Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7N7iTT4qG54oraScte81ckVQY8qMawB2pF31X55E6X91/0/3138362e3230382e302e302f32332d3233203d3e20323632373133.roa
File:                     3138362e3230382e302e302f32332d3233203d3e20323632373133.roa (raw, json)
Hash identifier:          O3kQ2hfLuj88ePO+neL8DxbkN1UwYCHguCkIuzI368c=
Subject key identifier:   90:0D:55:C7:0C:A0:1F:CE:EC:53:42:89:5B:1C:77:69:7C:DA:77:B2
Certificate issuer:       /CN=F4C6B8C537AC063CE51075C6B816E3353E57475C
Certificate serial:       1D4934081B7AF1D1A3CDCEF51D3814BF7D442D6A
Authority key identifier: F4:C6:B8:C5:37:AC:06:3C:E5:10:75:C6:B8:16:E3:35:3E:57:47:5C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F4C6B8C537AC063CE51075C6B816E3353E57475C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7N7iTT4qG54oraScte81ckVQY8qMawB2pF31X55E6X91/0/3138362e3230382e302e302f32332d3233203d3e20323632373133.roa
Signing time:             Tue 12 Sep 2023 05:00:07 +0000
ROA not before:           Tue 12 Sep 2023 04:55:07 +0000
ROA not after:            Tue 10 Sep 2024 05:00:07 +0000
asID:                     262713
IP address blocks:        186.208.0.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:49:34:08:1b:7a:f1:d1:a3:cd:ce:f5:1d:38:14:bf:7d:44:2d:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F4C6B8C537AC063CE51075C6B816E3353E57475C
        Validity
            Not Before: Sep 12 04:55:07 2023 GMT
            Not After : Sep 10 05:00:07 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:e0:48:41:e4:2e:9f:2a:2e:3c:a1:cf:ba:8a:
                    0f:e3:b8:b1:35:5c:a4:ac:f9:cb:23:dc:a1:f2:13:
                    73:51:39:c3:b7:59:93:12:b6:d3:75:c9:0e:9d:07:
                    7d:99:9c:9b:b6:3b:79:b0:fa:01:61:5a:42:a0:97:
                    ec:f1:78:c0:0c:8f:b4:10:a7:8f:fe:03:a0:30:a6:
                    0f:c0:fa:74:bc:b0:99:60:1c:f2:bf:ac:5e:01:eb:
                    0f:c7:82:17:54:58:88:5f:f9:1d:21:e8:2e:d4:30:
                    b4:2a:ab:7f:43:0f:93:45:21:8f:a4:f2:fa:e7:b2:
                    80:15:f6:51:e0:7b:dc:a8:42:0c:1b:fd:cc:09:94:
                    06:0f:10:69:2a:7a:ba:b0:31:ae:84:9e:a1:8a:27:
                    ab:62:2e:ab:31:d2:78:e9:e2:08:5a:07:41:43:6a:
                    dc:da:96:f0:3a:74:a3:c9:78:18:39:a0:e1:83:11:
                    b1:7a:96:df:2b:bc:25:a8:84:a3:95:18:4a:de:09:
                    99:23:cd:ed:b4:e8:0c:b7:01:cf:fc:47:35:a9:9d:
                    be:15:10:a8:06:c5:37:3c:61:aa:fc:fb:c4:64:2d:
                    00:b1:ef:4d:21:8d:ec:17:d8:c5:d9:07:4d:7e:e0:
                    8f:c1:50:56:11:37:89:3a:9a:93:02:4b:df:03:6b:
                    93:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:0D:55:C7:0C:A0:1F:CE:EC:53:42:89:5B:1C:77:69:7C:DA:77:B2
            X509v3 Authority Key Identifier:
                keyid:F4:C6:B8:C5:37:AC:06:3C:E5:10:75:C6:B8:16:E3:35:3E:57:47:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7N7iTT4qG54oraScte81ckVQY8qMawB2pF31X55E6X91/0/F4C6B8C537AC063CE51075C6B816E3353E57475C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F4C6B8C537AC063CE51075C6B816E3353E57475C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7N7iTT4qG54oraScte81ckVQY8qMawB2pF31X55E6X91/0/3138362e3230382e302e302f32332d3233203d3e20323632373133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.208.0.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5b:b0:3d:43:46:7a:cc:f5:ab:09:51:04:1a:72:41:99:85:17:
         d6:3d:87:cc:7a:ad:aa:b3:e2:27:15:62:b9:59:f5:bf:72:46:
         5f:1d:f9:fe:d7:32:2b:36:e6:f2:f4:ba:46:00:4d:0f:a0:49:
         50:52:84:b7:a4:cd:27:ee:af:a2:f8:9f:f4:8d:11:7e:01:ac:
         6f:67:7d:a2:8a:9a:99:f1:5c:a4:15:8a:3d:ea:47:2b:04:2c:
         53:fa:10:08:f8:fa:37:0e:aa:f7:a6:e1:c6:5f:f5:ea:41:3c:
         34:8d:b8:05:67:f0:92:b2:b1:5a:2c:8d:49:87:4a:9f:f3:8f:
         c1:b2:57:56:55:ae:96:ce:12:ff:d2:3e:e5:cb:87:b9:df:16:
         ce:59:79:88:4f:02:0b:dc:f0:1f:90:05:59:0e:fb:dd:08:2a:
         29:d3:f4:94:75:95:fa:b1:eb:31:91:95:0f:6f:15:db:20:76:
         c3:2e:73:d4:a9:b9:0e:ec:96:b2:ee:72:79:cc:79:4e:f2:80:
         8a:fa:17:a6:97:22:b7:92:14:35:01:8b:af:f8:fd:09:06:d0:
         3c:2d:87:c1:4b:ff:a2:53:58:dd:cb:7f:e7:c7:75:1b:c3:a7:
         cd:d5:85:df:d6:6a:34:5f:e3:0a:04:7a:5c:78:21:3b:90:e6:
         67:7e:dd:e9
-----BEGIN CERTIFICATE-----
MIIHQTCCBimgAwIBAgIUHUk0CBt68dGjzc71HTgUv31ELWowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjRDNkI4QzUzN0FDMDYzQ0U1MTA3NUM2QjgxNkUzMzUz
RTU3NDc1QzAeFw0yMzA5MTIwNDU1MDdaFw0yNDA5MTAwNTAwMDdaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwRDRFMDQ4NDFFNDJFOUYyQTJF
M0NBMUNGQkE4QTBGRTNCOEIxMzU1Q0E0QUNGOUNCMjNEQ0ExRjIxMzczNTEzOUMz
Qjc1OTkzMTJCNkQzNzVDOTBFOUQwNzdEOTk5QzlCQjYzQjc5QjBGQTAxNjE1QTQy
QTA5N0VDRjE3OEMwMEM4RkI0MTBBNzhGRkUwM0EwMzBBNjBGQzBGQTc0QkNCMDk5
NjAxQ0YyQkZBQzVFMDFFQjBGQzc4MjE3NTQ1ODg4NUZGOTFEMjFFODJFRDQzMEI0
MkFBQjdGNDMwRjkzNDUyMThGQTRGMkZBRTdCMjgwMTVGNjUxRTA3QkRDQTg0MjBD
MUJGRENDMDk5NDA2MEYxMDY5MkE3QUJBQjAzMUFFODQ5RUExOEEyN0FCNjIyRUFC
MzFEMjc4RTlFMjA4NUEwNzQxNDM2QURDREE5NkYwM0E3NEEzQzk3ODE4MzlBMEUx
ODMxMUIxN0E5NkRGMkJCQzI1QTg4NEEzOTUxODRBREUwOTk5MjNDREVEQjRFODBD
QjcwMUNGRkM0NzM1QTk5REJFMTUxMEE4MDZDNTM3M0M2MUFBRkNGQkM0NjQyRDAw
QjFFRjREMjE4REVDMTdEOEM1RDkwNzREN0VFMDhGQzE1MDU2MTEzNzg5M0E5QTkz
MDI0QkRGMDM2QjkzMjcwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEA1OBIQeQunyouPKHPuooP47ixNVykrPnLI9yh8hNzUTnDt1mTErbT
dckOnQd9mZybtjt5sPoBYVpCoJfs8XjADI+0EKeP/gOgMKYPwPp0vLCZYBzyv6xe
AesPx4IXVFiIX/kdIegu1DC0Kqt/Qw+TRSGPpPL657KAFfZR4HvcqEIMG/3MCZQG
DxBpKnq6sDGuhJ6hiierYi6rMdJ46eIIWgdBQ2rc2pbwOnSjyXgYOaDhgxGxepbf
K7wlqISjlRhK3gmZI83ttOgMtwHP/Ec1qZ2+FRCoBsU3PGGq/PvEZC0Ase9NIY3s
F9jF2QdNfuCPwVBWETeJOpqTAkvfA2uTJwIDAQABo4ICTzCCAkswHQYDVR0OBBYE
FJANVccMoB/O7FNCiVscd2l82neyMB8GA1UdIwQYMBaAFPTGuMU3rAY85RB1xrgW
4zU+V0dcMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzdON2lUVDRxRzU0b3Jh
U2N0ZTgxY2tWUVk4cU1hd0IycEYzMVg1NUU2WDkxLzAvRjRDNkI4QzUzN0FDMDYz
Q0U1MTA3NUM2QjgxNkUzMzUzRTU3NDc1Qy5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC9GNEM2QjhDNTM3QUMwNjNDRTUxMDc1QzZCODE2RTMzNTNFNTc0
NzVDLmNlcjCBrAYIKwYBBQUHAQsEgZ8wgZwwgZkGCCsGAQUFBzALhoGMcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby83TjdpVFQ0cUc1NG9yYVNjdGU4
MWNrVlFZOHFNYXdCMnBGMzFYNTVFNlg5MS8wLzMxMzgzNjJlMzIzMDM4MmUzMDJl
MzAyZjMyMzMyZDMyMzMyMDNkM2UyMDMyMzYzMjM3MzEzMy5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAbrQ
ADANBgkqhkiG9w0BAQsFAAOCAQEAW7A9Q0Z6zPWrCVEEGnJBmYUX1j2HzHqtqrPi
JxViuVn1v3JGXx35/tcyKzbm8vS6RgBND6BJUFKEt6TNJ+6vovif9I0RfgGsb2d9
ooqamfFcpBWKPepHKwQsU/oQCPj6Nw6q96bhxl/16kE8NI24BWfwkrKxWiyNSYdK
n/OPwbJXVlWuls4S/9I+5cuHud8Wzll5iE8CC9zwH5AFWQ773QgqKdP0lHWV+rHr
MZGVD28V2yB2wy5z1Km5DuyWsu5yecx5TvKAivoXppcit5IUNQGLr/j9CQbQPC2H
wUv/olNY3ct/58d1G8OnzdWF39ZqNF/jCgR6XHghO5DmZ37d6Q==
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:09:56 2025 by rpki-client