Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BzXN43uF6HQuFHbqHMinDSniVFh9PHx9Awn5DAmUxS29/0/3138362e3232352e31382e302f32342d3234203d3e20323632373630.roa
File:                     3138362e3232352e31382e302f32342d3234203d3e20323632373630.roa (raw, json)
Hash identifier:          DbtooCyK8KWb970fb51WkFuc5njga+UqHTHFbRGT744=
Subject key identifier:   5E:CE:A3:1A:60:24:20:46:BB:0D:5D:B6:E5:9C:4D:40:B1:FA:41:9C
Certificate issuer:       /CN=765BDBE864ED90385A6B09951B2404484428A7B2
Certificate serial:       703001B6882975E3914D341CF9690D9F89F1526C
Authority key identifier: 76:5B:DB:E8:64:ED:90:38:5A:6B:09:95:1B:24:04:48:44:28:A7:B2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/765BDBE864ED90385A6B09951B2404484428A7B2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BzXN43uF6HQuFHbqHMinDSniVFh9PHx9Awn5DAmUxS29/0/3138362e3232352e31382e302f32342d3234203d3e20323632373630.roa
Signing time:             Wed 23 Jun 2021 18:00:48 +0000
ROA not before:           Wed 23 Jun 2021 17:55:48 +0000
ROA not after:            Wed 22 Jun 2022 18:00:48 +0000
asID:                     262760
IP address blocks:        186.225.18.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:30:01:b6:88:29:75:e3:91:4d:34:1c:f9:69:0d:9f:89:f1:52:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=765BDBE864ED90385A6B09951B2404484428A7B2
        Validity
            Not Before: Jun 23 17:55:48 2021 GMT
            Not After : Jun 22 18:00:48 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:8b:d6:c5:5d:22:e9:0b:af:de:17:fb:66:ba:
                    fe:be:c7:bb:2f:0e:97:8e:e6:2b:b3:32:9a:10:f7:
                    7a:ca:e3:f9:de:a4:45:99:a1:b1:bb:77:13:9e:c1:
                    37:8b:fd:4f:f4:a6:e7:a4:cf:4e:00:0e:78:29:60:
                    51:ea:a8:c5:10:5b:a4:1b:c7:6c:85:11:4c:75:0d:
                    6b:bd:b3:ef:e2:7f:30:65:a1:7c:a3:b0:ac:15:3a:
                    c2:73:74:cd:83:35:71:34:dd:3e:4e:ec:c0:97:40:
                    c7:fb:b7:91:57:5c:3e:06:39:d7:0b:19:2e:a8:cb:
                    cc:44:48:ee:68:86:00:03:74:18:9a:0d:44:02:70:
                    8b:06:d3:b1:fe:b4:9f:3b:9e:f3:2e:45:b7:4e:82:
                    b7:7e:70:32:17:28:20:9b:7f:67:e2:34:6e:e9:90:
                    5b:48:05:58:51:33:a2:98:26:4f:eb:8a:03:20:27:
                    61:6b:8d:54:0d:3c:d3:5f:61:4d:e8:eb:ab:69:f0:
                    92:37:76:e3:48:98:49:c9:21:f8:26:09:8a:4c:a8:
                    34:51:16:2c:2c:ed:48:34:d4:a8:ea:d8:80:ee:4b:
                    d7:4b:3e:47:91:e6:0e:db:53:0e:0b:b9:e5:e5:e0:
                    93:3e:c3:bd:fc:af:e0:79:bf:56:75:eb:72:68:28:
                    02:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:CE:A3:1A:60:24:20:46:BB:0D:5D:B6:E5:9C:4D:40:B1:FA:41:9C
            X509v3 Authority Key Identifier:
                keyid:76:5B:DB:E8:64:ED:90:38:5A:6B:09:95:1B:24:04:48:44:28:A7:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BzXN43uF6HQuFHbqHMinDSniVFh9PHx9Awn5DAmUxS29/0/765BDBE864ED90385A6B09951B2404484428A7B2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/765BDBE864ED90385A6B09951B2404484428A7B2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BzXN43uF6HQuFHbqHMinDSniVFh9PHx9Awn5DAmUxS29/0/3138362e3232352e31382e302f32342d3234203d3e20323632373630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.225.18.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7e:64:7c:a3:08:32:ca:fe:c7:f3:30:98:9a:82:7b:ab:d4:d9:
         48:82:cf:16:52:30:5b:96:43:fb:7c:da:0e:18:6f:2d:b2:f8:
         7a:65:01:68:b6:94:6c:93:65:8a:f3:56:31:21:20:1c:79:c9:
         21:2e:0f:78:22:e3:5d:9e:98:2e:22:c2:79:4e:b8:01:7a:63:
         50:c7:72:0a:73:35:55:0e:28:3a:ec:4d:1e:ed:9e:9c:d8:ce:
         c7:5f:eb:32:32:07:c1:5f:e7:22:e0:73:79:98:19:65:c2:e8:
         3f:a9:fc:74:38:38:3b:56:1b:66:c6:e5:1a:b1:5e:b6:7e:49:
         74:10:e3:a5:90:f3:49:69:24:c6:8a:cf:6e:09:d6:54:59:1e:
         1b:c6:d8:9d:c6:b6:6d:da:90:41:fb:17:66:44:b0:bd:e5:ed:
         1a:37:ba:59:a3:c2:44:a4:63:8e:7f:32:43:b6:b7:6f:cb:37:
         13:60:43:1a:a4:84:1d:d6:7f:28:8c:db:1d:5b:3f:d1:df:12:
         cc:5b:16:86:53:e1:20:2d:52:7e:3b:a7:17:f0:b5:61:08:43:
         a5:52:14:1f:62:86:ed:2c:49:71:21:cf:cc:1a:96:d7:21:41:
         38:ff:17:06:fd:40:1a:64:c3:77:b3:48:6c:c9:51:d1:9b:32:
         b4:18:67:b4
-----BEGIN CERTIFICATE-----
MIIHQzCCBiugAwIBAgIUcDABtogpdeORTTQc+WkNn4nxUmwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzY1QkRCRTg2NEVEOTAzODVBNkIwOTk1MUIyNDA0NDg0
NDI4QTdCMjAeFw0yMTA2MjMxNzU1NDhaFw0yMjA2MjIxODAwNDhaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQTk4QkQ2QzU1RDIyRTkwQkFG
REUxN0ZCNjZCQUZFQkVDN0JCMkYwRTk3OEVFNjJCQjMzMjlBMTBGNzdBQ0FFM0Y5
REVBNDQ1OTlBMUIxQkI3NzEzOUVDMTM3OEJGRDRGRjRBNkU3QTRDRjRFMDAwRTc4
Mjk2MDUxRUFBOEM1MTA1QkE0MUJDNzZDODUxMTRDNzUwRDZCQkRCM0VGRTI3RjMw
NjVBMTdDQTNCMEFDMTUzQUMyNzM3NENEODMzNTcxMzRERDNFNEVFQ0MwOTc0MEM3
RkJCNzkxNTc1QzNFMDYzOUQ3MEIxOTJFQThDQkNDNDQ0OEVFNjg4NjAwMDM3NDE4
OUEwRDQ0MDI3MDhCMDZEM0IxRkVCNDlGM0I5RUYzMkU0NUI3NEU4MkI3N0U3MDMy
MTcyODIwOUI3RjY3RTIzNDZFRTk5MDVCNDgwNTU4NTEzM0EyOTgyNjRGRUI4QTAz
MjAyNzYxNkI4RDU0MEQzQ0QzNUY2MTRERThFQkFCNjlGMDkyMzc3NkUzNDg5ODQ5
QzkyMUY4MjYwOThBNENBODM0NTExNjJDMkNFRDQ4MzRENEE4RUFEODgwRUU0QkQ3
NEIzRTQ3OTFFNjBFREI1MzBFMEJCOUU1RTVFMDkzM0VDM0JERkNBRkUwNzlCRjU2
NzVFQjcyNjgyODAyOTEwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAqYvWxV0i6Quv3hf7Zrr+vse7Lw6XjuYrszKaEPd6yuP53qRFmaGx
u3cTnsE3i/1P9KbnpM9OAA54KWBR6qjFEFukG8dshRFMdQ1rvbPv4n8wZaF8o7Cs
FTrCc3TNgzVxNN0+TuzAl0DH+7eRV1w+BjnXCxkuqMvMREjuaIYAA3QYmg1EAnCL
BtOx/rSfO57zLkW3ToK3fnAyFyggm39n4jRu6ZBbSAVYUTOimCZP64oDICdha41U
DTzTX2FN6OurafCSN3bjSJhJySH4JgmKTKg0URYsLO1INNSo6tiA7kvXSz5HkeYO
21MOC7nl5eCTPsO9/K/geb9WdetyaCgCkQIDAQABo4ICUTCCAk0wHQYDVR0OBBYE
FF7OoxpgJCBGuw1dtuWcTUCx+kGcMB8GA1UdIwQYMBaAFHZb2+hk7ZA4WmsJlRsk
BEhEKKeyMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0J6WE40M3VGNkhRdUZI
YnFITWluRFNuaVZGaDlQSHg5QXduNURBbVV4UzI5LzAvNzY1QkRCRTg2NEVEOTAz
ODVBNkIwOTk1MUIyNDA0NDg0NDI4QTdCMi5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC83NjVCREJFODY0RUQ5MDM4NUE2QjA5OTUxQjI0MDQ0ODQ0MjhB
N0IyLmNlcjCBrgYIKwYBBQUHAQsEgaEwgZ4wgZsGCCsGAQUFBzALhoGOcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9CelhONDN1RjZIUXVGSGJxSE1p
bkRTbmlWRmg5UEh4OUF3bjVEQW1VeFMyOS8wLzMxMzgzNjJlMzIzMjM1MmUzMTM4
MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjMyMzczNjMwLnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA
uuESMA0GCSqGSIb3DQEBCwUAA4IBAQB+ZHyjCDLK/sfzMJiagnur1NlIgs8WUjBb
lkP7fNoOGG8tsvh6ZQFotpRsk2WK81YxISAceckhLg94IuNdnpguIsJ5TrgBemNQ
x3IKczVVDig67E0e7Z6c2M7HX+syMgfBX+ci4HN5mBllwug/qfx0ODg7VhtmxuUa
sV62fkl0EOOlkPNJaSTGis9uCdZUWR4bxtidxrZt2pBB+xdmRLC95e0aN7pZo8JE
pGOOfzJDtrdvyzcTYEMapIQd1n8ojNsdWz/R3xLMWxaGU+EgLVJ+O6cX8LVhCEOl
UhQfYobtLElxIc/MGpbXIUE4/xcG/UAaZMN3s0hsyVHRmzK0GGe0
-----END CERTIFICATE-----
Generated at Mon Feb 17 02:15:31 2025 by rpki-client