Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DN1NM2y6cAPHJ9a8fdSNVFQsYmNbjZXShdJQF2BwMKqw/0/3138362e3232372e38352e302f32342d3234203d3e203533313835.roa
File:                     3138362e3232372e38352e302f32342d3234203d3e203533313835.roa (raw, json)
Hash identifier:          YAXQ0+SkaenwKTnLEBv6uWeJeKXpcvTYAzdCbn2Z7nM=
Subject key identifier:   9E:08:C1:6D:BF:52:AE:FC:F3:C0:76:7E:62:62:34:75:77:63:8E:6A
Certificate issuer:       /CN=44EC6B382A99D4F125B2F0CDE4CCD068A1E3FFDA
Certificate serial:       4AB0162C52A12B8BB3ED5182CB71CB225EB6193A
Authority key identifier: 44:EC:6B:38:2A:99:D4:F1:25:B2:F0:CD:E4:CC:D0:68:A1:E3:FF:DA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/44EC6B382A99D4F125B2F0CDE4CCD068A1E3FFDA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DN1NM2y6cAPHJ9a8fdSNVFQsYmNbjZXShdJQF2BwMKqw/0/3138362e3232372e38352e302f32342d3234203d3e203533313835.roa
Signing time:             Sat 15 Jul 2023 03:18:53 +0000
ROA not before:           Sat 15 Jul 2023 03:13:53 +0000
ROA not after:            Sat 13 Jul 2024 03:18:53 +0000
asID:                     53185
IP address blocks:        186.227.85.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:b0:16:2c:52:a1:2b:8b:b3:ed:51:82:cb:71:cb:22:5e:b6:19:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44EC6B382A99D4F125B2F0CDE4CCD068A1E3FFDA
        Validity
            Not Before: Jul 15 03:13:53 2023 GMT
            Not After : Jul 13 03:18:53 2024 GMT
        Subject: CN=9E08C16DBF52AEFCF3C0767E6262347577638E6A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:31:10:6b:2e:60:45:8b:1c:86:63:89:4a:32:
                    01:99:e5:aa:44:48:e5:d1:04:58:4c:51:f3:57:bb:
                    98:03:68:ce:3a:19:9b:8e:5a:d9:31:d4:e9:ce:ca:
                    56:22:47:c8:73:73:fa:97:49:1f:a0:84:12:5f:26:
                    39:b4:01:e3:a4:36:2d:3c:bc:7d:61:cf:42:36:99:
                    48:66:6a:d0:9a:d5:ce:c6:aa:76:3f:33:c1:13:a6:
                    ae:e2:13:75:7a:2d:91:0d:27:70:d0:41:50:a1:e7:
                    e8:76:dc:a0:f6:cb:bc:5a:3e:20:11:f3:22:96:8f:
                    ba:50:ca:25:a2:8f:45:e7:8d:fc:05:bb:7f:33:80:
                    c0:ca:ae:ad:f5:a1:67:1e:3f:3e:da:44:bc:ce:71:
                    7d:5c:53:87:a4:59:33:11:73:c3:a8:72:1b:ee:d5:
                    ca:d9:61:47:3f:b7:68:a8:32:e8:9e:97:55:90:f5:
                    58:8f:7b:09:3b:d9:93:c1:77:d0:fe:48:02:5d:b6:
                    3b:0d:36:ad:79:cc:37:42:61:92:1c:bd:59:ea:a6:
                    bd:be:0f:88:fa:7a:d7:90:47:a6:0e:92:78:5b:65:
                    3d:d9:19:86:76:9a:9c:fc:5f:46:2f:6f:d6:85:62:
                    98:3c:5c:ee:04:52:6e:37:7c:87:24:ba:0c:e9:3d:
                    29:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:08:C1:6D:BF:52:AE:FC:F3:C0:76:7E:62:62:34:75:77:63:8E:6A
            X509v3 Authority Key Identifier:
                keyid:44:EC:6B:38:2A:99:D4:F1:25:B2:F0:CD:E4:CC:D0:68:A1:E3:FF:DA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DN1NM2y6cAPHJ9a8fdSNVFQsYmNbjZXShdJQF2BwMKqw/0/44EC6B382A99D4F125B2F0CDE4CCD068A1E3FFDA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/44EC6B382A99D4F125B2F0CDE4CCD068A1E3FFDA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DN1NM2y6cAPHJ9a8fdSNVFQsYmNbjZXShdJQF2BwMKqw/0/3138362e3232372e38352e302f32342d3234203d3e203533313835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.227.85.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1b:49:12:e5:75:be:23:f4:80:aa:91:40:90:3e:16:07:0c:73:
         57:94:64:8d:dc:11:59:33:e1:95:95:16:8c:1e:ba:da:54:b2:
         a5:4f:17:ce:66:19:94:d2:21:c3:8e:d0:73:fa:fd:69:a6:c7:
         49:78:39:82:18:c5:78:c8:34:79:47:e1:69:dc:5d:45:5e:55:
         bc:6b:76:e3:fc:8e:4c:d5:dc:2c:9c:05:ce:ac:c8:8a:ca:65:
         dc:17:1b:3c:24:15:86:13:6f:62:ee:46:74:76:36:0c:04:c3:
         f2:8d:f8:05:49:1a:e6:71:46:22:72:62:e8:27:9a:bc:0b:17:
         38:5b:bd:84:20:6a:18:a8:0c:fd:e3:90:b2:77:5b:10:d8:80:
         15:4d:1b:19:ff:7f:e9:ea:11:f8:72:d7:24:ab:cc:fc:33:c7:
         c2:c1:67:66:92:ba:55:84:13:55:e9:98:c0:57:05:a1:66:c8:
         d3:27:41:c3:bd:3f:f6:6f:ab:d9:eb:bd:29:9e:e2:47:6d:87:
         4b:7d:d7:e2:d4:00:46:ae:d2:19:9d:ed:76:73:4d:76:6c:12:
         a8:22:ed:55:37:ab:e7:ca:aa:26:07:d8:e6:fd:20:88:1c:e4:
         c9:9a:fc:fd:6b:53:dc:f5:36:df:eb:b2:26:6d:97:f6:4d:a4:
         d4:8e:10:d8
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUSrAWLFKhK4uz7VGCy3HLIl62GTowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDRFQzZCMzgyQTk5RDRGMTI1QjJGMENERTRDQ0QwNjhB
MUUzRkZEQTAeFw0yMzA3MTUwMzEzNTNaFw0yNDA3MTMwMzE4NTNaMDMxMTAvBgNV
BAMTKDlFMDhDMTZEQkY1MkFFRkNGM0MwNzY3RTYyNjIzNDc1Nzc2MzhFNkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdMRBrLmBFixyGY4lKMgGZ5apE
SOXRBFhMUfNXu5gDaM46GZuOWtkx1OnOylYiR8hzc/qXSR+ghBJfJjm0AeOkNi08
vH1hz0I2mUhmatCa1c7GqnY/M8ETpq7iE3V6LZENJ3DQQVCh5+h23KD2y7xaPiAR
8yKWj7pQyiWij0XnjfwFu38zgMDKrq31oWcePz7aRLzOcX1cU4ekWTMRc8Oochvu
1crZYUc/t2ioMuiel1WQ9ViPewk72ZPBd9D+SAJdtjsNNq15zDdCYZIcvVnqpr2+
D4j6eteQR6YOknhbZT3ZGYZ2mpz8X0Yvb9aFYpg8XO4EUm43fIckugzpPSmFAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUngjBbb9SrvzzwHZ+YmI0dXdjjmowHwYDVR0j
BBgwFoAUROxrOCqZ1PElsvDN5MzQaKHj/9owDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRE4xTk0yeTZjQVBISjlhOGZkU05WRlFzWW1OYmpaWFNoZEpRRjJCd01L
cXcvMC80NEVDNkIzODJBOTlENEYxMjVCMkYwQ0RFNENDRDA2OEExRTNGRkRBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzQ0RUM2QjM4MkE5OUQ0RjEy
NUIyRjBDREU0Q0NEMDY4QTFFM0ZGREEuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0ROMU5NMnk2Y0FQSEo5YThmZFNOVkZRc1ltTmJqWlhTaGRKUUYyQndNS3F3LzAv
MzEzODM2MmUzMjMyMzcyZTM4MzUyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNTMz
MzEzODM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAuuNVMA0GCSqGSIb3DQEBCwUAA4IBAQAbSRLldb4j
9ICqkUCQPhYHDHNXlGSN3BFZM+GVlRaMHrraVLKlTxfOZhmU0iHDjtBz+v1ppsdJ
eDmCGMV4yDR5R+Fp3F1FXlW8a3bj/I5M1dwsnAXOrMiKymXcFxs8JBWGE29i7kZ0
djYMBMPyjfgFSRrmcUYicmLoJ5q8Cxc4W72EIGoYqAz945Cyd1sQ2IAVTRsZ/3/p
6hH4ctckq8z8M8fCwWdmkrpVhBNV6ZjAVwWhZsjTJ0HDvT/2b6vZ670pnuJHbYdL
fdfi1ABGrtIZne12c012bBKoIu1VN6vnyqomB9jm/SCIHOTJmvz9a1Pc9Tbf67Im
bZf2TaTUjhDY
-----END CERTIFICATE-----
Generated at Fri Mar 14 03:08:32 2025 by rpki-client