Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3138362e3233332e37322e302f32312d3231203d3e20323632393932.roa
File:                     3138362e3233332e37322e302f32312d3231203d3e20323632393932.roa (raw, json)
Hash identifier:          HNWAxtZ3s3ewfhTF9eXX8zX7TT9KytbKVMoFcuYf0E4=
Subject key identifier:   C8:E8:6B:9E:99:2C:AF:07:4D:30:3D:21:9C:29:A3:18:E5:DE:F9:28
Certificate issuer:       /CN=A8F99C2EE0BA1D37CC7ABE7C508984BAA0B08D5C
Certificate serial:       7949556F39EE3A708BB0F4A29931379ED850D738
Authority key identifier: A8:F9:9C:2E:E0:BA:1D:37:CC:7A:BE:7C:50:89:84:BA:A0:B0:8D:5C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A8F99C2EE0BA1D37CC7ABE7C508984BAA0B08D5C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3138362e3233332e37322e302f32312d3231203d3e20323632393932.roa
Signing time:             Thu 07 Nov 2024 20:40:12 +0000
ROA not before:           Thu 07 Nov 2024 20:35:12 +0000
ROA not after:            Thu 06 Nov 2025 20:40:12 +0000
asID:                     262992
IP address blocks:        186.233.72.0/21 maxlen: 21
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:49:55:6f:39:ee:3a:70:8b:b0:f4:a2:99:31:37:9e:d8:50:d7:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A8F99C2EE0BA1D37CC7ABE7C508984BAA0B08D5C
        Validity
            Not Before: Nov  7 20:35:12 2024 GMT
            Not After : Nov  6 20:40:12 2025 GMT
        Subject: CN=C8E86B9E992CAF074D303D219C29A318E5DEF928
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:6e:50:fe:63:00:2d:80:a7:44:5e:f3:0e:ef:
                    b0:6b:45:e5:93:fc:2d:0e:ce:3c:bd:24:ed:b2:42:
                    ec:e3:bf:bd:1b:18:3b:66:0e:9e:6e:b1:08:98:6b:
                    39:62:c1:f1:ec:ff:2d:20:04:4b:2b:c7:76:5f:de:
                    bd:ba:b0:04:22:7e:62:a5:d2:1f:b0:c9:c3:43:70:
                    ec:00:cc:84:0d:83:ed:aa:34:cd:35:4d:66:d5:67:
                    80:8a:c8:49:72:6c:84:cb:91:ba:98:40:47:6a:a0:
                    22:6a:a8:cf:65:8d:35:d8:e3:81:02:71:07:9d:5a:
                    02:17:9b:ab:28:79:67:1c:07:1f:0b:39:c0:c3:b7:
                    89:d0:42:2f:ef:87:f2:53:da:97:7f:5a:49:ad:cf:
                    d0:17:67:e6:05:f3:b5:e6:bd:90:b8:a4:90:e8:fb:
                    50:66:59:aa:b5:56:e0:9c:24:b6:ab:15:e5:89:5a:
                    0f:df:14:fb:19:61:b2:8c:ec:27:2d:e2:37:3b:3e:
                    65:34:3b:10:30:5e:57:4d:ac:52:b1:20:d7:f4:3f:
                    0d:20:78:90:61:ef:14:f7:49:f3:09:ac:a0:9a:1e:
                    86:78:7c:ac:96:bb:e5:1d:cd:13:7c:88:8f:8e:92:
                    cc:db:ae:03:51:f2:06:dd:fd:1e:1d:de:c5:9e:3a:
                    60:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:E8:6B:9E:99:2C:AF:07:4D:30:3D:21:9C:29:A3:18:E5:DE:F9:28
            X509v3 Authority Key Identifier:
                keyid:A8:F9:9C:2E:E0:BA:1D:37:CC:7A:BE:7C:50:89:84:BA:A0:B0:8D:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/A8F99C2EE0BA1D37CC7ABE7C508984BAA0B08D5C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A8F99C2EE0BA1D37CC7ABE7C508984BAA0B08D5C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3138362e3233332e37322e302f32312d3231203d3e20323632393932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.233.72.0/21

    Signature Algorithm: sha256WithRSAEncryption
         a3:20:2b:c6:a7:77:1e:47:fe:c8:0d:93:6b:da:66:5d:e1:1d:
         68:c1:05:77:25:21:e8:ec:29:7c:1a:5a:c7:1f:48:9e:c1:73:
         69:d5:f8:65:5a:88:2b:10:4f:5f:a7:8c:5c:86:75:f4:84:81:
         94:c6:67:2e:7e:7e:32:42:3c:19:12:f5:58:1d:92:49:71:81:
         72:04:53:db:18:41:7b:e6:f2:cc:17:92:37:81:57:b5:a8:36:
         b6:19:b9:98:9f:8e:8b:7f:d5:62:df:fe:44:0c:32:31:ef:1c:
         6f:3b:f6:1c:b2:01:32:9e:75:ea:3c:5b:1d:61:d4:d1:51:2e:
         fd:89:3e:fa:3c:3f:0b:b7:ee:08:c7:fb:a7:fb:2b:3a:ef:77:
         76:8e:a0:f7:43:d8:3e:28:b6:36:ee:3a:2c:a4:16:92:b5:d3:
         67:8b:e7:81:71:84:e2:ad:bd:39:43:30:de:82:84:86:5a:39:
         19:af:d2:69:90:5a:e5:42:8e:71:71:97:b6:a0:bf:49:cb:44:
         f2:25:50:0b:ef:73:7a:38:11:4e:ec:f5:1c:af:61:69:c7:12:
         ea:b4:93:54:29:f4:c0:df:4a:72:be:cc:05:1b:50:4c:b3:80:
         35:8e:b2:6d:6f:1b:56:1c:16:2f:7d:18:9c:85:81:24:87:a5:
         01:3b:f9:a1
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUeUlVbznuOnCLsPSimTE3nthQ1zgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQThGOTlDMkVFMEJBMUQzN0NDN0FCRTdDNTA4OTg0QkFB
MEIwOEQ1QzAeFw0yNDExMDcyMDM1MTJaFw0yNTExMDYyMDQwMTJaMDMxMTAvBgNV
BAMTKEM4RTg2QjlFOTkyQ0FGMDc0RDMwM0QyMTlDMjlBMzE4RTVERUY5MjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzblD+YwAtgKdEXvMO77BrReWT
/C0Ozjy9JO2yQuzjv70bGDtmDp5usQiYazliwfHs/y0gBEsrx3Zf3r26sAQifmKl
0h+wycNDcOwAzIQNg+2qNM01TWbVZ4CKyElybITLkbqYQEdqoCJqqM9ljTXY44EC
cQedWgIXm6soeWccBx8LOcDDt4nQQi/vh/JT2pd/Wkmtz9AXZ+YF87XmvZC4pJDo
+1BmWaq1VuCcJLarFeWJWg/fFPsZYbKM7Cct4jc7PmU0OxAwXldNrFKxINf0Pw0g
eJBh7xT3SfMJrKCaHoZ4fKyWu+UdzRN8iI+OkszbrgNR8gbd/R4d3sWeOmBPAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUyOhrnpksrwdNMD0hnCmjGOXe+SgwHwYDVR0j
BBgwFoAUqPmcLuC6HTfMer58UImEuqCwjVwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM1o5bkVRVmNHc1ZHN3NSQ1RrWTJadnZtREhob0U1WmdiakRLRnFNRnQ3
REYvMC9BOEY5OUMyRUUwQkExRDM3Q0M3QUJFN0M1MDg5ODRCQUEwQjA4RDVDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0E4Rjk5QzJFRTBCQTFEMzdD
QzdBQkU3QzUwODk4NEJBQTBCMDhENUMuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNaOW5FUVZjR3NWRzdzUkNUa1kyWnZ2bURIaG9FNVpnYmpES0ZxTUZ0N0RGLzAv
MzEzODM2MmUzMjMzMzMyZTM3MzIyZTMwMmYzMjMxMmQzMjMxMjAzZDNlMjAzMjM2
MzIzOTM5MzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAO66UgwDQYJKoZIhvcNAQELBQADggEBAKMgK8an
dx5H/sgNk2vaZl3hHWjBBXclIejsKXwaWscfSJ7Bc2nV+GVaiCsQT1+njFyGdfSE
gZTGZy5+fjJCPBkS9VgdkklxgXIEU9sYQXvm8swXkjeBV7WoNrYZuZifjot/1WLf
/kQMMjHvHG879hyyATKedeo8Wx1h1NFRLv2JPvo8Pwu37gjH+6f7Kzrvd3aOoPdD
2D4otjbuOiykFpK102eL54FxhOKtvTlDMN6ChIZaORmv0mmQWuVCjnFxl7agv0nL
RPIlUAvvc3o4EU7s9RyvYWnHEuq0k1Qp9MDfSnK+zAUbUEyzgDWOsm1vG1YcFi99
GJyFgSSHpQE7+aE=
-----END CERTIFICATE-----
Generated at Mon Apr 7 07:39:01 2025 by rpki-client