Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7N7iTT4qG54oraScte81ckVQY8qMawB2pF31X55E6X91/0/3138362e3230382e31352e302f32342d3234203d3e20323632373133.roa
File:                     3138362e3230382e31352e302f32342d3234203d3e20323632373133.roa (raw, json)
Hash identifier:          JabHXwZgZVWwPKMjitxqWpJ65peNQOqecTXPPOtEW5Q=
Subject key identifier:   79:3E:44:E2:71:41:38:43:CF:7C:B9:42:D5:00:FB:F1:DB:96:53:C9
Certificate issuer:       /CN=F4C6B8C537AC063CE51075C6B816E3353E57475C
Certificate serial:       26F99DEAB8DD85A6CD621BD7143803F4204FA3E5
Authority key identifier: F4:C6:B8:C5:37:AC:06:3C:E5:10:75:C6:B8:16:E3:35:3E:57:47:5C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F4C6B8C537AC063CE51075C6B816E3353E57475C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7N7iTT4qG54oraScte81ckVQY8qMawB2pF31X55E6X91/0/3138362e3230382e31352e302f32342d3234203d3e20323632373133.roa
Signing time:             Tue 12 Sep 2023 05:00:11 +0000
ROA not before:           Tue 12 Sep 2023 04:55:11 +0000
ROA not after:            Tue 10 Sep 2024 05:00:11 +0000
asID:                     262713
IP address blocks:        186.208.15.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:f9:9d:ea:b8:dd:85:a6:cd:62:1b:d7:14:38:03:f4:20:4f:a3:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F4C6B8C537AC063CE51075C6B816E3353E57475C
        Validity
            Not Before: Sep 12 04:55:11 2023 GMT
            Not After : Sep 10 05:00:11 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:44:f1:aa:7d:50:11:3b:3a:13:9c:a2:bc:0c:
                    c1:98:9f:07:d1:fd:2e:d8:8d:e7:69:e5:70:7c:0b:
                    dc:9b:46:91:8c:a1:de:69:62:ac:87:81:44:73:6c:
                    af:38:fb:95:e8:87:dd:f7:7a:b0:5e:8a:9b:7e:3c:
                    7a:66:be:83:af:34:4b:93:bb:f6:83:3a:95:14:46:
                    23:f1:04:06:d5:9b:d8:a6:4d:93:21:b0:54:15:ad:
                    d8:51:ff:16:74:e2:79:24:98:e5:b5:69:b0:88:c6:
                    57:3d:f4:a0:7e:9b:c6:9c:3e:ce:d7:c2:7a:a7:50:
                    40:d7:0e:77:b6:0a:8a:e5:dd:cd:24:1f:42:a8:31:
                    ed:f4:00:0c:6f:99:f3:84:79:44:54:d2:82:7e:83:
                    9f:68:e5:88:41:24:7e:6e:a0:fc:be:66:1c:f7:9e:
                    f8:f0:a3:6c:5e:53:1e:c4:d6:8b:1e:d8:a7:fb:aa:
                    0f:b2:7c:68:16:6c:2d:c6:5f:48:e9:e1:44:6a:1c:
                    fc:ed:31:b6:8b:d0:72:20:78:c4:fe:cf:9e:cd:a9:
                    01:04:c7:2c:0b:43:13:7a:6f:66:de:d3:b8:68:f9:
                    41:b9:d3:f9:79:80:a2:5d:4b:42:89:f8:52:00:63:
                    0b:31:93:76:0e:85:52:39:9f:1b:ee:30:e1:1b:53:
                    35:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:3E:44:E2:71:41:38:43:CF:7C:B9:42:D5:00:FB:F1:DB:96:53:C9
            X509v3 Authority Key Identifier:
                keyid:F4:C6:B8:C5:37:AC:06:3C:E5:10:75:C6:B8:16:E3:35:3E:57:47:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7N7iTT4qG54oraScte81ckVQY8qMawB2pF31X55E6X91/0/F4C6B8C537AC063CE51075C6B816E3353E57475C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F4C6B8C537AC063CE51075C6B816E3353E57475C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7N7iTT4qG54oraScte81ckVQY8qMawB2pF31X55E6X91/0/3138362e3230382e31352e302f32342d3234203d3e20323632373133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.208.15.0/24

    Signature Algorithm: sha256WithRSAEncryption
         40:34:e8:88:0d:b2:9c:a5:79:b9:d5:d2:69:12:63:19:f5:cf:
         53:01:59:af:24:18:f7:43:26:18:60:6b:51:c1:2e:6f:56:e7:
         a3:01:b2:0f:cb:3f:d5:b2:73:d7:d3:69:33:2d:ad:0b:b8:cb:
         f4:a3:78:53:36:24:10:89:55:cf:1f:2d:c8:75:11:d3:57:a9:
         d6:31:f3:ec:1e:04:f2:71:c6:b2:1b:18:d9:65:b5:33:d8:7f:
         8d:9b:0b:4e:10:44:d7:6f:44:af:1d:dc:68:43:ba:01:ac:ee:
         78:e8:6d:cc:c0:6c:4b:f7:30:a7:27:69:0d:d9:ba:ca:e6:9e:
         32:2a:e4:3b:fb:f0:65:f7:90:d4:1f:a3:2f:a2:25:7d:34:96:
         f6:9c:5a:17:b4:ab:f8:d8:1c:2b:de:9f:88:7c:69:69:e3:fa:
         12:3d:d6:95:da:63:a7:6c:e1:97:e8:50:05:85:4d:b3:d2:0a:
         51:b6:20:5f:14:a2:20:58:59:20:2b:8a:a2:0a:03:fb:5b:fa:
         7f:fc:1c:d2:a4:72:1e:90:8d:12:90:ee:57:a6:d7:ab:04:90:
         27:0e:08:ed:e4:1d:30:49:57:56:ec:28:f8:02:21:28:6b:78:
         b5:cb:c3:0a:e7:4c:03:06:5a:80:90:af:39:e2:47:06:76:5d:
         60:26:44:cd
-----BEGIN CERTIFICATE-----
MIIHQzCCBiugAwIBAgIUJvmd6rjdhabNYhvXFDgD9CBPo+UwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjRDNkI4QzUzN0FDMDYzQ0U1MTA3NUM2QjgxNkUzMzUz
RTU3NDc1QzAeFw0yMzA5MTIwNDU1MTFaFw0yNDA5MTAwNTAwMTFaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQjA0NEYxQUE3RDUwMTEzQjNB
MTM5Q0EyQkMwQ0MxOTg5RjA3RDFGRDJFRDg4REU3NjlFNTcwN0MwQkRDOUI0Njkx
OENBMURFNjk2MkFDODc4MTQ0NzM2Q0FGMzhGQjk1RTg4N0RERjc3QUIwNUU4QTlC
N0UzQzdBNjZCRTgzQUYzNDRCOTNCQkY2ODMzQTk1MTQ0NjIzRjEwNDA2RDU5QkQ4
QTY0RDkzMjFCMDU0MTVBREQ4NTFGRjE2NzRFMjc5MjQ5OEU1QjU2OUIwODhDNjU3
M0RGNEEwN0U5QkM2OUMzRUNFRDdDMjdBQTc1MDQwRDcwRTc3QjYwQThBRTVERENE
MjQxRjQyQTgzMUVERjQwMDBDNkY5OUYzODQ3OTQ0NTREMjgyN0U4MzlGNjhFNTg4
NDEyNDdFNkVBMEZDQkU2NjFDRjc5RUY4RjBBMzZDNUU1MzFFQzRENjhCMUVEOEE3
RkJBQTBGQjI3QzY4MTY2QzJEQzY1RjQ4RTlFMTQ0NkExQ0ZDRUQzMUI2OEJEMDcy
MjA3OEM0RkVDRjlFQ0RBOTAxMDRDNzJDMEI0MzEzN0E2RjY2REVEM0I4NjhGOTQx
QjlEM0Y5Nzk4MEEyNUQ0QjQyODlGODUyMDA2MzBCMzE5Mzc2MEU4NTUyMzk5RjFC
RUUzMEUxMUI1MzM1NUYwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAsETxqn1QETs6E5yivAzBmJ8H0f0u2I3naeVwfAvcm0aRjKHeaWKs
h4FEc2yvOPuV6Ifd93qwXoqbfjx6Zr6DrzRLk7v2gzqVFEYj8QQG1ZvYpk2TIbBU
Fa3YUf8WdOJ5JJjltWmwiMZXPfSgfpvGnD7O18J6p1BA1w53tgqK5d3NJB9CqDHt
9AAMb5nzhHlEVNKCfoOfaOWIQSR+bqD8vmYc95748KNsXlMexNaLHtin+6oPsnxo
Fmwtxl9I6eFEahz87TG2i9ByIHjE/s+ezakBBMcsC0MTem9m3tO4aPlBudP5eYCi
XUtCifhSAGMLMZN2DoVSOZ8b7jDhG1M1XwIDAQABo4ICUTCCAk0wHQYDVR0OBBYE
FHk+ROJxQThDz3y5QtUA+/HbllPJMB8GA1UdIwQYMBaAFPTGuMU3rAY85RB1xrgW
4zU+V0dcMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzdON2lUVDRxRzU0b3Jh
U2N0ZTgxY2tWUVk4cU1hd0IycEYzMVg1NUU2WDkxLzAvRjRDNkI4QzUzN0FDMDYz
Q0U1MTA3NUM2QjgxNkUzMzUzRTU3NDc1Qy5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC9GNEM2QjhDNTM3QUMwNjNDRTUxMDc1QzZCODE2RTMzNTNFNTc0
NzVDLmNlcjCBrgYIKwYBBQUHAQsEgaEwgZ4wgZsGCCsGAQUFBzALhoGOcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby83TjdpVFQ0cUc1NG9yYVNjdGU4
MWNrVlFZOHFNYXdCMnBGMzFYNTVFNlg5MS8wLzMxMzgzNjJlMzIzMDM4MmUzMTM1
MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjMyMzczMTMzLnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA
utAPMA0GCSqGSIb3DQEBCwUAA4IBAQBANOiIDbKcpXm51dJpEmMZ9c9TAVmvJBj3
QyYYYGtRwS5vVuejAbIPyz/VsnPX02kzLa0LuMv0o3hTNiQQiVXPHy3IdRHTV6nW
MfPsHgTyccayGxjZZbUz2H+NmwtOEETXb0SvHdxoQ7oBrO546G3MwGxL9zCnJ2kN
2brK5p4yKuQ7+/Bl95DUH6MvoiV9NJb2nFoXtKv42Bwr3p+IfGlp4/oSPdaV2mOn
bOGX6FAFhU2z0gpRtiBfFKIgWFkgK4qiCgP7W/p//BzSpHIekI0SkO5XpterBJAn
Dgjt5B0wSVdW7Cj4AiEoa3i1y8MK50wDBlqAkK854kcGdl1gJkTN
-----END CERTIFICATE-----
Generated at Fri Mar 14 04:50:40 2025 by rpki-client