Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8hwBY2pwUEUzp2aZuLCWh5CPWCq8r4XfYe349vgY1i5h/1/3138362e3232372e36342e302f32322d3234203d3e203631373236.roa
File:                     3138362e3232372e36342e302f32322d3234203d3e203631373236.roa (raw, json)
Hash identifier:          tQtO6upZn/pp5ZgaAHSVlMXZc9ybBbe/+0pkP3gDHBw=
Subject key identifier:   C2:32:13:40:15:15:D5:B7:FA:05:7F:91:3D:72:47:4B:B4:19:09:92
Certificate issuer:       /CN=31913C696443B8596EC7722D368B4749C287A025
Certificate serial:       255356D6072A11A34B0A01A40831F01B40A625E6
Authority key identifier: 31:91:3C:69:64:43:B8:59:6E:C7:72:2D:36:8B:47:49:C2:87:A0:25
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/31913C696443B8596EC7722D368B4749C287A025.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8hwBY2pwUEUzp2aZuLCWh5CPWCq8r4XfYe349vgY1i5h/1/3138362e3232372e36342e302f32322d3234203d3e203631373236.roa
Signing time:             Thu 06 Mar 2025 04:20:43 +0000
ROA not before:           Thu 06 Mar 2025 04:15:43 +0000
ROA not after:            Thu 05 Mar 2026 04:20:43 +0000
asID:                     61726
IP address blocks:        186.227.64.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:53:56:d6:07:2a:11:a3:4b:0a:01:a4:08:31:f0:1b:40:a6:25:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=31913C696443B8596EC7722D368B4749C287A025
        Validity
            Not Before: Mar  6 04:15:43 2025 GMT
            Not After : Mar  5 04:20:43 2026 GMT
        Subject: CN=C23213401515D5B7FA057F913D72474BB4190992
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:64:83:fa:48:cc:cf:32:fd:bd:73:63:40:7c:
                    28:73:1a:ca:82:c8:2e:1d:ed:d3:4a:14:57:19:67:
                    3f:1d:65:47:68:58:24:bf:1e:a4:e2:39:f7:4d:63:
                    e6:9f:64:34:d6:54:43:5e:c6:fc:fa:88:44:c0:80:
                    50:1c:7b:2c:61:85:97:fb:37:a4:4c:a3:db:d3:d5:
                    36:d1:f0:1e:71:60:25:40:1e:1d:5d:d8:3e:5d:ee:
                    93:ba:3d:c8:9a:57:be:46:34:7d:54:8a:d8:55:fa:
                    8a:d3:68:7a:10:58:35:2a:ae:c5:88:a7:df:3a:f2:
                    c1:b8:a3:82:64:fb:4a:ea:b5:b0:cb:b0:ca:c8:6f:
                    bc:aa:96:8a:0c:01:1a:e6:27:4a:f1:17:88:81:a1:
                    32:74:67:a1:88:64:5f:ed:ea:8b:c7:17:b9:e2:0e:
                    1c:01:3d:5d:0e:1e:7e:90:46:97:d1:d9:b0:16:7a:
                    63:d5:7a:78:9c:e9:d9:67:28:f2:8a:69:d7:f7:48:
                    ab:96:41:e4:34:18:f3:50:42:da:c4:52:29:6a:23:
                    fd:8b:b0:aa:63:f2:f1:b6:c3:a5:09:ff:16:fd:00:
                    94:4e:48:21:19:5c:3b:d1:7c:52:68:7a:d0:12:35:
                    bf:3c:b8:33:24:0d:3f:c2:4b:5d:2e:77:c7:16:37:
                    f4:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:32:13:40:15:15:D5:B7:FA:05:7F:91:3D:72:47:4B:B4:19:09:92
            X509v3 Authority Key Identifier:
                keyid:31:91:3C:69:64:43:B8:59:6E:C7:72:2D:36:8B:47:49:C2:87:A0:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8hwBY2pwUEUzp2aZuLCWh5CPWCq8r4XfYe349vgY1i5h/1/31913C696443B8596EC7722D368B4749C287A025.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/31913C696443B8596EC7722D368B4749C287A025.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8hwBY2pwUEUzp2aZuLCWh5CPWCq8r4XfYe349vgY1i5h/1/3138362e3232372e36342e302f32322d3234203d3e203631373236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.227.64.0/22

    Signature Algorithm: sha256WithRSAEncryption
         26:dd:38:47:51:9d:2d:9d:00:e4:2f:cc:28:5d:51:3b:ec:f4:
         77:3e:8f:62:bb:87:76:d2:6d:de:fb:b0:8e:0b:73:bc:dc:fe:
         b2:b5:8b:df:1a:a0:02:16:48:81:d9:71:09:43:c1:48:ba:ed:
         93:dc:71:09:c6:b1:0a:78:96:0b:0e:65:0e:47:9f:1f:41:93:
         aa:3b:b3:93:24:67:2f:ed:2c:eb:82:76:fa:9f:8c:86:9b:73:
         31:53:5f:f8:0b:b0:8f:c2:8d:e5:93:c6:0e:92:03:c2:12:43:
         c3:6a:a8:9e:00:51:11:eb:ff:75:75:57:1c:ed:94:1b:7e:7e:
         6c:c4:6d:66:2b:a9:ff:f2:35:11:c2:d4:96:3b:52:9c:89:f9:
         f2:0c:08:9e:be:9c:b4:98:be:73:35:4c:00:e2:3e:cb:37:bb:
         06:4c:b0:1f:47:a7:c9:b4:dd:40:27:63:22:91:fa:2d:dd:db:
         9b:78:74:64:eb:be:d7:15:9e:1c:70:71:79:8e:4d:d9:53:78:
         98:d2:47:c8:dc:97:53:b3:a1:2c:71:9c:0a:76:68:48:6f:43:
         a0:b6:89:f1:60:7c:ee:f1:1a:fd:95:d5:e3:4b:ad:c1:1e:84:
         aa:4e:93:2c:18:55:14:17:0e:44:26:6a:c6:0d:e7:0b:73:ba:
         6f:13:43:c0
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUJVNW1gcqEaNLCgGkCDHwG0CmJeYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzE5MTNDNjk2NDQzQjg1OTZFQzc3MjJEMzY4QjQ3NDlD
Mjg3QTAyNTAeFw0yNTAzMDYwNDE1NDNaFw0yNjAzMDUwNDIwNDNaMDMxMTAvBgNV
BAMTKEMyMzIxMzQwMTUxNUQ1QjdGQTA1N0Y5MTNENzI0NzRCQjQxOTA5OTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxZIP6SMzPMv29c2NAfChzGsqC
yC4d7dNKFFcZZz8dZUdoWCS/HqTiOfdNY+afZDTWVENexvz6iETAgFAceyxhhZf7
N6RMo9vT1TbR8B5xYCVAHh1d2D5d7pO6PciaV75GNH1UithV+orTaHoQWDUqrsWI
p9868sG4o4Jk+0rqtbDLsMrIb7yqlooMARrmJ0rxF4iBoTJ0Z6GIZF/t6ovHF7ni
DhwBPV0OHn6QRpfR2bAWemPVenic6dlnKPKKadf3SKuWQeQ0GPNQQtrEUilqI/2L
sKpj8vG2w6UJ/xb9AJROSCEZXDvRfFJoetASNb88uDMkDT/CS10ud8cWN/RRAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUwjITQBUV1bf6BX+RPXJHS7QZCZIwHwYDVR0j
BBgwFoAUMZE8aWRDuFlux3ItNotHScKHoCUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOGh3QlkycHdVRVV6cDJhWnVMQ1doNUNQV0NxOHI0WGZZZTM0OXZnWTFp
NWgvMS8zMTkxM0M2OTY0NDNCODU5NkVDNzcyMkQzNjhCNDc0OUMyODdBMDI1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzMxOTEzQzY5NjQ0M0I4NTk2
RUM3NzIyRDM2OEI0NzQ5QzI4N0EwMjUuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
Lzhod0JZMnB3VUVVenAyYVp1TENXaDVDUFdDcThyNFhmWWUzNDl2Z1kxaTVoLzEv
MzEzODM2MmUzMjMyMzcyZTM2MzQyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzNjMx
MzczMjM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCuuNAMA0GCSqGSIb3DQEBCwUAA4IBAQAm3ThHUZ0t
nQDkL8woXVE77PR3Po9iu4d20m3e+7COC3O83P6ytYvfGqACFkiB2XEJQ8FIuu2T
3HEJxrEKeJYLDmUOR58fQZOqO7OTJGcv7Szrgnb6n4yGm3MxU1/4C7CPwo3lk8YO
kgPCEkPDaqieAFER6/91dVcc7ZQbfn5sxG1mK6n/8jURwtSWO1KcifnyDAievpy0
mL5zNUwA4j7LN7sGTLAfR6fJtN1AJ2Mikfot3dubeHRk677XFZ4ccHF5jk3ZU3iY
0kfI3JdTs6EscZwKdmhIb0OgtonxYHzu8Rr9ldXjS63BHoSqTpMsGFUUFw5EJmrG
DecLc7pvE0PA
-----END CERTIFICATE-----
Generated at Mon Apr 7 13:37:37 2025 by rpki-client