Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/2/3138362e3232352e3131322e302f32302d3234203d3e203238363639.roa
File:                     3138362e3232352e3131322e302f32302d3234203d3e203238363639.roa (raw, json)
Hash identifier:          6rFSye994mmLUd7g+ewyrbmkrbcTJrYzxCmX7+20pEQ=
Subject key identifier:   E5:FB:62:EE:CA:68:6D:98:BD:B1:1F:54:5C:18:16:EA:EE:E7:86:A6
Certificate issuer:       /CN=2F394F99007CD172C0832F8415F6842A1475173D
Certificate serial:       15AAD213BB28F8BAA10D061E7076B24CF605E5C9
Authority key identifier: 2F:39:4F:99:00:7C:D1:72:C0:83:2F:84:15:F6:84:2A:14:75:17:3D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F394F99007CD172C0832F8415F6842A1475173D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/2/3138362e3232352e3131322e302f32302d3234203d3e203238363639.roa
Signing time:             Tue 23 Jul 2024 11:38:49 +0000
ROA not before:           Tue 23 Jul 2024 11:33:49 +0000
ROA not after:            Tue 22 Jul 2025 11:38:49 +0000
asID:                     28669
IP address blocks:        186.225.112.0/20 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:aa:d2:13:bb:28:f8:ba:a1:0d:06:1e:70:76:b2:4c:f6:05:e5:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2F394F99007CD172C0832F8415F6842A1475173D
        Validity
            Not Before: Jul 23 11:33:49 2024 GMT
            Not After : Jul 22 11:38:49 2025 GMT
        Subject: CN=E5FB62EECA686D98BDB11F545C1816EAEEE786A6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:a4:11:fb:02:1c:b4:cd:ca:2e:02:f1:bd:fd:
                    f3:95:dd:ac:49:12:98:15:33:cd:26:42:7d:b3:cf:
                    eb:79:97:d3:2a:44:d9:c5:d2:43:61:f5:c0:e4:f7:
                    78:10:3e:e0:18:f1:97:82:0d:1b:04:34:ba:a8:64:
                    32:2c:51:80:3c:86:15:c3:35:de:aa:11:fa:1a:7f:
                    fd:2a:7c:f6:6b:6b:a0:5e:c8:51:58:fe:88:8b:c9:
                    12:0f:7b:a2:9e:b6:1a:ed:8c:0f:fa:c1:ac:9b:1a:
                    26:b1:44:fd:09:78:0d:cf:88:b0:ce:32:1f:da:fc:
                    ea:3a:2c:72:48:24:2a:a1:46:27:34:0e:15:c6:4a:
                    80:06:99:28:8a:79:45:7e:2f:fb:91:a8:03:d5:0f:
                    0d:c7:df:01:a9:56:51:3e:16:fe:5b:ba:5e:5d:f3:
                    ef:53:42:84:e2:a9:85:3a:df:05:20:49:ec:88:49:
                    88:76:67:e4:57:a2:aa:59:76:20:cf:0b:2f:d7:51:
                    55:ef:ea:62:9b:00:cc:ae:bc:8a:0f:1a:f0:5b:17:
                    18:b9:4a:de:43:44:69:83:cd:31:04:10:d7:1c:86:
                    3a:9d:d4:d2:b3:7a:95:b6:d9:12:78:70:75:ff:89:
                    b3:cb:91:c1:45:b9:40:58:45:3f:87:6a:43:7a:37:
                    91:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:FB:62:EE:CA:68:6D:98:BD:B1:1F:54:5C:18:16:EA:EE:E7:86:A6
            X509v3 Authority Key Identifier:
                keyid:2F:39:4F:99:00:7C:D1:72:C0:83:2F:84:15:F6:84:2A:14:75:17:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/2/2F394F99007CD172C0832F8415F6842A1475173D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F394F99007CD172C0832F8415F6842A1475173D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/2/3138362e3232352e3131322e302f32302d3234203d3e203238363639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.225.112.0/20

    Signature Algorithm: sha256WithRSAEncryption
         6e:ed:5c:ce:6d:99:74:a6:26:b2:79:34:c0:07:f2:1f:37:32:
         6f:69:1b:d3:28:f9:85:2a:c5:24:3b:44:9b:62:57:2a:dc:55:
         64:1b:8f:a3:ec:9f:49:f9:cb:d2:f8:e6:27:19:7d:ee:a3:8a:
         43:75:5b:ed:6f:4f:d0:bd:db:74:af:0d:ef:0c:64:ad:28:ce:
         99:64:e3:30:d1:93:b8:32:a1:34:3c:6d:9d:24:2d:ad:2e:7f:
         58:67:ff:9c:c8:9b:bc:62:ed:0d:7a:d0:9c:51:8e:a7:ff:8a:
         8d:1b:af:4d:e9:1d:a5:c8:95:1c:df:12:e8:17:a3:5d:e8:f9:
         c9:4e:88:3a:4f:71:83:a8:5f:58:55:9e:22:fc:27:73:e1:14:
         72:2b:67:6d:cd:c2:da:c0:44:a0:0f:73:49:e9:ea:b8:00:c6:
         bf:cd:d7:1c:d2:78:28:a8:19:44:72:45:0e:62:f7:dd:c2:b0:
         37:03:47:ee:a9:99:f4:08:54:75:ea:76:dd:5d:af:bd:60:a2:
         8c:f0:be:33:2d:4e:c4:c7:28:d4:41:03:df:6c:2e:53:da:b0:
         00:23:52:2a:cd:0f:6f:5f:bd:b9:18:9d:62:9a:b8:cd:50:98:
         bf:96:9a:98:d8:64:02:93:5a:ed:42:c7:45:55:cb:6d:85:21:
         dd:d3:b6:4d
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUFarSE7so+LqhDQYecHayTPYF5ckwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkYzOTRGOTkwMDdDRDE3MkMwODMyRjg0MTVGNjg0MkEx
NDc1MTczRDAeFw0yNDA3MjMxMTMzNDlaFw0yNTA3MjIxMTM4NDlaMDMxMTAvBgNV
BAMTKEU1RkI2MkVFQ0E2ODZEOThCREIxMUY1NDVDMTgxNkVBRUVFNzg2QTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRpBH7Ahy0zcouAvG9/fOV3axJ
EpgVM80mQn2zz+t5l9MqRNnF0kNh9cDk93gQPuAY8ZeCDRsENLqoZDIsUYA8hhXD
Nd6qEfoaf/0qfPZra6BeyFFY/oiLyRIPe6KethrtjA/6waybGiaxRP0JeA3PiLDO
Mh/a/Oo6LHJIJCqhRic0DhXGSoAGmSiKeUV+L/uRqAPVDw3H3wGpVlE+Fv5bul5d
8+9TQoTiqYU63wUgSeyISYh2Z+RXoqpZdiDPCy/XUVXv6mKbAMyuvIoPGvBbFxi5
St5DRGmDzTEEENcchjqd1NKzepW22RJ4cHX/ibPLkcFFuUBYRT+HakN6N5HrAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU5fti7spobZi9sR9UXBgW6u7nhqYwHwYDVR0j
BBgwFoAULzlPmQB80XLAgy+EFfaEKhR1Fz0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOHI5OHZaMU5BektKS1FtSEpNQWppcG9NbVlMNmdaYjVSM2doWEdEbWNG
R04vMi8yRjM5NEY5OTAwN0NEMTcyQzA4MzJGODQxNUY2ODQyQTE0NzUxNzNELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJGMzk0Rjk5MDA3Q0QxNzJD
MDgzMkY4NDE1RjY4NDJBMTQ3NTE3M0QuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzhyOTh2WjFOQXpLSktRbUhKTUFqaXBvTW1ZTDZnWmI1UjNnaFhHRG1jRkdOLzIv
MzEzODM2MmUzMjMyMzUyZTMxMzEzMjJlMzAyZjMyMzAyZDMyMzQyMDNkM2UyMDMy
MzgzNjM2Mzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAS64XAwDQYJKoZIhvcNAQELBQADggEBAG7tXM5t
mXSmJrJ5NMAH8h83Mm9pG9Mo+YUqxSQ7RJtiVyrcVWQbj6Psn0n5y9L45icZfe6j
ikN1W+1vT9C923SvDe8MZK0ozplk4zDRk7gyoTQ8bZ0kLa0uf1hn/5zIm7xi7Q16
0JxRjqf/io0br03pHaXIlRzfEugXo13o+clOiDpPcYOoX1hVniL8J3PhFHIrZ23N
wtrARKAPc0np6rgAxr/N1xzSeCioGURyRQ5i993CsDcDR+6pmfQIVHXqdt1dr71g
oozwvjMtTsTHKNRBA99sLlPasAAjUirND29fvbkYnWKauM1QmL+WmpjYZAKTWu1C
x0VVy22FId3Ttk0=
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:52:04 2025 by rpki-client