Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6QnJY37qdcZrYAamkSyJhgKR3PSpjxkqkZp4qnA49NMQ/0/3138362e3232342e3136302e302f31392d3234203d3e203238353830.roa
File:                     3138362e3232342e3136302e302f31392d3234203d3e203238353830.roa (raw, json)
Hash identifier:          q8Bk1y9ekReZBiAROgKMQjD+zdLiVZXpSQu8T3+SLjk=
Subject key identifier:   04:8C:6A:CF:8F:B4:F3:2C:05:D8:6C:1D:1C:28:10:8A:A4:29:20:0C
Certificate issuer:       /CN=CFEAD79EB3C4E33FB4948AA88BF9B3EDC5511E6D
Certificate serial:       16CF77A61F41F7805169E2FCD8B20BFA7B332E75
Authority key identifier: CF:EA:D7:9E:B3:C4:E3:3F:B4:94:8A:A8:8B:F9:B3:ED:C5:51:1E:6D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CFEAD79EB3C4E33FB4948AA88BF9B3EDC5511E6D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6QnJY37qdcZrYAamkSyJhgKR3PSpjxkqkZp4qnA49NMQ/0/3138362e3232342e3136302e302f31392d3234203d3e203238353830.roa
Signing time:             Thu 19 Oct 2023 19:15:04 +0000
ROA not before:           Thu 19 Oct 2023 19:10:04 +0000
ROA not after:            Thu 17 Oct 2024 19:15:04 +0000
asID:                     28580
IP address blocks:        186.224.160.0/19 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:cf:77:a6:1f:41:f7:80:51:69:e2:fc:d8:b2:0b:fa:7b:33:2e:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CFEAD79EB3C4E33FB4948AA88BF9B3EDC5511E6D
        Validity
            Not Before: Oct 19 19:10:04 2023 GMT
            Not After : Oct 17 19:15:04 2024 GMT
        Subject: CN=048C6ACF8FB4F32C05D86C1D1C28108AA429200C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:39:ea:a3:89:63:b4:92:97:70:e5:1c:6a:46:
                    cd:c7:14:e4:5b:9e:94:69:ab:1a:82:b7:2d:cd:07:
                    53:86:6c:fc:4d:35:5a:02:c4:2f:e3:b7:b0:fc:d2:
                    81:ab:5b:28:7a:74:86:8c:47:f4:66:ea:39:aa:97:
                    42:00:df:b9:55:e3:4c:da:ba:a6:2c:71:d7:0e:6b:
                    f8:e3:27:c7:d6:30:ef:11:a2:3f:44:03:90:9c:00:
                    62:18:90:21:40:c2:34:e9:ca:62:65:40:cd:ba:86:
                    9b:c6:58:70:da:cd:b6:f0:f1:0c:f7:81:82:d1:05:
                    56:9a:6f:c7:cf:b7:1b:8d:59:a6:9c:b0:c7:bc:75:
                    2e:a3:7c:38:de:58:30:99:be:98:ac:40:56:23:c3:
                    13:f7:aa:36:0c:ba:7e:6a:83:ff:93:fa:07:68:c3:
                    90:8b:a1:16:84:ea:93:cc:9e:6e:dd:77:5d:54:5d:
                    a6:3a:5d:cf:8c:7b:f0:e2:9f:a7:a1:03:35:96:32:
                    ca:e3:11:bd:99:22:42:52:39:a7:72:f0:a0:7a:41:
                    da:62:a9:13:23:bb:6a:c7:78:ec:bf:a0:92:30:a6:
                    8a:90:72:2e:80:41:fa:3d:8b:be:bb:c9:c9:99:e7:
                    aa:df:9b:f2:aa:75:88:b0:12:73:b3:d6:38:24:9a:
                    d7:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:8C:6A:CF:8F:B4:F3:2C:05:D8:6C:1D:1C:28:10:8A:A4:29:20:0C
            X509v3 Authority Key Identifier:
                keyid:CF:EA:D7:9E:B3:C4:E3:3F:B4:94:8A:A8:8B:F9:B3:ED:C5:51:1E:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6QnJY37qdcZrYAamkSyJhgKR3PSpjxkqkZp4qnA49NMQ/0/CFEAD79EB3C4E33FB4948AA88BF9B3EDC5511E6D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CFEAD79EB3C4E33FB4948AA88BF9B3EDC5511E6D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6QnJY37qdcZrYAamkSyJhgKR3PSpjxkqkZp4qnA49NMQ/0/3138362e3232342e3136302e302f31392d3234203d3e203238353830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.224.160.0/19

    Signature Algorithm: sha256WithRSAEncryption
         6a:03:4b:0b:ad:02:dd:bd:21:e1:bb:20:90:33:28:81:82:03:
         7a:e0:49:62:39:21:11:78:83:ae:73:22:6f:c1:e3:c8:d5:63:
         c8:0a:13:e5:c8:6a:3e:5d:60:ee:de:d9:3d:84:fb:8e:b3:32:
         d6:d0:3c:0c:51:62:ae:52:d7:e1:dd:92:ee:ab:65:e7:54:4a:
         3a:15:a8:91:81:6a:88:57:54:1d:eb:df:04:00:ff:16:ea:a2:
         10:60:da:cd:ed:3d:21:ed:5e:89:55:f2:e7:9b:d0:d8:4c:16:
         89:32:cc:24:2d:98:77:13:f9:d5:02:61:10:29:4e:f4:01:fa:
         32:4e:0f:9d:f9:b7:5e:40:3c:a2:4e:43:b0:17:c9:c5:3f:d9:
         de:c4:c9:45:46:38:8c:58:21:10:0e:1f:b7:cb:7d:da:d2:f0:
         7a:23:c5:8b:d7:78:1d:70:93:fc:09:21:24:cb:64:51:49:f2:
         ba:aa:85:1e:52:85:a3:b4:b1:e6:79:b0:02:7c:1a:93:25:d8:
         29:77:a8:1e:ab:fb:f1:8f:1f:25:be:52:a9:ee:2d:e0:da:96:
         11:e1:78:0e:3d:41:b7:f2:25:7e:24:17:fb:f2:95:3e:34:08:
         6e:0d:ea:95:21:65:81:02:70:65:18:a5:bf:70:b8:4b:0e:84:
         5c:d3:34:be
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUFs93ph9B94BRaeL82LIL+nszLnUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0ZFQUQ3OUVCM0M0RTMzRkI0OTQ4QUE4OEJGOUIzRURD
NTUxMUU2RDAeFw0yMzEwMTkxOTEwMDRaFw0yNDEwMTcxOTE1MDRaMDMxMTAvBgNV
BAMTKDA0OEM2QUNGOEZCNEYzMkMwNUQ4NkMxRDFDMjgxMDhBQTQyOTIwMEMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHOeqjiWO0kpdw5RxqRs3HFORb
npRpqxqCty3NB1OGbPxNNVoCxC/jt7D80oGrWyh6dIaMR/Rm6jmql0IA37lV40za
uqYscdcOa/jjJ8fWMO8Roj9EA5CcAGIYkCFAwjTpymJlQM26hpvGWHDazbbw8Qz3
gYLRBVaab8fPtxuNWaacsMe8dS6jfDjeWDCZvpisQFYjwxP3qjYMun5qg/+T+gdo
w5CLoRaE6pPMnm7dd11UXaY6Xc+Me/Din6ehAzWWMsrjEb2ZIkJSOady8KB6Qdpi
qRMju2rHeOy/oJIwpoqQci6AQfo9i767ycmZ56rfm/KqdYiwEnOz1jgkmtcBAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUBIxqz4+08ywF2GwdHCgQiqQpIAwwHwYDVR0j
BBgwFoAUz+rXnrPE4z+0lIqoi/mz7cVRHm0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNlFuSlkzN3FkY1pyWUFhbWtTeUpoZ0tSM1BTcGp4a3FrWnA0cW5BNDlO
TVEvMC9DRkVBRDc5RUIzQzRFMzNGQjQ5NDhBQTg4QkY5QjNFREM1NTExRTZELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0NGRUFENzlFQjNDNEUzM0ZC
NDk0OEFBODhCRjlCM0VEQzU1MTFFNkQuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzZRbkpZMzdxZGNacllBYW1rU3lKaGdLUjNQU3BqeGtxa1pwNHFuQTQ5Tk1RLzAv
MzEzODM2MmUzMjMyMzQyZTMxMzYzMDJlMzAyZjMxMzkyZDMyMzQyMDNkM2UyMDMy
MzgzNTM4MzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAW64KAwDQYJKoZIhvcNAQELBQADggEBAGoDSwut
At29IeG7IJAzKIGCA3rgSWI5IRF4g65zIm/B48jVY8gKE+XIaj5dYO7e2T2E+46z
MtbQPAxRYq5S1+Hdku6rZedUSjoVqJGBaohXVB3r3wQA/xbqohBg2s3tPSHtXolV
8ueb0NhMFokyzCQtmHcT+dUCYRApTvQB+jJOD535t15APKJOQ7AXycU/2d7EyUVG
OIxYIRAOH7fLfdrS8HojxYvXeB1wk/wJISTLZFFJ8rqqhR5ShaO0seZ5sAJ8GpMl
2Cl3qB6r+/GPHyW+UqnuLeDalhHheA49QbfyJX4kF/vylT40CG4N6pUhZYECcGUY
pb9wuEsOhFzTNL4=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:15 2024 by rpki-client on console-ams.rpki-client.org