Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D81aiXpDAv5WBmgE8oEpfordjGP62otn2fHrhaL4cgby/0/3138362e3139332e3234302e302f32302d3234203d3e203238323630.roa
File:                     3138362e3139332e3234302e302f32302d3234203d3e203238323630.roa (raw, json)
Hash identifier:          rlXgaH7C/yClAV06kZAkYmEJtMpVMiOlX+3naEJNFYQ=
Subject key identifier:   02:B9:F5:EB:D0:EA:6D:FF:D5:6A:B7:FA:D4:72:AF:3E:E2:10:B0:65
Certificate issuer:       /CN=EDDE9456DFB0E0B6141479B36FE32CA0BF98688B
Certificate serial:       CCFE19E409375812C44A558E38037A338509D8
Authority key identifier: ED:DE:94:56:DF:B0:E0:B6:14:14:79:B3:6F:E3:2C:A0:BF:98:68:8B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EDDE9456DFB0E0B6141479B36FE32CA0BF98688B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D81aiXpDAv5WBmgE8oEpfordjGP62otn2fHrhaL4cgby/0/3138362e3139332e3234302e302f32302d3234203d3e203238323630.roa
Signing time:             Mon 27 Jan 2025 20:49:13 +0000
ROA not before:           Mon 27 Jan 2025 20:44:13 +0000
ROA not after:            Mon 26 Jan 2026 20:49:13 +0000
asID:                     28260
IP address blocks:        186.193.240.0/20 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            cc:fe:19:e4:09:37:58:12:c4:4a:55:8e:38:03:7a:33:85:09:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EDDE9456DFB0E0B6141479B36FE32CA0BF98688B
        Validity
            Not Before: Jan 27 20:44:13 2025 GMT
            Not After : Jan 26 20:49:13 2026 GMT
        Subject: CN=02B9F5EBD0EA6DFFD56AB7FAD472AF3EE210B065
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:f1:77:89:0c:02:7b:cb:7e:bb:f5:90:7c:09:
                    4e:0b:c5:d3:58:8e:bb:89:65:93:4d:b3:4f:c7:86:
                    a2:f0:82:45:46:e5:78:2d:1b:4b:51:e4:e5:d6:28:
                    4e:4b:c1:02:12:9d:4b:70:de:cf:2e:45:d8:84:b5:
                    1b:31:46:f5:ad:8f:95:dd:57:04:2c:08:32:f2:07:
                    81:5f:22:79:28:36:91:23:55:6f:ec:7d:32:d8:47:
                    3f:3f:b5:90:a9:b0:48:da:90:b8:74:86:57:f9:66:
                    2b:f1:c4:ae:cd:ea:91:c4:a4:db:97:5e:99:62:d5:
                    9e:ee:1d:95:07:ab:05:59:f6:52:80:41:74:7e:0c:
                    a9:c8:18:df:1c:22:e7:0e:72:13:ff:80:16:70:69:
                    7b:65:56:c3:1d:c7:68:2e:e3:11:df:89:b1:c5:b0:
                    39:04:8d:d5:83:40:f0:e4:01:bc:5d:87:dc:0c:5a:
                    4f:63:92:98:4c:15:ce:7b:60:98:7f:5d:ae:eb:94:
                    2c:90:92:d3:a2:4c:a5:a5:94:1d:b8:d1:bf:be:f0:
                    72:97:df:45:0d:a0:c4:95:1e:14:f3:59:56:7d:a4:
                    22:25:06:f5:99:3a:06:69:a2:8c:b7:92:f2:c3:c6:
                    05:bf:d6:76:98:09:7c:7d:b5:5b:b1:6b:58:87:16:
                    f6:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:B9:F5:EB:D0:EA:6D:FF:D5:6A:B7:FA:D4:72:AF:3E:E2:10:B0:65
            X509v3 Authority Key Identifier:
                keyid:ED:DE:94:56:DF:B0:E0:B6:14:14:79:B3:6F:E3:2C:A0:BF:98:68:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D81aiXpDAv5WBmgE8oEpfordjGP62otn2fHrhaL4cgby/0/EDDE9456DFB0E0B6141479B36FE32CA0BF98688B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EDDE9456DFB0E0B6141479B36FE32CA0BF98688B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D81aiXpDAv5WBmgE8oEpfordjGP62otn2fHrhaL4cgby/0/3138362e3139332e3234302e302f32302d3234203d3e203238323630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.193.240.0/20

    Signature Algorithm: sha256WithRSAEncryption
         01:c7:c5:2a:71:2f:bd:71:8d:e3:e4:0f:14:bb:fc:af:82:dd:
         79:3b:cc:e4:29:3d:73:5a:c1:39:50:fe:3b:c8:c9:48:2a:48:
         28:19:21:d5:0a:c6:d2:1f:a9:03:b1:ec:ef:95:57:d5:c1:01:
         11:da:22:47:c0:31:f1:fd:37:01:0d:e2:c4:6b:9c:c3:07:8d:
         d7:31:74:32:76:f4:6f:3a:33:ea:08:77:0e:8c:ba:64:81:26:
         fc:e0:d7:99:89:bb:f0:2b:17:7f:61:c4:93:a6:37:f8:03:75:
         c5:0b:01:a8:84:75:c2:8f:88:ad:58:32:16:4a:5b:b1:3d:6a:
         31:57:83:52:40:c9:ea:28:d4:1c:b0:8c:66:b9:06:6a:3c:b2:
         35:08:ba:47:2d:f4:62:5c:81:43:0f:06:f4:9a:9f:87:ce:a0:
         02:33:04:dd:6c:07:fd:67:f1:a9:01:98:2e:85:05:0f:f5:f9:
         99:ee:f0:7f:d7:77:4b:bc:8d:5a:cb:f4:c0:e6:f0:c2:42:f5:
         27:f9:3c:87:e0:f6:33:df:6c:de:f9:ad:f6:b2:a2:80:a9:84:
         be:29:b9:31:82:dd:0f:68:fc:e2:4f:13:90:e4:3e:4c:07:55:
         72:e3:50:ea:41:82:ac:83:a1:3b:25:85:b3:aa:3e:a9:ed:01:
         03:02:09:96
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUAMz+GeQJN1gSxEpVjjgDejOFCdgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRURERTk0NTZERkIwRTBCNjE0MTQ3OUIzNkZFMzJDQTBC
Rjk4Njg4QjAeFw0yNTAxMjcyMDQ0MTNaFw0yNjAxMjYyMDQ5MTNaMDMxMTAvBgNV
BAMTKDAyQjlGNUVCRDBFQTZERkZENTZBQjdGQUQ0NzJBRjNFRTIxMEIwNjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDE8XeJDAJ7y3679ZB8CU4LxdNY
jruJZZNNs0/HhqLwgkVG5XgtG0tR5OXWKE5LwQISnUtw3s8uRdiEtRsxRvWtj5Xd
VwQsCDLyB4FfInkoNpEjVW/sfTLYRz8/tZCpsEjakLh0hlf5ZivxxK7N6pHEpNuX
Xpli1Z7uHZUHqwVZ9lKAQXR+DKnIGN8cIucOchP/gBZwaXtlVsMdx2gu4xHfibHF
sDkEjdWDQPDkAbxdh9wMWk9jkphMFc57YJh/Xa7rlCyQktOiTKWllB240b++8HKX
30UNoMSVHhTzWVZ9pCIlBvWZOgZpooy3kvLDxgW/1naYCXx9tVuxa1iHFvahAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUArn169Dqbf/Varf61HKvPuIQsGUwHwYDVR0j
BBgwFoAU7d6UVt+w4LYUFHmzb+MsoL+YaIswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRDgxYWlYcERBdjVXQm1nRThvRXBmb3JkakdQNjJvdG4yZkhyaGFMNGNn
YnkvMC9FRERFOTQ1NkRGQjBFMEI2MTQxNDc5QjM2RkUzMkNBMEJGOTg2ODhCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0VEREU5NDU2REZCMEUwQjYx
NDE0NzlCMzZGRTMyQ0EwQkY5ODY4OEIuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0Q4MWFpWHBEQXY1V0JtZ0U4b0VwZm9yZGpHUDYyb3RuMmZIcmhhTDRjZ2J5LzAv
MzEzODM2MmUzMTM5MzMyZTMyMzQzMDJlMzAyZjMyMzAyZDMyMzQyMDNkM2UyMDMy
MzgzMjM2MzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAS6wfAwDQYJKoZIhvcNAQELBQADggEBAAHHxSpx
L71xjePkDxS7/K+C3Xk7zOQpPXNawTlQ/jvIyUgqSCgZIdUKxtIfqQOx7O+VV9XB
ARHaIkfAMfH9NwEN4sRrnMMHjdcxdDJ29G86M+oIdw6MumSBJvzg15mJu/ArF39h
xJOmN/gDdcULAaiEdcKPiK1YMhZKW7E9ajFXg1JAyeoo1BywjGa5Bmo8sjUIukct
9GJcgUMPBvSan4fOoAIzBN1sB/1n8akBmC6FBQ/1+Znu8H/Xd0u8jVrL9MDm8MJC
9Sf5PIfg9jPfbN75rfayooCphL4puTGC3Q9o/OJPE5DkPkwHVXLjUOpBgqyDoTsl
hbOqPqntAQMCCZY=
-----END CERTIFICATE-----
Generated at Sun Apr 13 14:49:21 2025 by rpki-client