Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/3138362e3139352e36352e302f32342d3332203d3e203532353830.roa
File:                     3138362e3139352e36352e302f32342d3332203d3e203532353830.roa (raw, json)
Hash identifier:          k5h0WuH9F5tR4d7/1tH65Ha3/Xs2jL2ljoWZW/19u+4=
Subject key identifier:   00:A0:E7:D6:1C:8E:CB:0B:36:68:F2:9A:24:CA:8E:DE:E8:DC:EF:C9
Certificate issuer:       /CN=FF36173E097169BA044538B64258000B42FABD8C
Certificate serial:       699A3D4B9373C70323D0EAA707F392624139B0D3
Authority key identifier: FF:36:17:3E:09:71:69:BA:04:45:38:B6:42:58:00:0B:42:FA:BD:8C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF36173E097169BA044538B64258000B42FABD8C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/3138362e3139352e36352e302f32342d3332203d3e203532353830.roa
Signing time:             Fri 14 Feb 2025 19:17:44 +0000
ROA not before:           Fri 14 Feb 2025 19:12:44 +0000
ROA not after:            Fri 13 Feb 2026 19:17:44 +0000
asID:                     52580
IP address blocks:        186.195.65.0/24 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:9a:3d:4b:93:73:c7:03:23:d0:ea:a7:07:f3:92:62:41:39:b0:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FF36173E097169BA044538B64258000B42FABD8C
        Validity
            Not Before: Feb 14 19:12:44 2025 GMT
            Not After : Feb 13 19:17:44 2026 GMT
        Subject: CN=00A0E7D61C8ECB0B3668F29A24CA8EDEE8DCEFC9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:9e:d5:ad:31:17:10:dc:04:15:38:60:e8:4a:
                    b0:e9:f4:fb:7a:b1:08:63:36:ce:3e:77:b0:8d:6b:
                    4b:35:79:f2:71:b3:f3:4c:3f:b4:98:19:66:8a:fb:
                    98:98:5a:5a:ba:80:34:70:b5:b4:de:be:88:b1:44:
                    79:0e:29:ea:14:10:85:b6:8d:ee:98:d8:83:21:54:
                    5e:1c:af:14:9e:26:d6:04:ea:46:eb:75:e7:01:90:
                    a4:f9:16:73:15:ed:5f:06:13:a2:4f:3d:48:3c:92:
                    a5:b0:9d:11:4e:64:53:1b:54:5f:74:85:22:b8:66:
                    91:ba:3c:ca:b1:d2:2b:cf:fc:19:98:0a:1b:c0:b5:
                    df:74:33:83:4e:9c:f8:b1:f5:ec:46:55:7a:9c:05:
                    27:a0:b7:1a:87:56:54:bd:f3:cc:7e:7a:69:9d:63:
                    2e:f8:e0:52:46:94:1a:eb:6c:ac:1f:72:36:e2:79:
                    86:08:b4:b3:25:13:ae:03:5c:77:ce:38:e9:73:a3:
                    2a:49:df:e0:f1:3e:23:88:c4:37:b0:49:cb:15:3d:
                    a5:6f:bd:99:61:03:54:e5:bb:50:32:27:57:b7:8b:
                    0c:a7:49:5b:1e:89:2d:59:82:64:90:36:fc:57:89:
                    52:c9:28:f1:cb:ef:57:00:47:63:4d:df:45:9e:79:
                    22:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:A0:E7:D6:1C:8E:CB:0B:36:68:F2:9A:24:CA:8E:DE:E8:DC:EF:C9
            X509v3 Authority Key Identifier:
                keyid:FF:36:17:3E:09:71:69:BA:04:45:38:B6:42:58:00:0B:42:FA:BD:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/FF36173E097169BA044538B64258000B42FABD8C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF36173E097169BA044538B64258000B42FABD8C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/3138362e3139352e36352e302f32342d3332203d3e203532353830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.195.65.0/24

    Signature Algorithm: sha256WithRSAEncryption
         49:ef:37:e8:c7:46:47:bf:ad:e8:ec:ee:66:cd:7a:2a:2c:84:
         21:6e:d7:59:17:92:a3:f8:ed:3f:0d:5c:a6:68:32:4a:cf:27:
         cd:ad:30:7a:cf:e6:52:a1:46:9a:c9:2c:65:7b:0d:8d:b2:4e:
         e9:6b:e7:5c:56:61:ee:52:a4:d3:86:0c:20:7d:58:1f:0a:91:
         de:ab:f2:f9:71:90:dd:25:c9:87:43:49:5c:d9:32:20:8d:d8:
         c2:b8:8c:65:cc:4d:ec:55:a5:4a:7f:27:ab:f7:2a:d7:be:da:
         a2:39:4e:71:72:02:44:e5:b6:c5:f8:82:58:cd:b3:6c:eb:51:
         a8:4c:a2:cc:e9:51:cb:5d:49:e9:75:1f:a2:33:52:85:9e:41:
         b8:0d:79:ff:59:c0:75:d0:c3:ef:aa:2b:55:d5:37:2a:06:b9:
         9a:2f:e5:85:75:9a:7f:98:2e:66:bf:6d:4f:c6:50:fa:69:4a:
         23:6f:c1:53:51:da:55:29:5c:da:23:74:2e:0d:19:2a:02:c5:
         d0:7e:11:46:48:c8:87:bc:4a:e6:50:98:72:5b:be:3a:f7:62:
         40:25:df:a0:b5:0e:a4:29:ea:95:2f:6f:58:e2:18:19:86:92:
         c2:49:9d:33:0f:1c:9c:1a:39:35:8c:03:09:e4:c9:88:1e:71:
         f5:de:0b:57
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUaZo9S5NzxwMj0OqnB/OSYkE5sNMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkYzNjE3M0UwOTcxNjlCQTA0NDUzOEI2NDI1ODAwMEI0
MkZBQkQ4QzAeFw0yNTAyMTQxOTEyNDRaFw0yNjAyMTMxOTE3NDRaMDMxMTAvBgNV
BAMTKDAwQTBFN0Q2MUM4RUNCMEIzNjY4RjI5QTI0Q0E4RURFRThEQ0VGQzkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCntWtMRcQ3AQVOGDoSrDp9Pt6
sQhjNs4+d7CNa0s1efJxs/NMP7SYGWaK+5iYWlq6gDRwtbTevoixRHkOKeoUEIW2
je6Y2IMhVF4crxSeJtYE6kbrdecBkKT5FnMV7V8GE6JPPUg8kqWwnRFOZFMbVF90
hSK4ZpG6PMqx0ivP/BmYChvAtd90M4NOnPix9exGVXqcBSegtxqHVlS988x+emmd
Yy744FJGlBrrbKwfcjbieYYItLMlE64DXHfOOOlzoypJ3+DxPiOIxDewScsVPaVv
vZlhA1Tlu1AyJ1e3iwynSVseiS1ZgmSQNvxXiVLJKPHL71cAR2NN30WeeSLbAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUAKDn1hyOyws2aPKaJMqO3ujc78kwHwYDVR0j
BBgwFoAU/zYXPglxaboERTi2QlgAC0L6vYwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSHBUOGppQldteU4zUnhuakdvUGNZR3BWUnd1VkYzZE1Wd1JldjNGTnp0
aTEvMC9GRjM2MTczRTA5NzE2OUJBMDQ0NTM4QjY0MjU4MDAwQjQyRkFCRDhDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0ZGMzYxNzNFMDk3MTY5QkEw
NDQ1MzhCNjQyNTgwMDBCNDJGQUJEOEMuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0hwVDhqaUJXbXlOM1J4bmpHb1BjWUdwVlJ3dVZGM2RNVndSZXYzRk56dGkxLzAv
MzEzODM2MmUzMTM5MzUyZTM2MzUyZTMwMmYzMjM0MmQzMzMyMjAzZDNlMjAzNTMy
MzUzODMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAusNBMA0GCSqGSIb3DQEBCwUAA4IBAQBJ7zfox0ZH
v63o7O5mzXoqLIQhbtdZF5Kj+O0/DVymaDJKzyfNrTB6z+ZSoUaaySxlew2Nsk7p
a+dcVmHuUqTThgwgfVgfCpHeq/L5cZDdJcmHQ0lc2TIgjdjCuIxlzE3sVaVKfyer
9yrXvtqiOU5xcgJE5bbF+IJYzbNs61GoTKLM6VHLXUnpdR+iM1KFnkG4DXn/WcB1
0MPvqitV1TcqBrmaL+WFdZp/mC5mv21PxlD6aUojb8FTUdpVKVzaI3QuDRkqAsXQ
fhFGSMiHvErmUJhyW74692JAJd+gtQ6kKeqVL29Y4hgZhpLCSZ0zDxycGjk1jAMJ
5MmIHnH13gtX
-----END CERTIFICATE-----
Generated at Mon Apr 7 17:26:01 2025 by rpki-client