Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DwWFi4gHNefR79hus69DSk9Cu3FA5Hu8wtvSL8rQJTWM/0/3138362e3230382e3231372e302f32342d3234203d3e203238353737.roa
File:                     3138362e3230382e3231372e302f32342d3234203d3e203238353737.roa (raw, json)
Hash identifier:          hYiaL4CfzQ4f1E9KT1hWpQ7zc9tNkfY1eAkeq6f4Qgs=
Subject key identifier:   5D:61:A7:FD:DC:D2:77:00:DE:D4:D0:36:D0:84:89:BA:C6:6B:DB:19
Certificate issuer:       /CN=8CAA8B2D24A1845906846F8F9FEF9D5CF6AAC191
Certificate serial:       718613EF8605FA91B36E83DC3FCAF1ED9FD01B2F
Authority key identifier: 8C:AA:8B:2D:24:A1:84:59:06:84:6F:8F:9F:EF:9D:5C:F6:AA:C1:91
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8CAA8B2D24A1845906846F8F9FEF9D5CF6AAC191.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DwWFi4gHNefR79hus69DSk9Cu3FA5Hu8wtvSL8rQJTWM/0/3138362e3230382e3231372e302f32342d3234203d3e203238353737.roa
Signing time:             Tue 30 Jul 2024 18:50:56 +0000
ROA not before:           Tue 30 Jul 2024 18:45:56 +0000
ROA not after:            Tue 29 Jul 2025 18:50:56 +0000
asID:                     28577
IP address blocks:        186.208.217.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:86:13:ef:86:05:fa:91:b3:6e:83:dc:3f:ca:f1:ed:9f:d0:1b:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8CAA8B2D24A1845906846F8F9FEF9D5CF6AAC191
        Validity
            Not Before: Jul 30 18:45:56 2024 GMT
            Not After : Jul 29 18:50:56 2025 GMT
        Subject: CN=5D61A7FDDCD27700DED4D036D08489BAC66BDB19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:c1:41:7e:17:fd:cf:d3:35:77:49:79:c0:68:
                    61:fd:1d:5a:3c:42:b4:7f:db:06:0b:6c:aa:fc:41:
                    a2:0d:06:ab:5b:49:1c:79:78:16:f6:e2:b7:25:5c:
                    22:c3:df:e8:7c:03:9e:53:6e:16:f6:35:e9:89:0f:
                    56:33:23:ef:72:27:20:8f:5c:a9:ff:d5:19:fe:bd:
                    c4:22:83:bc:b8:e6:23:49:95:91:47:91:11:d4:bc:
                    4c:15:aa:87:1b:97:53:9f:4d:d6:8a:7b:98:7b:7a:
                    16:c8:46:1f:03:19:4a:cc:a1:9b:94:8b:35:ff:e0:
                    ed:08:82:96:0e:80:3b:16:f1:52:44:80:f8:bb:de:
                    64:48:8f:c2:88:e5:9c:ce:ac:58:4f:ab:0a:73:92:
                    ed:da:93:8a:2b:15:d4:b9:b2:17:38:f1:18:ee:c4:
                    91:eb:bf:00:59:63:62:2e:dd:33:ea:e6:b0:6f:dd:
                    34:ad:c6:e6:7d:9f:e4:38:4b:f6:d8:06:e2:78:8a:
                    4d:02:c9:91:de:b6:2c:91:64:ca:7c:b8:62:e9:25:
                    b6:15:4e:49:57:c6:ea:ee:c3:7c:e1:c5:d9:6e:f7:
                    4d:07:db:47:a1:8d:bd:cf:1a:7d:7b:16:b9:46:b1:
                    8a:82:79:56:02:43:ad:4f:9a:ff:f5:0a:22:19:c5:
                    6b:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:61:A7:FD:DC:D2:77:00:DE:D4:D0:36:D0:84:89:BA:C6:6B:DB:19
            X509v3 Authority Key Identifier:
                keyid:8C:AA:8B:2D:24:A1:84:59:06:84:6F:8F:9F:EF:9D:5C:F6:AA:C1:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DwWFi4gHNefR79hus69DSk9Cu3FA5Hu8wtvSL8rQJTWM/0/8CAA8B2D24A1845906846F8F9FEF9D5CF6AAC191.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8CAA8B2D24A1845906846F8F9FEF9D5CF6AAC191.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DwWFi4gHNefR79hus69DSk9Cu3FA5Hu8wtvSL8rQJTWM/0/3138362e3230382e3231372e302f32342d3234203d3e203238353737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.208.217.0/24

    Signature Algorithm: sha256WithRSAEncryption
         06:ac:78:62:6c:c9:90:de:b0:a9:76:81:d9:41:99:66:9a:4c:
         96:ab:cd:27:2c:4b:7b:ab:ef:44:52:13:9a:0a:41:e7:1f:27:
         b9:92:31:9e:64:cf:a9:c7:66:8a:4d:89:aa:39:51:e1:04:22:
         80:5c:7e:06:c6:2a:28:20:98:88:8b:56:7c:a5:56:85:62:5c:
         77:49:a1:9a:37:04:d6:47:c6:ea:c2:44:8d:ad:5d:17:0e:e5:
         d3:30:ad:9b:b4:ed:a4:fe:49:bc:cb:84:92:5a:eb:cd:b0:d7:
         d0:2d:41:a3:87:53:a0:dd:4d:59:e1:f4:bc:a4:6e:37:9e:f9:
         1b:3d:dd:a5:e4:da:23:b4:ad:8b:69:15:00:b3:3a:81:2a:45:
         2a:ea:c6:7d:5b:38:b0:0a:4e:c7:89:f4:63:14:ed:9e:ef:e6:
         2c:ad:b6:da:b1:ff:b6:58:72:a5:44:1b:7b:e9:3b:fe:61:38:
         52:76:e3:e1:71:29:44:26:07:ab:99:d9:13:ee:62:f7:83:9c:
         47:9a:62:fd:87:b1:80:dd:40:be:b3:fc:34:bf:af:aa:34:8d:
         6d:82:b9:59:65:85:7f:b7:d1:71:3d:fd:60:5b:31:84:c0:db:
         de:da:3d:f2:db:a2:f4:a1:e2:fe:f9:6b:8f:b1:31:c5:bd:70:
         51:dc:03:59
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUcYYT74YF+pGzboPcP8rx7Z/QGy8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOENBQThCMkQyNEExODQ1OTA2ODQ2RjhGOUZFRjlENUNG
NkFBQzE5MTAeFw0yNDA3MzAxODQ1NTZaFw0yNTA3MjkxODUwNTZaMDMxMTAvBgNV
BAMTKDVENjFBN0ZERENEMjc3MDBERUQ0RDAzNkQwODQ4OUJBQzY2QkRCMTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCQwUF+F/3P0zV3SXnAaGH9HVo8
QrR/2wYLbKr8QaINBqtbSRx5eBb24rclXCLD3+h8A55Tbhb2NemJD1YzI+9yJyCP
XKn/1Rn+vcQig7y45iNJlZFHkRHUvEwVqocbl1OfTdaKe5h7ehbIRh8DGUrMoZuU
izX/4O0IgpYOgDsW8VJEgPi73mRIj8KI5ZzOrFhPqwpzku3ak4orFdS5shc48Rju
xJHrvwBZY2Iu3TPq5rBv3TStxuZ9n+Q4S/bYBuJ4ik0CyZHetiyRZMp8uGLpJbYV
TklXxuruw3zhxdlu900H20ehjb3PGn17FrlGsYqCeVYCQ61Pmv/1CiIZxWvJAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUXWGn/dzSdwDe1NA20ISJusZr2xkwHwYDVR0j
BBgwFoAUjKqLLSShhFkGhG+Pn++dXPaqwZEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRHdXRmk0Z0hOZWZSNzlodXM2OURTazlDdTNGQTVIdTh3dHZTTDhyUUpU
V00vMC84Q0FBOEIyRDI0QTE4NDU5MDY4NDZGOEY5RkVGOUQ1Q0Y2QUFDMTkxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzhDQUE4QjJEMjRBMTg0NTkw
Njg0NkY4RjlGRUY5RDVDRjZBQUMxOTEuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0R3V0ZpNGdITmVmUjc5aHVzNjlEU2s5Q3UzRkE1SHU4d3R2U0w4clFKVFdNLzAv
MzEzODM2MmUzMjMwMzgyZTMyMzEzNzJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzgzNTM3Mzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAC60NkwDQYJKoZIhvcNAQELBQADggEBAAaseGJs
yZDesKl2gdlBmWaaTJarzScsS3ur70RSE5oKQecfJ7mSMZ5kz6nHZopNiao5UeEE
IoBcfgbGKiggmIiLVnylVoViXHdJoZo3BNZHxurCRI2tXRcO5dMwrZu07aT+SbzL
hJJa682w19AtQaOHU6DdTVnh9Lykbjee+Rs93aXk2iO0rYtpFQCzOoEqRSrqxn1b
OLAKTseJ9GMU7Z7v5iytttqx/7ZYcqVEG3vpO/5hOFJ24+FxKUQmB6uZ2RPuYveD
nEeaYv2HsYDdQL6z/DS/r6o0jW2CuVllhX+30XE9/WBbMYTA297aPfLbovSh4v75
a4+xMcW9cFHcA1k=
-----END CERTIFICATE-----
Generated at Tue Feb 18 13:23:44 2025 by rpki-client