Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DwvHYZf54EzEBCVULVBkLpBZ1a5S7R8iiHndTJ8Tf8Jg/0/3138362e3139352e3136352e302f32342d3234203d3e20323734363231.roa
File:                     3138362e3139352e3136352e302f32342d3234203d3e20323734363231.roa (raw, json)
Hash identifier:          LNh9JfzjF/SojtsGt9Jz1O+Nba3iMadKYCN3VhCpXQ0=
Subject key identifier:   C8:7A:F7:7D:28:90:C2:0B:95:BB:8A:57:72:3F:93:AD:42:FD:A5:16
Certificate issuer:       /CN=0BC5FA068C2FB953B849D244673B5B1ACD76E920
Certificate serial:       61AE7D0CA9FD29DB2812CA107DC540728562D186
Authority key identifier: 0B:C5:FA:06:8C:2F:B9:53:B8:49:D2:44:67:3B:5B:1A:CD:76:E9:20
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0BC5FA068C2FB953B849D244673B5B1ACD76E920.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DwvHYZf54EzEBCVULVBkLpBZ1a5S7R8iiHndTJ8Tf8Jg/0/3138362e3139352e3136352e302f32342d3234203d3e20323734363231.roa
Signing time:             Sat 22 Feb 2025 04:01:34 +0000
ROA not before:           Sat 22 Feb 2025 03:56:34 +0000
ROA not after:            Sat 21 Feb 2026 04:01:34 +0000
asID:                     274621
IP address blocks:        186.195.165.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:ae:7d:0c:a9:fd:29:db:28:12:ca:10:7d:c5:40:72:85:62:d1:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0BC5FA068C2FB953B849D244673B5B1ACD76E920
        Validity
            Not Before: Feb 22 03:56:34 2025 GMT
            Not After : Feb 21 04:01:34 2026 GMT
        Subject: CN=C87AF77D2890C20B95BB8A57723F93AD42FDA516
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:76:9c:39:4f:e4:db:f9:c6:d6:fe:aa:bc:bc:
                    1d:1e:2f:be:45:61:dd:bd:09:6b:8c:20:bc:04:61:
                    95:78:71:f8:86:4f:05:fc:4f:19:12:1a:86:08:8e:
                    d7:3e:02:f2:e2:74:8a:98:e4:5f:ae:17:07:3c:dd:
                    c5:06:8a:08:20:f4:c0:a8:1c:41:fe:32:7f:12:4d:
                    df:df:d7:5e:ca:13:50:9c:6a:9e:33:bf:e6:ef:86:
                    1d:ab:5e:b1:eb:7a:11:8d:ea:67:25:e8:56:e1:b9:
                    bd:08:6d:ac:2c:bb:d7:e4:4c:fc:ec:c4:8a:d5:db:
                    5f:63:46:7c:e4:28:10:c1:a4:dc:5b:59:ef:1f:85:
                    96:de:e5:14:4e:50:16:a4:54:59:04:6b:47:fd:38:
                    b0:5a:3f:0f:69:9d:91:e9:ba:ec:fc:db:10:53:72:
                    80:04:02:ac:12:9a:a4:40:b7:0a:17:fc:0b:40:5b:
                    47:ec:e3:8f:c3:95:b5:49:c5:bf:86:2a:bb:ad:86:
                    c5:67:a6:1e:a9:0e:59:92:68:36:f1:9d:ac:2c:66:
                    a6:fa:fc:28:9d:33:e2:51:77:34:25:a8:49:36:9b:
                    4c:f8:e3:21:81:aa:a2:8e:24:7f:c5:69:f1:8f:44:
                    01:c7:50:50:d2:53:1b:7e:02:69:de:2d:c7:d1:c9:
                    d8:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:7A:F7:7D:28:90:C2:0B:95:BB:8A:57:72:3F:93:AD:42:FD:A5:16
            X509v3 Authority Key Identifier:
                keyid:0B:C5:FA:06:8C:2F:B9:53:B8:49:D2:44:67:3B:5B:1A:CD:76:E9:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DwvHYZf54EzEBCVULVBkLpBZ1a5S7R8iiHndTJ8Tf8Jg/0/0BC5FA068C2FB953B849D244673B5B1ACD76E920.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0BC5FA068C2FB953B849D244673B5B1ACD76E920.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DwvHYZf54EzEBCVULVBkLpBZ1a5S7R8iiHndTJ8Tf8Jg/0/3138362e3139352e3136352e302f32342d3234203d3e20323734363231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.195.165.0/24

    Signature Algorithm: sha256WithRSAEncryption
         38:c7:fe:e1:b3:28:56:9f:a1:d6:28:ee:54:62:a6:ec:85:4d:
         1f:c7:31:f5:f5:86:ad:e4:06:88:4d:65:ec:8e:9d:20:37:71:
         f1:08:94:c2:88:67:5d:43:07:a6:bb:31:5a:10:9b:b7:b0:57:
         c9:73:9f:0d:ae:ca:e1:9e:8e:e5:e2:99:02:97:84:f3:99:7c:
         1d:3c:b8:f7:a8:29:0b:4e:1a:b3:27:da:19:a6:73:c4:a3:12:
         14:5e:59:f4:15:29:b0:8a:96:31:c6:26:df:97:42:cb:be:32:
         f6:dc:19:51:b9:29:90:71:a1:ed:43:79:01:a7:2e:a8:71:0f:
         4a:ae:c5:ea:af:01:41:51:d0:5a:63:6a:75:ee:8c:00:6e:5a:
         a6:1c:23:71:bc:00:59:1f:03:43:0c:eb:c5:64:6c:51:95:2f:
         eb:8e:c9:9a:18:90:5f:d1:ca:f6:ca:07:79:43:f8:ba:ff:90:
         1b:a6:24:7e:e4:14:7c:b0:11:69:67:4d:8a:bc:13:64:71:91:
         55:51:1c:a5:f1:d8:91:b1:ef:e7:69:0d:b7:a1:58:5c:d9:fb:
         28:1c:72:ac:d9:ac:2d:64:10:15:79:41:7c:ae:4d:82:bd:e2:
         e1:ee:cc:f0:39:f7:40:57:e0:25:67:7b:3d:00:14:53:b9:c3:
         4e:b7:e7:3b
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUYa59DKn9KdsoEsoQfcVAcoVi0YYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEJDNUZBMDY4QzJGQjk1M0I4NDlEMjQ0NjczQjVCMUFD
RDc2RTkyMDAeFw0yNTAyMjIwMzU2MzRaFw0yNjAyMjEwNDAxMzRaMDMxMTAvBgNV
BAMTKEM4N0FGNzdEMjg5MEMyMEI5NUJCOEE1NzcyM0Y5M0FENDJGREE1MTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvdpw5T+Tb+cbW/qq8vB0eL75F
Yd29CWuMILwEYZV4cfiGTwX8TxkSGoYIjtc+AvLidIqY5F+uFwc83cUGiggg9MCo
HEH+Mn8STd/f117KE1Ccap4zv+bvhh2rXrHrehGN6mcl6Fbhub0Ibawsu9fkTPzs
xIrV219jRnzkKBDBpNxbWe8fhZbe5RROUBakVFkEa0f9OLBaPw9pnZHpuuz82xBT
coAEAqwSmqRAtwoX/AtAW0fs44/DlbVJxb+GKruthsVnph6pDlmSaDbxnawsZqb6
/CidM+JRdzQlqEk2m0z44yGBqqKOJH/FafGPRAHHUFDSUxt+AmneLcfRydgZAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUyHr3fSiQwguVu4pXcj+TrUL9pRYwHwYDVR0j
BBgwFoAUC8X6BowvuVO4SdJEZztbGs126SAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRHd2SFlaZjU0RXpFQkNWVUxWQmtMcEJaMWE1UzdSOGlpSG5kVEo4VGY4
SmcvMC8wQkM1RkEwNjhDMkZCOTUzQjg0OUQyNDQ2NzNCNUIxQUNENzZFOTIwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzBCQzVGQTA2OEMyRkI5NTNC
ODQ5RDI0NDY3M0I1QjFBQ0Q3NkU5MjAuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0R3dkhZWmY1NEV6RUJDVlVMVkJrTHBCWjFhNVM3UjhpaUhuZFRKOFRmOEpnLzAv
MzEzODM2MmUzMTM5MzUyZTMxMzYzNTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzczNDM2MzIzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEALrDpTANBgkqhkiG9w0BAQsFAAOCAQEAOMf+
4bMoVp+h1ijuVGKm7IVNH8cx9fWGreQGiE1l7I6dIDdx8QiUwohnXUMHprsxWhCb
t7BXyXOfDa7K4Z6O5eKZApeE85l8HTy496gpC04asyfaGaZzxKMSFF5Z9BUpsIqW
McYm35dCy74y9twZUbkpkHGh7UN5AacuqHEPSq7F6q8BQVHQWmNqde6MAG5aphwj
cbwAWR8DQwzrxWRsUZUv647JmhiQX9HK9soHeUP4uv+QG6YkfuQUfLARaWdNirwT
ZHGRVVEcpfHYkbHv52kNt6FYXNn7KBxyrNmsLWQQFXlBfK5Ngr3i4e7M8Dn3QFfg
JWd7PQAUU7nDTrfnOw==
-----END CERTIFICATE-----
Generated at Fri Apr 11 11:24:31 2025 by rpki-client