Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5uENiHDYwVy4DAAeQgxL4nLtsrqnHafPDVw3KYwuwJL5/1/3138362e3233352e3136372e302f32342d3234203d3e20323632373834.roa
File:                     3138362e3233352e3136372e302f32342d3234203d3e20323632373834.roa (raw, json)
Hash identifier:          zF8mFikqDD91qcAv3RGDPHF0RpIM5JjRZK8ejvRhyUA=
Subject key identifier:   BB:FB:28:02:CD:6B:91:B9:8A:19:0F:26:2E:F0:C2:BC:D8:8E:2C:D8
Certificate issuer:       /CN=8CD2E74C0B51414825F95C9D3D432ADD56896751
Certificate serial:       0F9AD6C531E8BF4BEEFE818AAE82549FA9F982D3
Authority key identifier: 8C:D2:E7:4C:0B:51:41:48:25:F9:5C:9D:3D:43:2A:DD:56:89:67:51
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8CD2E74C0B51414825F95C9D3D432ADD56896751.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5uENiHDYwVy4DAAeQgxL4nLtsrqnHafPDVw3KYwuwJL5/1/3138362e3233352e3136372e302f32342d3234203d3e20323632373834.roa
Signing time:             Sat 22 Mar 2025 09:59:27 +0000
ROA not before:           Sat 22 Mar 2025 09:54:27 +0000
ROA not after:            Sat 21 Mar 2026 09:59:27 +0000
asID:                     262784
IP address blocks:        186.235.167.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:9a:d6:c5:31:e8:bf:4b:ee:fe:81:8a:ae:82:54:9f:a9:f9:82:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8CD2E74C0B51414825F95C9D3D432ADD56896751
        Validity
            Not Before: Mar 22 09:54:27 2025 GMT
            Not After : Mar 21 09:59:27 2026 GMT
        Subject: CN=BBFB2802CD6B91B98A190F262EF0C2BCD88E2CD8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:45:d2:84:24:80:69:f9:d1:19:76:a5:34:c7:
                    d4:5c:b1:11:2e:7a:e3:53:61:28:d1:63:a5:98:40:
                    fa:9e:60:bd:d5:63:5a:3d:4b:c6:4d:25:de:e6:db:
                    01:94:a6:da:59:0d:e6:d9:6f:2a:14:08:c7:12:6e:
                    6a:9e:22:bf:ee:87:be:d3:6c:3b:ab:6c:27:0e:b2:
                    96:74:84:7b:82:fd:e3:e9:e7:9f:5a:04:92:20:5e:
                    03:50:27:47:b9:01:0c:6b:f0:ce:81:0e:d0:5f:e0:
                    86:ab:78:a2:c5:cb:f5:d7:bf:57:30:d1:ab:f2:be:
                    b7:29:0f:a4:83:ba:1f:ca:2e:c1:1a:57:3b:8d:0a:
                    9a:5e:f2:25:67:d8:64:7c:9c:c8:9b:65:eb:34:5e:
                    84:5a:99:b3:cd:0c:37:be:ca:84:0f:3d:5d:74:cf:
                    08:ac:6b:82:59:a1:20:a1:41:1f:c1:f3:3b:3b:92:
                    bd:ae:0b:49:01:97:90:ac:1a:bb:c4:be:5f:a2:42:
                    be:d7:d1:02:ba:37:38:43:41:b5:15:b8:0f:ab:56:
                    d8:c9:f5:ca:bb:55:e1:c0:de:a6:4b:ce:fb:95:86:
                    80:04:12:e7:52:a8:38:56:34:24:00:ce:56:e1:df:
                    75:48:37:1b:c7:1c:8e:e9:0d:db:ea:ca:3d:65:fb:
                    20:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:FB:28:02:CD:6B:91:B9:8A:19:0F:26:2E:F0:C2:BC:D8:8E:2C:D8
            X509v3 Authority Key Identifier:
                keyid:8C:D2:E7:4C:0B:51:41:48:25:F9:5C:9D:3D:43:2A:DD:56:89:67:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5uENiHDYwVy4DAAeQgxL4nLtsrqnHafPDVw3KYwuwJL5/1/8CD2E74C0B51414825F95C9D3D432ADD56896751.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8CD2E74C0B51414825F95C9D3D432ADD56896751.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5uENiHDYwVy4DAAeQgxL4nLtsrqnHafPDVw3KYwuwJL5/1/3138362e3233352e3136372e302f32342d3234203d3e20323632373834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.235.167.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a4:e6:e0:96:88:cb:53:76:f3:69:b9:ea:7f:0a:27:d1:e6:d4:
         71:a9:50:5d:ed:8d:4c:5a:09:7c:2b:6f:97:f2:ae:72:5c:1f:
         0c:8f:cb:8f:77:ab:40:3c:9c:54:f1:a7:64:c3:bd:9b:42:82:
         46:ad:eb:00:10:d3:b4:10:5c:ce:1b:63:fa:72:21:f3:56:61:
         73:08:d5:f4:48:7c:32:c0:0a:85:2e:b1:25:53:18:fe:3a:19:
         46:3b:6e:f8:4a:a5:88:21:4e:25:b5:f7:b8:d0:ad:a0:97:59:
         d1:16:78:bf:29:83:69:53:74:79:43:85:9f:38:e2:b2:99:95:
         ba:1a:b1:32:ba:d7:f4:36:d8:6c:6a:1f:6b:0e:be:96:3b:da:
         8d:9c:64:a7:b2:25:87:f9:5c:e2:7a:4a:11:48:7e:aa:90:6b:
         7b:05:f8:28:87:5e:ca:60:2a:0c:4e:97:a6:1a:58:a5:1d:f2:
         01:2a:d8:eb:19:4f:74:39:1b:b4:bb:e3:ce:27:a7:07:49:49:
         20:a1:03:9d:99:0a:ac:3c:f1:cc:fb:32:58:73:90:50:55:f2:
         e6:32:2d:b4:90:3f:b8:98:89:35:82:22:14:7d:de:82:d1:ab:
         e0:b7:6b:48:5c:0d:69:92:f2:98:c9:41:39:86:14:f2:d4:d7:
         37:bd:82:57
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUD5rWxTHov0vu/oGKroJUn6n5gtMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOENEMkU3NEMwQjUxNDE0ODI1Rjk1QzlEM0Q0MzJBREQ1
Njg5Njc1MTAeFw0yNTAzMjIwOTU0MjdaFw0yNjAzMjEwOTU5MjdaMDMxMTAvBgNV
BAMTKEJCRkIyODAyQ0Q2QjkxQjk4QTE5MEYyNjJFRjBDMkJDRDg4RTJDRDgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDARdKEJIBp+dEZdqU0x9RcsREu
euNTYSjRY6WYQPqeYL3VY1o9S8ZNJd7m2wGUptpZDebZbyoUCMcSbmqeIr/uh77T
bDurbCcOspZ0hHuC/ePp559aBJIgXgNQJ0e5AQxr8M6BDtBf4IareKLFy/XXv1cw
0avyvrcpD6SDuh/KLsEaVzuNCppe8iVn2GR8nMibZes0XoRambPNDDe+yoQPPV10
zwisa4JZoSChQR/B8zs7kr2uC0kBl5CsGrvEvl+iQr7X0QK6NzhDQbUVuA+rVtjJ
9cq7VeHA3qZLzvuVhoAEEudSqDhWNCQAzlbh33VINxvHHI7pDdvqyj1l+yCLAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUu/soAs1rkbmKGQ8mLvDCvNiOLNgwHwYDVR0j
BBgwFoAUjNLnTAtRQUgl+VydPUMq3VaJZ1EwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNXVFTmlIRFl3Vnk0REFBZVFneEw0bkx0c3JxbkhhZlBEVnczS1l3dXdK
TDUvMS84Q0QyRTc0QzBCNTE0MTQ4MjVGOTVDOUQzRDQzMkFERDU2ODk2NzUxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzhDRDJFNzRDMEI1MTQxNDgy
NUY5NUM5RDNENDMyQURENTY4OTY3NTEuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzV1RU5pSERZd1Z5NERBQWVRZ3hMNG5MdHNycW5IYWZQRFZ3M0tZd3V3Skw1LzEv
MzEzODM2MmUzMjMzMzUyZTMxMzYzNzJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzYzMjM3MzgzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEALrrpzANBgkqhkiG9w0BAQsFAAOCAQEApObg
lojLU3bzabnqfwon0ebUcalQXe2NTFoJfCtvl/KuclwfDI/Lj3erQDycVPGnZMO9
m0KCRq3rABDTtBBczhtj+nIh81ZhcwjV9Eh8MsAKhS6xJVMY/joZRjtu+EqliCFO
JbX3uNCtoJdZ0RZ4vymDaVN0eUOFnzjispmVuhqxMrrX9DbYbGofaw6+ljvajZxk
p7Ilh/lc4npKEUh+qpBrewX4KIdeymAqDE6XphpYpR3yASrY6xlPdDkbtLvjzien
B0lJIKEDnZkKrDzxzPsyWHOQUFXy5jIttJA/uJiJNYIiFH3egtGr4LdrSFwNaZLy
mMlBOYYU8tTXN72CVw==
-----END CERTIFICATE-----
Generated at Sat Apr 5 23:20:46 2025 by rpki-client