Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9KjQUzDPmgKjq5GUnKohcqcz1zrbUAXzruSTopEp7pHU/0/3138362e3235302e37362e302f32322d3232203d3e20323633303930.roa
File:                     3138362e3235302e37362e302f32322d3232203d3e20323633303930.roa (raw, json)
Hash identifier:          Lzo9EdebNXg6vVrLe5Ag0moNyxo+yMS60bGmzuzHYRg=
Subject key identifier:   C3:EA:7A:EB:C6:9D:C5:B4:71:5C:9C:97:EA:A0:AD:9E:5A:96:A5:D8
Certificate issuer:       /CN=9669B55ACA2805661E847E4C5F8AC24659AC717D
Certificate serial:       76937ADDE794CCED8E6814F99F95E7892D196D64
Authority key identifier: 96:69:B5:5A:CA:28:05:66:1E:84:7E:4C:5F:8A:C2:46:59:AC:71:7D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9669B55ACA2805661E847E4C5F8AC24659AC717D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9KjQUzDPmgKjq5GUnKohcqcz1zrbUAXzruSTopEp7pHU/0/3138362e3235302e37362e302f32322d3232203d3e20323633303930.roa
Signing time:             Thu 01 Dec 2022 17:58:37 +0000
ROA not before:           Thu 01 Dec 2022 17:53:37 +0000
ROA not after:            Thu 30 Nov 2023 17:58:37 +0000
asID:                     263090
IP address blocks:        186.250.76.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:93:7a:dd:e7:94:cc:ed:8e:68:14:f9:9f:95:e7:89:2d:19:6d:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9669B55ACA2805661E847E4C5F8AC24659AC717D
        Validity
            Not Before: Dec  1 17:53:37 2022 GMT
            Not After : Nov 30 17:58:37 2023 GMT
        Subject: CN=C3EA7AEBC69DC5B4715C9C97EAA0AD9E5A96A5D8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:15:00:ef:ec:0b:13:23:98:3f:a9:bf:3e:a5:
                    b0:12:1f:a9:6f:13:2b:6a:06:39:44:3c:83:78:c7:
                    e7:b5:d4:c6:87:91:fd:7d:57:ec:cf:09:57:a8:0c:
                    f9:9a:bf:6a:f5:06:a8:32:af:fb:62:51:99:a9:e2:
                    7a:00:8a:87:74:4c:b3:b4:c1:fc:12:79:45:be:4a:
                    10:c7:9e:9f:e9:84:57:3a:1c:c9:15:49:d2:35:d4:
                    ef:2f:f1:58:ba:66:d7:ac:71:20:f0:2c:dd:9e:bb:
                    d2:d0:13:f3:62:ff:6c:0f:33:db:9a:3f:86:2c:a5:
                    e7:0c:7b:00:88:d5:35:fb:be:65:34:7a:b0:1c:ce:
                    45:6a:c6:de:68:6c:ba:4a:6b:ad:1b:71:28:63:e5:
                    da:d3:a3:d0:18:19:c3:42:29:3f:b4:f0:a2:7e:ce:
                    d9:40:c9:1a:e1:0d:c4:df:03:a6:16:37:3b:de:3d:
                    f9:64:ae:06:1b:2a:c3:1f:bf:e1:2a:b9:13:0d:b3:
                    87:ac:c0:ee:97:d4:b6:b0:5d:53:38:29:e9:8c:16:
                    6c:e9:27:9d:2e:09:88:d4:56:e4:2c:be:da:af:8f:
                    ca:4b:39:ee:c9:a7:21:d1:f7:3f:77:0c:84:ab:fb:
                    71:ae:2c:35:e4:c6:55:9b:47:9d:ea:14:f3:d9:d4:
                    aa:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:EA:7A:EB:C6:9D:C5:B4:71:5C:9C:97:EA:A0:AD:9E:5A:96:A5:D8
            X509v3 Authority Key Identifier:
                keyid:96:69:B5:5A:CA:28:05:66:1E:84:7E:4C:5F:8A:C2:46:59:AC:71:7D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9KjQUzDPmgKjq5GUnKohcqcz1zrbUAXzruSTopEp7pHU/0/9669B55ACA2805661E847E4C5F8AC24659AC717D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9669B55ACA2805661E847E4C5F8AC24659AC717D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9KjQUzDPmgKjq5GUnKohcqcz1zrbUAXzruSTopEp7pHU/0/3138362e3235302e37362e302f32322d3232203d3e20323633303930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.250.76.0/22

    Signature Algorithm: sha256WithRSAEncryption
         40:10:cd:c6:ca:2a:d1:af:59:bc:ba:3d:20:88:27:88:92:f8:
         ad:a6:a7:e3:52:65:b7:ad:c8:ae:1e:52:3d:31:c1:3d:7d:46:
         6c:c4:33:6c:b7:c3:8d:58:07:f8:d6:82:c4:fb:00:cc:a5:75:
         d7:8b:1c:4a:41:ea:f8:28:2c:7f:7a:5b:2b:fe:bd:89:f2:4d:
         c5:d4:ed:3a:32:2e:20:5f:9d:ef:81:ec:5e:e6:83:a4:df:f8:
         76:ae:2b:ff:42:bf:74:c0:5b:d7:68:6d:0e:45:ad:43:39:eb:
         b3:c3:bb:b6:c8:19:11:74:5c:98:df:28:46:31:7b:44:38:12:
         1b:b4:92:e3:ea:d9:41:61:5d:ac:39:e5:1c:75:45:2c:99:20:
         36:f4:a1:74:4f:29:37:ac:38:44:af:e3:91:ae:85:41:9b:c5:
         fe:c0:c2:3f:92:fb:ff:83:92:84:45:17:5e:20:76:4b:89:88:
         b1:13:8a:08:a7:b1:a7:b1:e7:e4:cc:f2:67:12:5a:1f:b7:b3:
         d3:75:9b:8e:cb:c4:33:e1:61:df:d5:fe:2d:82:16:3d:c4:77:
         54:a6:be:ea:9a:84:60:10:b7:33:66:21:b8:ca:49:5a:90:9f:
         e5:74:19:7e:b4:bc:b5:fb:9c:2d:43:27:19:c6:37:4b:3c:10:
         c0:18:42:03
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUdpN63eeUzO2OaBT5n5XniS0ZbWQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTY2OUI1NUFDQTI4MDU2NjFFODQ3RTRDNUY4QUMyNDY1
OUFDNzE3RDAeFw0yMjEyMDExNzUzMzdaFw0yMzExMzAxNzU4MzdaMDMxMTAvBgNV
BAMTKEMzRUE3QUVCQzY5REM1QjQ3MTVDOUM5N0VBQTBBRDlFNUE5NkE1RDgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8FQDv7AsTI5g/qb8+pbASH6lv
EytqBjlEPIN4x+e11MaHkf19V+zPCVeoDPmav2r1Bqgyr/tiUZmp4noAiod0TLO0
wfwSeUW+ShDHnp/phFc6HMkVSdI11O8v8Vi6ZtescSDwLN2eu9LQE/Ni/2wPM9ua
P4YspecMewCI1TX7vmU0erAczkVqxt5obLpKa60bcShj5drTo9AYGcNCKT+08KJ+
ztlAyRrhDcTfA6YWNzvePflkrgYbKsMfv+EquRMNs4eswO6X1LawXVM4KemMFmzp
J50uCYjUVuQsvtqvj8pLOe7JpyHR9z93DISr+3GuLDXkxlWbR53qFPPZ1KqPAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUw+p668adxbRxXJyX6qCtnlqWpdgwHwYDVR0j
BBgwFoAUlmm1WsooBWYehH5MX4rCRlmscX0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOUtqUVV6RFBtZ0tqcTVHVW5Lb2hjcWN6MXpyYlVBWHpydVNUb3BFcDdw
SFUvMC85NjY5QjU1QUNBMjgwNTY2MUU4NDdFNEM1RjhBQzI0NjU5QUM3MTdELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzk2NjlCNTVBQ0EyODA1NjYx
RTg0N0U0QzVGOEFDMjQ2NTlBQzcxN0QuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzlLalFVekRQbWdLanE1R1VuS29oY3FjejF6cmJVQVh6cnVTVG9wRXA3cEhVLzAv
MzEzODM2MmUzMjM1MzAyZTM3MzYyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzMjM2
MzMzMDM5MzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAK6+kwwDQYJKoZIhvcNAQELBQADggEBAEAQzcbK
KtGvWby6PSCIJ4iS+K2mp+NSZbetyK4eUj0xwT19RmzEM2y3w41YB/jWgsT7AMyl
ddeLHEpB6vgoLH96Wyv+vYnyTcXU7ToyLiBfne+B7F7mg6Tf+HauK/9Cv3TAW9do
bQ5FrUM567PDu7bIGRF0XJjfKEYxe0Q4Ehu0kuPq2UFhXaw55Rx1RSyZIDb0oXRP
KTesOESv45GuhUGbxf7Awj+S+/+DkoRFF14gdkuJiLETiginsaex5+TM8mcSWh+3
s9N1m47LxDPhYd/V/i2CFj3Ed1SmvuqahGAQtzNmIbjKSVqQn+V0GX60vLX7nC1D
JxnGN0s8EMAYQgM=
-----END CERTIFICATE-----
Generated at Tue Feb 18 13:32:50 2025 by rpki-client