Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GbonDppgvqtXd62AP1CbTTHaBmdUmKFuQHcXkhzNffaj/1/3138362e3230392e3137322e302f32322d3234203d3e20323731333234.roa
File:                     3138362e3230392e3137322e302f32322d3234203d3e20323731333234.roa (raw, json)
Hash identifier:          LsLMVl7rhUOlkR8lOWLS/9rEwgBHMIF5eY5KSyKfOVM=
Subject key identifier:   A7:16:26:2A:75:2B:BE:A9:28:CE:7C:AE:9E:A0:5A:26:55:40:90:62
Certificate issuer:       /CN=C65C257323D4DA58AFA1A27E0EBBEE1FA4A47563
Certificate serial:       551BE711C72CAB7F393A84E69ED955215B9ADBB5
Authority key identifier: C6:5C:25:73:23:D4:DA:58:AF:A1:A2:7E:0E:BB:EE:1F:A4:A4:75:63
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C65C257323D4DA58AFA1A27E0EBBEE1FA4A47563.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GbonDppgvqtXd62AP1CbTTHaBmdUmKFuQHcXkhzNffaj/1/3138362e3230392e3137322e302f32322d3234203d3e20323731333234.roa
Signing time:             Wed 05 Mar 2025 19:00:29 +0000
ROA not before:           Wed 05 Mar 2025 18:55:29 +0000
ROA not after:            Wed 04 Mar 2026 19:00:29 +0000
asID:                     271324
IP address blocks:        186.209.172.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:1b:e7:11:c7:2c:ab:7f:39:3a:84:e6:9e:d9:55:21:5b:9a:db:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C65C257323D4DA58AFA1A27E0EBBEE1FA4A47563
        Validity
            Not Before: Mar  5 18:55:29 2025 GMT
            Not After : Mar  4 19:00:29 2026 GMT
        Subject: CN=A716262A752BBEA928CE7CAE9EA05A2655409062
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:c9:fd:f9:54:30:3e:d7:1e:bc:c9:c6:b9:5f:
                    24:a5:49:f3:dd:f5:0c:43:e4:c3:98:72:ee:26:f8:
                    2e:82:3d:11:dc:dc:3f:64:f7:5d:13:92:f1:8a:2f:
                    01:95:05:84:96:f0:d0:08:37:ce:bc:70:05:2c:a9:
                    63:99:98:f8:2b:5e:d6:1f:be:6f:a0:ee:9e:a2:31:
                    31:8b:c6:da:62:fd:5e:aa:a2:dc:55:b3:64:ab:75:
                    52:a8:9c:e2:d4:82:50:90:51:19:fd:c2:d4:a6:17:
                    3a:15:cf:91:e3:39:46:b4:33:44:79:6e:89:49:72:
                    02:b8:07:5c:0c:55:6a:12:76:84:65:03:ad:59:63:
                    ea:c1:db:de:91:30:9f:16:a8:bd:0e:ba:1e:9f:5b:
                    34:f3:e1:93:b6:40:38:c9:69:b9:bb:5d:a8:1e:8c:
                    1c:1d:a1:6d:de:ab:d3:a7:5a:d5:b9:eb:1f:fb:e8:
                    40:02:d7:a9:5c:38:b9:69:28:5b:9e:48:56:19:f4:
                    65:9b:8f:d9:48:2e:f0:a3:ca:39:94:36:bc:17:9d:
                    f5:a8:5f:59:6d:63:86:03:a8:36:ab:95:63:13:f6:
                    d4:0b:ef:bd:b7:ed:2e:72:aa:79:65:32:d7:48:5d:
                    53:2f:71:ee:76:37:a1:52:c6:79:44:82:68:d3:c1:
                    22:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:16:26:2A:75:2B:BE:A9:28:CE:7C:AE:9E:A0:5A:26:55:40:90:62
            X509v3 Authority Key Identifier:
                keyid:C6:5C:25:73:23:D4:DA:58:AF:A1:A2:7E:0E:BB:EE:1F:A4:A4:75:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GbonDppgvqtXd62AP1CbTTHaBmdUmKFuQHcXkhzNffaj/1/C65C257323D4DA58AFA1A27E0EBBEE1FA4A47563.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C65C257323D4DA58AFA1A27E0EBBEE1FA4A47563.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GbonDppgvqtXd62AP1CbTTHaBmdUmKFuQHcXkhzNffaj/1/3138362e3230392e3137322e302f32322d3234203d3e20323731333234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.209.172.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8d:ce:17:4f:0b:06:7e:64:a0:87:e8:11:5d:bd:7f:01:21:a4:
         33:e8:2b:29:67:25:fa:78:50:de:21:71:37:31:ad:54:94:90:
         f0:59:29:71:cb:14:9b:d1:8f:66:3f:e9:b5:a1:20:03:d0:b0:
         c6:52:8c:37:d6:50:30:c5:3d:62:25:eb:02:44:1d:43:99:56:
         5b:4e:82:36:41:93:17:16:e5:58:e7:e9:ca:77:37:63:a5:0b:
         af:14:ae:c0:b5:db:7f:35:a7:f5:62:2a:ea:bd:fe:b4:56:7b:
         1d:af:55:dc:e3:7d:f4:80:c9:82:b9:05:29:0f:0c:21:4a:15:
         2f:65:c1:d7:7f:bb:b1:39:02:07:8d:63:ce:4e:bf:15:65:d8:
         68:84:29:0b:3a:7f:c2:44:c0:49:cd:9b:01:8e:7d:06:c7:8d:
         55:46:ec:12:bb:71:5d:c4:5b:40:e6:57:b3:4e:02:1b:67:8c:
         b5:24:05:98:2d:80:50:c5:22:d9:45:2c:aa:46:f2:b3:d1:e7:
         d5:21:2d:17:3c:e8:4c:c8:83:f7:c2:96:57:98:5c:87:06:e4:
         f5:1d:5b:c4:4d:16:dd:4a:79:8e:9e:64:14:33:b3:2b:ab:6a:
         2d:59:d0:a0:f7:f0:01:20:dc:87:8b:f0:de:cc:fe:40:70:19:
         7f:b5:bf:ca
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUVRvnEccsq385OoTmntlVIVua27UwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzY1QzI1NzMyM0Q0REE1OEFGQTFBMjdFMEVCQkVFMUZB
NEE0NzU2MzAeFw0yNTAzMDUxODU1MjlaFw0yNjAzMDQxOTAwMjlaMDMxMTAvBgNV
BAMTKEE3MTYyNjJBNzUyQkJFQTkyOENFN0NBRTlFQTA1QTI2NTU0MDkwNjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7yf35VDA+1x68yca5XySlSfPd
9QxD5MOYcu4m+C6CPRHc3D9k910TkvGKLwGVBYSW8NAIN868cAUsqWOZmPgrXtYf
vm+g7p6iMTGLxtpi/V6qotxVs2SrdVKonOLUglCQURn9wtSmFzoVz5HjOUa0M0R5
bolJcgK4B1wMVWoSdoRlA61ZY+rB296RMJ8WqL0Ouh6fWzTz4ZO2QDjJabm7Xage
jBwdoW3eq9OnWtW56x/76EAC16lcOLlpKFueSFYZ9GWbj9lILvCjyjmUNrwXnfWo
X1ltY4YDqDarlWMT9tQL77237S5yqnllMtdIXVMvce52N6FSxnlEgmjTwSIlAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUpxYmKnUrvqkoznyunqBaJlVAkGIwHwYDVR0j
BBgwFoAUxlwlcyPU2livoaJ+DrvuH6SkdWMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR2JvbkRwcGd2cXRYZDYyQVAxQ2JUVEhhQm1kVW1LRnVRSGNYa2h6TmZm
YWovMS9DNjVDMjU3MzIzRDREQTU4QUZBMUEyN0UwRUJCRUUxRkE0QTQ3NTYzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0M2NUMyNTczMjNENERBNThB
RkExQTI3RTBFQkJFRTFGQTRBNDc1NjMuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0dib25EcHBndnF0WGQ2MkFQMUNiVFRIYUJtZFVtS0Z1UUhjWGtoek5mZmFqLzEv
MzEzODM2MmUzMjMwMzkyZTMxMzczMjJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDMy
MzczMTMzMzIzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEArrRrDANBgkqhkiG9w0BAQsFAAOCAQEAjc4X
TwsGfmSgh+gRXb1/ASGkM+grKWcl+nhQ3iFxNzGtVJSQ8FkpccsUm9GPZj/ptaEg
A9CwxlKMN9ZQMMU9YiXrAkQdQ5lWW06CNkGTFxblWOfpync3Y6ULrxSuwLXbfzWn
9WIq6r3+tFZ7Ha9V3ON99IDJgrkFKQ8MIUoVL2XB13+7sTkCB41jzk6/FWXYaIQp
Czp/wkTASc2bAY59BseNVUbsErtxXcRbQOZXs04CG2eMtSQFmC2AUMUi2UUsqkby
s9Hn1SEtFzzoTMiD98KWV5hchwbk9R1bxE0W3Up5jp5kFDOzK6tqLVnQoPfwASDc
h4vw3sz+QHAZf7W/yg==
-----END CERTIFICATE-----
Generated at Sat Apr 5 23:21:12 2025 by rpki-client