Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/3138362e3139352e37322e302f32342d3332203d3e203532353830.roa
File:                     3138362e3139352e37322e302f32342d3332203d3e203532353830.roa (raw, json)
Hash identifier:          8zGBcgyXuUdlwpH1MRdxnaQ5E2EuH3q22N1eWzyT9Ms=
Subject key identifier:   B8:C8:71:CC:D8:D9:19:8D:57:2C:39:ED:DE:00:B4:66:55:7C:A6:F9
Certificate issuer:       /CN=FF36173E097169BA044538B64258000B42FABD8C
Certificate serial:       7335D940C20D6A51E7D3A9138BE74CF0D273038F
Authority key identifier: FF:36:17:3E:09:71:69:BA:04:45:38:B6:42:58:00:0B:42:FA:BD:8C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF36173E097169BA044538B64258000B42FABD8C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/3138362e3139352e37322e302f32342d3332203d3e203532353830.roa
Signing time:             Fri 14 Feb 2025 19:20:15 +0000
ROA not before:           Fri 14 Feb 2025 19:15:15 +0000
ROA not after:            Fri 13 Feb 2026 19:20:15 +0000
asID:                     52580
IP address blocks:        186.195.72.0/24 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:35:d9:40:c2:0d:6a:51:e7:d3:a9:13:8b:e7:4c:f0:d2:73:03:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FF36173E097169BA044538B64258000B42FABD8C
        Validity
            Not Before: Feb 14 19:15:15 2025 GMT
            Not After : Feb 13 19:20:15 2026 GMT
        Subject: CN=B8C871CCD8D9198D572C39EDDE00B466557CA6F9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:48:d6:8a:96:17:f2:91:40:56:b2:55:d4:dc:
                    f0:9f:f4:1f:9f:68:38:05:38:13:ba:a1:d6:3d:22:
                    9b:a1:9f:06:fd:e2:0f:a6:b5:83:0e:06:ae:82:3a:
                    65:32:86:58:41:39:ec:90:76:83:1b:8d:ad:ca:d8:
                    85:83:db:18:72:59:b4:54:e1:fe:f7:0c:39:5e:d1:
                    fd:d7:67:36:d8:b2:c1:89:62:3a:f9:3f:5d:02:e8:
                    78:0f:da:2b:2f:97:6e:36:6c:ac:d5:87:cc:a6:dd:
                    6a:a1:32:48:4e:1c:80:93:7c:56:97:4d:0b:ef:e3:
                    bc:56:04:14:a1:63:aa:f3:f7:7b:26:41:10:3e:da:
                    60:16:0a:56:2c:cf:bf:5e:4e:8b:ee:34:ba:b5:c3:
                    07:ef:6a:cf:32:de:a6:74:fc:dc:36:cb:a3:9f:52:
                    be:af:37:0e:72:f2:98:6a:6c:17:07:66:9e:2d:92:
                    94:07:a6:bf:9d:b8:90:59:c8:ee:4e:ae:cc:38:56:
                    f8:85:58:21:f9:fd:d7:f4:58:2f:9f:a7:47:28:d4:
                    4a:a8:33:c5:9b:df:12:2d:e1:88:53:8a:df:77:62:
                    99:03:25:f0:71:59:7d:a5:7c:af:b2:31:b0:cb:8c:
                    d4:91:7b:e7:d8:f7:06:3e:38:fe:b0:3f:50:15:f6:
                    13:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:C8:71:CC:D8:D9:19:8D:57:2C:39:ED:DE:00:B4:66:55:7C:A6:F9
            X509v3 Authority Key Identifier:
                keyid:FF:36:17:3E:09:71:69:BA:04:45:38:B6:42:58:00:0B:42:FA:BD:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/FF36173E097169BA044538B64258000B42FABD8C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF36173E097169BA044538B64258000B42FABD8C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/3138362e3139352e37322e302f32342d3332203d3e203532353830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.195.72.0/24

    Signature Algorithm: sha256WithRSAEncryption
         47:62:f2:74:b5:52:e4:50:2f:fe:29:7a:f9:7f:5a:1a:a5:45:
         a1:55:72:7e:8b:3c:64:17:21:d1:51:44:72:a4:80:2c:1f:b1:
         46:d6:bf:2a:6a:38:65:43:11:56:e3:05:d9:c8:43:46:fe:13:
         0b:1e:ca:98:93:f7:cc:12:73:2e:09:68:f1:c2:6d:74:32:6a:
         53:56:13:1d:25:69:44:62:f8:26:86:e6:9c:c3:ad:0f:fe:8f:
         93:75:95:d4:cc:85:4b:7c:f3:42:19:3e:ff:c4:be:48:5b:94:
         be:2e:3d:43:5c:dc:7b:78:07:0a:04:bb:09:64:d3:79:bd:42:
         a1:9a:3a:04:bb:56:a0:0a:e2:69:5b:1f:61:6c:06:bb:f5:a4:
         08:4d:e9:03:d5:3f:63:c6:87:8f:95:3b:f3:c9:f1:c5:37:15:
         f9:55:27:80:0b:30:07:11:aa:06:df:4f:22:13:88:23:16:ae:
         fb:57:37:0a:4a:fe:e5:fb:58:19:0a:29:27:d4:01:17:98:95:
         ac:f5:2e:84:4e:b1:fd:ac:7f:21:8c:09:cb:09:ba:31:e7:79:
         fa:f1:f0:eb:6d:19:fb:10:47:03:f5:71:c2:b4:1e:58:ec:4f:
         52:fa:31:5b:0b:a5:11:d3:fb:0b:13:f5:c5:72:e5:ba:b2:1e:
         d4:b1:39:b7
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUczXZQMINalHn06kTi+dM8NJzA48wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkYzNjE3M0UwOTcxNjlCQTA0NDUzOEI2NDI1ODAwMEI0
MkZBQkQ4QzAeFw0yNTAyMTQxOTE1MTVaFw0yNjAyMTMxOTIwMTVaMDMxMTAvBgNV
BAMTKEI4Qzg3MUNDRDhEOTE5OEQ1NzJDMzlFRERFMDBCNDY2NTU3Q0E2RjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPSNaKlhfykUBWslXU3PCf9B+f
aDgFOBO6odY9Ipuhnwb94g+mtYMOBq6COmUyhlhBOeyQdoMbja3K2IWD2xhyWbRU
4f73DDle0f3XZzbYssGJYjr5P10C6HgP2isvl242bKzVh8ym3WqhMkhOHICTfFaX
TQvv47xWBBShY6rz93smQRA+2mAWClYsz79eTovuNLq1wwfvas8y3qZ0/Nw2y6Of
Ur6vNw5y8phqbBcHZp4tkpQHpr+duJBZyO5Orsw4VviFWCH5/df0WC+fp0co1Eqo
M8Wb3xIt4YhTit93YpkDJfBxWX2lfK+yMbDLjNSRe+fY9wY+OP6wP1AV9hP3AgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUuMhxzNjZGY1XLDnt3gC0ZlV8pvkwHwYDVR0j
BBgwFoAU/zYXPglxaboERTi2QlgAC0L6vYwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSHBUOGppQldteU4zUnhuakdvUGNZR3BWUnd1VkYzZE1Wd1JldjNGTnp0
aTEvMC9GRjM2MTczRTA5NzE2OUJBMDQ0NTM4QjY0MjU4MDAwQjQyRkFCRDhDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0ZGMzYxNzNFMDk3MTY5QkEw
NDQ1MzhCNjQyNTgwMDBCNDJGQUJEOEMuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0hwVDhqaUJXbXlOM1J4bmpHb1BjWUdwVlJ3dVZGM2RNVndSZXYzRk56dGkxLzAv
MzEzODM2MmUzMTM5MzUyZTM3MzIyZTMwMmYzMjM0MmQzMzMyMjAzZDNlMjAzNTMy
MzUzODMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAusNIMA0GCSqGSIb3DQEBCwUAA4IBAQBHYvJ0tVLk
UC/+KXr5f1oapUWhVXJ+izxkFyHRUURypIAsH7FG1r8qajhlQxFW4wXZyENG/hML
HsqYk/fMEnMuCWjxwm10MmpTVhMdJWlEYvgmhuacw60P/o+TdZXUzIVLfPNCGT7/
xL5IW5S+Lj1DXNx7eAcKBLsJZNN5vUKhmjoEu1agCuJpWx9hbAa79aQITekD1T9j
xoePlTvzyfHFNxX5VSeACzAHEaoG308iE4gjFq77VzcKSv7l+1gZCikn1AEXmJWs
9S6ETrH9rH8hjAnLCbox53n68fDrbRn7EEcD9XHCtB5Y7E9S+jFbC6UR0/sLE/XF
cuW6sh7UsTm3
-----END CERTIFICATE-----
Generated at Mon Apr 7 10:23:08 2025 by rpki-client