Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4v1ArkdPciMWNVFLkx6xFwscab1Q3jHJwBRHgUaREqqM/1/3138362e3231362e3230382e302f32312d3332203d3e20323632393839.roa
File:                     3138362e3231362e3230382e302f32312d3332203d3e20323632393839.roa (raw, json)
Hash identifier:          JgHoMGoNTGKsn9joqysljet8LQCbVHUSz1v/WWbYyFs=
Subject key identifier:   D7:E9:67:5B:DC:3C:99:A4:C7:65:0B:E8:CB:57:97:7B:DA:F7:91:66
Certificate issuer:       /CN=D322281463F194BEAD29926EC73A0E7378D1F259
Certificate serial:       5DA6AB98C07EA0E6A0883A20065FDC94380F7BE7
Authority key identifier: D3:22:28:14:63:F1:94:BE:AD:29:92:6E:C7:3A:0E:73:78:D1:F2:59
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D322281463F194BEAD29926EC73A0E7378D1F259.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4v1ArkdPciMWNVFLkx6xFwscab1Q3jHJwBRHgUaREqqM/1/3138362e3231362e3230382e302f32312d3332203d3e20323632393839.roa
Signing time:             Thu 16 Jan 2025 19:26:35 +0000
ROA not before:           Thu 16 Jan 2025 19:21:35 +0000
ROA not after:            Thu 15 Jan 2026 19:26:35 +0000
asID:                     262989
IP address blocks:        186.216.208.0/21 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:a6:ab:98:c0:7e:a0:e6:a0:88:3a:20:06:5f:dc:94:38:0f:7b:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D322281463F194BEAD29926EC73A0E7378D1F259
        Validity
            Not Before: Jan 16 19:21:35 2025 GMT
            Not After : Jan 15 19:26:35 2026 GMT
        Subject: CN=D7E9675BDC3C99A4C7650BE8CB57977BDAF79166
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:f2:e8:22:84:d4:37:4c:b7:35:97:1a:26:02:
                    82:9d:8a:b6:fe:7c:b5:cc:f3:c9:98:d3:b2:ad:5c:
                    a5:e9:e5:0d:7c:20:00:3e:83:2e:5e:a6:1f:55:69:
                    46:ea:66:e5:fd:ae:68:5e:b2:ed:00:60:ea:75:e1:
                    5c:10:b9:e3:b0:87:d3:ca:8e:a8:86:bb:f6:a4:09:
                    d4:0d:3b:19:1c:35:c5:2c:07:3f:29:bb:3b:90:70:
                    4c:fd:6e:e2:01:cc:78:a5:e8:c2:96:c4:fe:a9:4b:
                    77:43:2f:30:3c:7b:37:d0:0f:d8:e7:ad:6c:db:04:
                    c5:e9:99:a5:71:11:ad:1a:d8:d4:14:2f:99:d8:fc:
                    c8:3b:de:be:4e:6b:5d:92:9c:05:e6:2e:91:91:85:
                    5a:ea:ac:5a:c1:6f:e0:c6:b8:5f:8d:d3:32:ce:c3:
                    a9:b0:24:e6:dc:45:40:06:93:5a:17:c9:a0:9b:18:
                    e5:88:56:77:b7:08:2d:42:3c:6e:5e:8d:ef:e1:21:
                    3f:fb:81:2f:e9:04:66:38:77:54:d8:27:fb:de:66:
                    22:dd:9b:84:78:39:01:9f:a1:08:1a:71:40:ab:bd:
                    75:aa:79:26:40:0c:0a:19:48:54:8d:6a:bb:da:81:
                    df:87:ad:34:62:b2:7d:76:25:50:d9:18:03:65:b1:
                    86:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:E9:67:5B:DC:3C:99:A4:C7:65:0B:E8:CB:57:97:7B:DA:F7:91:66
            X509v3 Authority Key Identifier:
                keyid:D3:22:28:14:63:F1:94:BE:AD:29:92:6E:C7:3A:0E:73:78:D1:F2:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4v1ArkdPciMWNVFLkx6xFwscab1Q3jHJwBRHgUaREqqM/1/D322281463F194BEAD29926EC73A0E7378D1F259.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D322281463F194BEAD29926EC73A0E7378D1F259.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4v1ArkdPciMWNVFLkx6xFwscab1Q3jHJwBRHgUaREqqM/1/3138362e3231362e3230382e302f32312d3332203d3e20323632393839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.216.208.0/21

    Signature Algorithm: sha256WithRSAEncryption
         9d:77:01:f2:89:4e:a7:fe:3f:4b:04:b4:40:b7:28:20:d5:01:
         9e:56:5c:fe:aa:72:b7:bf:5d:bc:04:08:45:fb:ff:7d:76:75:
         0d:d1:2a:ed:19:c2:f6:02:ac:97:83:d5:82:a5:8e:ef:2e:d0:
         fb:06:92:e2:51:33:37:5f:50:5a:25:37:a0:50:57:7e:be:c4:
         dd:9a:61:3a:7b:d7:63:3d:67:af:f7:52:8b:b2:20:28:e6:04:
         39:f8:b2:a5:7b:a1:4f:a5:8e:78:3b:cb:9b:bc:29:ae:72:11:
         41:91:30:83:cd:40:88:fc:e6:35:0b:8e:04:78:e2:1e:d3:a9:
         e5:89:b5:1d:24:a0:e4:c2:34:69:b2:cf:7c:ee:dc:66:99:9f:
         71:bc:d2:80:07:30:1f:b6:dd:53:1b:de:de:b4:95:f6:ca:25:
         14:d3:2b:41:a8:11:39:cc:6d:dc:9f:96:6f:c7:27:ff:97:6d:
         e8:2f:73:37:a2:fc:d6:d2:af:33:7e:3a:d1:16:9d:c1:f2:f0:
         d8:8a:fe:d1:bf:14:74:6e:49:06:ab:62:a9:bf:13:95:79:c8:
         33:48:9b:21:d3:5b:3c:7a:e2:71:9a:9c:6c:ed:d2:c3:8e:c0:
         fe:11:3a:b7:61:6c:82:0d:c6:f4:38:1e:a7:c9:02:4a:22:27:
         c3:a6:ac:4f
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUXaarmMB+oOagiDogBl/clDgPe+cwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDMyMjI4MTQ2M0YxOTRCRUFEMjk5MjZFQzczQTBFNzM3
OEQxRjI1OTAeFw0yNTAxMTYxOTIxMzVaFw0yNjAxMTUxOTI2MzVaMDMxMTAvBgNV
BAMTKEQ3RTk2NzVCREMzQzk5QTRDNzY1MEJFOENCNTc5NzdCREFGNzkxNjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDE8ugihNQ3TLc1lxomAoKdirb+
fLXM88mY07KtXKXp5Q18IAA+gy5eph9VaUbqZuX9rmhesu0AYOp14VwQueOwh9PK
jqiGu/akCdQNOxkcNcUsBz8puzuQcEz9buIBzHil6MKWxP6pS3dDLzA8ezfQD9jn
rWzbBMXpmaVxEa0a2NQUL5nY/Mg73r5Oa12SnAXmLpGRhVrqrFrBb+DGuF+N0zLO
w6mwJObcRUAGk1oXyaCbGOWIVne3CC1CPG5eje/hIT/7gS/pBGY4d1TYJ/veZiLd
m4R4OQGfoQgacUCrvXWqeSZADAoZSFSNarvagd+HrTRisn12JVDZGANlsYb9AgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQU1+lnW9w8maTHZQvoy1eXe9r3kWYwHwYDVR0j
BBgwFoAU0yIoFGPxlL6tKZJuxzoOc3jR8lkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNHYxQXJrZFBjaU1XTlZGTGt4NnhGd3NjYWIxUTNqSEp3QlJIZ1VhUkVx
cU0vMS9EMzIyMjgxNDYzRjE5NEJFQUQyOTkyNkVDNzNBMEU3Mzc4RDFGMjU5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0QzMjIyODE0NjNGMTk0QkVB
RDI5OTI2RUM3M0EwRTczNzhEMUYyNTkuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzR2MUFya2RQY2lNV05WRkxreDZ4RndzY2FiMVEzakhKd0JSSGdVYVJFcXFNLzEv
MzEzODM2MmUzMjMxMzYyZTMyMzAzODJlMzAyZjMyMzEyZDMzMzIyMDNkM2UyMDMy
MzYzMjM5MzgzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEA7rY0DANBgkqhkiG9w0BAQsFAAOCAQEAnXcB
8olOp/4/SwS0QLcoINUBnlZc/qpyt79dvAQIRfv/fXZ1DdEq7RnC9gKsl4PVgqWO
7y7Q+waS4lEzN19QWiU3oFBXfr7E3ZphOnvXYz1nr/dSi7IgKOYEOfiypXuhT6WO
eDvLm7wprnIRQZEwg81AiPzmNQuOBHjiHtOp5Ym1HSSg5MI0abLPfO7cZpmfcbzS
gAcwH7bdUxve3rSV9solFNMrQagROcxt3J+Wb8cn/5dt6C9zN6L81tKvM3460Rad
wfLw2Ir+0b8UdG5JBqtiqb8TlXnIM0ibIdNbPHricZqcbO3Sw47A/hE6t2Fsgg3G
9Dgep8kCSiInw6asTw==
-----END CERTIFICATE-----
Generated at Sat Apr 5 19:45:29 2025 by rpki-client