Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HkqUXYqJVEk9tmym41QptfeRtjgk3iKz4xeQ5vHiP5tV/0/3138362e3234392e3137362e302f32302d3234203d3e20323632353332.roa
File:                     3138362e3234392e3137362e302f32302d3234203d3e20323632353332.roa (raw, json)
Hash identifier:          s1Zxy4hZjjlqb/2easSBtUNdQeLFkfW3Oh5ECJqmEME=
Subject key identifier:   4F:F4:0A:B5:68:7B:27:97:4E:DB:5A:CB:73:5A:DF:E2:7C:13:C2:8C
Certificate issuer:       /CN=B01FD3D3715CD38F1177ED9627CE619ABD9C34A1
Certificate serial:       34E23BF45FBEB1A9A359088379E11F7A96702696
Authority key identifier: B0:1F:D3:D3:71:5C:D3:8F:11:77:ED:96:27:CE:61:9A:BD:9C:34:A1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B01FD3D3715CD38F1177ED9627CE619ABD9C34A1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HkqUXYqJVEk9tmym41QptfeRtjgk3iKz4xeQ5vHiP5tV/0/3138362e3234392e3137362e302f32302d3234203d3e20323632353332.roa
Signing time:             Thu 27 Jul 2023 15:56:10 +0000
ROA not before:           Thu 27 Jul 2023 15:51:10 +0000
ROA not after:            Thu 25 Jul 2024 15:56:10 +0000
asID:                     262532
IP address blocks:        186.249.176.0/20 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:e2:3b:f4:5f:be:b1:a9:a3:59:08:83:79:e1:1f:7a:96:70:26:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B01FD3D3715CD38F1177ED9627CE619ABD9C34A1
        Validity
            Not Before: Jul 27 15:51:10 2023 GMT
            Not After : Jul 25 15:56:10 2024 GMT
        Subject: CN=4FF40AB5687B27974EDB5ACB735ADFE27C13C28C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:34:e9:94:67:d0:25:44:ac:24:75:d3:6b:73:
                    3c:f1:62:a1:0c:ca:b4:01:49:1b:fb:e6:b7:d5:18:
                    4b:33:03:fd:4e:53:3a:94:a6:0f:fc:34:96:fd:ed:
                    41:1a:09:4c:14:76:53:df:34:d7:93:cd:88:60:de:
                    d6:55:64:08:33:5f:63:60:bb:44:a6:89:4c:65:43:
                    78:18:6d:48:15:3f:9a:d5:85:61:88:fa:9e:e5:6d:
                    20:c3:0e:1f:65:8e:52:c9:8f:46:57:80:b6:96:ee:
                    14:0a:e4:96:04:a4:c4:a2:9b:f4:2c:57:35:d5:d1:
                    e5:e2:03:7c:6e:c6:10:bc:86:52:38:bb:b5:06:0b:
                    03:fa:50:f2:4c:0e:4b:15:ef:a8:02:71:2c:00:19:
                    2f:a2:e4:45:d4:e7:50:5f:20:61:3a:0c:1b:22:02:
                    50:b4:8a:be:d0:de:42:e1:40:cb:d8:b9:a6:f4:70:
                    5e:9d:b3:a5:e6:63:9f:68:87:e5:e1:65:24:69:52:
                    f5:5e:97:6b:a7:f2:e7:36:34:d7:cc:b2:dc:cc:fa:
                    0d:ef:cd:40:d7:cb:60:7a:55:d9:69:44:32:7b:da:
                    eb:dd:bc:d5:65:f0:35:d0:16:7f:2d:aa:aa:2c:ae:
                    39:ca:a0:04:f9:0b:80:0c:65:4a:57:b7:1e:9f:04:
                    48:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:F4:0A:B5:68:7B:27:97:4E:DB:5A:CB:73:5A:DF:E2:7C:13:C2:8C
            X509v3 Authority Key Identifier:
                keyid:B0:1F:D3:D3:71:5C:D3:8F:11:77:ED:96:27:CE:61:9A:BD:9C:34:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HkqUXYqJVEk9tmym41QptfeRtjgk3iKz4xeQ5vHiP5tV/0/B01FD3D3715CD38F1177ED9627CE619ABD9C34A1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B01FD3D3715CD38F1177ED9627CE619ABD9C34A1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HkqUXYqJVEk9tmym41QptfeRtjgk3iKz4xeQ5vHiP5tV/0/3138362e3234392e3137362e302f32302d3234203d3e20323632353332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.249.176.0/20

    Signature Algorithm: sha256WithRSAEncryption
         b8:87:17:d5:43:de:65:15:37:aa:64:25:81:6b:2a:15:1b:5a:
         02:f8:7d:eb:62:aa:b2:0b:83:5f:1c:e5:fe:93:0a:35:08:39:
         5c:02:bb:a4:9e:6d:a0:eb:64:cd:df:9b:86:ef:48:6f:87:ae:
         fe:27:d7:e6:cd:7f:de:4e:82:8a:5c:4b:d7:d0:ae:cc:3b:1f:
         89:ae:4f:7c:19:71:23:79:45:44:a3:1f:c1:e4:ec:bb:56:03:
         f9:a3:24:ed:5b:0b:c6:06:52:2f:7d:2f:67:56:e7:21:10:6b:
         91:da:8e:06:e9:57:3d:7f:fb:3b:26:4b:e9:75:62:98:e4:46:
         f4:ca:c9:ac:ae:ed:61:73:12:6c:75:d5:b5:8c:fe:5d:2d:1c:
         ca:d0:9a:bd:d6:70:4d:95:4e:72:5f:2f:1a:92:57:05:3c:c8:
         be:3d:5c:bf:83:3c:0a:fa:0d:d5:71:54:f7:29:a7:70:aa:ed:
         8a:6e:7a:0e:74:fa:d4:25:c0:db:ce:c5:fa:ba:d5:22:28:dd:
         fd:cd:d0:0f:af:01:87:44:e7:7e:0e:5b:56:03:74:72:78:f3:
         84:8e:02:6a:c3:5f:3c:21:dd:a2:0b:16:7b:65:a3:81:89:c6:
         8f:ed:ff:3a:b0:66:75:5b:28:2e:00:4a:f5:44:a9:5f:a2:05:
         71:c1:f2:28
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUNOI79F++samjWQiDeeEfepZwJpYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjAxRkQzRDM3MTVDRDM4RjExNzdFRDk2MjdDRTYxOUFC
RDlDMzRBMTAeFw0yMzA3MjcxNTUxMTBaFw0yNDA3MjUxNTU2MTBaMDMxMTAvBgNV
BAMTKDRGRjQwQUI1Njg3QjI3OTc0RURCNUFDQjczNUFERkUyN0MxM0MyOEMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUNOmUZ9AlRKwkddNrczzxYqEM
yrQBSRv75rfVGEszA/1OUzqUpg/8NJb97UEaCUwUdlPfNNeTzYhg3tZVZAgzX2Ng
u0SmiUxlQ3gYbUgVP5rVhWGI+p7lbSDDDh9ljlLJj0ZXgLaW7hQK5JYEpMSim/Qs
VzXV0eXiA3xuxhC8hlI4u7UGCwP6UPJMDksV76gCcSwAGS+i5EXU51BfIGE6DBsi
AlC0ir7Q3kLhQMvYuab0cF6ds6XmY59oh+XhZSRpUvVel2un8uc2NNfMstzM+g3v
zUDXy2B6VdlpRDJ72uvdvNVl8DXQFn8tqqosrjnKoAT5C4AMZUpXtx6fBEidAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUT/QKtWh7J5dO21rLc1rf4nwTwowwHwYDVR0j
BBgwFoAUsB/T03Fc048Rd+2WJ85hmr2cNKEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSGtxVVhZcUpWRWs5dG15bTQxUXB0ZmVSdGpnazNpS3o0eGVRNXZIaVA1
dFYvMC9CMDFGRDNEMzcxNUNEMzhGMTE3N0VEOTYyN0NFNjE5QUJEOUMzNEExLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0IwMUZEM0QzNzE1Q0QzOEYx
MTc3RUQ5NjI3Q0U2MTlBQkQ5QzM0QTEuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0hrcVVYWXFKVkVrOXRteW00MVFwdGZlUnRqZ2szaUt6NHhlUTV2SGlQNXRWLzAv
MzEzODM2MmUzMjM0MzkyZTMxMzczNjJlMzAyZjMyMzAyZDMyMzQyMDNkM2UyMDMy
MzYzMjM1MzMzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEBLr5sDANBgkqhkiG9w0BAQsFAAOCAQEAuIcX
1UPeZRU3qmQlgWsqFRtaAvh962KqsguDXxzl/pMKNQg5XAK7pJ5toOtkzd+bhu9I
b4eu/ifX5s1/3k6CilxL19CuzDsfia5PfBlxI3lFRKMfweTsu1YD+aMk7VsLxgZS
L30vZ1bnIRBrkdqOBulXPX/7OyZL6XVimORG9MrJrK7tYXMSbHXVtYz+XS0cytCa
vdZwTZVOcl8vGpJXBTzIvj1cv4M8CvoN1XFU9ymncKrtim56DnT61CXA287F+rrV
Iijd/c3QD68Bh0Tnfg5bVgN0cnjzhI4CasNfPCHdogsWe2WjgYnGj+3/OrBmdVso
LgBK9USpX6IFccHyKA==
-----END CERTIFICATE-----
Generated at Fri Mar 14 05:44:56 2025 by rpki-client