Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H1gLreWLfcLs2P4xidRLK14ktCjW1KUn7hDB4ALTqHn8/0/3138362e3234392e39362e302f31392d3234203d3e203238323736.roa
File:                     3138362e3234392e39362e302f31392d3234203d3e203238323736.roa (raw, json)
Hash identifier:          qbiaEyfKEtNAA4+cSCSi71G0O6GBn0B4sqvMsZPVdYk=
Subject key identifier:   6B:97:04:0B:58:F5:78:03:20:06:42:CD:AF:61:22:56:36:B4:68:0C
Certificate issuer:       /CN=FEE7200761D50CB7C046DEEA62DEB684FDFF3FC0
Certificate serial:       0E858488BA831484E0DEC0C319E2E890963B610D
Authority key identifier: FE:E7:20:07:61:D5:0C:B7:C0:46:DE:EA:62:DE:B6:84:FD:FF:3F:C0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FEE7200761D50CB7C046DEEA62DEB684FDFF3FC0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H1gLreWLfcLs2P4xidRLK14ktCjW1KUn7hDB4ALTqHn8/0/3138362e3234392e39362e302f31392d3234203d3e203238323736.roa
Signing time:             Thu 15 Feb 2024 13:19:05 +0000
ROA not before:           Thu 15 Feb 2024 13:14:05 +0000
ROA not after:            Thu 13 Feb 2025 13:19:05 +0000
asID:                     28276
IP address blocks:        186.249.96.0/19 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:85:84:88:ba:83:14:84:e0:de:c0:c3:19:e2:e8:90:96:3b:61:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FEE7200761D50CB7C046DEEA62DEB684FDFF3FC0
        Validity
            Not Before: Feb 15 13:14:05 2024 GMT
            Not After : Feb 13 13:19:05 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:f0:f5:d7:e4:24:c3:3c:6c:75:2d:81:64:b4:
                    f8:e3:da:ed:12:f4:c2:89:44:7a:62:a5:cf:9e:f6:
                    08:97:0c:2b:e9:99:1b:79:69:5f:3f:7a:03:9f:f7:
                    a3:ee:c9:d4:ae:d6:3f:66:13:33:38:cf:86:c9:87:
                    bd:91:c9:4a:54:75:f1:4c:4a:d5:65:33:45:3b:c5:
                    88:7e:7b:46:06:0a:74:91:65:ce:9e:da:82:2f:d6:
                    75:e5:98:f9:bd:6b:7c:47:da:42:32:10:fd:6b:1e:
                    2f:2b:24:56:61:24:9c:9b:d2:b7:9d:22:d2:18:53:
                    2c:6d:37:16:b4:41:ee:21:f1:7d:46:42:05:50:20:
                    9c:a8:98:1d:35:bb:fc:e2:25:7f:50:66:26:c1:61:
                    d7:4d:97:d2:7f:a5:7f:bf:7c:8f:94:07:b9:db:99:
                    c9:3b:12:92:b0:33:ec:44:95:21:90:52:78:cd:eb:
                    3b:3d:6b:2f:da:6f:e5:48:74:cf:a1:20:78:63:48:
                    42:4a:75:49:ea:ba:4f:bf:35:0f:4c:34:ed:83:06:
                    b3:09:71:7d:b3:e1:f0:77:57:de:da:bc:25:6b:27:
                    57:15:f5:07:8e:5a:15:cd:4d:b7:c9:a8:e8:42:fe:
                    a5:44:4d:d4:e0:62:f8:8e:21:c5:b2:56:3d:78:f1:
                    0e:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:97:04:0B:58:F5:78:03:20:06:42:CD:AF:61:22:56:36:B4:68:0C
            X509v3 Authority Key Identifier:
                keyid:FE:E7:20:07:61:D5:0C:B7:C0:46:DE:EA:62:DE:B6:84:FD:FF:3F:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H1gLreWLfcLs2P4xidRLK14ktCjW1KUn7hDB4ALTqHn8/0/FEE7200761D50CB7C046DEEA62DEB684FDFF3FC0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FEE7200761D50CB7C046DEEA62DEB684FDFF3FC0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H1gLreWLfcLs2P4xidRLK14ktCjW1KUn7hDB4ALTqHn8/0/3138362e3234392e39362e302f31392d3234203d3e203238323736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.249.96.0/19

    Signature Algorithm: sha256WithRSAEncryption
         20:bf:35:66:f5:7d:c8:d7:2f:7c:89:4a:0d:b8:4d:f1:08:07:
         1b:35:e2:08:af:17:69:21:de:fd:5c:18:78:ee:e4:02:68:50:
         1b:ab:9e:2b:b5:f9:4f:96:a5:90:1a:91:36:d7:f6:b6:cf:46:
         21:7b:23:eb:78:63:4e:65:6a:a1:04:79:2e:54:56:21:6f:5b:
         50:22:f0:7e:a7:85:5f:04:b2:1b:eb:0c:be:08:de:d8:63:db:
         ca:f0:54:6b:8d:35:90:fc:20:32:7e:e0:94:d5:70:a3:c5:15:
         96:3c:c1:f3:8c:c2:86:02:97:ee:3d:d4:e6:c5:b2:3a:5c:d8:
         db:d7:36:1b:95:8c:44:7a:26:48:8f:89:b2:d9:1d:9a:63:63:
         16:a3:93:77:94:cf:51:73:c4:4d:5e:04:bf:51:75:f7:61:b0:
         92:b0:46:c9:fb:57:4e:ea:2c:39:84:91:e9:a1:3a:f4:c0:47:
         92:4c:66:f5:31:61:8a:e8:f8:b7:44:1e:9c:46:d8:67:9e:9c:
         b3:2b:cc:25:b3:b7:47:d2:45:f6:ee:ba:9a:b6:5c:59:6f:b0:
         9e:e2:c7:4f:ee:73:cd:33:bc:cd:70:21:7c:fb:65:ae:da:15:
         a6:f3:83:9c:96:e8:33:aa:54:85:cb:07:06:7e:06:e4:dd:08:
         26:11:cb:f5
-----BEGIN CERTIFICATE-----
MIIHQTCCBimgAwIBAgIUDoWEiLqDFITg3sDDGeLokJY7YQ0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkVFNzIwMDc2MUQ1MENCN0MwNDZERUVBNjJERUI2ODRG
REZGM0ZDMDAeFw0yNDAyMTUxMzE0MDVaFw0yNTAyMTMxMzE5MDVaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwRENGMEY1RDdFNDI0QzMzQzZD
NzUyRDgxNjRCNEY4RTNEQUVEMTJGNEMyODk0NDdBNjJBNUNGOUVGNjA4OTcwQzJC
RTk5OTFCNzk2OTVGM0Y3QTAzOUZGN0EzRUVDOUQ0QUVENjNGNjYxMzMzMzhDRjg2
Qzk4N0JEOTFDOTRBNTQ3NUYxNEM0QUQ1NjUzMzQ1M0JDNTg4N0U3QjQ2MDYwQTc0
OTE2NUNFOUVEQTgyMkZENjc1RTU5OEY5QkQ2QjdDNDdEQTQyMzIxMEZENkIxRTJG
MkIyNDU2NjEyNDlDOUJEMkI3OUQyMkQyMTg1MzJDNkQzNzE2QjQ0MUVFMjFGMTdE
NDY0MjA1NTAyMDlDQTg5ODFEMzVCQkZDRTIyNTdGNTA2NjI2QzE2MUQ3NEQ5N0Qy
N0ZBNTdGQkY3QzhGOTQwN0I5REI5OUM5M0IxMjkyQjAzM0VDNDQ5NTIxOTA1Mjc4
Q0RFQjNCM0Q2QjJGREE2RkU1NDg3NENGQTEyMDc4NjM0ODQyNEE3NTQ5RUFCQTRG
QkYzNTBGNEMzNEVEODMwNkIzMDk3MTdEQjNFMUYwNzc1N0RFREFCQzI1NkIyNzU3
MTVGNTA3OEU1QTE1Q0Q0REI3QzlBOEU4NDJGRUE1NDQ0REQ0RTA2MkY4OEUyMUM1
QjI1NjNENzhGMTBFNTkwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEA3PD11+QkwzxsdS2BZLT449rtEvTCiUR6YqXPnvYIlwwr6ZkbeWlf
P3oDn/ej7snUrtY/ZhMzOM+GyYe9kclKVHXxTErVZTNFO8WIfntGBgp0kWXOntqC
L9Z15Zj5vWt8R9pCMhD9ax4vKyRWYSScm9K3nSLSGFMsbTcWtEHuIfF9RkIFUCCc
qJgdNbv84iV/UGYmwWHXTZfSf6V/v3yPlAe525nJOxKSsDPsRJUhkFJ4zes7PWsv
2m/lSHTPoSB4Y0hCSnVJ6rpPvzUPTDTtgwazCXF9s+Hwd1fe2rwlaydXFfUHjloV
zU23yajoQv6lRE3U4GL4jiHFslY9ePEOWQIDAQABo4ICTzCCAkswHQYDVR0OBBYE
FGuXBAtY9XgDIAZCza9hIlY2tGgMMB8GA1UdIwQYMBaAFP7nIAdh1Qy3wEbe6mLe
toT9/z/AMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0gxZ0xyZVdMZmNMczJQ
NHhpZFJMSzE0a3RDalcxS1VuN2hEQjRBTFRxSG44LzAvRkVFNzIwMDc2MUQ1MENC
N0MwNDZERUVBNjJERUI2ODRGREZGM0ZDMC5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC9GRUU3MjAwNzYxRDUwQ0I3QzA0NkRFRUE2MkRFQjY4NEZERkYz
RkMwLmNlcjCBrAYIKwYBBQUHAQsEgZ8wgZwwgZkGCCsGAQUFBzALhoGMcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9IMWdMcmVXTGZjTHMyUDR4aWRS
TEsxNGt0Q2pXMUtVbjdoREI0QUxUcUhuOC8wLzMxMzgzNjJlMzIzNDM5MmUzOTM2
MmUzMDJmMzEzOTJkMzIzNDIwM2QzZTIwMzIzODMyMzczNi5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBbr5
YDANBgkqhkiG9w0BAQsFAAOCAQEAIL81ZvV9yNcvfIlKDbhN8QgHGzXiCK8XaSHe
/VwYeO7kAmhQG6ueK7X5T5alkBqRNtf2ts9GIXsj63hjTmVqoQR5LlRWIW9bUCLw
fqeFXwSyG+sMvgje2GPbyvBUa401kPwgMn7glNVwo8UVljzB84zChgKX7j3U5sWy
OlzY29c2G5WMRHomSI+JstkdmmNjFqOTd5TPUXPETV4Ev1F192GwkrBGyftXTuos
OYSR6aE69MBHkkxm9TFhiuj4t0QenEbYZ56csyvMJbO3R9JF9u66mrZcWW+wnuLH
T+5zzTO8zXAhfPtlrtoVpvODnJboM6pUhcsHBn4G5N0IJhHL9Q==
-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:32 2024 by rpki-client on console-ams.rpki-client.org