Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7N7iTT4qG54oraScte81ckVQY8qMawB2pF31X55E6X91/0/3138362e3230382e31322e302f32332d3233203d3e20323632373133.roa
File:                     3138362e3230382e31322e302f32332d3233203d3e20323632373133.roa (raw, json)
Hash identifier:          KYnOS6Sh1SYNSJQ8kz9qICODnm53Le8nsxIqpH2CJsQ=
Subject key identifier:   08:84:F0:9F:03:DB:1F:A3:1E:6F:E1:E9:93:BD:E4:D7:55:FB:FC:0E
Certificate issuer:       /CN=F4C6B8C537AC063CE51075C6B816E3353E57475C
Certificate serial:       4C61715FDBD27C5B5055A09C06696526335B6144
Authority key identifier: F4:C6:B8:C5:37:AC:06:3C:E5:10:75:C6:B8:16:E3:35:3E:57:47:5C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F4C6B8C537AC063CE51075C6B816E3353E57475C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7N7iTT4qG54oraScte81ckVQY8qMawB2pF31X55E6X91/0/3138362e3230382e31322e302f32332d3233203d3e20323632373133.roa
Signing time:             Tue 12 Sep 2023 05:00:06 +0000
ROA not before:           Tue 12 Sep 2023 04:55:06 +0000
ROA not after:            Tue 10 Sep 2024 05:00:06 +0000
asID:                     262713
IP address blocks:        186.208.12.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:61:71:5f:db:d2:7c:5b:50:55:a0:9c:06:69:65:26:33:5b:61:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F4C6B8C537AC063CE51075C6B816E3353E57475C
        Validity
            Not Before: Sep 12 04:55:06 2023 GMT
            Not After : Sep 10 05:00:06 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:66:62:fc:42:56:52:78:08:18:46:7d:6d:71:
                    d2:5d:ae:29:ae:02:eb:34:fe:ec:22:83:ff:65:b7:
                    1f:ba:25:8b:a8:ab:fd:cc:44:63:ab:d2:10:77:d2:
                    e6:11:5e:96:6e:f7:cc:9d:66:b1:2c:2e:0b:c5:8f:
                    5f:04:d6:31:83:a2:6c:b1:ed:17:f3:43:29:6c:89:
                    5a:f8:72:83:53:6d:ae:71:7b:6b:e6:10:c9:1b:01:
                    09:04:5f:10:3a:61:e1:09:57:68:21:1e:68:bc:43:
                    6b:2a:ff:6d:7b:e9:af:5b:28:f5:82:4e:2f:4a:d4:
                    de:ac:dd:4e:e0:fb:78:6f:46:2c:5d:1f:b4:5e:aa:
                    89:78:95:d5:88:61:c2:8e:a2:39:94:b1:0d:fe:09:
                    e9:2a:bc:63:89:80:ae:85:c9:19:38:ea:1c:a2:83:
                    c4:17:34:7e:0e:73:63:ce:1b:c5:a8:b3:4f:33:ad:
                    b0:30:9c:82:c2:bf:c6:71:fe:cf:a3:37:14:38:e2:
                    7a:37:51:d8:ef:2a:af:f4:81:26:c2:5a:a3:f6:2b:
                    18:3e:98:57:28:e5:d3:8f:72:48:a1:36:22:da:de:
                    85:d0:75:86:57:9c:05:ed:c9:4f:c7:ff:94:a3:2d:
                    a5:a9:d2:e7:f8:69:e2:d1:62:fd:c7:39:93:79:50:
                    e6:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:84:F0:9F:03:DB:1F:A3:1E:6F:E1:E9:93:BD:E4:D7:55:FB:FC:0E
            X509v3 Authority Key Identifier:
                keyid:F4:C6:B8:C5:37:AC:06:3C:E5:10:75:C6:B8:16:E3:35:3E:57:47:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7N7iTT4qG54oraScte81ckVQY8qMawB2pF31X55E6X91/0/F4C6B8C537AC063CE51075C6B816E3353E57475C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F4C6B8C537AC063CE51075C6B816E3353E57475C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7N7iTT4qG54oraScte81ckVQY8qMawB2pF31X55E6X91/0/3138362e3230382e31322e302f32332d3233203d3e20323632373133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.208.12.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a3:66:75:14:2d:68:f4:6f:67:05:5d:af:b1:68:9e:40:f0:ee:
         52:09:28:a2:ea:71:68:cf:c4:af:22:68:78:48:c4:0d:d3:08:
         6e:54:61:e6:94:1b:0b:9a:9a:e4:c9:56:3b:68:d1:a9:7a:66:
         0d:3e:cd:53:c5:6d:84:23:42:ec:6b:f2:9b:56:42:f2:a0:b1:
         ed:3f:e2:20:c1:16:35:d1:5f:97:9d:07:52:f3:45:06:30:3d:
         f7:c2:7a:bd:b6:9a:8e:e0:87:7d:d9:ad:10:1d:8d:1a:e9:0a:
         17:79:51:d0:eb:5d:cf:eb:49:8b:54:dc:c7:6a:f0:7c:f7:63:
         5f:d8:47:e8:38:1b:ec:1d:2d:bc:62:1c:2c:dc:7c:7a:d5:f2:
         e2:93:d1:a9:c2:8a:4c:45:14:96:4e:f5:7b:26:87:8c:2d:32:
         08:5b:a6:4b:c9:05:7d:23:b9:97:02:f3:ef:31:a4:16:31:25:
         91:eb:6b:1d:00:55:00:cf:5e:bd:b9:31:38:00:d2:a2:88:0f:
         75:9b:58:5c:50:e1:c2:d8:f7:80:e2:1c:b2:b2:32:ca:a5:40:
         42:c9:02:f8:de:02:04:55:57:18:63:5a:db:81:3e:09:b8:ef:
         8c:8b:ff:e2:33:4a:62:e6:f2:31:6b:e1:f6:56:20:77:fc:2b:
         10:27:a0:52
-----BEGIN CERTIFICATE-----
MIIHQzCCBiugAwIBAgIUTGFxX9vSfFtQVaCcBmllJjNbYUQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjRDNkI4QzUzN0FDMDYzQ0U1MTA3NUM2QjgxNkUzMzUz
RTU3NDc1QzAeFw0yMzA5MTIwNDU1MDZaFw0yNDA5MTAwNTAwMDZaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQjM2NjYyRkM0MjU2NTI3ODA4
MTg0NjdENkQ3MUQyNURBRTI5QUUwMkVCMzRGRUVDMjI4M0ZGNjVCNzFGQkEyNThC
QThBQkZEQ0M0NDYzQUJEMjEwNzdEMkU2MTE1RTk2NkVGN0NDOUQ2NkIxMkMyRTBC
QzU4RjVGMDRENjMxODNBMjZDQjFFRDE3RjM0MzI5NkM4OTVBRjg3MjgzNTM2REFF
NzE3QjZCRTYxMEM5MUIwMTA5MDQ1RjEwM0E2MUUxMDk1NzY4MjExRTY4QkM0MzZC
MkFGRjZEN0JFOUFGNUIyOEY1ODI0RTJGNEFENERFQUNERDRFRTBGQjc4NkY0NjJD
NUQxRkI0NUVBQTg5Nzg5NUQ1ODg2MUMyOEVBMjM5OTRCMTBERkUwOUU5MkFCQzYz
ODk4MEFFODVDOTE5MzhFQTFDQTI4M0M0MTczNDdFMEU3MzYzQ0UxQkM1QThCMzRG
MzNBREIwMzA5QzgyQzJCRkM2NzFGRUNGQTMzNzE0MzhFMjdBMzc1MUQ4RUYyQUFG
RjQ4MTI2QzI1QUEzRjYyQjE4M0U5ODU3MjhFNUQzOEY3MjQ4QTEzNjIyREFERTg1
RDA3NTg2NTc5QzA1RURDOTRGQzdGRjk0QTMyREE1QTlEMkU3Rjg2OUUyRDE2MkZE
QzczOTkzNzk1MEU2MTUwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAs2Zi/EJWUngIGEZ9bXHSXa4prgLrNP7sIoP/ZbcfuiWLqKv9zERj
q9IQd9LmEV6WbvfMnWaxLC4LxY9fBNYxg6Jsse0X80MpbIla+HKDU22ucXtr5hDJ
GwEJBF8QOmHhCVdoIR5ovENrKv9te+mvWyj1gk4vStTerN1O4Pt4b0YsXR+0XqqJ
eJXViGHCjqI5lLEN/gnpKrxjiYCuhckZOOocooPEFzR+DnNjzhvFqLNPM62wMJyC
wr/Gcf7PozcUOOJ6N1HY7yqv9IEmwlqj9isYPphXKOXTj3JIoTYi2t6F0HWGV5wF
7clPx/+Uoy2lqdLn+Gni0WL9xzmTeVDmFQIDAQABo4ICUTCCAk0wHQYDVR0OBBYE
FAiE8J8D2x+jHm/h6ZO95NdV+/wOMB8GA1UdIwQYMBaAFPTGuMU3rAY85RB1xrgW
4zU+V0dcMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzdON2lUVDRxRzU0b3Jh
U2N0ZTgxY2tWUVk4cU1hd0IycEYzMVg1NUU2WDkxLzAvRjRDNkI4QzUzN0FDMDYz
Q0U1MTA3NUM2QjgxNkUzMzUzRTU3NDc1Qy5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC9GNEM2QjhDNTM3QUMwNjNDRTUxMDc1QzZCODE2RTMzNTNFNTc0
NzVDLmNlcjCBrgYIKwYBBQUHAQsEgaEwgZ4wgZsGCCsGAQUFBzALhoGOcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby83TjdpVFQ0cUc1NG9yYVNjdGU4
MWNrVlFZOHFNYXdCMnBGMzFYNTVFNlg5MS8wLzMxMzgzNjJlMzIzMDM4MmUzMTMy
MmUzMDJmMzIzMzJkMzIzMzIwM2QzZTIwMzIzNjMyMzczMTMzLnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB
utAMMA0GCSqGSIb3DQEBCwUAA4IBAQCjZnUULWj0b2cFXa+xaJ5A8O5SCSii6nFo
z8SvImh4SMQN0whuVGHmlBsLmprkyVY7aNGpemYNPs1TxW2EI0Lsa/KbVkLyoLHt
P+IgwRY10V+XnQdS80UGMD33wnq9tpqO4Id92a0QHY0a6QoXeVHQ613P60mLVNzH
avB892Nf2EfoOBvsHS28Yhws3Hx61fLik9GpwopMRRSWTvV7JoeMLTIIW6ZLyQV9
I7mXAvPvMaQWMSWR62sdAFUAz169uTE4ANKiiA91m1hcUOHC2PeA4hyysjLKpUBC
yQL43gIEVVcYY1rbgT4JuO+Mi//iM0pi5vIxa+H2ViB3/CsQJ6BS
-----END CERTIFICATE-----
Generated at Fri Mar 14 04:47:05 2025 by rpki-client