Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GKx88Nf3tLPEpZEK63Q7SkXQSPNbzfw7RHN8mKGJgg1W/0/3136342e38352e362e302f32342d3234203d3e203233303734.roa
File:                     3136342e38352e362e302f32342d3234203d3e203233303734.roa (raw, json)
Hash identifier:          GNpGDsuuUxnD0gl4ZFhgTFBh2yMFabIGE0WepQ8KQ6k=
Subject key identifier:   A4:04:C1:C7:30:4F:B4:77:3E:D7:7F:45:74:F9:75:E3:74:6A:D2:24
Certificate issuer:       /CN=D0C614E3FAA25F31A56E9CF2FEA479B1CF08095D
Certificate serial:       1D045D254354A32B13F69AB51CA1DCED3A4ED456
Authority key identifier: D0:C6:14:E3:FA:A2:5F:31:A5:6E:9C:F2:FE:A4:79:B1:CF:08:09:5D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D0C614E3FAA25F31A56E9CF2FEA479B1CF08095D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GKx88Nf3tLPEpZEK63Q7SkXQSPNbzfw7RHN8mKGJgg1W/0/3136342e38352e362e302f32342d3234203d3e203233303734.roa
Signing time:             Fri 07 Feb 2025 01:44:52 +0000
ROA not before:           Fri 07 Feb 2025 01:39:52 +0000
ROA not after:            Fri 06 Feb 2026 01:44:52 +0000
asID:                     23074
IP address blocks:        164.85.6.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:04:5d:25:43:54:a3:2b:13:f6:9a:b5:1c:a1:dc:ed:3a:4e:d4:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D0C614E3FAA25F31A56E9CF2FEA479B1CF08095D
        Validity
            Not Before: Feb  7 01:39:52 2025 GMT
            Not After : Feb  6 01:44:52 2026 GMT
        Subject: CN=A404C1C7304FB4773ED77F4574F975E3746AD224
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:1c:a6:69:50:92:56:18:7a:76:1e:c8:c6:ba:
                    b1:3d:c8:ec:95:02:1b:8c:40:27:f0:99:f0:96:3a:
                    54:26:0b:8a:95:4c:ee:6f:16:13:c5:c6:c5:eb:f0:
                    15:59:dc:0e:74:a5:48:72:c0:9f:0c:02:af:df:5a:
                    8b:1e:43:8f:ed:86:48:1c:c4:e8:72:ee:db:1a:16:
                    10:0b:3c:b7:7b:8a:58:78:56:ce:96:38:38:e2:0e:
                    ac:ce:f2:2c:be:34:ca:6b:dc:0f:f1:30:22:b2:d7:
                    91:9d:be:51:e0:29:e2:d7:7e:36:f6:fe:fe:61:d7:
                    89:fd:b6:98:bf:8b:85:e6:55:64:7d:d5:1b:1a:9a:
                    d2:51:25:42:93:13:3d:63:b9:0b:f2:2c:86:72:dd:
                    78:44:c0:e7:73:4f:1f:d0:77:e8:6a:eb:b7:53:a7:
                    af:5f:3b:18:79:e5:24:93:58:35:0c:4f:94:3e:04:
                    f4:ac:ff:25:9d:e4:a6:89:50:a4:5e:74:65:8e:0c:
                    d3:79:b3:ac:35:97:93:b7:8d:42:11:3d:6c:5e:2b:
                    6c:26:93:26:e8:e9:94:e9:d4:a9:f8:18:d0:18:23:
                    55:cd:3e:5c:20:5f:c0:fa:05:e5:e2:8d:cc:52:6a:
                    63:46:81:db:2b:b5:3e:c2:e4:7e:c4:80:db:e1:e0:
                    1f:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:04:C1:C7:30:4F:B4:77:3E:D7:7F:45:74:F9:75:E3:74:6A:D2:24
            X509v3 Authority Key Identifier:
                keyid:D0:C6:14:E3:FA:A2:5F:31:A5:6E:9C:F2:FE:A4:79:B1:CF:08:09:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GKx88Nf3tLPEpZEK63Q7SkXQSPNbzfw7RHN8mKGJgg1W/0/D0C614E3FAA25F31A56E9CF2FEA479B1CF08095D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D0C614E3FAA25F31A56E9CF2FEA479B1CF08095D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GKx88Nf3tLPEpZEK63Q7SkXQSPNbzfw7RHN8mKGJgg1W/0/3136342e38352e362e302f32342d3234203d3e203233303734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.85.6.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b0:ad:64:7c:17:a8:aa:93:f3:eb:d1:55:bf:a0:d5:62:13:a0:
         96:b8:4d:48:33:11:dd:52:98:ed:7c:bb:ac:42:d5:19:92:e6:
         4f:2b:84:5b:7c:bd:ac:7d:9b:a1:ec:be:93:1a:eb:73:e5:57:
         0b:ec:05:c8:bb:76:50:2a:cf:88:a5:94:ba:bc:62:2d:3f:e7:
         a9:69:62:68:1f:eb:3a:e0:f5:98:d9:b6:22:25:b7:bd:7f:56:
         8f:97:65:63:f7:9b:f9:73:93:c4:7d:e3:60:62:11:65:dc:11:
         e2:d2:87:e8:5c:de:ed:b1:4b:85:db:02:aa:55:9e:01:40:fd:
         e0:be:f2:d0:af:98:04:43:c4:c3:e3:57:15:61:21:e8:3a:1c:
         2d:00:51:9c:b2:ef:c5:c1:5c:52:a9:8b:94:25:74:5b:21:4c:
         c2:3e:51:ca:e1:cb:2d:37:51:10:5c:63:19:4b:15:a2:1b:7e:
         18:57:14:15:a3:1b:75:07:97:fc:8b:41:3c:24:86:0b:42:b3:
         d9:d0:7d:46:ac:4f:ad:6a:aa:78:09:54:01:55:a3:a1:b9:01:
         a0:20:cb:06:56:35:5f:f1:82:9f:c5:f6:db:7d:cc:17:83:a9:
         bc:e2:12:e6:7f:7d:76:df:72:96:6a:22:dd:bd:d3:90:3e:27:
         ae:e2:a8:e6
-----BEGIN CERTIFICATE-----
MIIFQTCCBCmgAwIBAgIUHQRdJUNUoysT9pq1HKHc7TpO1FYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDBDNjE0RTNGQUEyNUYzMUE1NkU5Q0YyRkVBNDc5QjFD
RjA4MDk1RDAeFw0yNTAyMDcwMTM5NTJaFw0yNjAyMDYwMTQ0NTJaMDMxMTAvBgNV
BAMTKEE0MDRDMUM3MzA0RkI0NzczRUQ3N0Y0NTc0Rjk3NUUzNzQ2QUQyMjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD2HKZpUJJWGHp2HsjGurE9yOyV
AhuMQCfwmfCWOlQmC4qVTO5vFhPFxsXr8BVZ3A50pUhywJ8MAq/fWoseQ4/thkgc
xOhy7tsaFhALPLd7ilh4Vs6WODjiDqzO8iy+NMpr3A/xMCKy15GdvlHgKeLXfjb2
/v5h14n9tpi/i4XmVWR91RsamtJRJUKTEz1juQvyLIZy3XhEwOdzTx/Qd+hq67dT
p69fOxh55SSTWDUMT5Q+BPSs/yWd5KaJUKRedGWODNN5s6w1l5O3jUIRPWxeK2wm
kybo6ZTp1Kn4GNAYI1XNPlwgX8D6BeXijcxSamNGgdsrtT7C5H7EgNvh4B8vAgMB
AAGjggJLMIICRzAdBgNVHQ4EFgQUpATBxzBPtHc+139FdPl143Rq0iQwHwYDVR0j
BBgwFoAU0MYU4/qiXzGlbpzy/qR5sc8ICV0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR0t4ODhOZjN0TFBFcFpFSzYzUTdTa1hRU1BOYnpmdzdSSE44bUtHSmdn
MVcvMC9EMEM2MTRFM0ZBQTI1RjMxQTU2RTlDRjJGRUE0NzlCMUNGMDgwOTVELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0QwQzYxNEUzRkFBMjVGMzFB
NTZFOUNGMkZFQTQ3OUIxQ0YwODA5NUQuY2VyMIGoBggrBgEFBQcBCwSBmzCBmDCB
lQYIKwYBBQUHMAuGgYhyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0dLeDg4TmYzdExQRXBaRUs2M1E3U2tYUVNQTmJ6Znc3UkhOOG1LR0pnZzFXLzAv
MzEzNjM0MmUzODM1MmUzNjJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzMzMDM3
MzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBACkVQYwDQYJKoZIhvcNAQELBQADggEBALCtZHwXqKqT8+vR
Vb+g1WIToJa4TUgzEd1SmO18u6xC1RmS5k8rhFt8vax9m6HsvpMa63PlVwvsBci7
dlAqz4illLq8Yi0/56lpYmgf6zrg9ZjZtiIlt71/Vo+XZWP3m/lzk8R942BiEWXc
EeLSh+hc3u2xS4XbAqpVngFA/eC+8tCvmARDxMPjVxVhIeg6HC0AUZyy78XBXFKp
i5QldFshTMI+Ucrhyy03URBcYxlLFaIbfhhXFBWjG3UHl/yLQTwkhgtCs9nQfUas
T61qqngJVAFVo6G5AaAgywZWNV/xgp/F9tt9zBeDqbziEuZ/fXbfcpZqIt2905A+
J67iqOY=
-----END CERTIFICATE-----
Generated at Sat Apr 5 12:48:40 2025 by rpki-client