Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9q6uG3aWfABntKbo8v5pRrAtfoiNWygwjeLmnEPvXUgM/1/3133382e3131382e3130302e302f32322d3232203d3e203532373038.roa
File:                     3133382e3131382e3130302e302f32322d3232203d3e203532373038.roa (raw, json)
Hash identifier:          b6iIVydTh43XokrS/1WVUXDbFQjVZ4DainVRRNA3Ucs=
Subject key identifier:   60:EC:C6:0E:13:F7:48:1B:8B:A1:DC:D5:6C:5B:E9:3D:96:07:16:21
Certificate issuer:       /CN=06185E1AAABDEAE42E58129BDEA4CFECF0C8F7CB
Certificate serial:       6A6DA7EB5FE780AC9E32BE431E66F09AEE841499
Authority key identifier: 06:18:5E:1A:AA:BD:EA:E4:2E:58:12:9B:DE:A4:CF:EC:F0:C8:F7:CB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/06185E1AAABDEAE42E58129BDEA4CFECF0C8F7CB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9q6uG3aWfABntKbo8v5pRrAtfoiNWygwjeLmnEPvXUgM/1/3133382e3131382e3130302e302f32322d3232203d3e203532373038.roa
Signing time:             Wed 05 Mar 2025 19:00:27 +0000
ROA not before:           Wed 05 Mar 2025 18:55:27 +0000
ROA not after:            Wed 04 Mar 2026 19:00:27 +0000
asID:                     52708
IP address blocks:        138.118.100.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:6d:a7:eb:5f:e7:80:ac:9e:32:be:43:1e:66:f0:9a:ee:84:14:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06185E1AAABDEAE42E58129BDEA4CFECF0C8F7CB
        Validity
            Not Before: Mar  5 18:55:27 2025 GMT
            Not After : Mar  4 19:00:27 2026 GMT
        Subject: CN=60ECC60E13F7481B8BA1DCD56C5BE93D96071621
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:00:a7:1d:d4:e3:ab:4b:0d:77:f7:18:da:de:
                    8b:29:87:f5:29:5f:70:4f:cd:ec:10:d1:00:5a:0a:
                    19:a7:7d:ae:2e:36:7b:c3:4a:3a:6a:a2:95:79:03:
                    29:3e:41:b8:ed:e3:a2:36:33:e9:38:53:6c:cd:7a:
                    91:6e:e7:a2:29:1e:14:2a:7f:c0:2c:1b:de:ad:05:
                    74:33:29:8a:aa:eb:2e:01:16:02:8f:21:b2:35:0b:
                    e2:ff:90:1e:51:1e:b2:2a:e0:92:6b:f0:3b:b1:5a:
                    f7:d4:10:52:44:b7:a8:b1:ce:0e:61:ae:e5:14:e2:
                    55:74:a7:bf:25:02:61:b3:b3:42:60:a1:0d:5c:39:
                    ca:94:16:9d:ba:50:dd:16:3a:df:6c:77:fb:d2:c9:
                    cc:94:ff:c1:54:52:b1:e2:6d:23:1f:70:01:b7:8f:
                    7b:5f:95:25:bd:b0:34:d9:8e:d9:4f:e5:f2:ab:e5:
                    8b:e5:a4:47:d0:b6:79:5b:cf:73:2c:28:2c:c7:39:
                    61:cd:f5:37:24:0e:ca:81:d3:2b:84:f2:98:15:11:
                    53:1a:04:88:23:96:bc:8f:95:05:d9:fa:8a:81:d7:
                    06:95:ea:61:09:eb:dc:5c:09:00:bf:51:bb:9a:94:
                    fd:3e:16:c1:52:02:0b:f9:40:43:63:35:a1:8a:1d:
                    84:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:EC:C6:0E:13:F7:48:1B:8B:A1:DC:D5:6C:5B:E9:3D:96:07:16:21
            X509v3 Authority Key Identifier:
                keyid:06:18:5E:1A:AA:BD:EA:E4:2E:58:12:9B:DE:A4:CF:EC:F0:C8:F7:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9q6uG3aWfABntKbo8v5pRrAtfoiNWygwjeLmnEPvXUgM/1/06185E1AAABDEAE42E58129BDEA4CFECF0C8F7CB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/06185E1AAABDEAE42E58129BDEA4CFECF0C8F7CB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9q6uG3aWfABntKbo8v5pRrAtfoiNWygwjeLmnEPvXUgM/1/3133382e3131382e3130302e302f32322d3232203d3e203532373038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.118.100.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3f:58:95:3a:d9:c7:e3:b0:2e:f5:e6:49:cc:43:69:bb:12:09:
         fe:c6:cd:16:34:67:10:9a:f9:0f:95:49:35:a9:0a:3f:f0:0f:
         8a:11:3e:d9:3f:0f:af:50:69:d5:4f:61:8c:dd:23:e2:f6:fc:
         64:03:10:c6:48:13:10:f9:bc:70:88:88:3d:f9:2d:7c:ba:cb:
         cb:fe:bc:db:7e:fb:73:c6:10:f1:06:94:0d:90:e6:57:67:98:
         62:31:44:24:4b:36:87:9e:3a:87:33:70:76:d9:2a:7d:08:61:
         25:21:ab:be:9f:bd:4f:ce:78:cb:9f:a6:1c:61:51:c6:6a:c5:
         da:23:b3:75:16:89:9e:3b:81:bd:d9:31:49:3a:fd:3a:7c:84:
         f3:4b:55:7b:2a:13:b4:da:54:3e:8c:7d:57:35:b2:2a:cd:2a:
         9e:e3:0b:da:85:fd:7f:ee:12:2c:2a:a9:dc:68:e2:b0:7f:ff:
         35:95:66:23:b4:3a:70:f3:db:29:05:16:9b:84:fc:c8:80:b0:
         61:fe:42:74:dc:97:b3:a4:5e:54:53:ec:71:d6:a8:fa:c1:c0:
         49:64:50:34:16:a0:04:57:a8:db:d8:1b:81:d9:ba:cb:c0:5b:
         74:9c:f9:2e:03:4f:ec:e3:89:0f:bd:d2:26:b3:ab:8d:9d:fd:
         8e:b0:b0:23
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUam2n61/ngKyeMr5DHmbwmu6EFJkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDYxODVFMUFBQUJERUFFNDJFNTgxMjlCREVBNENGRUNG
MEM4RjdDQjAeFw0yNTAzMDUxODU1MjdaFw0yNjAzMDQxOTAwMjdaMDMxMTAvBgNV
BAMTKDYwRUNDNjBFMTNGNzQ4MUI4QkExRENENTZDNUJFOTNEOTYwNzE2MjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2AKcd1OOrSw139xja3osph/Up
X3BPzewQ0QBaChmnfa4uNnvDSjpqopV5Ayk+Qbjt46I2M+k4U2zNepFu56IpHhQq
f8AsG96tBXQzKYqq6y4BFgKPIbI1C+L/kB5RHrIq4JJr8DuxWvfUEFJEt6ixzg5h
ruUU4lV0p78lAmGzs0JgoQ1cOcqUFp26UN0WOt9sd/vSycyU/8FUUrHibSMfcAG3
j3tflSW9sDTZjtlP5fKr5YvlpEfQtnlbz3MsKCzHOWHN9TckDsqB0yuE8pgVEVMa
BIgjlryPlQXZ+oqB1waV6mEJ69xcCQC/UbualP0+FsFSAgv5QENjNaGKHYR1AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUYOzGDhP3SBuLodzVbFvpPZYHFiEwHwYDVR0j
BBgwFoAUBhheGqq96uQuWBKb3qTP7PDI98swDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOXE2dUczYVdmQUJudEtibzh2NXBSckF0Zm9pTld5Z3dqZUxtbkVQdlhV
Z00vMS8wNjE4NUUxQUFBQkRFQUU0MkU1ODEyOUJERUE0Q0ZFQ0YwQzhGN0NCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzA2MTg1RTFBQUFCREVBRTQy
RTU4MTI5QkRFQTRDRkVDRjBDOEY3Q0IuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzlxNnVHM2FXZkFCbnRLYm84djVwUnJBdGZvaU5XeWd3amVMbW5FUHZYVWdNLzEv
MzEzMzM4MmUzMTMxMzgyZTMxMzAzMDJlMzAyZjMyMzIyZDMyMzIyMDNkM2UyMDM1
MzIzNzMwMzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAKKdmQwDQYJKoZIhvcNAQELBQADggEBAD9YlTrZ
x+OwLvXmScxDabsSCf7GzRY0ZxCa+Q+VSTWpCj/wD4oRPtk/D69QadVPYYzdI+L2
/GQDEMZIExD5vHCIiD35LXy6y8v+vNt++3PGEPEGlA2Q5ldnmGIxRCRLNoeeOocz
cHbZKn0IYSUhq76fvU/OeMufphxhUcZqxdojs3UWiZ47gb3ZMUk6/Tp8hPNLVXsq
E7TaVD6MfVc1sirNKp7jC9qF/X/uEiwqqdxo4rB//zWVZiO0OnDz2ykFFpuE/MiA
sGH+QnTcl7OkXlRT7HHWqPrBwElkUDQWoARXqNvYG4HZusvAW3Sc+S4DT+zjiQ+9
0iazq42d/Y6wsCM=
-----END CERTIFICATE-----
Generated at Tue Apr 8 18:03:31 2025 by rpki-client