Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9SiVPoDMxeaMLAffk543WR9jZXTvZuhBJetqkDAjgxrP/0/3138362e3139352e3235342e302f32342d3234203d3e20323730383139.roa
File:                     3138362e3139352e3235342e302f32342d3234203d3e20323730383139.roa (raw, json)
Hash identifier:          KnZ+DhD/WNthQO8LWLoT6JvQC+PTWMTv1QU+6HK6LDo=
Subject key identifier:   59:44:16:1B:48:25:F7:0B:E4:7B:F5:AB:69:FF:B8:B2:19:4F:F7:39
Certificate issuer:       /CN=8C12B45617D2E2C140AFEF8A76D18046F084B1C7
Certificate serial:       10FAA2D3B6C3FF9642F60FF8C0F2234C5A5F2FFC
Authority key identifier: 8C:12:B4:56:17:D2:E2:C1:40:AF:EF:8A:76:D1:80:46:F0:84:B1:C7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8C12B45617D2E2C140AFEF8A76D18046F084B1C7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9SiVPoDMxeaMLAffk543WR9jZXTvZuhBJetqkDAjgxrP/0/3138362e3139352e3235342e302f32342d3234203d3e20323730383139.roa
Signing time:             Tue 10 Dec 2024 13:02:05 +0000
ROA not before:           Tue 10 Dec 2024 12:57:05 +0000
ROA not after:            Tue 09 Dec 2025 13:02:05 +0000
asID:                     270819
IP address blocks:        186.195.254.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:fa:a2:d3:b6:c3:ff:96:42:f6:0f:f8:c0:f2:23:4c:5a:5f:2f:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8C12B45617D2E2C140AFEF8A76D18046F084B1C7
        Validity
            Not Before: Dec 10 12:57:05 2024 GMT
            Not After : Dec  9 13:02:05 2025 GMT
        Subject: CN=5944161B4825F70BE47BF5AB69FFB8B2194FF739
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:25:bb:2e:74:a1:bf:75:b3:43:51:14:5b:66:
                    64:72:e7:67:2d:12:eb:d2:9a:31:42:a1:90:bc:58:
                    e6:90:80:97:cf:94:ec:6d:0e:bf:38:f5:08:e0:1f:
                    cf:89:32:99:a7:60:0d:b7:fb:e2:76:c6:07:02:6c:
                    61:44:cc:cd:8c:e6:66:f2:64:86:9c:b9:89:b3:28:
                    bc:d3:51:52:62:4a:b7:11:76:f7:b0:9b:ed:7a:5b:
                    65:c3:c4:aa:d2:9c:2d:81:9a:a2:42:98:f2:c2:b0:
                    fe:ce:eb:d5:61:40:7b:51:78:21:d7:17:11:1e:3f:
                    3b:ae:58:c3:3f:8a:61:c5:39:eb:3d:b4:b7:82:ea:
                    86:d7:0e:ad:ea:ac:d0:40:00:7f:7c:b8:f3:59:b1:
                    ab:b1:a5:6c:3b:93:9c:79:2f:70:fd:0f:44:f8:bd:
                    dc:ec:da:35:cb:41:25:82:44:7f:42:c8:b3:d5:31:
                    2c:7f:e1:a2:e2:e5:15:8d:ef:c5:4e:3b:46:86:3c:
                    2c:92:e8:47:93:1a:f7:88:a8:32:9e:9f:0f:a9:c5:
                    0f:5e:e4:7d:43:e5:74:dc:e3:ba:b0:82:7e:1f:66:
                    c0:a8:65:cd:f6:9b:0e:33:b5:62:8d:14:05:2d:7d:
                    9d:38:21:33:5a:08:28:f3:5c:fd:44:e0:26:51:f0:
                    ae:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:44:16:1B:48:25:F7:0B:E4:7B:F5:AB:69:FF:B8:B2:19:4F:F7:39
            X509v3 Authority Key Identifier:
                keyid:8C:12:B4:56:17:D2:E2:C1:40:AF:EF:8A:76:D1:80:46:F0:84:B1:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9SiVPoDMxeaMLAffk543WR9jZXTvZuhBJetqkDAjgxrP/0/8C12B45617D2E2C140AFEF8A76D18046F084B1C7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8C12B45617D2E2C140AFEF8A76D18046F084B1C7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9SiVPoDMxeaMLAffk543WR9jZXTvZuhBJetqkDAjgxrP/0/3138362e3139352e3235342e302f32342d3234203d3e20323730383139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.195.254.0/24

    Signature Algorithm: sha256WithRSAEncryption
         22:b4:c2:32:96:2e:19:27:52:7c:e0:da:3d:a2:57:f6:e1:79:
         66:b4:44:ed:18:9b:59:89:f2:99:db:ed:a3:aa:0b:f3:c4:c5:
         37:db:8b:59:16:2f:48:14:ad:26:8c:5e:91:37:11:cc:4b:3b:
         53:4d:96:c1:a2:1b:e6:0f:fc:dc:88:de:b7:50:5e:0a:1c:47:
         cc:2a:f7:32:e1:f1:5c:c4:fa:fd:6b:6f:4e:1f:25:50:d8:26:
         a5:8b:c2:12:88:c7:b3:13:73:5a:4e:b4:04:25:1b:35:d1:e3:
         2c:fc:32:2b:22:c7:1c:fd:2c:db:e3:3d:b6:de:b7:15:05:47:
         14:d8:09:1b:08:5e:42:ce:5a:9b:82:7d:5d:45:9f:89:41:2b:
         3e:d3:72:0a:a9:a4:72:8a:60:62:53:e8:ae:9a:05:d6:65:b2:
         6d:3a:fe:95:e7:73:52:a9:b8:68:6d:f0:89:8d:28:ea:4b:20:
         f9:dd:31:8a:51:e4:c9:8d:2f:84:30:64:d6:c4:19:71:74:5e:
         ef:4b:22:de:be:c3:a3:bc:cf:2a:c1:a2:b7:7e:64:51:5e:cb:
         fd:2b:d3:b7:e7:9c:03:d8:e4:1c:94:6e:de:ee:c2:65:4b:88:
         d4:21:77:fa:81:24:84:7c:96:96:12:b1:57:34:76:de:41:05:
         d0:5c:03:e8
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUEPqi07bD/5ZC9g/4wPIjTFpfL/wwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEMxMkI0NTYxN0QyRTJDMTQwQUZFRjhBNzZEMTgwNDZG
MDg0QjFDNzAeFw0yNDEyMTAxMjU3MDVaFw0yNTEyMDkxMzAyMDVaMDMxMTAvBgNV
BAMTKDU5NDQxNjFCNDgyNUY3MEJFNDdCRjVBQjY5RkZCOEIyMTk0RkY3MzkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIJbsudKG/dbNDURRbZmRy52ct
EuvSmjFCoZC8WOaQgJfPlOxtDr849QjgH8+JMpmnYA23++J2xgcCbGFEzM2M5mby
ZIacuYmzKLzTUVJiSrcRdvewm+16W2XDxKrSnC2BmqJCmPLCsP7O69VhQHtReCHX
FxEePzuuWMM/imHFOes9tLeC6obXDq3qrNBAAH98uPNZsauxpWw7k5x5L3D9D0T4
vdzs2jXLQSWCRH9CyLPVMSx/4aLi5RWN78VOO0aGPCyS6EeTGveIqDKenw+pxQ9e
5H1D5XTc47qwgn4fZsCoZc32mw4ztWKNFAUtfZ04ITNaCCjzXP1E4CZR8K75AgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUWUQWG0gl9wvke/Wraf+4shlP9zkwHwYDVR0j
BBgwFoAUjBK0VhfS4sFAr++KdtGARvCEsccwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOVNpVlBvRE14ZWFNTEFmZms1NDNXUjlqWlhUdlp1aEJKZXRxa0RBamd4
clAvMC84QzEyQjQ1NjE3RDJFMkMxNDBBRkVGOEE3NkQxODA0NkYwODRCMUM3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzhDMTJCNDU2MTdEMkUyQzE0
MEFGRUY4QTc2RDE4MDQ2RjA4NEIxQzcuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzlTaVZQb0RNeGVhTUxBZmZrNTQzV1I5alpYVHZadWhCSmV0cWtEQWpneHJQLzAv
MzEzODM2MmUzMTM5MzUyZTMyMzUzNDJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzczMDM4MzEzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEALrD/jANBgkqhkiG9w0BAQsFAAOCAQEAIrTC
MpYuGSdSfODaPaJX9uF5ZrRE7RibWYnymdvto6oL88TFN9uLWRYvSBStJoxekTcR
zEs7U02WwaIb5g/83Ijet1BeChxHzCr3MuHxXMT6/WtvTh8lUNgmpYvCEojHsxNz
Wk60BCUbNdHjLPwyKyLHHP0s2+M9tt63FQVHFNgJGwheQs5am4J9XUWfiUErPtNy
CqmkcopgYlPorpoF1mWybTr+ledzUqm4aG3wiY0o6ksg+d0xilHkyY0vhDBk1sQZ
cXRe70si3r7Do7zPKsGit35kUV7L/SvTt+ecA9jkHJRu3u7CZUuI1CF3+oEkhHyW
lhKxVzR23kEF0FwD6A==
-----END CERTIFICATE-----
Generated at Tue Apr 8 20:02:20 2025 by rpki-client