Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/G81J6aRi8gaguucAFXhd3nr6UG9V5434jLWQLtx9wPc6/1/3138362e3230392e3132382e302f32302d3332203d3e203533313639.roa
File:                     3138362e3230392e3132382e302f32302d3332203d3e203533313639.roa (raw, json)
Hash identifier:          /wMla6CIYLaWtZLkIuFIG54c/5JjvgUs5U933o/I22I=
Subject key identifier:   16:D0:70:AC:9F:36:E9:AC:9F:8C:CA:5A:51:07:20:9B:51:E9:B6:AF
Certificate issuer:       /CN=14DABC9061A328905E8120751E9528DFE978C501
Certificate serial:       54A07D482B95600C258A9AA75D2F864D2DB4C50E
Authority key identifier: 14:DA:BC:90:61:A3:28:90:5E:81:20:75:1E:95:28:DF:E9:78:C5:01
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/14DABC9061A328905E8120751E9528DFE978C501.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G81J6aRi8gaguucAFXhd3nr6UG9V5434jLWQLtx9wPc6/1/3138362e3230392e3132382e302f32302d3332203d3e203533313639.roa
Signing time:             Wed 05 Mar 2025 21:14:14 +0000
ROA not before:           Wed 05 Mar 2025 21:09:14 +0000
ROA not after:            Wed 04 Mar 2026 21:14:14 +0000
asID:                     53169
IP address blocks:        186.209.128.0/20 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:a0:7d:48:2b:95:60:0c:25:8a:9a:a7:5d:2f:86:4d:2d:b4:c5:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=14DABC9061A328905E8120751E9528DFE978C501
        Validity
            Not Before: Mar  5 21:09:14 2025 GMT
            Not After : Mar  4 21:14:14 2026 GMT
        Subject: CN=16D070AC9F36E9AC9F8CCA5A5107209B51E9B6AF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:3d:db:42:f2:35:54:2e:7a:2b:71:23:df:97:
                    bf:29:01:7b:d7:b0:0b:f9:ad:8b:7d:47:a9:75:26:
                    64:2a:4e:a1:00:51:da:a1:98:b9:64:4b:4b:e2:9d:
                    da:03:bc:11:06:4c:21:b9:7b:57:24:3b:1b:7a:bf:
                    4a:b7:8d:19:8e:e0:a2:5a:a2:74:ac:83:d9:61:a3:
                    05:fd:3a:e2:1f:04:7b:d6:21:6d:dd:af:6c:48:0f:
                    9d:84:7d:f2:b2:eb:97:50:a5:1b:da:2f:49:83:97:
                    0a:1f:15:74:fd:d2:ba:29:39:d1:68:bc:22:a3:00:
                    00:fc:16:df:4a:31:cd:56:de:f8:99:07:5b:88:d5:
                    a6:ff:0d:50:ff:38:69:7a:f2:04:35:2d:e9:d6:94:
                    4c:1e:26:2f:fe:32:ee:9a:07:fb:c8:3e:7a:70:03:
                    82:94:f9:9a:14:5c:8b:46:01:eb:d2:b6:0e:11:04:
                    98:18:c1:85:4a:a4:a6:0e:96:c2:f4:a0:8a:23:86:
                    4a:e6:d6:cf:85:18:f8:1c:0c:cc:39:a8:3b:53:48:
                    c9:8d:4b:29:1e:2d:11:de:92:18:cd:33:2a:63:e3:
                    2a:ea:77:8c:ba:2c:03:29:2d:63:9c:64:07:2f:53:
                    7c:79:63:7f:13:50:88:e1:1c:34:78:33:70:1a:86:
                    3c:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:D0:70:AC:9F:36:E9:AC:9F:8C:CA:5A:51:07:20:9B:51:E9:B6:AF
            X509v3 Authority Key Identifier:
                keyid:14:DA:BC:90:61:A3:28:90:5E:81:20:75:1E:95:28:DF:E9:78:C5:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G81J6aRi8gaguucAFXhd3nr6UG9V5434jLWQLtx9wPc6/1/14DABC9061A328905E8120751E9528DFE978C501.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/14DABC9061A328905E8120751E9528DFE978C501.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G81J6aRi8gaguucAFXhd3nr6UG9V5434jLWQLtx9wPc6/1/3138362e3230392e3132382e302f32302d3332203d3e203533313639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.209.128.0/20

    Signature Algorithm: sha256WithRSAEncryption
         38:27:da:4d:49:fe:8f:c5:63:19:51:6b:e1:59:85:92:db:d8:
         71:c5:ff:22:77:aa:02:a1:1e:c7:5e:11:96:c7:f0:46:0a:00:
         86:98:af:2f:82:74:16:0e:b9:93:f6:75:47:c7:ed:de:a5:ab:
         57:bb:6d:ed:43:50:7b:1c:13:2f:f3:bc:f2:4e:ef:5c:c6:a3:
         66:83:ef:ef:45:bc:aa:50:d4:e9:dc:c4:da:09:ba:87:8d:38:
         90:14:37:74:7f:91:64:a3:ca:e9:97:db:ce:c8:fd:c6:9a:ea:
         dd:f1:5b:19:c3:61:d4:ba:56:ab:df:a7:14:d2:a9:6d:88:f3:
         52:e2:bf:6b:c6:38:1e:76:38:03:22:2c:ec:45:a6:cb:13:af:
         c4:ac:bd:4d:b0:fe:70:11:8d:14:d5:40:7e:11:68:0d:62:82:
         d5:b1:de:4e:2b:c3:54:c0:b2:05:0b:c4:ef:54:79:da:06:e5:
         8a:0b:a7:8a:7b:63:1f:b4:a3:85:41:ae:fb:aa:f3:6b:46:98:
         4a:f4:05:fb:33:f5:24:09:0b:49:c3:e1:71:5d:89:21:11:6a:
         c2:9b:6a:61:15:9b:ec:ed:af:56:27:9b:b0:71:2d:22:61:bc:
         b8:47:1b:e2:5f:07:de:34:bf:8c:66:f4:f3:90:6c:e5:be:53:
         79:b7:f5:1b
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUVKB9SCuVYAwlipqnXS+GTS20xQ4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTREQUJDOTA2MUEzMjg5MDVFODEyMDc1MUU5NTI4REZF
OTc4QzUwMTAeFw0yNTAzMDUyMTA5MTRaFw0yNjAzMDQyMTE0MTRaMDMxMTAvBgNV
BAMTKDE2RDA3MEFDOUYzNkU5QUM5RjhDQ0E1QTUxMDcyMDlCNTFFOUI2QUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcPdtC8jVULnorcSPfl78pAXvX
sAv5rYt9R6l1JmQqTqEAUdqhmLlkS0vindoDvBEGTCG5e1ckOxt6v0q3jRmO4KJa
onSsg9lhowX9OuIfBHvWIW3dr2xID52EffKy65dQpRvaL0mDlwofFXT90ropOdFo
vCKjAAD8Ft9KMc1W3viZB1uI1ab/DVD/OGl68gQ1LenWlEweJi/+Mu6aB/vIPnpw
A4KU+ZoUXItGAevStg4RBJgYwYVKpKYOlsL0oIojhkrm1s+FGPgcDMw5qDtTSMmN
SykeLRHekhjNMypj4yrqd4y6LAMpLWOcZAcvU3x5Y38TUIjhHDR4M3AahjwzAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUFtBwrJ826ayfjMpaUQcgm1Hptq8wHwYDVR0j
BBgwFoAUFNq8kGGjKJBegSB1HpUo3+l4xQEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRzgxSjZhUmk4Z2FndXVjQUZYaGQzbnI2VUc5VjU0MzRqTFdRTHR4OXdQ
YzYvMS8xNERBQkM5MDYxQTMyODkwNUU4MTIwNzUxRTk1MjhERkU5NzhDNTAxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzE0REFCQzkwNjFBMzI4OTA1
RTgxMjA3NTFFOTUyOERGRTk3OEM1MDEuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0c4MUo2YVJpOGdhZ3V1Y0FGWGhkM25yNlVHOVY1NDM0akxXUUx0eDl3UGM2LzEv
MzEzODM2MmUzMjMwMzkyZTMxMzIzODJlMzAyZjMyMzAyZDMzMzIyMDNkM2UyMDM1
MzMzMTM2Mzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAS60YAwDQYJKoZIhvcNAQELBQADggEBADgn2k1J
/o/FYxlRa+FZhZLb2HHF/yJ3qgKhHsdeEZbH8EYKAIaYry+CdBYOuZP2dUfH7d6l
q1e7be1DUHscEy/zvPJO71zGo2aD7+9FvKpQ1OncxNoJuoeNOJAUN3R/kWSjyumX
287I/caa6t3xWxnDYdS6VqvfpxTSqW2I81Liv2vGOB52OAMiLOxFpssTr8SsvU2w
/nARjRTVQH4RaA1igtWx3k4rw1TAsgULxO9UedoG5YoLp4p7Yx+0o4VBrvuq82tG
mEr0Bfsz9SQJC0nD4XFdiSERasKbamEVm+ztr1Ynm7BxLSJhvLhHG+JfB940v4xm
9POQbOW+U3m39Rs=
-----END CERTIFICATE-----
Generated at Sun Apr 6 00:26:01 2025 by rpki-client