Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7NRdQNaDUbT7D1tgoSxRnhL91ZyK6ESWGKVGShnHxWgP/1/3138372e38362e3230372e302f32342d3234203d3e20323633313436.roa
File:                     3138372e38362e3230372e302f32342d3234203d3e20323633313436.roa (raw, json)
Hash identifier:          d/FDwwDic5q67ydowxufnczO5Vn0+fUOelWMskY2dss=
Subject key identifier:   0F:2C:EA:E9:91:A3:5E:9D:1F:EE:AD:05:85:D5:80:3E:B2:20:48:C0
Certificate issuer:       /CN=E6FAE3A7A79029B5F53F2E1A940B194FE9B3F493
Certificate serial:       01F7ACE956D772DC8C4D835885DA5E7392F666CD
Authority key identifier: E6:FA:E3:A7:A7:90:29:B5:F5:3F:2E:1A:94:0B:19:4F:E9:B3:F4:93
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E6FAE3A7A79029B5F53F2E1A940B194FE9B3F493.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7NRdQNaDUbT7D1tgoSxRnhL91ZyK6ESWGKVGShnHxWgP/1/3138372e38362e3230372e302f32342d3234203d3e20323633313436.roa
Signing time:             Thu 06 Mar 2025 08:20:22 +0000
ROA not before:           Thu 06 Mar 2025 08:15:22 +0000
ROA not after:            Thu 05 Mar 2026 08:20:22 +0000
asID:                     263146
IP address blocks:        187.86.207.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:f7:ac:e9:56:d7:72:dc:8c:4d:83:58:85:da:5e:73:92:f6:66:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E6FAE3A7A79029B5F53F2E1A940B194FE9B3F493
        Validity
            Not Before: Mar  6 08:15:22 2025 GMT
            Not After : Mar  5 08:20:22 2026 GMT
        Subject: CN=0F2CEAE991A35E9D1FEEAD0585D5803EB22048C0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:9a:e4:d5:63:50:d6:85:e9:34:d2:cb:27:b7:
                    57:84:e7:51:17:d8:49:94:90:1b:99:70:7b:0e:ca:
                    bd:f4:7c:ce:e8:34:43:77:85:24:27:90:ed:90:91:
                    39:59:d6:69:0f:71:97:3a:be:75:ef:51:ec:a7:a0:
                    02:6e:13:3a:33:b2:7d:0f:d3:05:8b:f7:87:b5:1a:
                    25:94:f1:58:a6:b4:19:18:df:40:da:ad:e6:84:77:
                    e2:e3:f4:3c:fb:f2:fa:cb:55:26:4c:11:4e:6d:37:
                    fa:8a:7b:27:b1:4f:3f:63:b4:c9:a2:37:93:0f:79:
                    13:2a:96:21:6c:27:d7:6e:40:2a:59:8f:dc:aa:03:
                    33:d4:55:cf:41:0e:84:e8:b5:c4:81:20:1e:80:d7:
                    39:2a:18:3b:0e:76:10:be:3c:ac:af:a9:cb:10:34:
                    5f:76:8f:a7:ff:0c:6b:8a:2a:b7:5b:d7:61:8a:f2:
                    2a:e9:78:ea:3b:64:6c:36:04:f5:15:98:e8:4c:8a:
                    cf:e9:18:e8:de:54:e3:e8:d4:97:9a:3d:64:23:4f:
                    0c:c2:52:9d:a3:20:fb:d8:95:79:2a:95:02:39:57:
                    10:ae:91:de:1f:c6:50:79:4b:a9:59:4d:f1:a7:90:
                    bf:42:e8:9a:2a:35:40:0b:7e:38:36:b5:6e:03:11:
                    32:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:2C:EA:E9:91:A3:5E:9D:1F:EE:AD:05:85:D5:80:3E:B2:20:48:C0
            X509v3 Authority Key Identifier:
                keyid:E6:FA:E3:A7:A7:90:29:B5:F5:3F:2E:1A:94:0B:19:4F:E9:B3:F4:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7NRdQNaDUbT7D1tgoSxRnhL91ZyK6ESWGKVGShnHxWgP/1/E6FAE3A7A79029B5F53F2E1A940B194FE9B3F493.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E6FAE3A7A79029B5F53F2E1A940B194FE9B3F493.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7NRdQNaDUbT7D1tgoSxRnhL91ZyK6ESWGKVGShnHxWgP/1/3138372e38362e3230372e302f32342d3234203d3e20323633313436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.86.207.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1c:46:13:da:c9:cd:cd:43:66:f9:37:43:99:59:c2:8f:16:52:
         cf:17:ee:66:80:d7:5b:04:9c:f0:07:0b:4d:a2:13:5b:e4:9b:
         c9:9c:42:9b:9e:46:22:45:44:f5:ad:fe:fc:05:99:93:9f:d1:
         ce:e5:9e:a0:14:7c:c9:f1:16:bc:ad:5e:bb:d4:c5:3e:58:a1:
         70:41:88:a7:4b:f7:7e:cb:81:3a:09:de:80:e0:de:24:30:dc:
         59:01:a6:35:26:74:73:c7:9a:7f:24:68:1a:81:31:eb:67:12:
         8e:0c:bd:d6:dd:8d:d2:36:a1:d6:5c:4f:44:cb:b9:7b:90:eb:
         44:d7:6f:9b:96:77:8e:83:0d:39:2d:ec:73:84:53:02:f8:a6:
         b7:c3:6f:43:1a:77:4a:ef:a2:6f:77:8f:6f:6a:24:65:4a:b0:
         76:c0:33:45:80:e0:7c:9b:67:51:2a:4d:ca:55:10:c1:69:24:
         c5:79:06:8c:0d:e1:93:c0:83:fd:72:d9:7b:53:d5:fb:1a:e2:
         ac:f3:95:24:66:b9:09:1e:ab:e2:f5:f8:9d:7f:37:2e:97:44:
         3c:8c:82:cf:0d:f4:7f:d5:a2:9d:fc:49:19:82:18:79:f3:f5:
         b2:a5:2f:ba:a1:25:b9:4f:bb:9e:15:b1:ca:0d:65:7c:cc:14:
         a2:2a:4c:32
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUAfes6VbXctyMTYNYhdpec5L2Zs0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTZGQUUzQTdBNzkwMjlCNUY1M0YyRTFBOTQwQjE5NEZF
OUIzRjQ5MzAeFw0yNTAzMDYwODE1MjJaFw0yNjAzMDUwODIwMjJaMDMxMTAvBgNV
BAMTKDBGMkNFQUU5OTFBMzVFOUQxRkVFQUQwNTg1RDU4MDNFQjIyMDQ4QzAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQmuTVY1DWhek00ssnt1eE51EX
2EmUkBuZcHsOyr30fM7oNEN3hSQnkO2QkTlZ1mkPcZc6vnXvUeynoAJuEzozsn0P
0wWL94e1GiWU8VimtBkY30DareaEd+Lj9Dz78vrLVSZMEU5tN/qKeyexTz9jtMmi
N5MPeRMqliFsJ9duQCpZj9yqAzPUVc9BDoTotcSBIB6A1zkqGDsOdhC+PKyvqcsQ
NF92j6f/DGuKKrdb12GK8irpeOo7ZGw2BPUVmOhMis/pGOjeVOPo1JeaPWQjTwzC
Up2jIPvYlXkqlQI5VxCukd4fxlB5S6lZTfGnkL9C6JoqNUALfjg2tW4DETLfAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUDyzq6ZGjXp0f7q0FhdWAPrIgSMAwHwYDVR0j
BBgwFoAU5vrjp6eQKbX1Py4alAsZT+mz9JMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vN05SZFFOYURVYlQ3RDF0Z29TeFJuaEw5MVp5SzZFU1dHS1ZHU2huSHhX
Z1AvMS9FNkZBRTNBN0E3OTAyOUI1RjUzRjJFMUE5NDBCMTk0RkU5QjNGNDkzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0U2RkFFM0E3QTc5MDI5QjVG
NTNGMkUxQTk0MEIxOTRGRTlCM0Y0OTMuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzdOUmRRTmFEVWJUN0QxdGdvU3hSbmhMOTFaeUs2RVNXR0tWR1Nobkh4V2dQLzEv
MzEzODM3MmUzODM2MmUzMjMwMzcyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzMzMTM0MzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAC7Vs8wDQYJKoZIhvcNAQELBQADggEBABxGE9rJ
zc1DZvk3Q5lZwo8WUs8X7maA11sEnPAHC02iE1vkm8mcQpueRiJFRPWt/vwFmZOf
0c7lnqAUfMnxFrytXrvUxT5YoXBBiKdL937LgToJ3oDg3iQw3FkBpjUmdHPHmn8k
aBqBMetnEo4MvdbdjdI2odZcT0TLuXuQ60TXb5uWd46DDTkt7HOEUwL4prfDb0Ma
d0rvom93j29qJGVKsHbAM0WA4HybZ1EqTcpVEMFpJMV5BowN4ZPAg/1y2XtT1fsa
4qzzlSRmuQkeq+L1+J1/Ny6XRDyMgs8N9H/Vop38SRmCGHnz9bKlL7qhJblPu54V
scoNZXzMFKIqTDI=
-----END CERTIFICATE-----
Generated at Fri Apr 11 16:39:08 2025 by rpki-client