8:34:73:95:07:5b:61:7f:41:57:01:42:12:93:73:73:
         01:c4:ab:9f:96:7f:d6:00:cb:5d:29:85:d0:c5:19:cc:63:40:
         22:0a:a6:5c:40:5e:e4:21:a0:83:b9:fd:21:8a:be:b8:6b:0e:
         27:07:7c:f4:e2:14:61:38:6e:c7:04:0d:6b:f3:56:b2:35:cf:
         fb:53:b5:4b:e1:08:6f:52:c4:bd:cd:1c:7a:c4:16:1d:13:58:
         eb:75:e5:d0:0f:9c:42:ff:d4:db:f2:41:ea:c1:63:25:79:8c:
         42:81:84:94:be:9f:41:e1:75:92:43:63:be:67:35:52:88:79:
         2b:af:d4:d1:bc:da:5c:97:a6:8d:d4:df:f9:38:8e:9f:de:8b:
         a8:2a:ee:88:80:b1:e1:e2:75:e6:1f:7f:7c:bb:c9:90:b6:ce:
         15:ef:d6:f6:4c:00:43:ac:4a:d1:65:06:8c:03:84:54:e7:85:
         af:37:b9:b9:b5:91:e0:28:5a:88:ba:11:6c:e0:4f:28:9e:29:
         20:03:c3:1d:b2:54:c6:13:da:59:14:7e:df:a2:e4:0a:4a:ac:
         65:a5:03:f3:f0:98:e4:ae:aa:fa:13:1f:96:89:68:5d:7b:28:
         47:0e:83:70:96:17:76:a0:7b:3b:6a:1e:fc:9f:bd:a0:9f:4f:
         90:31:f6:1d
-----BEGIN CERTIFICATE-----
MIIHQzCCBiugAwIBAgIUATIV+l0EecRLaWHdl4TPsnEqAbcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjBERTBFNkUzRDYyMUY4MzE3MzAyNTg0OEE3ODIxNkE3
NUU1MDJDQzAeFw0yNDExMTEyMDU2NDlaFw0yNTExMTAyMTAxNDlaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwRTZEQkEwRjIyRjdERTdFODlC
REIzRTlGMzIyOEYxQkJBRDI5NEFGQ0U0MEExMUExMkE0MTNDQzNBQ0Y5MkIyQ0Ez
RDBBMTJGNUU2QTUxQzVCQTEzRDk4MERBQUFFOUZBREY5QkMxNTkyOUZBMDZGQ0Ew
RDRBODRBREYyNjM5QzlCNjc2NzI0MDkwMjRGRkY1NzBCMjI4MDFDMzRBQjdCRkI0
Q0Y1QUExNjMzMjY5NjVBMzZFOEE4Mzc1NzM0NkJCQjhEQTg4MDU3QjNBNUExNUNE
Q0U2NEY2RDY2MThFMzI5RUZCQTY2QUY1ODdEQzNCMzg5QTlGQjE5N0JCMjhBM0FG
MDU4Q0QxODJCNTA2RUFBQkI2OThDQzVFQ0U0MzcxRUJDREIyRTY1QTRCOUQyQzVD
MjFCMDBCMDEzM0RBMUEyRjgxMTY3OTcwMDAwNjJDNzBFOTlFNzJFQkU2QjlCRkNB
REE2NjU0QUY4QzUwODgxMDRGRkQ2QzM0NTVFMDM1MDA0RjE1MjQxNUEwRDVGQzA4
Q0MxRjRGQkEyMzI3Q0U3Q0YwMTlDOTE3OEZCMDhBOEI4NUM4MzBBNzlCRDI2QUI2
NTQxQzdDMDZEMzdEMjYwRDM0REUwODFGNzg3MDdDOUE3MTVBODQ1M0M0MjcwRkY2
QzU1MzJFREE1RENCQjcwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEA5tug8i995+ib2z6fMijxu60pSvzkChGhKkE8w6z5Kyyj0KEvXmpR
xboT2YDaqun635vBWSn6Bvyg1KhK3yY5ybZ2ckCQJP/1cLIoAcNKt7+0z1qhYzJp
ZaNuioN1c0a7uNqIBXs6WhXNzmT21mGOMp77pmr1h9w7OJqfsZe7KKOvBYzRgrUG
6qu2mMxezkNx682y5lpLnSxcIbALATPaGi+BFnlwAAYscOmecuvmub/K2mZUr4xQ
iBBP/Ww0VeA1AE8VJBWg1fwIzB9PuiMnznzwGckXj7CKi4XIMKeb0mq2VBx8BtN9
Jg003ggfeHB8mnFahFPEJw/2xVMu2l3LtwIDAQABo4ICUTCCAk0wHQYDVR0OBBYE
FDR6tYD1DNc9eTBtO/M9vut2eZ4hMB8GA1UdIwQYMBaAFCDeDm49Yh+DFzAlhIp4
IWp15QLMMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzNLWGthbjFQMXhjN0pO
Smp0UGVMVG1zR0dRdDhpZlJ0VlpQWVR1cmkzTlVSLzAvMjBERTBFNkUzRDYyMUY4
MzE3MzAyNTg0OEE3ODIxNkE3NUU1MDJDQy5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS8yMERFMEU2RTNENjIxRjgzMTczMDI1ODQ4QTc4MjE2QTc1RTUw
MkNDLmNlcjCBrgYIKwYBBQUHAQsEgaEwgZ4wgZsGCCsGAQUFBzALhoGOcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby8zS1hrYW4xUDF4YzdKTkpqdFBl
TFRtc0dHUXQ4aWZSdFZaUFlUdXJpM05VUi8wLzMxMzgzNjJlMzIzMzM1MmUzNjM2
MmUzMDJmMzIzMzJkMzIzMzIwM2QzZTIwMzIzNjMyMzczMjM1LnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB
uutCMA0GCSqGSIb3DQEBCwUAA4IBAQBs/vg0c5UHW2F/QVcBQhKTc3MBxKufln/W
AMtdKYXQxRnMY0AiCqZcQF7kIaCDuf0hir64aw4nB3z04hRhOG7HBA1r81ayNc/7
U7VL4QhvUsS9zRx6xBYdE1jrdeXQD5xC/9Tb8kHqwWMleYxCgYSUvp9B4XWSQ2O+
ZzVSiHkrr9TRvNpcl6aN1N/5OI6f3ouoKu6IgLHh4nXmH398u8mQts4V79b2TABD
rErRZQaMA4RU54WvN7m5tZHgKFqIuhFs4E8onikgA8MdslTGE9pZFH7fouQKSqxl
pQPz8Jjkrqr6Ex+WiWhdeyhHDoNwlhd2oHs7ah78n72gn0+QMfYd
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:20:10 2025 by rpki-client