Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/G8CT8EkQSnErwUR9av1h1ucPUQJhqTnwTF9a8744h14g/1/3138362e3231392e3235342e302f32342d3234203d3e203631373435.roa
File:                     3138362e3231392e3235342e302f32342d3234203d3e203631373435.roa (raw, json)
Hash identifier:          Rfn9dkqQtofsAH/afFAmbsAFKJFCvpHKzfP38uldc0I=
Subject key identifier:   FB:F9:0F:4F:11:10:C9:26:6B:A8:BD:52:BF:02:0D:19:24:E3:6E:8C
Certificate issuer:       /CN=CECEE953A375AC085E59078AAB4DC678DA6D7A20
Certificate serial:       02A530CA08F1B2D988385539D6FA14216FBC9E86
Authority key identifier: CE:CE:E9:53:A3:75:AC:08:5E:59:07:8A:AB:4D:C6:78:DA:6D:7A:20
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CECEE953A375AC085E59078AAB4DC678DA6D7A20.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G8CT8EkQSnErwUR9av1h1ucPUQJhqTnwTF9a8744h14g/1/3138362e3231392e3235342e302f32342d3234203d3e203631373435.roa
Signing time:             Mon 25 Nov 2024 13:58:00 +0000
ROA not before:           Mon 25 Nov 2024 13:53:00 +0000
ROA not after:            Mon 24 Nov 2025 13:58:00 +0000
asID:                     61745
IP address blocks:        186.219.254.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:a5:30:ca:08:f1:b2:d9:88:38:55:39:d6:fa:14:21:6f:bc:9e:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CECEE953A375AC085E59078AAB4DC678DA6D7A20
        Validity
            Not Before: Nov 25 13:53:00 2024 GMT
            Not After : Nov 24 13:58:00 2025 GMT
        Subject: CN=FBF90F4F1110C9266BA8BD52BF020D1924E36E8C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:21:8a:7a:d4:84:c5:dc:a9:df:eb:a4:c7:d1:
                    01:24:56:53:fd:37:6f:8f:d4:f1:30:28:ab:e4:04:
                    fc:bd:30:06:ca:23:95:2c:1e:c5:22:8b:26:4a:e8:
                    9f:5e:5e:27:a7:2a:b3:0c:ac:b1:db:49:6b:d9:d8:
                    fa:f4:4f:b9:c5:a4:50:61:d7:70:f2:e7:a3:b8:53:
                    20:07:30:51:08:a4:19:31:8f:27:a5:cd:b7:8c:ef:
                    6d:c2:ce:19:14:69:0d:8d:6c:b0:9c:91:72:3a:4a:
                    49:f7:1a:dc:ea:59:32:54:a9:02:83:c0:d2:39:e0:
                    f1:bc:82:59:2f:4d:98:82:b1:a6:37:ce:6b:da:eb:
                    e1:bf:d2:2a:ca:6c:2d:5e:12:88:ba:2b:c6:54:da:
                    ca:63:ec:fd:9b:85:9e:2f:72:40:97:09:44:26:c7:
                    6d:a2:6f:b7:b4:d0:98:57:6c:87:11:69:58:86:ab:
                    f0:a5:90:e9:ba:a9:28:78:5a:83:31:50:ec:3c:32:
                    f7:c2:53:57:24:48:43:b6:55:fd:ca:d2:3c:91:e7:
                    a5:56:69:ab:93:9c:b1:4e:00:dd:d1:13:ad:ec:d2:
                    e5:5d:fa:94:52:38:e2:b0:f9:2a:7e:18:2e:dc:fb:
                    aa:11:7a:74:85:69:b0:77:df:8c:d7:17:59:62:a3:
                    9a:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:F9:0F:4F:11:10:C9:26:6B:A8:BD:52:BF:02:0D:19:24:E3:6E:8C
            X509v3 Authority Key Identifier:
                keyid:CE:CE:E9:53:A3:75:AC:08:5E:59:07:8A:AB:4D:C6:78:DA:6D:7A:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G8CT8EkQSnErwUR9av1h1ucPUQJhqTnwTF9a8744h14g/1/CECEE953A375AC085E59078AAB4DC678DA6D7A20.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CECEE953A375AC085E59078AAB4DC678DA6D7A20.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G8CT8EkQSnErwUR9av1h1ucPUQJhqTnwTF9a8744h14g/1/3138362e3231392e3235342e302f32342d3234203d3e203631373435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.219.254.0/24

    Signature Algorithm: sha256WithRSAEncryption
         22:36:13:c8:24:1f:3a:a7:97:2f:02:0d:c1:c7:a8:87:ec:9e:
         a9:73:3f:40:91:16:0d:f5:6d:d1:3a:95:10:56:71:f6:0e:b6:
         c3:59:41:1b:8d:e5:16:48:65:4e:a7:13:c8:17:57:d2:55:40:
         79:7d:6a:a2:05:5f:b2:b1:71:b8:2e:ba:6e:b1:30:ae:22:0a:
         e7:73:58:9f:91:4a:7a:0f:20:5f:63:b9:7a:43:a8:85:af:d3:
         a7:ae:80:b1:2f:e7:39:34:f7:5a:18:c7:d6:68:2c:52:da:a8:
         1d:8f:a4:37:a2:b2:24:44:02:92:59:2c:da:ce:d8:68:27:a1:
         16:1e:dd:4e:d6:ec:43:ee:0d:d8:7f:da:e0:96:7f:62:20:ce:
         3e:99:99:2c:6f:34:f5:ce:30:2c:91:a7:b5:bc:0a:77:88:79:
         cc:50:da:bd:e0:91:9c:1c:06:15:17:b3:15:f6:7b:90:8d:fa:
         67:ac:8c:4c:38:64:29:a8:98:6b:50:50:b6:74:30:02:3c:9d:
         43:90:ae:f2:2c:a3:3c:f6:8f:05:c1:55:69:b5:8f:6d:8a:15:
         ee:7f:6a:91:94:a1:42:00:9b:44:32:77:27:9c:ee:13:b6:77:
         55:0d:20:17:60:a9:6f:e6:a6:75:93:92:fe:a1:27:7e:98:8d:
         ca:c6:82:b5
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUAqUwygjxstmIOFU51voUIW+8noYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0VDRUU5NTNBMzc1QUMwODVFNTkwNzhBQUI0REM2NzhE
QTZEN0EyMDAeFw0yNDExMjUxMzUzMDBaFw0yNTExMjQxMzU4MDBaMDMxMTAvBgNV
BAMTKEZCRjkwRjRGMTExMEM5MjY2QkE4QkQ1MkJGMDIwRDE5MjRFMzZFOEMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0IYp61ITF3Knf66TH0QEkVlP9
N2+P1PEwKKvkBPy9MAbKI5UsHsUiiyZK6J9eXienKrMMrLHbSWvZ2Pr0T7nFpFBh
13Dy56O4UyAHMFEIpBkxjyelzbeM723CzhkUaQ2NbLCckXI6Skn3GtzqWTJUqQKD
wNI54PG8glkvTZiCsaY3zmva6+G/0irKbC1eEoi6K8ZU2spj7P2bhZ4vckCXCUQm
x22ib7e00JhXbIcRaViGq/ClkOm6qSh4WoMxUOw8MvfCU1ckSEO2Vf3K0jyR56VW
aauTnLFOAN3RE63s0uVd+pRSOOKw+Sp+GC7c+6oRenSFabB334zXF1lio5q9AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU+/kPTxEQySZrqL1SvwINGSTjbowwHwYDVR0j
BBgwFoAUzs7pU6N1rAheWQeKq03GeNpteiAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRzhDVDhFa1FTbkVyd1VSOWF2MWgxdWNQVVFKaHFUbndURjlhODc0NGgx
NGcvMS9DRUNFRTk1M0EzNzVBQzA4NUU1OTA3OEFBQjREQzY3OERBNkQ3QTIwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NFQ0VFOTUzQTM3NUFDMDg1
RTU5MDc4QUFCNERDNjc4REE2RDdBMjAuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0c4Q1Q4RWtRU25FcndVUjlhdjFoMXVjUFVRSmhxVG53VEY5YTg3NDRoMTRnLzEv
MzEzODM2MmUzMjMxMzkyZTMyMzUzNDJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM2
MzEzNzM0MzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAC62/4wDQYJKoZIhvcNAQELBQADggEBACI2E8gk
Hzqnly8CDcHHqIfsnqlzP0CRFg31bdE6lRBWcfYOtsNZQRuN5RZIZU6nE8gXV9JV
QHl9aqIFX7Kxcbguum6xMK4iCudzWJ+RSnoPIF9juXpDqIWv06eugLEv5zk091oY
x9ZoLFLaqB2PpDeisiREApJZLNrO2GgnoRYe3U7W7EPuDdh/2uCWf2Igzj6ZmSxv
NPXOMCyRp7W8CneIecxQ2r3gkZwcBhUXsxX2e5CN+mesjEw4ZCmomGtQULZ0MAI8
nUOQrvIsozz2jwXBVWm1j22KFe5/apGUoUIAm0Qydyec7hO2d1UNIBdgqW/mpnWT
kv6hJ36YjcrGgrU=
-----END CERTIFICATE-----
Generated at Tue Nov 26 12:57:05 2024 by rpki-client on console-ams.rpki-client.org