Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6dct7GP6rurTczyFT97rSgqH99TN2nvcqhyqtLvETP4E/1/3139302e3139362e3234362e302f32342d3234203d3e20323636313736.roa
File:                     3139302e3139362e3234362e302f32342d3234203d3e20323636313736.roa (raw, json)
Hash identifier:          Jj0OTV/QOvKN4XX5DHRpxDpmd2mKLUs2r/RNA2bQP78=
Subject key identifier:   6F:0F:AC:11:B9:1D:31:DA:1C:06:4A:4B:B2:94:B0:C1:D0:24:42:EC
Certificate issuer:       /CN=EBCADF4D0592A8CD0131D2F68CFD7741566B7FE4
Certificate serial:       4A9573E17A157846C1DDD8B4445F3A02AB306DA0
Authority key identifier: EB:CA:DF:4D:05:92:A8:CD:01:31:D2:F6:8C:FD:77:41:56:6B:7F:E4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EBCADF4D0592A8CD0131D2F68CFD7741566B7FE4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6dct7GP6rurTczyFT97rSgqH99TN2nvcqhyqtLvETP4E/1/3139302e3139362e3234362e302f32342d3234203d3e20323636313736.roa
Signing time:             Fri 07 Mar 2025 01:33:57 +0000
ROA not before:           Fri 07 Mar 2025 01:28:57 +0000
ROA not after:            Fri 06 Mar 2026 01:33:57 +0000
asID:                     266176
IP address blocks:        190.196.246.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:95:73:e1:7a:15:78:46:c1:dd:d8:b4:44:5f:3a:02:ab:30:6d:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EBCADF4D0592A8CD0131D2F68CFD7741566B7FE4
        Validity
            Not Before: Mar  7 01:28:57 2025 GMT
            Not After : Mar  6 01:33:57 2026 GMT
        Subject: CN=6F0FAC11B91D31DA1C064A4BB294B0C1D02442EC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:ab:2c:8e:61:33:6d:1a:c4:e7:4c:62:02:d0:
                    69:c8:fa:0f:7c:41:7f:35:6d:8c:1e:60:4a:db:26:
                    6a:e2:64:c4:7e:de:b7:4c:80:d0:00:2e:2d:f0:cd:
                    6b:92:0d:0d:0c:4b:4c:11:87:a5:f4:06:31:4e:bc:
                    05:80:93:d1:64:7c:29:f1:19:c3:e7:c7:47:b0:5d:
                    7b:86:3b:55:c0:99:81:dd:c3:f0:31:13:33:8e:9c:
                    8f:66:15:af:59:71:77:f8:dc:d9:cf:f1:ff:81:e4:
                    ef:3b:e0:6e:23:18:25:0c:e2:1b:63:4d:aa:92:a8:
                    80:0c:6f:f9:b3:cf:e8:85:aa:76:a8:3b:c5:14:e5:
                    c6:db:02:0f:f4:01:d1:b0:34:d2:38:29:fe:90:63:
                    ea:91:17:ac:04:7d:b1:c0:e3:57:1d:41:e4:ec:85:
                    e7:c2:d2:e4:bc:41:dd:17:55:2a:81:a8:cb:88:1f:
                    84:1b:5c:a2:62:ee:34:f0:ab:e4:05:b7:2e:07:03:
                    cf:27:db:d6:d3:82:c8:8c:e6:66:f6:ff:a5:cc:8d:
                    4c:d7:b6:c5:9b:18:2f:41:8a:46:33:03:c2:c7:f8:
                    90:0d:a9:45:a9:3b:62:03:36:ca:56:b0:5e:aa:38:
                    67:af:f0:23:80:ca:63:f9:8d:98:28:73:34:a8:3e:
                    cb:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:0F:AC:11:B9:1D:31:DA:1C:06:4A:4B:B2:94:B0:C1:D0:24:42:EC
            X509v3 Authority Key Identifier:
                keyid:EB:CA:DF:4D:05:92:A8:CD:01:31:D2:F6:8C:FD:77:41:56:6B:7F:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6dct7GP6rurTczyFT97rSgqH99TN2nvcqhyqtLvETP4E/1/EBCADF4D0592A8CD0131D2F68CFD7741566B7FE4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EBCADF4D0592A8CD0131D2F68CFD7741566B7FE4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6dct7GP6rurTczyFT97rSgqH99TN2nvcqhyqtLvETP4E/1/3139302e3139362e3234362e302f32342d3234203d3e20323636313736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.196.246.0/24

    Signature Algorithm: sha256WithRSAEncryption
         01:c3:97:c4:7a:55:3b:f7:0e:f7:96:ad:05:d6:96:be:8e:ad:
         18:5b:2a:70:5a:0f:30:b6:cf:66:da:f8:3e:44:6d:be:d5:0e:
         3f:5c:c5:f6:9d:e9:11:6f:f2:77:9a:3d:01:e0:ae:e4:cf:6e:
         34:2f:8a:e2:26:1a:55:16:d3:d8:d6:5d:38:97:f8:b8:14:82:
         b2:f8:1a:20:15:3f:cd:9c:de:4e:d6:ec:34:67:5c:d4:a1:cb:
         7e:f8:a8:10:aa:00:90:63:3e:22:ec:3f:f8:d7:0c:3f:b2:04:
         29:11:df:33:4e:ee:8c:43:b9:ec:9e:1f:b0:eb:75:1c:50:4a:
         1b:d6:84:24:de:e3:f2:e6:bc:a1:fe:9c:94:01:f1:92:a2:0a:
         f0:33:d6:6b:ff:5a:b3:90:66:98:d2:17:e7:63:c1:29:11:d6:
         00:d3:d4:02:15:3f:6c:53:43:57:75:29:a9:c1:3f:82:4e:82:
         96:4b:a8:94:7c:84:63:93:1a:b8:67:14:89:c0:fd:6c:79:9a:
         14:c5:3e:8b:c5:d4:9e:4a:33:0d:86:1f:32:07:ad:d3:cd:00:
         6a:3d:9d:93:33:4a:8a:ac:ed:a3:81:51:4a:44:84:bc:ac:24:
         dc:36:d9:ff:21:a1:89:15:4f:0b:7b:a7:ba:bb:8d:5f:69:ae:
         30:53:b5:b6
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUSpVz4XoVeEbB3di0RF86AqswbaAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUJDQURGNEQwNTkyQThDRDAxMzFEMkY2OENGRDc3NDE1
NjZCN0ZFNDAeFw0yNTAzMDcwMTI4NTdaFw0yNjAzMDYwMTMzNTdaMDMxMTAvBgNV
BAMTKDZGMEZBQzExQjkxRDMxREExQzA2NEE0QkIyOTRCMEMxRDAyNDQyRUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpqyyOYTNtGsTnTGIC0GnI+g98
QX81bYweYErbJmriZMR+3rdMgNAALi3wzWuSDQ0MS0wRh6X0BjFOvAWAk9FkfCnx
GcPnx0ewXXuGO1XAmYHdw/AxEzOOnI9mFa9ZcXf43NnP8f+B5O874G4jGCUM4htj
TaqSqIAMb/mzz+iFqnaoO8UU5cbbAg/0AdGwNNI4Kf6QY+qRF6wEfbHA41cdQeTs
hefC0uS8Qd0XVSqBqMuIH4QbXKJi7jTwq+QFty4HA88n29bTgsiM5mb2/6XMjUzX
tsWbGC9BikYzA8LH+JANqUWpO2IDNspWsF6qOGev8COAymP5jZgoczSoPssFAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUbw+sEbkdMdocBkpLspSwwdAkQuwwHwYDVR0j
BBgwFoAU68rfTQWSqM0BMdL2jP13QVZrf+QwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNmRjdDdHUDZydXJUY3p5RlQ5N3JTZ3FIOTlUTjJudmNxaHlxdEx2RVRQ
NEUvMS9FQkNBREY0RDA1OTJBOENEMDEzMUQyRjY4Q0ZENzc0MTU2NkI3RkU0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0VCQ0FERjREMDU5MkE4Q0Qw
MTMxRDJGNjhDRkQ3NzQxNTY2QjdGRTQuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzZkY3Q3R1A2cnVyVGN6eUZUOTdyU2dxSDk5VE4ybnZjcWh5cXRMdkVUUDRFLzEv
MzEzOTMwMmUzMTM5MzYyZTMyMzQzNjJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzYzNjMxMzczNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAL7E9jANBgkqhkiG9w0BAQsFAAOCAQEAAcOX
xHpVO/cO95atBdaWvo6tGFsqcFoPMLbPZtr4PkRtvtUOP1zF9p3pEW/yd5o9AeCu
5M9uNC+K4iYaVRbT2NZdOJf4uBSCsvgaIBU/zZzeTtbsNGdc1KHLfvioEKoAkGM+
Iuw/+NcMP7IEKRHfM07ujEO57J4fsOt1HFBKG9aEJN7j8ua8of6clAHxkqIK8DPW
a/9as5BmmNIX52PBKRHWANPUAhU/bFNDV3UpqcE/gk6ClkuolHyEY5MauGcUicD9
bHmaFMU+i8XUnkozDYYfMget080Aaj2dkzNKiqzto4FRSkSEvKwk3DbZ/yGhiRVP
C3unuruNX2muMFO1tg==
-----END CERTIFICATE-----
Generated at Sat Apr 12 21:35:53 2025 by rpki-client