Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8UBoyaVYNidz5UJkPpsMzUwyq7BuVLzVWD2gSpVG4Qm6/0/3138392e33362e3234382e302f32322d3234203d3e20323634323730.roa
File:                     3138392e33362e3234382e302f32322d3234203d3e20323634323730.roa (raw, json)
Hash identifier:          7EkLeFRTVsnk0yCkMFcALQz1YDzF8Fh+FCXOkqYqH98=
Subject key identifier:   CC:56:8A:4E:10:CA:07:4A:7D:C9:89:EA:FD:AD:01:F2:24:CD:5B:6F
Certificate issuer:       /CN=043A136A1C8758CC468D95236A1355C4ADAF676C
Certificate serial:       4EE49156C32F7A5D739D3582A269C09DC8FAC405
Authority key identifier: 04:3A:13:6A:1C:87:58:CC:46:8D:95:23:6A:13:55:C4:AD:AF:67:6C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/043A136A1C8758CC468D95236A1355C4ADAF676C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8UBoyaVYNidz5UJkPpsMzUwyq7BuVLzVWD2gSpVG4Qm6/0/3138392e33362e3234382e302f32322d3234203d3e20323634323730.roa
Signing time:             Wed 14 Feb 2024 16:54:34 +0000
ROA not before:           Wed 14 Feb 2024 16:49:34 +0000
ROA not after:            Wed 12 Feb 2025 16:54:34 +0000
asID:                     264270
IP address blocks:        189.36.248.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:e4:91:56:c3:2f:7a:5d:73:9d:35:82:a2:69:c0:9d:c8:fa:c4:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=043A136A1C8758CC468D95236A1355C4ADAF676C
        Validity
            Not Before: Feb 14 16:49:34 2024 GMT
            Not After : Feb 12 16:54:34 2025 GMT
        Subject: CN=CC568A4E10CA074A7DC989EAFDAD01F224CD5B6F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:c9:eb:c3:7a:e1:d9:63:b7:82:44:7f:12:93:
                    5e:b6:e2:89:d8:56:4b:f2:cd:cb:ec:06:8c:5e:59:
                    06:36:11:bd:f0:0f:17:8d:e4:c1:fd:8d:32:1c:2e:
                    9b:c5:c3:f0:90:31:02:dd:7a:b9:10:a4:d5:0e:ff:
                    42:d9:2a:01:f1:b6:ad:b2:28:e0:29:59:49:c8:81:
                    01:3f:5e:6a:e6:4b:0a:6b:a3:04:7b:77:1d:0f:e1:
                    e9:7b:9a:81:96:ad:6a:e8:cf:b5:84:11:a7:43:89:
                    08:5b:04:2b:a0:17:84:68:db:7a:a4:66:12:09:b4:
                    6d:15:d1:17:b4:e0:45:a1:48:5d:4a:0e:09:1b:4e:
                    1e:0b:0c:57:71:2c:9b:1f:dc:29:df:b1:cc:da:ac:
                    c7:6a:ee:73:3d:24:9c:66:ab:ab:16:5f:de:2d:9d:
                    c0:a0:42:1c:a7:2c:17:5d:0d:d7:d9:53:2b:28:a8:
                    30:b6:f4:01:03:14:8a:22:9c:ca:d7:e7:f8:51:7b:
                    99:2c:db:13:82:89:ce:6d:5c:c9:31:a7:12:da:39:
                    f9:72:ff:85:9f:50:9e:c3:47:ec:5c:3e:80:6d:19:
                    3e:6f:3a:6a:ca:a6:27:ba:bd:8a:ae:f2:a7:24:b4:
                    c0:e2:5a:9c:dc:e1:23:e3:83:a8:5b:97:ae:9b:8f:
                    7f:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:56:8A:4E:10:CA:07:4A:7D:C9:89:EA:FD:AD:01:F2:24:CD:5B:6F
            X509v3 Authority Key Identifier:
                keyid:04:3A:13:6A:1C:87:58:CC:46:8D:95:23:6A:13:55:C4:AD:AF:67:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8UBoyaVYNidz5UJkPpsMzUwyq7BuVLzVWD2gSpVG4Qm6/0/043A136A1C8758CC468D95236A1355C4ADAF676C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/043A136A1C8758CC468D95236A1355C4ADAF676C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8UBoyaVYNidz5UJkPpsMzUwyq7BuVLzVWD2gSpVG4Qm6/0/3138392e33362e3234382e302f32322d3234203d3e20323634323730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.36.248.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8d:0d:c9:e4:9d:d7:10:d7:c8:86:1b:6f:85:9e:1d:96:f5:3d:
         c7:7c:91:b8:50:8e:0d:71:72:c2:b9:5a:d9:6b:fc:cc:7c:0d:
         0a:ae:19:08:70:0c:6b:0a:4f:c8:ba:f9:35:56:4b:26:d5:24:
         2b:23:78:6d:de:8c:fe:5d:bc:04:69:65:75:8f:9b:67:c2:5a:
         23:75:c5:7f:c4:ae:c9:88:a6:ce:a6:da:d7:7b:65:11:94:ca:
         d0:85:c1:53:3e:79:81:ba:75:89:12:97:34:0c:1c:d6:15:e0:
         a6:4c:70:17:ba:a2:75:8e:b4:ef:93:1d:85:1e:7d:b3:68:90:
         df:22:54:f9:7e:95:e8:98:a2:a7:7e:91:30:af:e1:5c:27:2e:
         c2:d0:cd:1b:62:4b:c7:e6:83:7a:8e:0f:c2:1d:7a:67:f5:e2:
         a2:85:20:4d:f4:80:1f:58:b8:f8:2d:11:c1:3b:4b:be:6b:e0:
         dd:e7:dd:e6:31:78:9a:84:9c:7d:d1:fe:44:a7:67:91:27:6b:
         c5:74:00:eb:a0:ca:40:fe:48:6e:67:3e:62:10:e8:e6:2a:f0:
         f0:70:e8:fb:ee:bb:77:07:5b:44:c3:c6:bc:6a:54:9a:1e:6d:
         8b:af:82:2b:9c:3c:6a:22:c4:42:9d:f8:b0:93:2e:5a:19:ab:
         6f:d9:43:a7
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUTuSRVsMvel1znTWComnAncj6xAUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDQzQTEzNkExQzg3NThDQzQ2OEQ5NTIzNkExMzU1QzRB
REFGNjc2QzAeFw0yNDAyMTQxNjQ5MzRaFw0yNTAyMTIxNjU0MzRaMDMxMTAvBgNV
BAMTKENDNTY4QTRFMTBDQTA3NEE3REM5ODlFQUZEQUQwMUYyMjRDRDVCNkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGyevDeuHZY7eCRH8Sk1624onY
VkvyzcvsBoxeWQY2Eb3wDxeN5MH9jTIcLpvFw/CQMQLderkQpNUO/0LZKgHxtq2y
KOApWUnIgQE/XmrmSwprowR7dx0P4el7moGWrWroz7WEEadDiQhbBCugF4Ro23qk
ZhIJtG0V0Re04EWhSF1KDgkbTh4LDFdxLJsf3CnfsczarMdq7nM9JJxmq6sWX94t
ncCgQhynLBddDdfZUysoqDC29AEDFIoinMrX5/hRe5ks2xOCic5tXMkxpxLaOfly
/4WfUJ7DR+xcPoBtGT5vOmrKpie6vYqu8qcktMDiWpzc4SPjg6hbl66bj38zAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUzFaKThDKB0p9yYnq/a0B8iTNW28wHwYDVR0j
BBgwFoAUBDoTahyHWMxGjZUjahNVxK2vZ2wwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOFVCb3lhVllOaWR6NVVKa1Bwc016VXd5cTdCdVZMelZXRDJnU3BWRzRR
bTYvMC8wNDNBMTM2QTFDODc1OENDNDY4RDk1MjM2QTEzNTVDNEFEQUY2NzZDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzA0M0ExMzZBMUM4NzU4Q0M0
NjhEOTUyMzZBMTM1NUM0QURBRjY3NkMuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzhVQm95YVZZTmlkejVVSmtQcHNNelV3eXE3QnVWTHpWV0QyZ1NwVkc0UW02LzAv
MzEzODM5MmUzMzM2MmUzMjM0MzgyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM2
MzQzMjM3MzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAK9JPgwDQYJKoZIhvcNAQELBQADggEBAI0NyeSd
1xDXyIYbb4WeHZb1Pcd8kbhQjg1xcsK5Wtlr/Mx8DQquGQhwDGsKT8i6+TVWSybV
JCsjeG3ejP5dvARpZXWPm2fCWiN1xX/ErsmIps6m2td7ZRGUytCFwVM+eYG6dYkS
lzQMHNYV4KZMcBe6onWOtO+THYUefbNokN8iVPl+leiYoqd+kTCv4VwnLsLQzRti
S8fmg3qOD8Idemf14qKFIE30gB9YuPgtEcE7S75r4N3n3eYxeJqEnH3R/kSnZ5En
a8V0AOugykD+SG5nPmIQ6OYq8PBw6Pvuu3cHW0TDxrxqVJoebYuvgiucPGoixEKd
+LCTLloZq2/ZQ6c=
-----END CERTIFICATE-----
Generated at Sun Feb 16 21:59:39 2025 by rpki-client