Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/54WxTfovDirxgxcH8Rnz5BmeyymnPPSzg4FmhRyH2JCq/0/3138362e3235312e382e302f32332d3233203d3e20323632393838.roa
File:                     3138362e3235312e382e302f32332d3233203d3e20323632393838.roa (raw, json)
Hash identifier:          v1V2wD80lWfBh8bdbY1v3H13bll2AOJ60CT3CtyI+zc=
Subject key identifier:   08:EE:18:6B:2D:C1:FB:77:55:62:54:91:AD:92:78:FB:98:A8:FA:85
Certificate issuer:       /CN=252DB7997AB9FC1EBB8F7F30B7558302DB376E02
Certificate serial:       5798CFEF7C7FE351D57FF8567E9D514CCDB70C16
Authority key identifier: 25:2D:B7:99:7A:B9:FC:1E:BB:8F:7F:30:B7:55:83:02:DB:37:6E:02
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/252DB7997AB9FC1EBB8F7F30B7558302DB376E02.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/54WxTfovDirxgxcH8Rnz5BmeyymnPPSzg4FmhRyH2JCq/0/3138362e3235312e382e302f32332d3233203d3e20323632393838.roa
Signing time:             Mon 13 Jan 2025 14:17:26 +0000
ROA not before:           Mon 13 Jan 2025 14:12:26 +0000
ROA not after:            Mon 12 Jan 2026 14:17:26 +0000
asID:                     262988
IP address blocks:        186.251.8.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:98:cf:ef:7c:7f:e3:51:d5:7f:f8:56:7e:9d:51:4c:cd:b7:0c:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=252DB7997AB9FC1EBB8F7F30B7558302DB376E02
        Validity
            Not Before: Jan 13 14:12:26 2025 GMT
            Not After : Jan 12 14:17:26 2026 GMT
        Subject: CN=08EE186B2DC1FB7755625491AD9278FB98A8FA85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:66:ee:4b:97:b9:dd:8b:a2:d2:bc:f9:79:65:
                    97:19:c7:46:03:f1:5e:7b:05:ed:fc:20:e5:31:94:
                    e2:4c:e0:e9:e1:5e:c2:d7:dd:bd:69:b8:9a:61:dc:
                    98:26:a8:15:92:dc:4e:da:0c:36:a2:33:e9:83:f5:
                    db:e6:10:81:96:45:bd:00:56:16:bd:2e:10:d4:e6:
                    4a:a9:47:ab:a5:bd:24:4e:6a:cc:bc:4f:6f:b5:7d:
                    00:37:ce:a2:be:17:6a:dc:cc:a7:89:6a:0e:4c:a1:
                    e8:6e:6e:f1:06:f1:95:14:e1:51:b8:5e:4c:0d:2c:
                    01:28:a6:9f:df:95:f7:7f:d5:8a:30:ed:79:f7:2b:
                    86:b1:ee:24:ac:f9:e8:9b:77:6e:1e:e3:04:8f:a3:
                    66:96:5b:d2:a6:04:a1:12:1d:52:34:d4:14:73:25:
                    75:09:99:13:18:43:68:89:e2:0d:db:15:4f:f0:77:
                    d3:4e:c0:3c:10:77:22:b5:9d:24:19:a6:20:ab:54:
                    a8:6b:03:cf:9b:ac:6a:b6:f0:cd:08:19:2d:f5:50:
                    49:3d:6f:85:7d:03:57:3a:be:6b:08:97:bf:e0:7b:
                    b0:74:8f:87:db:9b:19:b9:3d:eb:65:81:46:bf:09:
                    23:67:91:16:19:25:6e:60:7a:4f:92:10:37:7b:ce:
                    62:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:EE:18:6B:2D:C1:FB:77:55:62:54:91:AD:92:78:FB:98:A8:FA:85
            X509v3 Authority Key Identifier:
                keyid:25:2D:B7:99:7A:B9:FC:1E:BB:8F:7F:30:B7:55:83:02:DB:37:6E:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/54WxTfovDirxgxcH8Rnz5BmeyymnPPSzg4FmhRyH2JCq/0/252DB7997AB9FC1EBB8F7F30B7558302DB376E02.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/252DB7997AB9FC1EBB8F7F30B7558302DB376E02.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/54WxTfovDirxgxcH8Rnz5BmeyymnPPSzg4FmhRyH2JCq/0/3138362e3235312e382e302f32332d3233203d3e20323632393838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.251.8.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6f:ba:42:7f:04:77:0d:08:47:9b:1c:ca:ed:5f:67:ad:9a:5a:
         c8:38:c5:b3:72:1f:75:d6:23:07:ee:be:5d:13:a3:34:ad:68:
         96:75:ca:fb:16:8b:b1:c1:f1:8c:9b:57:2b:ca:32:56:09:ab:
         e3:da:3b:b8:79:ce:77:eb:38:85:8a:83:a2:bc:64:02:b1:73:
         86:4a:c5:0f:4c:7d:5a:70:4b:7a:fb:26:00:0e:01:10:3b:df:
         a4:e2:3c:3b:ba:cf:ab:97:23:a8:c5:0e:19:2e:b7:ed:5e:1d:
         ba:cd:18:88:7b:fe:f1:76:76:4f:ea:23:db:64:96:61:a2:b6:
         59:49:5e:9b:3f:f1:a5:4a:d3:92:7b:a2:60:87:7f:96:03:1a:
         e0:fa:99:ae:8c:c7:a9:65:04:5d:5b:84:c8:c7:75:c7:62:42:
         68:b7:55:7c:40:a0:a9:c5:73:6a:ed:26:35:5c:26:6f:9d:09:
         63:a5:e9:ad:2f:e8:cb:de:27:cb:c3:3a:ed:9d:fe:4a:d6:55:
         06:93:23:40:bd:fa:0d:4f:a5:21:9e:70:26:cd:35:40:83:13:
         0f:04:5e:61:42:19:94:e7:c5:47:ee:65:c9:53:7b:07:da:10:
         4a:a2:2d:7a:9e:18:0c:cc:1c:6d:34:d3:e8:34:f8:89:1e:c1:
         9c:c6:fd:fc
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUV5jP73x/41HVf/hWfp1RTM23DBYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjUyREI3OTk3QUI5RkMxRUJCOEY3RjMwQjc1NTgzMDJE
QjM3NkUwMjAeFw0yNTAxMTMxNDEyMjZaFw0yNjAxMTIxNDE3MjZaMDMxMTAvBgNV
BAMTKDA4RUUxODZCMkRDMUZCNzc1NTYyNTQ5MUFEOTI3OEZCOThBOEZBODUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2Zu5Ll7ndi6LSvPl5ZZcZx0YD
8V57Be38IOUxlOJM4OnhXsLX3b1puJph3JgmqBWS3E7aDDaiM+mD9dvmEIGWRb0A
Vha9LhDU5kqpR6ulvSROasy8T2+1fQA3zqK+F2rczKeJag5MoehubvEG8ZUU4VG4
XkwNLAEopp/flfd/1Yow7Xn3K4ax7iSs+eibd24e4wSPo2aWW9KmBKESHVI01BRz
JXUJmRMYQ2iJ4g3bFU/wd9NOwDwQdyK1nSQZpiCrVKhrA8+brGq28M0IGS31UEk9
b4V9A1c6vmsIl7/ge7B0j4fbmxm5PetlgUa/CSNnkRYZJW5gek+SEDd7zmLfAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUCO4Yay3B+3dVYlSRrZJ4+5io+oUwHwYDVR0j
BBgwFoAUJS23mXq5/B67j38wt1WDAts3bgIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNTRXeFRmb3ZEaXJ4Z3hjSDhSbno1Qm1leXltblBQU3pnNEZtaFJ5SDJK
Q3EvMC8yNTJEQjc5OTdBQjlGQzFFQkI4RjdGMzBCNzU1ODMwMkRCMzc2RTAyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzI1MkRCNzk5N0FCOUZDMUVC
QjhGN0YzMEI3NTU4MzAyREIzNzZFMDIuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzU0V3hUZm92RGlyeGd4Y0g4Um56NUJtZXl5bW5QUFN6ZzRGbWhSeUgySkNxLzAv
MzEzODM2MmUzMjM1MzEyZTM4MmUzMDJmMzIzMzJkMzIzMzIwM2QzZTIwMzIzNjMy
MzkzODM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQBuvsIMA0GCSqGSIb3DQEBCwUAA4IBAQBvukJ/BHcN
CEebHMrtX2etmlrIOMWzch911iMH7r5dE6M0rWiWdcr7FouxwfGMm1cryjJWCavj
2ju4ec536ziFioOivGQCsXOGSsUPTH1acEt6+yYADgEQO9+k4jw7us+rlyOoxQ4Z
LrftXh26zRiIe/7xdnZP6iPbZJZhorZZSV6bP/GlStOSe6Jgh3+WAxrg+pmujMep
ZQRdW4TIx3XHYkJot1V8QKCpxXNq7SY1XCZvnQljpemtL+jL3ifLwzrtnf5K1lUG
kyNAvfoNT6UhnnAmzTVAgxMPBF5hQhmU58VH7mXJU3sH2hBKoi16nhgMzBxtNNPo
NPiJHsGcxv38
-----END CERTIFICATE-----
Generated at Tue Apr 8 22:46:09 2025 by rpki-client