Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HkqUXYqJVEk9tmym41QptfeRtjgk3iKz4xeQ5vHiP5tV/0/3138362e3234392e3138342e302f32322d3232203d3e20323632353332.roa
File:                     3138362e3234392e3138342e302f32322d3232203d3e20323632353332.roa (raw, json)
Hash identifier:          i141dhw+dStryqnKAVxO3z8WIorXeVCyBPnveChe/KU=
Subject key identifier:   A4:DC:59:FE:29:F5:95:0B:FB:C4:9E:DB:AD:27:CC:AA:F8:D3:C2:5F
Certificate issuer:       /CN=C9244DB0FCBD1DD27B93837F8B052CE3B9B292AF
Certificate serial:       2E00694C3553DE8CFDF3C3FAE097097C377ACA81
Authority key identifier: C9:24:4D:B0:FC:BD:1D:D2:7B:93:83:7F:8B:05:2C:E3:B9:B2:92:AF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C9244DB0FCBD1DD27B93837F8B052CE3B9B292AF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HkqUXYqJVEk9tmym41QptfeRtjgk3iKz4xeQ5vHiP5tV/0/3138362e3234392e3138342e302f32322d3232203d3e20323632353332.roa
Signing time:             Wed 28 Feb 2024 14:12:23 +0000
ROA not before:           Wed 28 Feb 2024 14:07:23 +0000
ROA not after:            Wed 26 Feb 2025 14:12:23 +0000
asID:                     262532
IP address blocks:        186.249.184.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:00:69:4c:35:53:de:8c:fd:f3:c3:fa:e0:97:09:7c:37:7a:ca:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C9244DB0FCBD1DD27B93837F8B052CE3B9B292AF
        Validity
            Not Before: Feb 28 14:07:23 2024 GMT
            Not After : Feb 26 14:12:23 2025 GMT
        Subject: CN=A4DC59FE29F5950BFBC49EDBAD27CCAAF8D3C25F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:10:44:3d:62:3b:c4:2a:e6:87:63:dd:05:4c:
                    9e:6a:57:67:ef:07:d8:44:14:40:09:94:c6:9f:1f:
                    b9:98:60:8d:2a:56:76:41:bd:64:aa:3a:10:06:47:
                    dc:e3:e8:83:d8:4d:bb:57:ef:95:51:cf:1a:46:06:
                    e4:81:e3:e0:c7:af:ec:91:4b:94:5f:e1:9e:64:24:
                    7d:40:e1:d9:72:20:94:dc:08:2f:5b:58:81:c4:da:
                    8c:87:80:ec:ce:44:b1:99:b0:10:b2:4e:34:82:fd:
                    a9:8e:86:c1:f5:19:55:bc:56:e9:b9:f8:92:ad:51:
                    1c:f8:aa:ce:f9:a5:ab:65:51:ca:af:44:0f:9a:ac:
                    21:c0:cf:e8:94:a0:76:32:6a:82:61:ef:78:43:24:
                    48:b1:ea:47:e7:25:34:0a:d3:21:96:10:94:37:1d:
                    d4:c0:1e:8a:ad:f2:c0:55:1c:79:1e:17:05:d0:80:
                    a2:a0:3c:3f:d5:1d:32:19:1b:c1:65:df:44:c9:3b:
                    38:ae:5b:d9:ec:6e:02:45:13:e6:28:59:a7:7f:4d:
                    8d:73:08:96:9e:18:53:c2:ee:a0:c9:b6:4b:1d:83:
                    0c:22:08:93:5b:71:33:ea:f6:25:49:da:fb:17:27:
                    8f:aa:2e:4c:66:b7:c5:fc:29:22:a3:ab:66:44:e9:
                    6a:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:DC:59:FE:29:F5:95:0B:FB:C4:9E:DB:AD:27:CC:AA:F8:D3:C2:5F
            X509v3 Authority Key Identifier:
                keyid:C9:24:4D:B0:FC:BD:1D:D2:7B:93:83:7F:8B:05:2C:E3:B9:B2:92:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HkqUXYqJVEk9tmym41QptfeRtjgk3iKz4xeQ5vHiP5tV/0/C9244DB0FCBD1DD27B93837F8B052CE3B9B292AF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C9244DB0FCBD1DD27B93837F8B052CE3B9B292AF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HkqUXYqJVEk9tmym41QptfeRtjgk3iKz4xeQ5vHiP5tV/0/3138362e3234392e3138342e302f32322d3232203d3e20323632353332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.249.184.0/22

    Signature Algorithm: sha256WithRSAEncryption
         23:d0:37:79:eb:e2:01:f9:ad:7b:a5:81:52:f4:2d:a8:20:2c:
         f1:1b:99:d2:9a:df:a7:fa:e7:f8:88:c0:f6:d6:07:f8:62:91:
         d5:b5:ab:c4:c5:78:a6:d6:2d:46:70:2b:12:95:4d:69:0b:54:
         f1:52:97:d7:51:82:6b:ed:a7:20:4e:4d:b4:bf:12:6c:06:95:
         d9:eb:c6:83:55:0c:ec:de:48:89:04:bf:bf:fa:0f:7f:bf:2a:
         b3:9a:24:a2:43:ee:ee:41:2d:57:93:0e:f5:f8:fc:18:ab:76:
         82:aa:d1:63:79:aa:ee:45:93:c8:a2:ef:ee:df:ec:c2:51:99:
         b4:c5:37:e6:0b:50:11:5e:46:5e:e7:02:44:37:38:b5:4b:49:
         6f:8d:f7:b8:3e:0a:7a:ca:2a:4d:66:a6:56:63:6f:98:56:0a:
         c2:ef:ad:df:46:e1:4b:74:22:5f:4a:6c:be:9d:a5:b9:75:5a:
         ca:e5:14:2c:a4:b6:92:e9:23:4e:53:81:35:21:52:40:f2:0f:
         37:b9:10:bb:08:a3:27:8b:a9:c4:21:00:66:a2:bf:7e:22:88:
         f8:a6:85:77:1e:ce:b1:56:c8:3d:f2:e2:30:60:e8:9e:be:15:
         c0:e0:f5:56:2f:a0:2a:ed:e1:4a:b4:68:45:85:e3:13:e8:9b:
         cb:6e:a8:ed
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIULgBpTDVT3oz988P64JcJfDd6yoEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzkyNDREQjBGQ0JEMUREMjdCOTM4MzdGOEIwNTJDRTNC
OUIyOTJBRjAeFw0yNDAyMjgxNDA3MjNaFw0yNTAyMjYxNDEyMjNaMDMxMTAvBgNV
BAMTKEE0REM1OUZFMjlGNTk1MEJGQkM0OUVEQkFEMjdDQ0FBRjhEM0MyNUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGEEQ9YjvEKuaHY90FTJ5qV2fv
B9hEFEAJlMafH7mYYI0qVnZBvWSqOhAGR9zj6IPYTbtX75VRzxpGBuSB4+DHr+yR
S5Rf4Z5kJH1A4dlyIJTcCC9bWIHE2oyHgOzORLGZsBCyTjSC/amOhsH1GVW8Vum5
+JKtURz4qs75patlUcqvRA+arCHAz+iUoHYyaoJh73hDJEix6kfnJTQK0yGWEJQ3
HdTAHoqt8sBVHHkeFwXQgKKgPD/VHTIZG8Fl30TJOziuW9nsbgJFE+YoWad/TY1z
CJaeGFPC7qDJtksdgwwiCJNbcTPq9iVJ2vsXJ4+qLkxmt8X8KSKjq2ZE6WobAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUpNxZ/in1lQv7xJ7brSfMqvjTwl8wHwYDVR0j
BBgwFoAUySRNsPy9HdJ7k4N/iwUs47mykq8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSGtxVVhZcUpWRWs5dG15bTQxUXB0ZmVSdGpnazNpS3o0eGVRNXZIaVA1
dFYvMC9DOTI0NERCMEZDQkQxREQyN0I5MzgzN0Y4QjA1MkNFM0I5QjI5MkFGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0M5MjQ0REIwRkNCRDFERDI3
QjkzODM3RjhCMDUyQ0UzQjlCMjkyQUYuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0hrcVVYWXFKVkVrOXRteW00MVFwdGZlUnRqZ2szaUt6NHhlUTV2SGlQNXRWLzAv
MzEzODM2MmUzMjM0MzkyZTMxMzgzNDJlMzAyZjMyMzIyZDMyMzIyMDNkM2UyMDMy
MzYzMjM1MzMzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEArr5uDANBgkqhkiG9w0BAQsFAAOCAQEAI9A3
eeviAfmte6WBUvQtqCAs8RuZ0prfp/rn+IjA9tYH+GKR1bWrxMV4ptYtRnArEpVN
aQtU8VKX11GCa+2nIE5NtL8SbAaV2evGg1UM7N5IiQS/v/oPf78qs5okokPu7kEt
V5MO9fj8GKt2gqrRY3mq7kWTyKLv7t/swlGZtMU35gtQEV5GXucCRDc4tUtJb433
uD4KesoqTWamVmNvmFYKwu+t30bhS3QiX0psvp2luXVayuUULKS2kukjTlOBNSFS
QPIPN7kQuwijJ4upxCEAZqK/fiKI+KaFdx7OsVbIPfLiMGDonr4VwOD1Vi+gKu3h
SrRoRYXjE+iby26o7Q==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:50 2024 by rpki-client on console-ams.rpki-client.org