Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8ZYRndAaNP6k65VRooujcSpdiY9qbityEf3aMWtT65cS/0/3138362e32362e39302e302f32342d3234203d3e20323730393236.roa
File:                     3138362e32362e39302e302f32342d3234203d3e20323730393236.roa (raw, json)
Hash identifier:          ygSByOb69YC9sG8360q4G85zaHZMR9Ualm6Q8Z/CFaU=
Subject key identifier:   7D:7D:CF:0E:D0:6D:BC:2B:D0:46:76:F8:F7:F6:E9:8F:61:FC:3E:DF
Certificate issuer:       /CN=4CC2A51129A554799F35AEF66889E0CA3BF4B1C0
Certificate serial:       332D0FCE31BB4C7E0214550961AD889F4F59EA6F
Authority key identifier: 4C:C2:A5:11:29:A5:54:79:9F:35:AE:F6:68:89:E0:CA:3B:F4:B1:C0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4CC2A51129A554799F35AEF66889E0CA3BF4B1C0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8ZYRndAaNP6k65VRooujcSpdiY9qbityEf3aMWtT65cS/0/3138362e32362e39302e302f32342d3234203d3e20323730393236.roa
Signing time:             Sat 09 Mar 2024 21:53:16 +0000
ROA not before:           Sat 09 Mar 2024 21:48:16 +0000
ROA not after:            Sat 08 Mar 2025 21:53:16 +0000
asID:                     270926
IP address blocks:        186.26.90.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:2d:0f:ce:31:bb:4c:7e:02:14:55:09:61:ad:88:9f:4f:59:ea:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4CC2A51129A554799F35AEF66889E0CA3BF4B1C0
        Validity
            Not Before: Mar  9 21:48:16 2024 GMT
            Not After : Mar  8 21:53:16 2025 GMT
        Subject: CN=7D7DCF0ED06DBC2BD04676F8F7F6E98F61FC3EDF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:05:f3:db:dd:8c:f4:b6:f8:e0:39:3d:67:8b:
                    b1:43:65:41:a8:00:bf:57:b8:4b:86:78:b6:7c:2d:
                    01:97:45:73:e4:45:89:51:8a:e8:85:52:48:3a:e4:
                    dd:15:a9:61:61:57:4b:b0:83:2d:f5:7a:10:3b:46:
                    5d:cf:77:87:10:e5:99:8d:e7:16:88:81:e2:1b:ae:
                    98:cd:f2:71:d2:19:7d:a8:f1:e5:63:62:4c:f4:83:
                    e4:f2:29:41:3c:9f:c7:6b:70:2f:8e:87:e5:12:a6:
                    ee:9c:d9:e3:0e:b1:1f:80:a2:89:e9:fa:15:cb:5a:
                    ea:b7:12:32:17:2c:71:9c:65:5c:77:69:2e:96:44:
                    9f:d6:56:68:af:47:81:df:1f:82:b7:0c:16:97:e9:
                    b7:71:07:95:b8:31:25:28:4f:8a:f3:d7:e5:76:a4:
                    7d:d4:4b:ac:26:b8:8e:74:89:e9:7d:ca:80:99:19:
                    08:c7:be:d6:62:07:87:e3:81:6c:a3:d1:bf:d4:83:
                    24:a8:28:ea:da:51:06:c0:04:51:8c:8c:75:10:63:
                    4b:7d:24:62:9f:8d:43:2f:2e:f5:e2:98:f5:6a:33:
                    74:d7:fc:6e:46:c4:92:13:41:92:e8:87:5c:c1:4b:
                    2e:28:ce:2a:b5:f0:ff:6a:ec:74:d3:a2:5e:82:2a:
                    47:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:7D:CF:0E:D0:6D:BC:2B:D0:46:76:F8:F7:F6:E9:8F:61:FC:3E:DF
            X509v3 Authority Key Identifier:
                keyid:4C:C2:A5:11:29:A5:54:79:9F:35:AE:F6:68:89:E0:CA:3B:F4:B1:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8ZYRndAaNP6k65VRooujcSpdiY9qbityEf3aMWtT65cS/0/4CC2A51129A554799F35AEF66889E0CA3BF4B1C0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4CC2A51129A554799F35AEF66889E0CA3BF4B1C0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8ZYRndAaNP6k65VRooujcSpdiY9qbityEf3aMWtT65cS/0/3138362e32362e39302e302f32342d3234203d3e20323730393236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.26.90.0/24

    Signature Algorithm: sha256WithRSAEncryption
         18:dd:11:9d:ac:d9:63:d3:fb:f4:4a:05:2b:c8:75:64:29:0a:
         ac:12:58:94:16:2e:63:44:80:f9:4a:45:f4:eb:ea:d5:bd:16:
         76:6a:75:a0:ff:4b:9c:1d:8b:18:b7:83:0b:1a:93:ed:f2:80:
         7a:66:8c:82:77:cc:c7:55:e6:47:12:7a:ee:81:8d:0e:8e:8a:
         27:c9:a6:85:bf:30:21:6a:ca:5e:cf:a3:bc:e9:09:f0:a5:9a:
         7c:cb:ca:ce:2c:b6:50:69:9e:da:0f:09:1a:81:e0:c4:72:92:
         5d:36:c5:ba:14:38:b9:5c:35:9c:a8:1d:2b:8a:4f:c3:90:25:
         79:70:c4:8c:23:2f:77:12:ba:78:c3:e3:09:a2:06:4f:f4:8f:
         a2:29:38:7a:cc:f6:dc:29:0d:12:ec:2f:07:fc:6f:61:8c:55:
         9c:1b:00:18:60:36:75:7b:5a:cb:6a:06:08:8a:9f:7b:dd:80:
         b7:b4:3c:f8:6a:55:67:be:1d:9e:f7:4c:06:c8:d3:fa:e5:c3:
         de:f9:73:42:94:5d:77:5c:85:5f:d0:02:52:9e:1e:7e:09:87:
         f1:d8:9d:dd:6c:fc:09:7e:9e:e6:26:5c:f2:2f:71:14:0d:f0:
         d7:ff:61:50:36:67:8b:41:a5:52:3c:c5:f0:78:9e:30:fa:38:
         79:56:30:e8
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUMy0PzjG7TH4CFFUJYa2In09Z6m8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNENDMkE1MTEyOUE1NTQ3OTlGMzVBRUY2Njg4OUUwQ0Ez
QkY0QjFDMDAeFw0yNDAzMDkyMTQ4MTZaFw0yNTAzMDgyMTUzMTZaMDMxMTAvBgNV
BAMTKDdEN0RDRjBFRDA2REJDMkJEMDQ2NzZGOEY3RjZFOThGNjFGQzNFREYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfBfPb3Yz0tvjgOT1ni7FDZUGo
AL9XuEuGeLZ8LQGXRXPkRYlRiuiFUkg65N0VqWFhV0uwgy31ehA7Rl3Pd4cQ5ZmN
5xaIgeIbrpjN8nHSGX2o8eVjYkz0g+TyKUE8n8drcC+Oh+USpu6c2eMOsR+Aoonp
+hXLWuq3EjIXLHGcZVx3aS6WRJ/WVmivR4HfH4K3DBaX6bdxB5W4MSUoT4rz1+V2
pH3US6wmuI50iel9yoCZGQjHvtZiB4fjgWyj0b/UgySoKOraUQbABFGMjHUQY0t9
JGKfjUMvLvXimPVqM3TX/G5GxJITQZLoh1zBSy4oziq18P9q7HTTol6CKkdbAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUfX3PDtBtvCvQRnb49/bpj2H8Pt8wHwYDVR0j
BBgwFoAUTMKlESmlVHmfNa72aIngyjv0scAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOFpZUm5kQWFOUDZrNjVWUm9vdWpjU3BkaVk5cWJpdHlFZjNhTVd0VDY1
Y1MvMC80Q0MyQTUxMTI5QTU1NDc5OUYzNUFFRjY2ODg5RTBDQTNCRjRCMUMwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzRDQzJBNTExMjlBNTU0Nzk5
RjM1QUVGNjY4ODlFMENBM0JGNEIxQzAuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzhaWVJuZEFhTlA2azY1VlJvb3VqY1NwZGlZOXFiaXR5RWYzYU1XdFQ2NWNTLzAv
MzEzODM2MmUzMjM2MmUzOTMwMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNzMw
MzkzMjM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAuhpaMA0GCSqGSIb3DQEBCwUAA4IBAQAY3RGdrNlj
0/v0SgUryHVkKQqsEliUFi5jRID5SkX06+rVvRZ2anWg/0ucHYsYt4MLGpPt8oB6
ZoyCd8zHVeZHEnrugY0OjoonyaaFvzAhaspez6O86QnwpZp8y8rOLLZQaZ7aDwka
geDEcpJdNsW6FDi5XDWcqB0rik/DkCV5cMSMIy93Erp4w+MJogZP9I+iKTh6zPbc
KQ0S7C8H/G9hjFWcGwAYYDZ1e1rLagYIip973YC3tDz4alVnvh2e90wGyNP65cPe
+XNClF13XIVf0AJSnh5+CYfx2J3dbPwJfp7mJlzyL3EUDfDX/2FQNmeLQaVSPMXw
eJ4w+jh5VjDo
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:20:35 2025 by rpki-client