Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HXniMnv8y9EmJCjx2uu9BWC91L6TdynFHG8UgNZow7aZ/0/3138372e38362e302e302f32342d3234203d3e203238313335.roa
File:                     3138372e38362e302e302f32342d3234203d3e203238313335.roa (raw, json)
Hash identifier:          uDsHl1QhAhsaASsor1MPfAjs+99+ojOhhLwWj4w1EJc=
Subject key identifier:   8C:2A:EC:F2:16:9E:65:D8:A2:DA:11:F6:82:2A:A6:92:F4:51:BD:8A
Certificate issuer:       /CN=106C0018EAEC97B226036E9F42E3D4795FCBC714
Certificate serial:       5221460E00F3AC28D4442457D3F5AB3EC311592F
Authority key identifier: 10:6C:00:18:EA:EC:97:B2:26:03:6E:9F:42:E3:D4:79:5F:CB:C7:14
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/106C0018EAEC97B226036E9F42E3D4795FCBC714.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HXniMnv8y9EmJCjx2uu9BWC91L6TdynFHG8UgNZow7aZ/0/3138372e38362e302e302f32342d3234203d3e203238313335.roa
Signing time:             Wed 13 Mar 2024 12:03:16 +0000
ROA not before:           Wed 13 Mar 2024 11:58:16 +0000
ROA not after:            Wed 12 Mar 2025 12:03:16 +0000
asID:                     28135
IP address blocks:        187.86.0.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:21:46:0e:00:f3:ac:28:d4:44:24:57:d3:f5:ab:3e:c3:11:59:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=106C0018EAEC97B226036E9F42E3D4795FCBC714
        Validity
            Not Before: Mar 13 11:58:16 2024 GMT
            Not After : Mar 12 12:03:16 2025 GMT
        Subject: CN=8C2AECF2169E65D8A2DA11F6822AA692F451BD8A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:74:15:78:8f:d7:97:c4:c9:66:14:96:b1:61:
                    62:69:30:e5:30:0e:cb:0c:4f:8e:10:42:7b:33:7b:
                    c4:08:2b:f5:bb:8e:e3:75:03:6f:a6:15:79:0f:0f:
                    46:6b:af:e1:2f:ab:a3:05:c9:25:d3:83:83:06:72:
                    a9:ae:c3:72:af:df:77:78:d7:f3:47:fb:2a:29:c2:
                    56:c4:a8:2f:0f:ef:41:0c:a0:b0:47:0b:75:43:60:
                    33:91:82:10:6b:fc:47:36:50:22:0c:71:70:c6:4e:
                    71:49:6c:9d:2b:f3:3b:c2:67:9e:80:8b:4b:71:46:
                    1e:28:5c:86:34:40:82:d7:fd:07:8e:94:aa:6e:f5:
                    95:58:f6:e3:b7:28:e5:3b:83:32:c9:67:58:ba:b8:
                    0d:84:8e:90:18:01:3c:4f:f3:33:ad:36:85:32:7a:
                    8f:49:87:32:5d:bf:95:62:bf:e1:1e:43:2f:ee:5a:
                    f3:47:ff:f7:25:9b:4f:58:00:27:00:d4:f4:ad:b1:
                    32:f3:05:89:e5:5c:21:fd:bd:81:83:ed:55:8d:57:
                    58:9b:f4:b8:2b:7f:09:6c:86:18:64:31:e1:f4:81:
                    25:d1:13:08:e5:74:eb:01:a5:0e:27:81:13:b1:7e:
                    e2:d2:ab:35:02:94:ea:2d:bf:dd:c4:ed:9b:2b:49:
                    2c:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:2A:EC:F2:16:9E:65:D8:A2:DA:11:F6:82:2A:A6:92:F4:51:BD:8A
            X509v3 Authority Key Identifier:
                keyid:10:6C:00:18:EA:EC:97:B2:26:03:6E:9F:42:E3:D4:79:5F:CB:C7:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HXniMnv8y9EmJCjx2uu9BWC91L6TdynFHG8UgNZow7aZ/0/106C0018EAEC97B226036E9F42E3D4795FCBC714.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/106C0018EAEC97B226036E9F42E3D4795FCBC714.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HXniMnv8y9EmJCjx2uu9BWC91L6TdynFHG8UgNZow7aZ/0/3138372e38362e302e302f32342d3234203d3e203238313335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.86.0.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6b:46:85:9e:0f:b2:6e:2b:af:53:da:54:6b:52:54:ee:64:8f:
         0b:93:e5:b7:40:77:53:b4:2c:6f:c5:36:7c:66:83:5d:f2:51:
         d3:f1:52:f5:e8:37:e7:51:d7:90:14:9d:b2:08:ae:40:fd:12:
         04:44:13:58:a9:63:15:51:ee:59:35:42:2f:a2:f1:3b:34:de:
         c7:fc:6d:44:83:23:13:e8:94:f8:be:52:70:8b:3f:b3:3c:e3:
         49:fc:16:e2:5d:4d:8e:44:aa:5c:88:ed:c4:8d:41:d2:1d:4f:
         6f:2a:e5:0c:fd:ac:38:54:bd:8c:53:e1:c7:3a:dc:6c:73:12:
         bb:9c:37:7e:73:14:87:3f:08:68:51:8f:49:26:70:01:22:d2:
         ca:b5:14:01:8c:d0:a1:d2:3b:10:b3:7d:fc:13:bb:80:37:cd:
         31:d0:0e:d8:77:29:9d:60:0b:4c:9b:89:d1:29:b3:68:c1:06:
         d8:7c:f9:3b:bb:51:8d:45:6c:4f:00:b7:d4:f8:22:4a:af:3d:
         01:f0:e7:dc:6e:49:62:73:be:6e:43:f2:31:49:50:05:18:6a:
         e2:9d:5b:99:56:62:25:2c:bf:22:75:59:49:6a:42:15:2b:d4:
         d3:dd:10:86:93:47:4f:53:5a:f4:10:d9:d7:d2:84:c5:bb:52:
         40:53:e9:67
-----BEGIN CERTIFICATE-----
MIIFQTCCBCmgAwIBAgIUUiFGDgDzrCjURCRX0/WrPsMRWS8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTA2QzAwMThFQUVDOTdCMjI2MDM2RTlGNDJFM0Q0Nzk1
RkNCQzcxNDAeFw0yNDAzMTMxMTU4MTZaFw0yNTAzMTIxMjAzMTZaMDMxMTAvBgNV
BAMTKDhDMkFFQ0YyMTY5RTY1RDhBMkRBMTFGNjgyMkFBNjkyRjQ1MUJEOEEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxdBV4j9eXxMlmFJaxYWJpMOUw
DssMT44QQnsze8QIK/W7juN1A2+mFXkPD0Zrr+Evq6MFySXTg4MGcqmuw3Kv33d4
1/NH+yopwlbEqC8P70EMoLBHC3VDYDORghBr/Ec2UCIMcXDGTnFJbJ0r8zvCZ56A
i0txRh4oXIY0QILX/QeOlKpu9ZVY9uO3KOU7gzLJZ1i6uA2EjpAYATxP8zOtNoUy
eo9JhzJdv5Viv+EeQy/uWvNH//clm09YACcA1PStsTLzBYnlXCH9vYGD7VWNV1ib
9LgrfwlshhhkMeH0gSXREwjldOsBpQ4ngROxfuLSqzUClOotv93E7ZsrSSyNAgMB
AAGjggJLMIICRzAdBgNVHQ4EFgQUjCrs8haeZdii2hH2giqmkvRRvYowHwYDVR0j
BBgwFoAUEGwAGOrsl7ImA26fQuPUeV/LxxQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSFhuaU1udjh5OUVtSkNqeDJ1dTlCV0M5MUw2VGR5bkZIRzhVZ05ab3c3
YVovMC8xMDZDMDAxOEVBRUM5N0IyMjYwMzZFOUY0MkUzRDQ3OTVGQ0JDNzE0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzEwNkMwMDE4RUFFQzk3QjIy
NjAzNkU5RjQyRTNENDc5NUZDQkM3MTQuY2VyMIGoBggrBgEFBQcBCwSBmzCBmDCB
lQYIKwYBBQUHMAuGgYhyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0hYbmlNbnY4eTlFbUpDangydXU5QldDOTFMNlRkeW5GSEc4VWdOWm93N2FaLzAv
MzEzODM3MmUzODM2MmUzMDJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzgzMTMz
MzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAC7VgAwDQYJKoZIhvcNAQELBQADggEBAGtGhZ4Psm4rr1Pa
VGtSVO5kjwuT5bdAd1O0LG/FNnxmg13yUdPxUvXoN+dR15AUnbIIrkD9EgREE1ip
YxVR7lk1Qi+i8Ts03sf8bUSDIxPolPi+UnCLP7M840n8FuJdTY5EqlyI7cSNQdId
T28q5Qz9rDhUvYxT4cc63GxzErucN35zFIc/CGhRj0kmcAEi0sq1FAGM0KHSOxCz
ffwTu4A3zTHQDth3KZ1gC0ybidEps2jBBth8+Tu7UY1FbE8At9T4IkqvPQHw59xu
SWJzvm5D8jFJUAUYauKdW5lWYiUsvyJ1WUlqQhUr1NPdEIaTR09TWvQQ2dfShMW7
UkBT6Wc=
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:05:03 2025 by rpki-client