Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/49aPvAHy9o9J5LCoZ4yiijP65M5SKFFzfeTwhwDDNe4v/1/3138362e3235312e35362e302f32322d3234203d3e20323632393033.roa
File:                     3138362e3235312e35362e302f32322d3234203d3e20323632393033.roa (raw, json)
Hash identifier:          KUtjnXabsjb+dDIjc20jpdJyjoHMOFnDuF0ZbjlbQcI=
Subject key identifier:   7A:4E:96:F5:99:4C:31:2E:A2:E2:6F:6F:07:C2:CC:8B:22:3D:42:64
Certificate issuer:       /CN=21B70DC6EA46AA4D2EA25663D27BCD0C7B7B3D63
Certificate serial:       3A373ECD8E818CE68D26BF85E278282B90C4F8F9
Authority key identifier: 21:B7:0D:C6:EA:46:AA:4D:2E:A2:56:63:D2:7B:CD:0C:7B:7B:3D:63
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21B70DC6EA46AA4D2EA25663D27BCD0C7B7B3D63.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/49aPvAHy9o9J5LCoZ4yiijP65M5SKFFzfeTwhwDDNe4v/1/3138362e3235312e35362e302f32322d3234203d3e20323632393033.roa
Signing time:             Wed 05 Mar 2025 19:00:01 +0000
ROA not before:           Wed 05 Mar 2025 18:55:01 +0000
ROA not after:            Wed 04 Mar 2026 19:00:01 +0000
asID:                     262903
IP address blocks:        186.251.56.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:37:3e:cd:8e:81:8c:e6:8d:26:bf:85:e2:78:28:2b:90:c4:f8:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21B70DC6EA46AA4D2EA25663D27BCD0C7B7B3D63
        Validity
            Not Before: Mar  5 18:55:01 2025 GMT
            Not After : Mar  4 19:00:01 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:83:0b:05:b3:cc:1c:8b:ce:8d:c2:4e:e6:d4:
                    c6:a9:c1:81:e4:e3:f9:ca:48:51:53:43:71:f7:61:
                    47:b7:54:4b:12:10:3f:b8:63:d0:ef:f5:d1:e3:6e:
                    ca:2d:f4:9b:e1:98:16:ea:2a:4c:0d:2f:9a:ce:16:
                    6c:00:cc:72:4c:f4:23:7a:ec:86:f3:d0:dd:18:7b:
                    ea:91:e9:1e:a3:2a:1a:79:b3:c3:2a:e9:36:b1:c2:
                    28:c8:25:1f:cc:5b:bc:f4:22:0a:27:1d:a5:2b:24:
                    39:c9:c6:65:3a:00:f0:42:34:97:56:c1:55:bb:bd:
                    4e:0a:f1:c3:f7:15:1a:7b:65:20:61:dc:03:2b:23:
                    9f:9b:a7:38:32:8c:b8:23:cf:2f:92:73:29:da:a1:
                    92:5a:e9:aa:cb:f6:9a:43:7a:3b:17:43:95:16:69:
                    bc:6f:b3:83:93:5d:69:3a:53:0d:13:56:c1:9d:6d:
                    e1:73:b3:02:e2:cd:f9:0b:fb:fb:c0:38:c8:ff:9e:
                    62:6f:e3:66:3d:bb:ad:f0:0e:74:41:1c:7b:1d:72:
                    29:05:4c:34:4c:81:35:29:04:05:f4:a7:e1:38:a4:
                    c3:14:d0:bc:3d:1b:40:03:54:c3:77:23:12:b5:42:
                    4b:8f:c0:a6:db:72:a7:6c:8e:31:62:df:40:79:18:
                    f8:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:4E:96:F5:99:4C:31:2E:A2:E2:6F:6F:07:C2:CC:8B:22:3D:42:64
            X509v3 Authority Key Identifier:
                keyid:21:B7:0D:C6:EA:46:AA:4D:2E:A2:56:63:D2:7B:CD:0C:7B:7B:3D:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/49aPvAHy9o9J5LCoZ4yiijP65M5SKFFzfeTwhwDDNe4v/1/21B70DC6EA46AA4D2EA25663D27BCD0C7B7B3D63.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21B70DC6EA46AA4D2EA25663D27BCD0C7B7B3D63.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/49aPvAHy9o9J5LCoZ4yiijP65M5SKFFzfeTwhwDDNe4v/1/3138362e3235312e35362e302f32322d3234203d3e20323632393033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.251.56.0/22

    Signature Algorithm: sha256WithRSAEncryption
         32:27:7f:4b:09:40:8b:0f:0e:32:bc:6c:4e:46:b0:1c:15:f8:
         32:66:12:98:c8:d6:e7:a8:08:20:f2:50:77:da:72:51:dc:0f:
         9a:91:80:45:03:12:9a:4b:8e:99:b6:f9:c9:83:ae:25:c8:6e:
         0a:b0:d2:8f:45:03:99:8f:da:6f:cc:8e:b3:8b:91:2f:69:a5:
         fe:e2:c3:48:41:c7:0b:f4:f9:ce:5b:d7:33:d0:46:19:a6:e7:
         89:ab:a2:4e:c9:c2:03:71:2c:7e:4e:87:44:3c:7c:74:c7:cf:
         4c:5f:c7:53:14:ad:72:b9:62:f1:3d:98:cf:8c:47:18:9b:8f:
         24:ba:65:4d:1a:a8:32:fe:5e:d1:7d:a1:ac:23:c8:94:6f:8d:
         76:79:7e:be:b9:08:6c:d1:31:83:ca:00:5e:63:9c:2e:70:44:
         c5:af:4c:91:9e:6a:83:67:c1:66:01:f6:1d:87:34:f6:48:47:
         4a:61:66:16:35:ae:6b:b6:26:18:f6:f2:45:d4:46:37:63:94:
         dd:cc:73:c3:e3:c2:f1:85:a3:06:44:06:1f:ba:b5:79:55:4f:
         f3:81:d2:25:69:3a:b6:db:c7:2a:1c:8f:b9:6d:bb:05:62:f4:
         16:6b:3a:10:a0:31:81:dc:21:af:44:88:d9:f3:98:55:94:c8:
         7c:5b:42:4e
-----BEGIN CERTIFICATE-----
MIIHQzCCBiugAwIBAgIUOjc+zY6BjOaNJr+F4ngoK5DE+PkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjFCNzBEQzZFQTQ2QUE0RDJFQTI1NjYzRDI3QkNEMEM3
QjdCM0Q2MzAeFw0yNTAzMDUxODU1MDFaFw0yNjAzMDQxOTAwMDFaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQzQ4MzBCMDVCM0NDMUM4QkNF
OERDMjRFRTZENEM2QTlDMTgxRTRFM0Y5Q0E0ODUxNTM0MzcxRjc2MTQ3Qjc1NDRC
MTIxMDNGQjg2M0QwRUZGNUQxRTM2RUNBMkRGNDlCRTE5ODE2RUEyQTRDMEQyRjlB
Q0UxNjZDMDBDQzcyNENGNDIzN0FFQzg2RjNEMEREMTg3QkVBOTFFOTFFQTMyQTFB
NzlCM0MzMkFFOTM2QjFDMjI4QzgyNTFGQ0M1QkJDRjQyMjBBMjcxREE1MkIyNDM5
QzlDNjY1M0EwMEYwNDIzNDk3NTZDMTU1QkJCRDRFMEFGMUMzRjcxNTFBN0I2NTIw
NjFEQzAzMkIyMzlGOUJBNzM4MzI4Q0I4MjNDRjJGOTI3MzI5REFBMTkyNUFFOUFB
Q0JGNjlBNDM3QTNCMTc0Mzk1MTY2OUJDNkZCMzgzOTM1RDY5M0E1MzBEMTM1NkMx
OUQ2REUxNzNCMzAyRTJDREY5MEJGQkZCQzAzOEM4RkY5RTYyNkZFMzY2M0RCQkFE
RjAwRTc0NDExQzdCMUQ3MjI5MDU0QzM0NEM4MTM1MjkwNDA1RjRBN0UxMzhBNEMz
MTREMEJDM0QxQjQwMDM1NEMzNzcyMzEyQjU0MjRCOEZDMEE2REI3MkE3NkM4RTMx
NjJERjQwNzkxOEY4NjMwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAxIMLBbPMHIvOjcJO5tTGqcGB5OP5ykhRU0Nx92FHt1RLEhA/uGPQ
7/XR427KLfSb4ZgW6ipMDS+azhZsAMxyTPQjeuyG89DdGHvqkekeoyoaebPDKuk2
scIoyCUfzFu89CIKJx2lKyQ5ycZlOgDwQjSXVsFVu71OCvHD9xUae2UgYdwDKyOf
m6c4Moy4I88vknMp2qGSWumqy/aaQ3o7F0OVFmm8b7ODk11pOlMNE1bBnW3hc7MC
4s35C/v7wDjI/55ib+NmPbut8A50QRx7HXIpBUw0TIE1KQQF9KfhOKTDFNC8PRtA
A1TDdyMStUJLj8Cm23KnbI4xYt9AeRj4YwIDAQABo4ICUTCCAk0wHQYDVR0OBBYE
FHpOlvWZTDEuouJvbwfCzIsiPUJkMB8GA1UdIwQYMBaAFCG3DcbqRqpNLqJWY9J7
zQx7ez1jMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzQ5YVB2QUh5OW85SjVM
Q29aNHlpaWpQNjVNNVNLRkZ6ZmVUd2h3REROZTR2LzEvMjFCNzBEQzZFQTQ2QUE0
RDJFQTI1NjYzRDI3QkNEMEM3QjdCM0Q2My5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS8yMUI3MERDNkVBNDZBQTREMkVBMjU2NjNEMjdCQ0QwQzdCN0Iz
RDYzLmNlcjCBrgYIKwYBBQUHAQsEgaEwgZ4wgZsGCCsGAQUFBzALhoGOcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby80OWFQdkFIeTlvOUo1TENvWjR5
aWlqUDY1TTVTS0ZGemZlVHdod0RETmU0di8xLzMxMzgzNjJlMzIzNTMxMmUzNTM2
MmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzNjMyMzkzMDMzLnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC
uvs4MA0GCSqGSIb3DQEBCwUAA4IBAQAyJ39LCUCLDw4yvGxORrAcFfgyZhKYyNbn
qAgg8lB32nJR3A+akYBFAxKaS46ZtvnJg64lyG4KsNKPRQOZj9pvzI6zi5EvaaX+
4sNIQccL9PnOW9cz0EYZpueJq6JOycIDcSx+TodEPHx0x89MX8dTFK1yuWLxPZjP
jEcYm48kumVNGqgy/l7RfaGsI8iUb412eX6+uQhs0TGDygBeY5wucETFr0yRnmqD
Z8FmAfYdhzT2SEdKYWYWNa5rtiYY9vJF1EY3Y5TdzHPD48LxhaMGRAYfurV5VU/z
gdIlaTq228cqHI+5bbsFYvQWazoQoDGB3CGvRIjZ85hVlMh8W0JO
-----END CERTIFICATE-----
Generated at Mon Apr 7 00:27:10 2025 by rpki-client