Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/3138362e3139352e36382e302f32342d3332203d3e203532353830.roa
File:                     3138362e3139352e36382e302f32342d3332203d3e203532353830.roa (raw, json)
Hash identifier:          asVcyieFlBJt1Z4aSNyZrVFOFBeYR3Mw50XP86LiF/k=
Subject key identifier:   65:A0:D7:0F:3D:E1:3C:46:7E:A5:34:03:0B:AC:8D:10:46:0B:45:BA
Certificate issuer:       /CN=FF36173E097169BA044538B64258000B42FABD8C
Certificate serial:       3E14E09059755AA3CEAAECC42221B9C837D89BC1
Authority key identifier: FF:36:17:3E:09:71:69:BA:04:45:38:B6:42:58:00:0B:42:FA:BD:8C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF36173E097169BA044538B64258000B42FABD8C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/3138362e3139352e36382e302f32342d3332203d3e203532353830.roa
Signing time:             Fri 14 Feb 2025 19:18:05 +0000
ROA not before:           Fri 14 Feb 2025 19:13:05 +0000
ROA not after:            Fri 13 Feb 2026 19:18:05 +0000
asID:                     52580
IP address blocks:        186.195.68.0/24 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:14:e0:90:59:75:5a:a3:ce:aa:ec:c4:22:21:b9:c8:37:d8:9b:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FF36173E097169BA044538B64258000B42FABD8C
        Validity
            Not Before: Feb 14 19:13:05 2025 GMT
            Not After : Feb 13 19:18:05 2026 GMT
        Subject: CN=65A0D70F3DE13C467EA534030BAC8D10460B45BA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:2a:e0:fd:76:46:34:17:cd:44:21:35:de:c2:
                    7f:d7:02:80:05:5e:20:88:81:db:1f:6f:f6:e6:b3:
                    3d:49:ed:c8:35:b1:24:b9:25:aa:80:3b:cb:dd:1b:
                    15:8c:1d:24:76:6f:51:c9:71:b1:95:8f:76:13:eb:
                    6d:f4:c6:7d:03:9e:93:c2:58:de:71:be:c3:fa:60:
                    d9:50:dc:de:19:aa:e7:9d:fb:46:76:af:77:4e:ec:
                    48:a6:1f:71:de:40:4a:2b:c6:e1:09:3b:16:2c:b6:
                    d2:ca:e4:70:5d:6d:83:f0:2f:16:ed:9c:7b:7b:af:
                    11:76:29:3f:6b:c6:2e:c7:4f:10:eb:bb:3e:ce:45:
                    95:da:ac:ee:65:bb:3b:a9:2e:6f:d1:e7:3f:cd:16:
                    e7:e1:c9:80:91:08:db:6b:33:6c:98:b3:09:6b:a4:
                    4a:ea:43:4b:f2:84:43:34:14:6c:c8:cb:4a:8e:db:
                    9a:d9:e0:90:11:45:79:f9:b3:03:11:2a:57:a7:58:
                    12:a7:2d:31:d9:3a:59:23:ca:45:5e:d7:d7:f7:f3:
                    02:dd:da:1f:89:bf:f7:c1:d5:fa:00:1a:70:65:1b:
                    f0:ca:28:f8:86:ef:60:b0:bb:21:cd:86:88:3c:4b:
                    e8:c9:e3:65:3f:d0:c6:d1:f1:a4:8d:f8:27:44:0b:
                    f5:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:A0:D7:0F:3D:E1:3C:46:7E:A5:34:03:0B:AC:8D:10:46:0B:45:BA
            X509v3 Authority Key Identifier:
                keyid:FF:36:17:3E:09:71:69:BA:04:45:38:B6:42:58:00:0B:42:FA:BD:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/FF36173E097169BA044538B64258000B42FABD8C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF36173E097169BA044538B64258000B42FABD8C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/3138362e3139352e36382e302f32342d3332203d3e203532353830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.195.68.0/24

    Signature Algorithm: sha256WithRSAEncryption
         05:b3:e0:ee:1c:5e:22:1e:04:dc:24:2c:33:09:1f:76:8f:ca:
         e8:94:e9:5f:3a:58:dc:cb:55:43:21:e3:46:d5:37:56:6e:95:
         40:b2:fd:39:6b:b3:94:aa:d4:8d:4a:ae:b9:e8:2a:d0:4e:79:
         1f:c3:34:95:2d:44:d4:b2:69:be:2f:13:91:a6:d8:df:d6:1b:
         55:81:de:49:c1:46:bc:d2:7b:fb:53:d6:6c:47:16:8c:59:51:
         af:79:51:51:c4:19:58:66:0a:3c:ad:f6:19:6e:30:1f:f5:65:
         f1:5b:0a:bc:ab:17:08:9b:a4:8f:bf:54:8d:13:20:40:21:6f:
         f2:68:3b:07:7a:c7:c9:91:a7:6a:21:df:f7:49:d7:72:8e:35:
         36:bb:f9:03:65:28:7e:1a:65:7b:b7:45:09:3d:45:9c:1a:fa:
         64:07:70:6e:cd:aa:21:99:8c:72:be:a0:db:ec:24:1b:29:f2:
         bc:e2:bc:3e:c4:34:ff:7b:8c:75:42:02:55:3a:75:2c:31:7f:
         eb:90:15:d3:13:b7:2c:e2:e1:ac:15:fe:15:62:c8:b6:90:21:
         ec:83:18:25:6a:d7:5f:b1:b9:95:58:da:34:bb:54:4b:34:53:
         0d:fe:49:fa:ad:16:c6:e0:89:22:ad:ea:98:55:27:49:29:83:
         1e:ce:10:df
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUPhTgkFl1WqPOquzEIiG5yDfYm8EwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkYzNjE3M0UwOTcxNjlCQTA0NDUzOEI2NDI1ODAwMEI0
MkZBQkQ4QzAeFw0yNTAyMTQxOTEzMDVaFw0yNjAyMTMxOTE4MDVaMDMxMTAvBgNV
BAMTKDY1QTBENzBGM0RFMTNDNDY3RUE1MzQwMzBCQUM4RDEwNDYwQjQ1QkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxKuD9dkY0F81EITXewn/XAoAF
XiCIgdsfb/bmsz1J7cg1sSS5JaqAO8vdGxWMHSR2b1HJcbGVj3YT6230xn0DnpPC
WN5xvsP6YNlQ3N4Zqued+0Z2r3dO7EimH3HeQEorxuEJOxYsttLK5HBdbYPwLxbt
nHt7rxF2KT9rxi7HTxDruz7ORZXarO5luzupLm/R5z/NFufhyYCRCNtrM2yYswlr
pErqQ0vyhEM0FGzIy0qO25rZ4JARRXn5swMRKlenWBKnLTHZOlkjykVe19f38wLd
2h+Jv/fB1foAGnBlG/DKKPiG72CwuyHNhog8S+jJ42U/0MbR8aSN+CdEC/VvAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUZaDXDz3hPEZ+pTQDC6yNEEYLRbowHwYDVR0j
BBgwFoAU/zYXPglxaboERTi2QlgAC0L6vYwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSHBUOGppQldteU4zUnhuakdvUGNZR3BWUnd1VkYzZE1Wd1JldjNGTnp0
aTEvMC9GRjM2MTczRTA5NzE2OUJBMDQ0NTM4QjY0MjU4MDAwQjQyRkFCRDhDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0ZGMzYxNzNFMDk3MTY5QkEw
NDQ1MzhCNjQyNTgwMDBCNDJGQUJEOEMuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0hwVDhqaUJXbXlOM1J4bmpHb1BjWUdwVlJ3dVZGM2RNVndSZXYzRk56dGkxLzAv
MzEzODM2MmUzMTM5MzUyZTM2MzgyZTMwMmYzMjM0MmQzMzMyMjAzZDNlMjAzNTMy
MzUzODMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAusNEMA0GCSqGSIb3DQEBCwUAA4IBAQAFs+DuHF4i
HgTcJCwzCR92j8rolOlfOljcy1VDIeNG1TdWbpVAsv05a7OUqtSNSq656CrQTnkf
wzSVLUTUsmm+LxORptjf1htVgd5JwUa80nv7U9ZsRxaMWVGveVFRxBlYZgo8rfYZ
bjAf9WXxWwq8qxcIm6SPv1SNEyBAIW/yaDsHesfJkadqId/3SddyjjU2u/kDZSh+
GmV7t0UJPUWcGvpkB3BuzaohmYxyvqDb7CQbKfK84rw+xDT/e4x1QgJVOnUsMX/r
kBXTE7cs4uGsFf4VYsi2kCHsgxglatdfsbmVWNo0u1RLNFMN/kn6rRbG4IkireqY
VSdJKYMezhDf
-----END CERTIFICATE-----
Generated at Mon Apr 7 17:26:21 2025 by rpki-client