Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7N7iTT4qG54oraScte81ckVQY8qMawB2pF31X55E6X91/0/3138362e3230382e302e302f32342d3234203d3e20323632373133.roa
File:                     3138362e3230382e302e302f32342d3234203d3e20323632373133.roa (raw, json)
Hash identifier:          QagW6SwW2te1XjiHEUSEcrERjY/K3T1x4Jnar/0u8vc=
Subject key identifier:   34:AC:7D:59:1C:FA:7D:53:35:01:FC:DE:40:E9:46:AA:52:F4:D3:AF
Certificate issuer:       /CN=F4C6B8C537AC063CE51075C6B816E3353E57475C
Certificate serial:       6F7E6BE962F12F5E63358F2E265E89A4CCC6F863
Authority key identifier: F4:C6:B8:C5:37:AC:06:3C:E5:10:75:C6:B8:16:E3:35:3E:57:47:5C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F4C6B8C537AC063CE51075C6B816E3353E57475C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7N7iTT4qG54oraScte81ckVQY8qMawB2pF31X55E6X91/0/3138362e3230382e302e302f32342d3234203d3e20323632373133.roa
Signing time:             Tue 12 Sep 2023 05:00:02 +0000
ROA not before:           Tue 12 Sep 2023 04:55:02 +0000
ROA not after:            Tue 10 Sep 2024 05:00:02 +0000
asID:                     262713
IP address blocks:        186.208.0.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:7e:6b:e9:62:f1:2f:5e:63:35:8f:2e:26:5e:89:a4:cc:c6:f8:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F4C6B8C537AC063CE51075C6B816E3353E57475C
        Validity
            Not Before: Sep 12 04:55:02 2023 GMT
            Not After : Sep 10 05:00:02 2024 GMT
        Subject: CN=3082010A0282010100D2D50BFB1DFD0F73F5BE53377E5C7051D1BAED87B36FB7391142BF1CD1D090D38E80F3DB818AFA20F0AF09A61EE08496C0F63D916D07CA4795A421964BD1BA7F9A11EA9BEC33867B2D94365204005BB5D75B1AA13C3C86AB941699DD8A1F41F4E4B9659BEEFA435BE7E943CA9BAC2BC2DFE54A51970DB0A76EE3E934029B9D7A432F4361E685F2C4A20B725D9975F111381D2E7501E1864B4FC464DA8CE70CF134CA555C6A87654C594C9F9358EEBEE2876E68115374777D772DD13001FE9CF9345831EACFCEBBACC6912A56234CCD81C18830300AAD91A3976C0A530BEC26F56A0B9549F6E086961141CFBFA62C726AC943E74A9CBEC7D2CA6B62E17D8916DD0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:d5:0b:fb:1d:fd:0f:73:f5:be:53:37:7e:5c:
                    70:51:d1:ba:ed:87:b3:6f:b7:39:11:42:bf:1c:d1:
                    d0:90:d3:8e:80:f3:db:81:8a:fa:20:f0:af:09:a6:
                    1e:e0:84:96:c0:f6:3d:91:6d:07:ca:47:95:a4:21:
                    96:4b:d1:ba:7f:9a:11:ea:9b:ec:33:86:7b:2d:94:
                    36:52:04:00:5b:b5:d7:5b:1a:a1:3c:3c:86:ab:94:
                    16:99:dd:8a:1f:41:f4:e4:b9:65:9b:ee:fa:43:5b:
                    e7:e9:43:ca:9b:ac:2b:c2:df:e5:4a:51:97:0d:b0:
                    a7:6e:e3:e9:34:02:9b:9d:7a:43:2f:43:61:e6:85:
                    f2:c4:a2:0b:72:5d:99:75:f1:11:38:1d:2e:75:01:
                    e1:86:4b:4f:c4:64:da:8c:e7:0c:f1:34:ca:55:5c:
                    6a:87:65:4c:59:4c:9f:93:58:ee:be:e2:87:6e:68:
                    11:53:74:77:7d:77:2d:d1:30:01:fe:9c:f9:34:58:
                    31:ea:cf:ce:bb:ac:c6:91:2a:56:23:4c:cd:81:c1:
                    88:30:30:0a:ad:91:a3:97:6c:0a:53:0b:ec:26:f5:
                    6a:0b:95:49:f6:e0:86:96:11:41:cf:bf:a6:2c:72:
                    6a:c9:43:e7:4a:9c:be:c7:d2:ca:6b:62:e1:7d:89:
                    16:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:AC:7D:59:1C:FA:7D:53:35:01:FC:DE:40:E9:46:AA:52:F4:D3:AF
            X509v3 Authority Key Identifier:
                keyid:F4:C6:B8:C5:37:AC:06:3C:E5:10:75:C6:B8:16:E3:35:3E:57:47:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7N7iTT4qG54oraScte81ckVQY8qMawB2pF31X55E6X91/0/F4C6B8C537AC063CE51075C6B816E3353E57475C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F4C6B8C537AC063CE51075C6B816E3353E57475C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7N7iTT4qG54oraScte81ckVQY8qMawB2pF31X55E6X91/0/3138362e3230382e302e302f32342d3234203d3e20323632373133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.208.0.0/24

    Signature Algorithm: sha256WithRSAEncryption
         78:f9:fd:be:9d:57:d2:b9:e4:b4:ab:a7:75:83:7e:15:3b:c1:
         ab:6d:07:7f:1d:e2:55:14:f6:de:5a:37:33:ee:b5:3d:fd:6e:
         44:39:9a:63:e6:23:c4:0c:3d:34:bd:69:0c:4f:83:1c:18:03:
         8b:3d:7b:20:82:f9:87:9d:c3:19:2b:ae:b3:8a:fb:de:ab:1b:
         c9:16:c4:10:80:91:df:66:57:8e:9f:ff:a7:65:ef:8b:50:f8:
         3f:7e:f4:3b:a5:6f:7b:c2:4c:bb:d4:65:68:1c:cd:bd:44:ff:
         88:27:b6:a4:5e:4a:de:69:07:d0:3f:6c:25:38:84:e9:42:85:
         77:1e:a0:45:8b:7a:ff:95:e3:40:60:24:3d:e8:71:72:00:87:
         7b:38:42:2c:05:36:ca:84:50:64:7f:ee:37:b7:dd:80:a4:f3:
         89:a8:f7:8e:4c:7e:89:07:14:77:cd:fb:1a:c1:9c:d6:c5:0e:
         df:7a:9e:2b:b0:0b:42:33:d2:c1:60:a2:be:d3:84:00:50:a8:
         50:a7:e7:66:6c:bf:0c:b1:99:09:47:79:fa:6d:a9:0f:87:44:
         c3:01:0c:37:59:65:3c:0b:ef:d6:bd:5e:e5:2c:dc:dc:a2:06:
         f5:85:88:e0:77:77:8e:8e:cb:24:52:c4:74:7d:17:ae:db:79:
         c4:47:81:04
-----BEGIN CERTIFICATE-----
MIIHQTCCBimgAwIBAgIUb35r6WLxL15jNY8uJl6JpMzG+GMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjRDNkI4QzUzN0FDMDYzQ0U1MTA3NUM2QjgxNkUzMzUz
RTU3NDc1QzAeFw0yMzA5MTIwNDU1MDJaFw0yNDA5MTAwNTAwMDJaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwRDJENTBCRkIxREZEMEY3M0Y1
QkU1MzM3N0U1QzcwNTFEMUJBRUQ4N0IzNkZCNzM5MTE0MkJGMUNEMUQwOTBEMzhF
ODBGM0RCODE4QUZBMjBGMEFGMDlBNjFFRTA4NDk2QzBGNjNEOTE2RDA3Q0E0Nzk1
QTQyMTk2NEJEMUJBN0Y5QTExRUE5QkVDMzM4NjdCMkQ5NDM2NTIwNDAwNUJCNUQ3
NUIxQUExM0MzQzg2QUI5NDE2OTlERDhBMUY0MUY0RTRCOTY1OUJFRUZBNDM1QkU3
RTk0M0NBOUJBQzJCQzJERkU1NEE1MTk3MERCMEE3NkVFM0U5MzQwMjlCOUQ3QTQz
MkY0MzYxRTY4NUYyQzRBMjBCNzI1RDk5NzVGMTExMzgxRDJFNzUwMUUxODY0QjRG
QzQ2NERBOENFNzBDRjEzNENBNTU1QzZBODc2NTRDNTk0QzlGOTM1OEVFQkVFMjg3
NkU2ODExNTM3NDc3N0Q3NzJERDEzMDAxRkU5Q0Y5MzQ1ODMxRUFDRkNFQkJBQ0M2
OTEyQTU2MjM0Q0NEODFDMTg4MzAzMDBBQUQ5MUEzOTc2QzBBNTMwQkVDMjZGNTZB
MEI5NTQ5RjZFMDg2OTYxMTQxQ0ZCRkE2MkM3MjZBQzk0M0U3NEE5Q0JFQzdEMkNB
NkI2MkUxN0Q4OTE2REQwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEA0tUL+x39D3P1vlM3flxwUdG67Yezb7c5EUK/HNHQkNOOgPPbgYr6
IPCvCaYe4ISWwPY9kW0HykeVpCGWS9G6f5oR6pvsM4Z7LZQ2UgQAW7XXWxqhPDyG
q5QWmd2KH0H05Lllm+76Q1vn6UPKm6wrwt/lSlGXDbCnbuPpNAKbnXpDL0Nh5oXy
xKILcl2ZdfEROB0udQHhhktPxGTajOcM8TTKVVxqh2VMWUyfk1juvuKHbmgRU3R3
fXct0TAB/pz5NFgx6s/Ou6zGkSpWI0zNgcGIMDAKrZGjl2wKUwvsJvVqC5VJ9uCG
lhFBz7+mLHJqyUPnSpy+x9LKa2LhfYkW3QIDAQABo4ICTzCCAkswHQYDVR0OBBYE
FDSsfVkc+n1TNQH83kDpRqpS9NOvMB8GA1UdIwQYMBaAFPTGuMU3rAY85RB1xrgW
4zU+V0dcMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzdON2lUVDRxRzU0b3Jh
U2N0ZTgxY2tWUVk4cU1hd0IycEYzMVg1NUU2WDkxLzAvRjRDNkI4QzUzN0FDMDYz
Q0U1MTA3NUM2QjgxNkUzMzUzRTU3NDc1Qy5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC9GNEM2QjhDNTM3QUMwNjNDRTUxMDc1QzZCODE2RTMzNTNFNTc0
NzVDLmNlcjCBrAYIKwYBBQUHAQsEgZ8wgZwwgZkGCCsGAQUFBzALhoGMcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby83TjdpVFQ0cUc1NG9yYVNjdGU4
MWNrVlFZOHFNYXdCMnBGMzFYNTVFNlg5MS8wLzMxMzgzNjJlMzIzMDM4MmUzMDJl
MzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzYzMjM3MzEzMy5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEALrQ
ADANBgkqhkiG9w0BAQsFAAOCAQEAePn9vp1X0rnktKundYN+FTvBq20Hfx3iVRT2
3lo3M+61Pf1uRDmaY+YjxAw9NL1pDE+DHBgDiz17IIL5h53DGSuus4r73qsbyRbE
EICR32ZXjp//p2Xvi1D4P370O6Vve8JMu9RlaBzNvUT/iCe2pF5K3mkH0D9sJTiE
6UKFdx6gRYt6/5XjQGAkPehxcgCHezhCLAU2yoRQZH/uN7fdgKTziaj3jkx+iQcU
d837GsGc1sUO33qeK7ALQjPSwWCivtOEAFCoUKfnZmy/DLGZCUd5+m2pD4dEwwEM
N1llPAvv1r1e5Szc3KIG9YWI4Hd3jo7LJFLEdH0Xrtt5xEeBBA==
-----END CERTIFICATE-----
Generated at Wed Apr 9 04:52:26 2025 by rpki-client