Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4XmgkWMQSmk967CpBEstX2x1biNU5FYuaiboX6cHMJBi/1/3138362e3230392e302e302f32302d3234203d3e203533313532.roa
File:                     3138362e3230392e302e302f32302d3234203d3e203533313532.roa (raw, json)
Hash identifier:          fb0SCTm3oUtXNITPqPEWqJyjOxhps5+3DClcDw/XrP4=
Subject key identifier:   B3:C5:66:E5:2B:B1:76:5E:71:EE:47:8B:CF:FE:76:0C:DE:FE:6A:F1
Certificate issuer:       /CN=192F14755AC879D7851EBA5CD1002E9D4B65583F
Certificate serial:       6EB22C8CA3A920606C343BD127B4F761CEFFDFBC
Authority key identifier: 19:2F:14:75:5A:C8:79:D7:85:1E:BA:5C:D1:00:2E:9D:4B:65:58:3F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/192F14755AC879D7851EBA5CD1002E9D4B65583F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4XmgkWMQSmk967CpBEstX2x1biNU5FYuaiboX6cHMJBi/1/3138362e3230392e302e302f32302d3234203d3e203533313532.roa
Signing time:             Thu 06 Mar 2025 05:00:23 +0000
ROA not before:           Thu 06 Mar 2025 04:55:23 +0000
ROA not after:            Thu 05 Mar 2026 05:00:23 +0000
asID:                     53152
IP address blocks:        186.209.0.0/20 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:b2:2c:8c:a3:a9:20:60:6c:34:3b:d1:27:b4:f7:61:ce:ff:df:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=192F14755AC879D7851EBA5CD1002E9D4B65583F
        Validity
            Not Before: Mar  6 04:55:23 2025 GMT
            Not After : Mar  5 05:00:23 2026 GMT
        Subject: CN=B3C566E52BB1765E71EE478BCFFE760CDEFE6AF1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:f8:5c:d7:da:8c:40:1b:a3:40:af:da:ee:ee:
                    35:b7:0f:fe:f6:ac:33:2d:72:a6:94:b5:26:b9:6e:
                    39:12:14:71:9b:a8:e0:46:ea:05:3f:61:b4:1e:e3:
                    74:67:8d:4c:62:2c:0f:d4:5c:47:03:7f:ac:a9:30:
                    e8:09:53:75:cb:88:01:5a:a8:ed:49:89:99:70:46:
                    87:38:3b:e0:9e:45:8c:2e:4d:f6:a1:86:0d:a6:f0:
                    4c:88:67:88:9b:a2:1b:20:f8:9e:50:39:8a:b2:5c:
                    09:50:17:96:b4:49:b1:45:3c:71:5c:f7:64:25:61:
                    41:a6:72:5b:86:9d:ed:a1:80:ce:ec:15:ec:5e:4d:
                    1b:96:3b:b0:7f:52:32:d1:70:6d:63:31:1e:bf:95:
                    35:50:6e:0d:3f:1f:e3:0d:db:97:31:7f:54:98:e3:
                    18:0a:40:3c:81:d1:59:ff:c7:e1:c5:47:34:80:3f:
                    f8:d9:3f:27:e5:41:b8:b8:5a:e2:d5:2b:15:78:18:
                    a8:31:d8:3e:06:0c:3e:71:2a:49:dd:24:dc:86:53:
                    e6:62:33:ef:ac:e9:23:1b:a8:f8:ee:61:58:a0:b5:
                    d8:53:6f:5a:67:8f:e4:6d:e6:91:ce:1c:21:ff:33:
                    b1:09:63:0f:e1:26:a3:51:97:ea:b7:65:f0:25:8a:
                    e4:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:C5:66:E5:2B:B1:76:5E:71:EE:47:8B:CF:FE:76:0C:DE:FE:6A:F1
            X509v3 Authority Key Identifier:
                keyid:19:2F:14:75:5A:C8:79:D7:85:1E:BA:5C:D1:00:2E:9D:4B:65:58:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4XmgkWMQSmk967CpBEstX2x1biNU5FYuaiboX6cHMJBi/1/192F14755AC879D7851EBA5CD1002E9D4B65583F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/192F14755AC879D7851EBA5CD1002E9D4B65583F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4XmgkWMQSmk967CpBEstX2x1biNU5FYuaiboX6cHMJBi/1/3138362e3230392e302e302f32302d3234203d3e203533313532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.209.0.0/20

    Signature Algorithm: sha256WithRSAEncryption
         b1:fd:85:e6:1e:9e:ce:60:43:9c:52:2a:09:53:51:ac:c4:e3:
         14:5a:e0:cc:f7:db:51:93:b2:b5:45:de:c5:65:f7:d3:b0:d9:
         b1:64:ae:e5:44:36:28:55:43:3c:fe:f9:13:c2:e5:45:71:40:
         e3:8d:8e:0a:98:9e:34:3e:8b:57:95:7c:ee:22:fa:58:1c:40:
         e4:f1:ff:77:2a:58:eb:f7:8c:8e:78:41:a3:ba:86:0b:6b:17:
         e3:e8:90:6a:f5:99:c1:c7:7f:7d:95:3a:37:0f:6a:d7:3b:27:
         a5:12:96:6b:e2:96:4b:29:17:2a:1d:50:53:3b:02:5d:e0:29:
         5b:1e:8c:29:88:8b:56:61:32:ad:f5:b6:fc:e9:61:eb:40:d6:
         7f:25:03:47:6c:15:bc:cd:3a:61:e1:e8:6a:42:36:35:d6:0a:
         79:1a:02:92:7d:11:46:6c:62:35:bc:64:6d:27:c7:0e:bd:f5:
         1b:e7:ac:b9:47:aa:19:06:a8:e5:85:49:b0:55:6c:d8:fe:b7:
         7a:80:c1:81:6d:45:c6:01:a7:33:d8:09:3c:03:ff:a4:f9:4e:
         85:54:0c:f8:85:27:4f:0a:88:63:48:95:b2:e6:1a:31:d5:cd:
         68:e5:86:ed:9c:af:c2:eb:aa:c4:7a:f8:51:e9:d8:88:8d:34:
         f5:02:16:4b
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUbrIsjKOpIGBsNDvRJ7T3Yc7/37wwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTkyRjE0NzU1QUM4NzlENzg1MUVCQTVDRDEwMDJFOUQ0
QjY1NTgzRjAeFw0yNTAzMDYwNDU1MjNaFw0yNjAzMDUwNTAwMjNaMDMxMTAvBgNV
BAMTKEIzQzU2NkU1MkJCMTc2NUU3MUVFNDc4QkNGRkU3NjBDREVGRTZBRjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDO+FzX2oxAG6NAr9ru7jW3D/72
rDMtcqaUtSa5bjkSFHGbqOBG6gU/YbQe43RnjUxiLA/UXEcDf6ypMOgJU3XLiAFa
qO1JiZlwRoc4O+CeRYwuTfahhg2m8EyIZ4ibohsg+J5QOYqyXAlQF5a0SbFFPHFc
92QlYUGmcluGne2hgM7sFexeTRuWO7B/UjLRcG1jMR6/lTVQbg0/H+MN25cxf1SY
4xgKQDyB0Vn/x+HFRzSAP/jZPyflQbi4WuLVKxV4GKgx2D4GDD5xKkndJNyGU+Zi
M++s6SMbqPjuYVigtdhTb1pnj+Rt5pHOHCH/M7EJYw/hJqNRl+q3ZfAliuQJAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUs8Vm5Suxdl5x7keLz/52DN7+avEwHwYDVR0j
BBgwFoAUGS8UdVrIedeFHrpc0QAunUtlWD8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNFhtZ2tXTVFTbWs5NjdDcEJFc3RYMngxYmlOVTVGWXVhaWJvWDZjSE1K
QmkvMS8xOTJGMTQ3NTVBQzg3OUQ3ODUxRUJBNUNEMTAwMkU5RDRCNjU1ODNGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzE5MkYxNDc1NUFDODc5RDc4
NTFFQkE1Q0QxMDAyRTlENEI2NTU4M0YuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRYbWdrV01RU21rOTY3Q3BCRXN0WDJ4MWJpTlU1Rll1YWlib1g2Y0hNSkJpLzEv
MzEzODM2MmUzMjMwMzkyZTMwMmUzMDJmMzIzMDJkMzIzNDIwM2QzZTIwMzUzMzMx
MzUzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEBLrRADANBgkqhkiG9w0BAQsFAAOCAQEAsf2F5h6ezmBD
nFIqCVNRrMTjFFrgzPfbUZOytUXexWX307DZsWSu5UQ2KFVDPP75E8LlRXFA442O
CpieND6LV5V87iL6WBxA5PH/dypY6/eMjnhBo7qGC2sX4+iQavWZwcd/fZU6Nw9q
1zsnpRKWa+KWSykXKh1QUzsCXeApWx6MKYiLVmEyrfW2/Olh60DWfyUDR2wVvM06
YeHoakI2NdYKeRoCkn0RRmxiNbxkbSfHDr31G+esuUeqGQao5YVJsFVs2P63eoDB
gW1FxgGnM9gJPAP/pPlOhVQM+IUnTwqIY0iVsuYaMdXNaOWG7ZyvwuuqxHr4UenY
iI009QIWSw==
-----END CERTIFICATE-----
Generated at Mon Apr 7 00:27:30 2025 by rpki-client