Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3KXkan1P1xc7JNJjtPeLTmsGGQt8ifRtVZPYTuri3NUR/0/3138362e3233352e37372e302f32342d3234203d3e20323632373235.roa
File:                     3138362e3233352e37372e302f32342d3234203d3e20323632373235.roa (raw, json)
Hash identifier:          rr2n3/Jxnw3CZ8VGw2TQ0ZSuKmCOTFTNGN2EA7HZSGk=
Subject key identifier:   79:3D:9B:8A:B9:00:B1:56:6C:8F:8E:7F:DB:52:CF:CD:56:10:F4:5C
Certificate issuer:       /CN=9305E92687D8CE4B1D3846CC7DDA49EC54E3CFBE
Certificate serial:       1216E4662C95B6B1176B098FEAB0B2051672C5C6
Authority key identifier: 93:05:E9:26:87:D8:CE:4B:1D:38:46:CC:7D:DA:49:EC:54:E3:CF:BE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9305E92687D8CE4B1D3846CC7DDA49EC54E3CFBE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3KXkan1P1xc7JNJjtPeLTmsGGQt8ifRtVZPYTuri3NUR/0/3138362e3233352e37372e302f32342d3234203d3e20323632373235.roa
Signing time:             Tue 10 Sep 2024 18:13:14 +0000
ROA not before:           Tue 10 Sep 2024 18:08:14 +0000
ROA not after:            Tue 09 Sep 2025 18:13:14 +0000
asID:                     262725
IP address blocks:        186.235.77.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:16:e4:66:2c:95:b6:b1:17:6b:09:8f:ea:b0:b2:05:16:72:c5:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9305E92687D8CE4B1D3846CC7DDA49EC54E3CFBE
        Validity
            Not Before: Sep 10 18:08:14 2024 GMT
            Not After : Sep  9 18:13:14 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:86:03:82:80:97:4d:45:07:3c:ef:8e:f7:59:
                    10:e6:36:f2:9c:84:21:4c:63:7c:c9:04:3a:33:f7:
                    2d:0c:57:cd:48:ea:c9:d2:57:af:74:37:ae:67:9f:
                    d6:79:e0:0f:9e:e8:90:fc:ad:4f:89:2f:47:3f:1e:
                    e5:2d:ba:54:59:0d:f0:68:25:18:1a:d7:8f:ff:de:
                    93:d1:b5:09:a3:4a:4f:a1:f1:25:9b:0d:11:de:73:
                    a0:fa:0e:4f:23:23:20:ee:18:68:aa:32:4a:ea:3e:
                    4d:29:e8:eb:a4:30:50:6a:7e:8a:33:3f:b5:96:f8:
                    93:33:42:d7:e7:40:5c:84:c2:6b:75:b4:47:e6:a2:
                    34:9b:b4:8a:03:22:96:bb:90:a0:77:e9:d5:0c:64:
                    0d:db:dc:1d:5e:7c:8a:4d:ef:af:8e:73:e8:c9:2f:
                    09:4b:06:6f:41:eb:5a:28:a5:8e:41:08:7f:3b:9b:
                    eb:ba:90:9e:54:fd:f6:65:69:f5:f8:4b:da:3a:62:
                    25:43:dd:c7:45:3c:79:5f:e7:6e:a3:2f:91:87:a3:
                    1c:79:f5:e9:c0:5f:5b:28:f9:34:86:ea:fa:a2:1a:
                    31:04:17:8b:04:d6:6b:f3:e4:6d:93:f8:3d:1d:76:
                    f9:69:02:47:ad:3f:a6:8a:58:9a:3c:b6:69:1e:a2:
                    51:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:3D:9B:8A:B9:00:B1:56:6C:8F:8E:7F:DB:52:CF:CD:56:10:F4:5C
            X509v3 Authority Key Identifier:
                keyid:93:05:E9:26:87:D8:CE:4B:1D:38:46:CC:7D:DA:49:EC:54:E3:CF:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3KXkan1P1xc7JNJjtPeLTmsGGQt8ifRtVZPYTuri3NUR/0/9305E92687D8CE4B1D3846CC7DDA49EC54E3CFBE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9305E92687D8CE4B1D3846CC7DDA49EC54E3CFBE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3KXkan1P1xc7JNJjtPeLTmsGGQt8ifRtVZPYTuri3NUR/0/3138362e3233352e37372e302f32342d3234203d3e20323632373235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.235.77.0/24

    Signature Algorithm: sha256WithRSAEncryption
         41:24:80:45:14:28:b0:6a:38:43:05:a8:80:c4:49:ab:0d:a6:
         5a:17:6e:05:b2:6d:01:8a:08:57:f4:8d:a6:75:c1:95:aa:40:
         87:59:68:35:35:45:3e:e4:35:42:6c:eb:85:db:0f:23:22:1a:
         bf:a5:d7:b1:af:90:5c:47:94:a5:7d:a8:a7:59:d0:ea:dc:59:
         50:72:1f:86:6a:cc:c7:8b:a3:36:b3:28:63:36:ba:ad:ea:c6:
         b4:57:13:a9:4a:14:0f:82:fc:34:1b:56:6c:8e:ab:17:17:1c:
         fa:c5:4a:17:19:a9:15:fe:79:e6:94:60:56:77:b5:ca:cb:5c:
         a3:9b:e5:bb:de:5f:39:26:8b:60:ec:d8:2d:e0:18:5b:eb:f4:
         9f:48:d9:9a:8a:5a:d8:31:ff:79:b0:0b:14:87:4e:2e:aa:d8:
         d4:19:c9:d3:c6:f1:ee:61:97:7b:aa:28:bd:74:59:75:14:ed:
         ad:5e:9b:bf:38:8b:2d:5f:cc:c7:8b:01:86:71:e0:8d:a0:ba:
         c8:c5:de:69:ac:bd:67:b6:23:53:8b:98:ea:c3:2c:e2:cc:62:
         d1:2b:a8:7c:45:f0:ab:f1:d7:6f:78:7e:00:a4:0f:e5:eb:d9:
         3b:9c:dd:38:03:f2:75:66:01:de:24:19:d1:d2:6d:e0:08:14:
         e0:ad:c7:c1
-----BEGIN CERTIFICATE-----
MIIHQzCCBiugAwIBAgIUEhbkZiyVtrEXawmP6rCyBRZyxcYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTMwNUU5MjY4N0Q4Q0U0QjFEMzg0NkNDN0REQTQ5RUM1
NEUzQ0ZCRTAeFw0yNDA5MTAxODA4MTRaFw0yNTA5MDkxODEzMTRaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQjk4NjAzODI4MDk3NEQ0NTA3
M0NFRjhFRjc1OTEwRTYzNkYyOUM4NDIxNEM2MzdDQzkwNDNBMzNGNzJEMEM1N0NE
NDhFQUM5RDI1N0FGNzQzN0FFNjc5RkQ2NzlFMDBGOUVFODkwRkNBRDRGODkyRjQ3
M0YxRUU1MkRCQTU0NTkwREYwNjgyNTE4MUFENzhGRkZERTkzRDFCNTA5QTM0QTRG
QTFGMTI1OUIwRDExREU3M0EwRkEwRTRGMjMyMzIwRUUxODY4QUEzMjRBRUEzRTRE
MjlFOEVCQTQzMDUwNkE3RThBMzMzRkI1OTZGODkzMzM0MkQ3RTc0MDVDODRDMjZC
NzVCNDQ3RTZBMjM0OUJCNDhBMDMyMjk2QkI5MEEwNzdFOUQ1MEM2NDBEREJEQzFE
NUU3QzhBNERFRkFGOEU3M0U4QzkyRjA5NEIwNjZGNDFFQjVBMjhBNThFNDEwODdG
M0I5QkVCQkE5MDlFNTRGREY2NjU2OUY1Rjg0QkRBM0E2MjI1NDNEREM3NDUzQzc5
NUZFNzZFQTMyRjkxODdBMzFDNzlGNUU5QzA1RjVCMjhGOTM0ODZFQUZBQTIxQTMx
MDQxNzhCMDRENjZCRjNFNDZEOTNGODNEMUQ3NkY5NjkwMjQ3QUQzRkE2OEE1ODlB
M0NCNjY5MUVBMjUxMUQwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAuYYDgoCXTUUHPO+O91kQ5jbynIQhTGN8yQQ6M/ctDFfNSOrJ0lev
dDeuZ5/WeeAPnuiQ/K1PiS9HPx7lLbpUWQ3waCUYGteP/96T0bUJo0pPofElmw0R
3nOg+g5PIyMg7hhoqjJK6j5NKejrpDBQan6KMz+1lviTM0LX50BchMJrdbRH5qI0
m7SKAyKWu5Cgd+nVDGQN29wdXnyKTe+vjnPoyS8JSwZvQetaKKWOQQh/O5vrupCe
VP32ZWn1+EvaOmIlQ93HRTx5X+duoy+Rh6McefXpwF9bKPk0hur6ohoxBBeLBNZr
8+Rtk/g9HXb5aQJHrT+miliaPLZpHqJRHQIDAQABo4ICUTCCAk0wHQYDVR0OBBYE
FHk9m4q5ALFWbI+Of9tSz81WEPRcMB8GA1UdIwQYMBaAFJMF6SaH2M5LHThGzH3a
SexU48++MA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzNLWGthbjFQMXhjN0pO
Smp0UGVMVG1zR0dRdDhpZlJ0VlpQWVR1cmkzTlVSLzAvOTMwNUU5MjY4N0Q4Q0U0
QjFEMzg0NkNDN0REQTQ5RUM1NEUzQ0ZCRS5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS85MzA1RTkyNjg3RDhDRTRCMUQzODQ2Q0M3RERBNDlFQzU0RTND
RkJFLmNlcjCBrgYIKwYBBQUHAQsEgaEwgZ4wgZsGCCsGAQUFBzALhoGOcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby8zS1hrYW4xUDF4YzdKTkpqdFBl
TFRtc0dHUXQ4aWZSdFZaUFlUdXJpM05VUi8wLzMxMzgzNjJlMzIzMzM1MmUzNzM3
MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjMyMzczMjM1LnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA
uutNMA0GCSqGSIb3DQEBCwUAA4IBAQBBJIBFFCiwajhDBaiAxEmrDaZaF24Fsm0B
ighX9I2mdcGVqkCHWWg1NUU+5DVCbOuF2w8jIhq/pdexr5BcR5SlfainWdDq3FlQ
ch+GaszHi6M2syhjNrqt6sa0VxOpShQPgvw0G1ZsjqsXFxz6xUoXGakV/nnmlGBW
d7XKy1yjm+W73l85Jotg7Ngt4Bhb6/SfSNmailrYMf95sAsUh04uqtjUGcnTxvHu
YZd7qii9dFl1FO2tXpu/OIstX8zHiwGGceCNoLrIxd5prL1ntiNTi5jqwyzizGLR
K6h8RfCr8ddveH4ApA/l69k7nN04A/J1ZgHeJBnR0m3gCBTgrcfB
-----END CERTIFICATE-----
Generated at Tue Apr 8 12:37:10 2025 by rpki-client