Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HkqUXYqJVEk9tmym41QptfeRtjgk3iKz4xeQ5vHiP5tV/0/3138362e3234392e3137382e302f32332d3233203d3e20323632353332.roa
File:                     3138362e3234392e3137382e302f32332d3233203d3e20323632353332.roa (raw, json)
Hash identifier:          gGZlcoX27YuWF4AXM3yrsLyDPgVFieub8vilILL3erQ=
Subject key identifier:   3D:B6:A5:2D:7B:62:2E:FA:86:D5:8E:06:40:44:26:E0:F5:7D:2D:B5
Certificate issuer:       /CN=C9244DB0FCBD1DD27B93837F8B052CE3B9B292AF
Certificate serial:       442881E869225B97D3212782B47904883F4F4AE4
Authority key identifier: C9:24:4D:B0:FC:BD:1D:D2:7B:93:83:7F:8B:05:2C:E3:B9:B2:92:AF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C9244DB0FCBD1DD27B93837F8B052CE3B9B292AF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HkqUXYqJVEk9tmym41QptfeRtjgk3iKz4xeQ5vHiP5tV/0/3138362e3234392e3137382e302f32332d3233203d3e20323632353332.roa
Signing time:             Wed 28 Feb 2024 14:12:37 +0000
ROA not before:           Wed 28 Feb 2024 14:07:37 +0000
ROA not after:            Wed 26 Feb 2025 14:12:37 +0000
asID:                     262532
IP address blocks:        186.249.178.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:28:81:e8:69:22:5b:97:d3:21:27:82:b4:79:04:88:3f:4f:4a:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C9244DB0FCBD1DD27B93837F8B052CE3B9B292AF
        Validity
            Not Before: Feb 28 14:07:37 2024 GMT
            Not After : Feb 26 14:12:37 2025 GMT
        Subject: CN=3DB6A52D7B622EFA86D58E06404426E0F57D2DB5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:53:46:f4:0f:b8:a9:b0:ed:32:47:ba:ba:d4:
                    23:72:0f:78:4a:53:e7:2f:35:c5:5f:ad:db:86:64:
                    7c:0f:29:12:8d:bc:39:e3:2c:83:5a:2c:e2:1a:fa:
                    59:b0:46:6e:07:04:cc:20:69:67:85:e6:d0:8b:8b:
                    6b:91:ed:fd:f1:14:c6:42:7c:18:87:8f:69:da:cd:
                    87:01:5b:5c:8b:03:95:da:46:c9:fc:0c:6d:54:31:
                    2b:1a:ee:f8:80:23:63:d6:f5:15:ff:a0:f8:2e:01:
                    db:9e:35:99:a5:4d:cc:16:dc:92:b9:6c:dc:3f:e1:
                    56:af:3c:ea:86:6c:51:ea:3b:f2:e6:95:b2:63:a3:
                    90:5f:d0:0c:c0:b7:41:89:17:5c:e7:33:68:9b:02:
                    90:bf:c8:e1:2a:a4:79:4a:63:7f:c2:51:3c:5a:05:
                    40:4e:a7:4b:f3:92:4b:f2:c7:62:1b:fc:2c:91:f1:
                    53:e8:4a:6f:b8:7c:b5:48:81:a4:3d:ca:ae:46:18:
                    da:db:a0:4e:90:98:52:3b:29:1e:ce:e7:36:6d:67:
                    b9:dd:2f:ea:4a:69:91:28:76:43:4a:23:c8:4b:80:
                    4d:30:24:b3:9b:a3:ed:36:3c:61:03:ba:7a:f7:5c:
                    51:82:a9:0d:53:ef:22:66:24:0b:21:14:6d:58:8e:
                    6e:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:B6:A5:2D:7B:62:2E:FA:86:D5:8E:06:40:44:26:E0:F5:7D:2D:B5
            X509v3 Authority Key Identifier:
                keyid:C9:24:4D:B0:FC:BD:1D:D2:7B:93:83:7F:8B:05:2C:E3:B9:B2:92:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HkqUXYqJVEk9tmym41QptfeRtjgk3iKz4xeQ5vHiP5tV/0/C9244DB0FCBD1DD27B93837F8B052CE3B9B292AF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C9244DB0FCBD1DD27B93837F8B052CE3B9B292AF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HkqUXYqJVEk9tmym41QptfeRtjgk3iKz4xeQ5vHiP5tV/0/3138362e3234392e3137382e302f32332d3233203d3e20323632353332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.249.178.0/23

    Signature Algorithm: sha256WithRSAEncryption
         49:a2:30:c1:3c:a3:77:67:df:05:89:41:0a:3d:38:a6:c0:29:
         9d:86:6f:49:53:33:6c:b9:a2:40:7c:07:6a:9c:35:4e:d2:6c:
         11:cd:43:f9:fa:98:3f:aa:cd:cd:4b:ac:7f:48:62:46:c3:e2:
         21:55:27:45:d0:f3:58:bf:a5:47:e6:d5:30:3a:f8:84:fb:a8:
         5b:5f:ad:14:72:b4:90:d1:69:fb:83:9f:e7:b1:bf:79:f9:d1:
         36:84:bb:c7:de:9f:1c:b4:7c:70:9f:ba:e3:6f:b9:f5:23:2d:
         2c:26:52:d6:1e:43:9a:c6:7b:50:a0:26:93:3b:5d:c8:73:50:
         1e:69:99:d5:dd:da:00:f0:2d:57:bc:15:ab:bf:52:5c:0d:ea:
         f1:89:91:b8:8e:ff:c3:67:28:f2:bc:33:95:63:05:22:09:c4:
         91:0e:93:bf:ac:14:bb:e8:b2:52:60:73:4b:89:b9:fe:9b:19:
         3e:0e:6f:17:b8:27:4e:c0:76:18:c8:58:73:5b:fa:aa:59:84:
         3c:0e:29:3c:fe:0b:9e:31:10:67:86:b1:69:51:97:a5:f1:75:
         41:7e:8d:2c:f0:da:d6:49:a0:11:ab:01:0f:33:40:21:32:c8:
         49:41:27:28:22:fb:da:0b:39:b8:2e:0d:78:c4:1f:ad:10:e9:
         a2:10:6a:78
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIURCiB6GkiW5fTISeCtHkEiD9PSuQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzkyNDREQjBGQ0JEMUREMjdCOTM4MzdGOEIwNTJDRTNC
OUIyOTJBRjAeFw0yNDAyMjgxNDA3MzdaFw0yNTAyMjYxNDEyMzdaMDMxMTAvBgNV
BAMTKDNEQjZBNTJEN0I2MjJFRkE4NkQ1OEUwNjQwNDQyNkUwRjU3RDJEQjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgU0b0D7ipsO0yR7q61CNyD3hK
U+cvNcVfrduGZHwPKRKNvDnjLINaLOIa+lmwRm4HBMwgaWeF5tCLi2uR7f3xFMZC
fBiHj2nazYcBW1yLA5XaRsn8DG1UMSsa7viAI2PW9RX/oPguAdueNZmlTcwW3JK5
bNw/4VavPOqGbFHqO/LmlbJjo5Bf0AzAt0GJF1znM2ibApC/yOEqpHlKY3/CUTxa
BUBOp0vzkkvyx2Ib/CyR8VPoSm+4fLVIgaQ9yq5GGNrboE6QmFI7KR7O5zZtZ7nd
L+pKaZEodkNKI8hLgE0wJLObo+02PGEDunr3XFGCqQ1T7yJmJAshFG1Yjm7RAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUPbalLXtiLvqG1Y4GQEQm4PV9LbUwHwYDVR0j
BBgwFoAUySRNsPy9HdJ7k4N/iwUs47mykq8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSGtxVVhZcUpWRWs5dG15bTQxUXB0ZmVSdGpnazNpS3o0eGVRNXZIaVA1
dFYvMC9DOTI0NERCMEZDQkQxREQyN0I5MzgzN0Y4QjA1MkNFM0I5QjI5MkFGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0M5MjQ0REIwRkNCRDFERDI3
QjkzODM3RjhCMDUyQ0UzQjlCMjkyQUYuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0hrcVVYWXFKVkVrOXRteW00MVFwdGZlUnRqZ2szaUt6NHhlUTV2SGlQNXRWLzAv
MzEzODM2MmUzMjM0MzkyZTMxMzczODJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDMy
MzYzMjM1MzMzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAbr5sjANBgkqhkiG9w0BAQsFAAOCAQEASaIw
wTyjd2ffBYlBCj04psApnYZvSVMzbLmiQHwHapw1TtJsEc1D+fqYP6rNzUusf0hi
RsPiIVUnRdDzWL+lR+bVMDr4hPuoW1+tFHK0kNFp+4Of57G/efnRNoS7x96fHLR8
cJ+642+59SMtLCZS1h5DmsZ7UKAmkztdyHNQHmmZ1d3aAPAtV7wVq79SXA3q8YmR
uI7/w2co8rwzlWMFIgnEkQ6Tv6wUu+iyUmBzS4m5/psZPg5vF7gnTsB2GMhYc1v6
qlmEPA4pPP4LnjEQZ4axaVGXpfF1QX6NLPDa1kmgEasBDzNAITLISUEnKCL72gs5
uC4NeMQfrRDpohBqeA==
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:28:00 2025 by rpki-client