Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HXniMnv8y9EmJCjx2uu9BWC91L6TdynFHG8UgNZow7aZ/0/3138372e38362e382e302f32312d3231203d3e203238313335.roa
File:                     3138372e38362e382e302f32312d3231203d3e203238313335.roa (raw, json)
Hash identifier:          UtkH8ptgF6EL6mjJHGFk64mDPbDtpmm6PI/E7GvNkDo=
Subject key identifier:   7B:9E:E2:98:BD:CD:13:5A:93:38:21:A2:04:7E:22:8C:B1:81:03:03
Certificate issuer:       /CN=106C0018EAEC97B226036E9F42E3D4795FCBC714
Certificate serial:       107134569F2365C029A752B476FC69CB5B7C9953
Authority key identifier: 10:6C:00:18:EA:EC:97:B2:26:03:6E:9F:42:E3:D4:79:5F:CB:C7:14
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/106C0018EAEC97B226036E9F42E3D4795FCBC714.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HXniMnv8y9EmJCjx2uu9BWC91L6TdynFHG8UgNZow7aZ/0/3138372e38362e382e302f32312d3231203d3e203238313335.roa
Signing time:             Wed 13 Mar 2024 12:03:16 +0000
ROA not before:           Wed 13 Mar 2024 11:58:16 +0000
ROA not after:            Wed 12 Mar 2025 12:03:16 +0000
asID:                     28135
IP address blocks:        187.86.8.0/21 maxlen: 21
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:71:34:56:9f:23:65:c0:29:a7:52:b4:76:fc:69:cb:5b:7c:99:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=106C0018EAEC97B226036E9F42E3D4795FCBC714
        Validity
            Not Before: Mar 13 11:58:16 2024 GMT
            Not After : Mar 12 12:03:16 2025 GMT
        Subject: CN=7B9EE298BDCD135A933821A2047E228CB1810303
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:b2:02:aa:cc:30:0d:e5:59:ec:22:a3:62:52:
                    fe:b6:a6:08:e9:77:7b:f7:22:6e:33:60:16:f8:eb:
                    f9:5f:ab:32:c0:e5:78:bc:d4:b7:7f:82:08:02:38:
                    5b:17:f7:3e:3b:01:80:8e:ee:d4:56:55:15:9f:76:
                    a8:f8:e7:df:f6:5f:8b:11:9e:31:8c:49:91:ca:8d:
                    f1:cb:20:e7:68:c5:07:48:a9:f3:c1:59:f6:5d:e7:
                    aa:09:71:a3:f9:64:dd:73:a5:a5:10:a3:75:65:42:
                    d8:6c:35:f5:4c:17:02:b7:e4:80:0b:f5:b1:82:0f:
                    5d:bc:9d:62:21:61:5e:a6:d4:c2:e9:66:19:21:62:
                    33:23:cc:86:f7:cd:97:94:e6:9b:2a:41:8b:76:49:
                    ba:f7:55:fd:c8:87:bd:ba:3e:39:38:1c:21:c9:06:
                    f1:db:dc:43:e4:21:f9:19:2f:9f:98:c1:5e:a3:d0:
                    e9:47:c2:e1:78:89:2f:b2:fa:c9:b3:39:64:8f:d8:
                    d1:d0:63:c0:3f:3a:cc:11:aa:de:30:87:49:d3:75:
                    00:4c:4d:70:44:35:96:6e:7f:57:cd:c4:53:70:c7:
                    bf:fa:64:09:b1:c2:f2:a1:d2:99:ea:e3:ee:f2:1b:
                    30:fc:e3:15:65:28:0e:d2:3a:24:aa:b9:66:73:3d:
                    c3:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:9E:E2:98:BD:CD:13:5A:93:38:21:A2:04:7E:22:8C:B1:81:03:03
            X509v3 Authority Key Identifier:
                keyid:10:6C:00:18:EA:EC:97:B2:26:03:6E:9F:42:E3:D4:79:5F:CB:C7:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HXniMnv8y9EmJCjx2uu9BWC91L6TdynFHG8UgNZow7aZ/0/106C0018EAEC97B226036E9F42E3D4795FCBC714.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/106C0018EAEC97B226036E9F42E3D4795FCBC714.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HXniMnv8y9EmJCjx2uu9BWC91L6TdynFHG8UgNZow7aZ/0/3138372e38362e382e302f32312d3231203d3e203238313335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.86.8.0/21

    Signature Algorithm: sha256WithRSAEncryption
         49:11:03:6d:de:48:7d:e9:af:1a:2c:63:e1:fd:67:7e:1a:5f:
         ff:ae:a2:cd:12:5b:d0:8b:0e:56:66:74:0c:ed:1d:7d:b9:b6:
         ee:5b:f4:ac:9f:bf:16:cb:90:c1:8b:4b:d2:3a:38:20:c7:ab:
         b3:ea:e2:53:55:65:4a:07:e2:0b:2f:0b:d6:4e:55:9d:0e:8c:
         0e:11:ae:c3:da:b2:74:27:fe:66:82:e9:08:e8:5f:9b:c5:d6:
         ec:e7:51:ce:bd:4b:80:88:58:a2:09:44:6f:95:2c:c1:11:a3:
         4d:48:38:7e:17:ba:a3:71:7d:dc:c6:f3:e5:7d:60:05:35:42:
         7b:6c:16:a1:3a:7e:07:07:51:ec:f2:72:ee:90:8d:1f:7f:c7:
         fe:b3:37:70:a5:55:21:43:6a:26:b4:d9:4d:50:4e:e4:cc:f2:
         6b:87:35:92:63:c7:b4:da:a2:a4:76:41:67:36:5f:0b:51:21:
         49:ea:fe:90:72:bd:4f:99:40:f2:cd:ad:1d:0a:8b:6d:f9:af:
         bc:a1:e1:cc:1d:68:9b:e8:47:e0:c7:aa:0d:a9:ef:31:6b:0e:
         c8:51:82:9a:26:4a:65:5a:ff:31:61:fd:cf:40:a1:93:bf:62:
         ee:9b:66:62:de:4e:e3:11:8c:8f:59:3f:01:c2:90:d8:5e:a5:
         bd:bd:ca:07
-----BEGIN CERTIFICATE-----
MIIFQTCCBCmgAwIBAgIUEHE0Vp8jZcApp1K0dvxpy1t8mVMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTA2QzAwMThFQUVDOTdCMjI2MDM2RTlGNDJFM0Q0Nzk1
RkNCQzcxNDAeFw0yNDAzMTMxMTU4MTZaFw0yNTAzMTIxMjAzMTZaMDMxMTAvBgNV
BAMTKDdCOUVFMjk4QkRDRDEzNUE5MzM4MjFBMjA0N0UyMjhDQjE4MTAzMDMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcsgKqzDAN5VnsIqNiUv62pgjp
d3v3Im4zYBb46/lfqzLA5Xi81Ld/gggCOFsX9z47AYCO7tRWVRWfdqj459/2X4sR
njGMSZHKjfHLIOdoxQdIqfPBWfZd56oJcaP5ZN1zpaUQo3VlQthsNfVMFwK35IAL
9bGCD128nWIhYV6m1MLpZhkhYjMjzIb3zZeU5psqQYt2Sbr3Vf3Ih726Pjk4HCHJ
BvHb3EPkIfkZL5+YwV6j0OlHwuF4iS+y+smzOWSP2NHQY8A/OswRqt4wh0nTdQBM
TXBENZZuf1fNxFNwx7/6ZAmxwvKh0pnq4+7yGzD84xVlKA7SOiSquWZzPcMbAgMB
AAGjggJLMIICRzAdBgNVHQ4EFgQUe57imL3NE1qTOCGiBH4ijLGBAwMwHwYDVR0j
BBgwFoAUEGwAGOrsl7ImA26fQuPUeV/LxxQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSFhuaU1udjh5OUVtSkNqeDJ1dTlCV0M5MUw2VGR5bkZIRzhVZ05ab3c3
YVovMC8xMDZDMDAxOEVBRUM5N0IyMjYwMzZFOUY0MkUzRDQ3OTVGQ0JDNzE0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzEwNkMwMDE4RUFFQzk3QjIy
NjAzNkU5RjQyRTNENDc5NUZDQkM3MTQuY2VyMIGoBggrBgEFBQcBCwSBmzCBmDCB
lQYIKwYBBQUHMAuGgYhyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0hYbmlNbnY4eTlFbUpDangydXU5QldDOTFMNlRkeW5GSEc4VWdOWm93N2FaLzAv
MzEzODM3MmUzODM2MmUzODJlMzAyZjMyMzEyZDMyMzEyMDNkM2UyMDMyMzgzMTMz
MzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAO7VggwDQYJKoZIhvcNAQELBQADggEBAEkRA23eSH3prxos
Y+H9Z34aX/+uos0SW9CLDlZmdAztHX25tu5b9KyfvxbLkMGLS9I6OCDHq7Pq4lNV
ZUoH4gsvC9ZOVZ0OjA4RrsPasnQn/maC6QjoX5vF1uznUc69S4CIWKIJRG+VLMER
o01IOH4XuqNxfdzG8+V9YAU1QntsFqE6fgcHUezycu6QjR9/x/6zN3ClVSFDaia0
2U1QTuTM8muHNZJjx7TaoqR2QWc2XwtRIUnq/pByvU+ZQPLNrR0Ki235r7yh4cwd
aJvoR+DHqg2p7zFrDshRgpomSmVa/zFh/c9AoZO/Yu6bZmLeTuMRjI9ZPwHCkNhe
pb29ygc=
-----END CERTIFICATE-----
Generated at Fri Mar 14 01:06:16 2025 by rpki-client