Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HXniMnv8y9EmJCjx2uu9BWC91L6TdynFHG8UgNZow7aZ/0/3138372e38362e322e302f32332d3233203d3e203238313335.roa
File:                     3138372e38362e322e302f32332d3233203d3e203238313335.roa (raw, json)
Hash identifier:          /8Bt/PzsISDc4aSuTloI857OaE+yG5hPyYqRAoKrxjg=
Subject key identifier:   6C:41:15:14:DD:C5:A5:4F:CC:8D:5B:85:BA:65:AA:94:46:77:8D:79
Certificate issuer:       /CN=106C0018EAEC97B226036E9F42E3D4795FCBC714
Certificate serial:       7CA999197D9D3982947645EE7FA7700E19A29777
Authority key identifier: 10:6C:00:18:EA:EC:97:B2:26:03:6E:9F:42:E3:D4:79:5F:CB:C7:14
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/106C0018EAEC97B226036E9F42E3D4795FCBC714.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HXniMnv8y9EmJCjx2uu9BWC91L6TdynFHG8UgNZow7aZ/0/3138372e38362e322e302f32332d3233203d3e203238313335.roa
Signing time:             Wed 13 Mar 2024 12:03:16 +0000
ROA not before:           Wed 13 Mar 2024 11:58:16 +0000
ROA not after:            Wed 12 Mar 2025 12:03:16 +0000
asID:                     28135
IP address blocks:        187.86.2.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:a9:99:19:7d:9d:39:82:94:76:45:ee:7f:a7:70:0e:19:a2:97:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=106C0018EAEC97B226036E9F42E3D4795FCBC714
        Validity
            Not Before: Mar 13 11:58:16 2024 GMT
            Not After : Mar 12 12:03:16 2025 GMT
        Subject: CN=6C411514DDC5A54FCC8D5B85BA65AA9446778D79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:6e:37:94:3c:6e:48:71:22:1d:3e:79:81:63:
                    38:76:4c:37:43:34:de:af:5d:73:2d:e5:5f:56:82:
                    32:45:52:9f:aa:74:4e:22:7a:a2:f8:1c:a7:66:7e:
                    c5:27:c6:48:4c:c9:34:f4:ec:c2:5f:e6:c0:09:e2:
                    bc:43:87:9a:bf:5e:4e:42:98:ff:51:9b:b5:5c:84:
                    a6:45:70:70:24:2f:f4:f1:f3:4d:6c:c1:f9:e0:4b:
                    36:5f:23:f4:c6:da:c0:6a:b0:f0:71:a4:df:ea:23:
                    37:b0:a9:24:e9:6e:f0:9d:1c:ad:09:29:c2:94:50:
                    e2:cf:4e:76:4f:91:6d:69:5d:f2:13:ab:60:db:88:
                    79:31:3b:23:08:d7:47:c4:a4:1d:37:e6:a2:3b:9a:
                    36:2a:71:72:ab:e4:40:f8:68:75:86:c7:70:49:f7:
                    cf:02:5c:27:fc:c8:94:a5:dd:28:10:e9:bc:fc:0d:
                    ee:8c:6a:9b:3e:2e:fd:79:79:75:08:6a:e5:40:06:
                    96:7e:72:92:f3:c1:7a:4d:82:93:4c:b2:af:f7:28:
                    61:08:cc:4c:2b:de:0d:77:c5:59:c8:d1:91:c5:07:
                    ef:25:91:29:91:16:d0:89:3b:a5:fb:45:32:c4:aa:
                    89:54:e3:fe:91:59:ef:59:01:02:6a:0a:f2:ec:8d:
                    f7:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:41:15:14:DD:C5:A5:4F:CC:8D:5B:85:BA:65:AA:94:46:77:8D:79
            X509v3 Authority Key Identifier:
                keyid:10:6C:00:18:EA:EC:97:B2:26:03:6E:9F:42:E3:D4:79:5F:CB:C7:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HXniMnv8y9EmJCjx2uu9BWC91L6TdynFHG8UgNZow7aZ/0/106C0018EAEC97B226036E9F42E3D4795FCBC714.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/106C0018EAEC97B226036E9F42E3D4795FCBC714.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HXniMnv8y9EmJCjx2uu9BWC91L6TdynFHG8UgNZow7aZ/0/3138372e38362e322e302f32332d3233203d3e203238313335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.86.2.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b0:d3:b3:31:e5:6b:b4:03:e3:d4:d5:ed:1f:2d:88:92:03:53:
         da:89:dd:8b:0a:81:b9:5b:4c:c7:10:5e:c5:e2:0c:44:da:9b:
         1b:00:59:34:00:0f:bb:fe:e4:39:20:32:f0:0a:9e:9d:35:d6:
         34:93:79:40:c3:47:fc:58:ff:9f:49:37:c9:ce:6f:47:89:3f:
         e1:d4:53:7f:0c:d6:a2:21:3d:d5:6e:1a:3c:df:13:68:c7:65:
         d0:4a:7f:b4:37:79:c7:bb:f5:87:a6:1b:d0:8e:10:4b:3a:6f:
         29:19:43:e1:f0:1e:a8:0a:f1:7b:af:50:f8:0d:fc:4b:3d:d5:
         d9:f9:b5:52:0c:2b:62:26:cb:75:56:eb:a2:4c:50:7c:71:1e:
         7f:e1:9a:5f:aa:f7:33:e1:55:63:02:53:c7:a5:f4:10:82:2b:
         6e:c1:81:d6:72:61:bf:6c:18:2d:e2:85:63:22:b1:b7:d1:05:
         5e:d9:0d:fe:3e:45:fe:02:8d:35:fb:98:f0:1b:71:43:a8:9a:
         0a:a1:c4:1c:a5:d0:d0:4a:e1:e3:32:7e:1d:52:2b:be:1d:0a:
         a4:f4:2e:d6:be:3a:7c:06:f0:b2:0e:62:80:88:e5:e2:f2:92:
         ed:e5:cd:6e:62:51:18:ba:f7:71:37:05:ef:17:c4:0d:c9:ed:
         43:da:a6:d0
-----BEGIN CERTIFICATE-----
MIIFQTCCBCmgAwIBAgIUfKmZGX2dOYKUdkXuf6dwDhmil3cwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTA2QzAwMThFQUVDOTdCMjI2MDM2RTlGNDJFM0Q0Nzk1
RkNCQzcxNDAeFw0yNDAzMTMxMTU4MTZaFw0yNTAzMTIxMjAzMTZaMDMxMTAvBgNV
BAMTKDZDNDExNTE0RERDNUE1NEZDQzhENUI4NUJBNjVBQTk0NDY3NzhENzkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCbjeUPG5IcSIdPnmBYzh2TDdD
NN6vXXMt5V9WgjJFUp+qdE4ieqL4HKdmfsUnxkhMyTT07MJf5sAJ4rxDh5q/Xk5C
mP9Rm7VchKZFcHAkL/Tx801swfngSzZfI/TG2sBqsPBxpN/qIzewqSTpbvCdHK0J
KcKUUOLPTnZPkW1pXfITq2DbiHkxOyMI10fEpB035qI7mjYqcXKr5ED4aHWGx3BJ
988CXCf8yJSl3SgQ6bz8De6Maps+Lv15eXUIauVABpZ+cpLzwXpNgpNMsq/3KGEI
zEwr3g13xVnI0ZHFB+8lkSmRFtCJO6X7RTLEqolU4/6RWe9ZAQJqCvLsjff7AgMB
AAGjggJLMIICRzAdBgNVHQ4EFgQUbEEVFN3FpU/MjVuFumWqlEZ3jXkwHwYDVR0j
BBgwFoAUEGwAGOrsl7ImA26fQuPUeV/LxxQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSFhuaU1udjh5OUVtSkNqeDJ1dTlCV0M5MUw2VGR5bkZIRzhVZ05ab3c3
YVovMC8xMDZDMDAxOEVBRUM5N0IyMjYwMzZFOUY0MkUzRDQ3OTVGQ0JDNzE0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzEwNkMwMDE4RUFFQzk3QjIy
NjAzNkU5RjQyRTNENDc5NUZDQkM3MTQuY2VyMIGoBggrBgEFBQcBCwSBmzCBmDCB
lQYIKwYBBQUHMAuGgYhyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0hYbmlNbnY4eTlFbUpDangydXU5QldDOTFMNlRkeW5GSEc4VWdOWm93N2FaLzAv
MzEzODM3MmUzODM2MmUzMjJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDMyMzgzMTMz
MzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAG7VgIwDQYJKoZIhvcNAQELBQADggEBALDTszHla7QD49TV
7R8tiJIDU9qJ3YsKgblbTMcQXsXiDETamxsAWTQAD7v+5DkgMvAKnp011jSTeUDD
R/xY/59JN8nOb0eJP+HUU38M1qIhPdVuGjzfE2jHZdBKf7Q3ece79YemG9COEEs6
bykZQ+HwHqgK8XuvUPgN/Es91dn5tVIMK2Imy3VW66JMUHxxHn/hml+q9zPhVWMC
U8el9BCCK27BgdZyYb9sGC3ihWMisbfRBV7ZDf4+Rf4CjTX7mPAbcUOomgqhxByl
0NBK4eMyfh1SK74dCqT0Lta+OnwG8LIOYoCI5eLyku3lzW5iURi693E3Be8XxA3J
7UPaptA=
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:20:27 2025 by rpki-client