Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AuYJJKZ7gA8MerSMYof7MbQN7Y3h9hZYk5bZSBabtKXq/0/3138362e3231362e3139362e302f32332d3233203d3e203532393733.roa
File:                     3138362e3231362e3139362e302f32332d3233203d3e203532393733.roa (raw, json)
Hash identifier:          tGN8pZM/OWBQMjNLgx/rlJixtvXrR6kNoxLD8ISrD7k=
Subject key identifier:   5B:3F:54:00:C8:41:79:11:5F:B3:D4:FD:83:60:FD:5D:5C:96:A4:E2
Certificate issuer:       /CN=4B4D8E9A0DA6A008F8169631E5CED8710CA4081E
Certificate serial:       54E52D3FBE5DEBA20A69A2E78C5A45548844F5D7
Authority key identifier: 4B:4D:8E:9A:0D:A6:A0:08:F8:16:96:31:E5:CE:D8:71:0C:A4:08:1E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4B4D8E9A0DA6A008F8169631E5CED8710CA4081E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AuYJJKZ7gA8MerSMYof7MbQN7Y3h9hZYk5bZSBabtKXq/0/3138362e3231362e3139362e302f32332d3233203d3e203532393733.roa
Signing time:             Fri 27 Oct 2023 18:31:01 +0000
ROA not before:           Fri 27 Oct 2023 18:26:01 +0000
ROA not after:            Fri 25 Oct 2024 18:31:01 +0000
asID:                     52973
IP address blocks:        186.216.196.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:e5:2d:3f:be:5d:eb:a2:0a:69:a2:e7:8c:5a:45:54:88:44:f5:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4B4D8E9A0DA6A008F8169631E5CED8710CA4081E
        Validity
            Not Before: Oct 27 18:26:01 2023 GMT
            Not After : Oct 25 18:31:01 2024 GMT
        Subject: CN=5B3F5400C84179115FB3D4FD8360FD5D5C96A4E2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:d4:c9:95:19:12:5b:cb:ca:bd:d0:d0:7d:4b:
                    2c:2f:5d:42:b3:89:b2:3d:1f:c7:51:3f:99:11:03:
                    55:6f:56:05:b2:89:45:36:0c:74:b2:e0:ea:2d:0d:
                    3b:ee:1c:ff:e8:86:4c:8b:50:d8:64:22:b5:1a:bd:
                    81:e3:57:34:d2:54:bc:03:75:97:82:7d:46:8e:1f:
                    56:27:52:36:f1:4e:6b:1e:1b:ef:86:3b:ae:30:26:
                    a4:f8:6c:a6:93:92:4c:4a:60:4d:af:44:b4:82:09:
                    f6:4a:b0:d0:1c:2a:32:ec:c4:79:ba:19:9f:08:2a:
                    1d:1c:d7:30:9f:09:a9:c0:45:51:09:13:b4:4b:2a:
                    f9:98:e3:b9:16:79:8b:88:33:2c:0d:08:88:d6:43:
                    85:93:65:88:68:3d:3a:a4:fd:28:3f:4d:5e:0c:fc:
                    e7:2a:6d:ce:12:28:b8:b3:36:07:2c:00:a2:77:b0:
                    11:53:1b:2c:dc:b0:f6:31:e4:86:e0:5b:70:69:d4:
                    f8:3d:93:73:58:e8:3a:12:85:da:d4:a5:66:a4:8a:
                    62:b8:ce:12:ab:0b:68:46:64:7c:20:fe:11:50:e7:
                    f7:e7:fc:62:8d:29:22:96:98:99:a6:7f:4f:e5:cf:
                    a0:06:f4:49:40:48:8a:d8:cf:54:f4:c1:01:c9:0a:
                    3d:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:3F:54:00:C8:41:79:11:5F:B3:D4:FD:83:60:FD:5D:5C:96:A4:E2
            X509v3 Authority Key Identifier:
                keyid:4B:4D:8E:9A:0D:A6:A0:08:F8:16:96:31:E5:CE:D8:71:0C:A4:08:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AuYJJKZ7gA8MerSMYof7MbQN7Y3h9hZYk5bZSBabtKXq/0/4B4D8E9A0DA6A008F8169631E5CED8710CA4081E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4B4D8E9A0DA6A008F8169631E5CED8710CA4081E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AuYJJKZ7gA8MerSMYof7MbQN7Y3h9hZYk5bZSBabtKXq/0/3138362e3231362e3139362e302f32332d3233203d3e203532393733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.216.196.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a7:ca:cf:4f:e9:22:0d:02:bf:7e:c3:ed:49:55:96:42:4b:a7:
         6b:41:d3:95:ed:0e:00:4c:04:dc:a3:56:9a:47:7b:be:33:0c:
         e4:46:52:65:ef:ec:e2:51:1f:4e:d1:94:77:69:04:51:8c:f1:
         71:5a:06:ea:6a:b3:a8:ec:22:87:cb:89:a3:76:b3:82:f0:ec:
         5b:bb:78:32:e7:20:23:b6:c6:a5:3e:35:c6:cc:b5:58:69:a8:
         f5:92:6a:48:1c:44:06:57:84:dc:50:31:50:96:ed:8a:ba:82:
         b9:47:53:a6:be:98:89:10:52:68:74:3d:c5:5c:54:fb:ea:a4:
         67:24:6d:3c:a2:2e:f4:c3:bc:a7:70:0e:ca:29:e1:7d:16:a2:
         5f:49:c5:16:06:76:64:6c:82:33:f1:be:f6:03:bc:2b:97:6d:
         af:f6:1b:b2:86:bb:10:12:d1:65:d5:26:ad:93:2d:df:f7:b7:
         f2:7a:fc:f0:b8:94:23:ea:6f:8f:f4:1a:7d:ed:66:67:fd:bd:
         49:67:0e:bb:1d:8f:7d:b7:7c:5c:e0:9e:65:ba:55:c6:de:ad:
         c3:b4:62:7f:ff:00:e7:49:26:bf:43:0d:f4:0c:ec:a5:42:1a:
         29:1d:5e:80:bd:9b:14:92:38:56:bd:c8:27:2e:df:e9:f2:38:
         54:ee:d6:73
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUVOUtP75d66IKaaLnjFpFVIhE9dcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNEI0RDhFOUEwREE2QTAwOEY4MTY5NjMxRTVDRUQ4NzEw
Q0E0MDgxRTAeFw0yMzEwMjcxODI2MDFaFw0yNDEwMjUxODMxMDFaMDMxMTAvBgNV
BAMTKDVCM0Y1NDAwQzg0MTc5MTE1RkIzRDRGRDgzNjBGRDVENUM5NkE0RTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCq1MmVGRJby8q90NB9SywvXUKz
ibI9H8dRP5kRA1VvVgWyiUU2DHSy4OotDTvuHP/ohkyLUNhkIrUavYHjVzTSVLwD
dZeCfUaOH1YnUjbxTmseG++GO64wJqT4bKaTkkxKYE2vRLSCCfZKsNAcKjLsxHm6
GZ8IKh0c1zCfCanARVEJE7RLKvmY47kWeYuIMywNCIjWQ4WTZYhoPTqk/Sg/TV4M
/Ocqbc4SKLizNgcsAKJ3sBFTGyzcsPYx5IbgW3Bp1Pg9k3NY6DoShdrUpWakimK4
zhKrC2hGZHwg/hFQ5/fn/GKNKSKWmJmmf0/lz6AG9ElASIrYz1T0wQHJCj2dAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUWz9UAMhBeRFfs9T9g2D9XVyWpOIwHwYDVR0j
BBgwFoAUS02Omg2moAj4FpYx5c7YcQykCB4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQXVZSkpLWjdnQThNZXJTTVlvZjdNYlFON1kzaDloWllrNWJaU0JhYnRL
WHEvMC80QjREOEU5QTBEQTZBMDA4RjgxNjk2MzFFNUNFRDg3MTBDQTQwODFFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzRCNEQ4RTlBMERBNkEwMDhG
ODE2OTYzMUU1Q0VEODcxMENBNDA4MUUuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0F1WUpKS1o3Z0E4TWVyU01Zb2Y3TWJRTjdZM2g5aFpZazViWlNCYWJ0S1hxLzAv
MzEzODM2MmUzMjMxMzYyZTMxMzkzNjJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDM1
MzIzOTM3MzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAG62MQwDQYJKoZIhvcNAQELBQADggEBAKfKz0/p
Ig0Cv37D7UlVlkJLp2tB05XtDgBMBNyjVppHe74zDORGUmXv7OJRH07RlHdpBFGM
8XFaBupqs6jsIofLiaN2s4Lw7Fu7eDLnICO2xqU+NcbMtVhpqPWSakgcRAZXhNxQ
MVCW7Yq6grlHU6a+mIkQUmh0PcVcVPvqpGckbTyiLvTDvKdwDsop4X0Wol9JxRYG
dmRsgjPxvvYDvCuXba/2G7KGuxAS0WXVJq2TLd/3t/J6/PC4lCPqb4/0Gn3tZmf9
vUlnDrsdj323fFzgnmW6VcbercO0Yn//AOdJJr9DDfQM7KVCGikdXoC9mxSSOFa9
yCcu3+nyOFTu1nM=
-----END CERTIFICATE-----
Generated at Sun Feb 16 21:46:33 2025 by rpki-client