Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/3138362e3139352e37342e302f32342d3332203d3e203532353830.roa
File:                     3138362e3139352e37342e302f32342d3332203d3e203532353830.roa (raw, json)
Hash identifier:          w/slSCK7Mzc6YOMHLL3k3RcwJtaTf3foe1ZXu38btvA=
Subject key identifier:   AF:7F:25:93:9A:38:14:3F:C5:F4:F7:11:6F:93:1B:2F:CC:24:5E:D0
Certificate issuer:       /CN=FF36173E097169BA044538B64258000B42FABD8C
Certificate serial:       384E2EB0952E5ED4D7D450A12D2DA669CAE62690
Authority key identifier: FF:36:17:3E:09:71:69:BA:04:45:38:B6:42:58:00:0B:42:FA:BD:8C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF36173E097169BA044538B64258000B42FABD8C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/3138362e3139352e37342e302f32342d3332203d3e203532353830.roa
Signing time:             Fri 14 Feb 2025 19:20:43 +0000
ROA not before:           Fri 14 Feb 2025 19:15:43 +0000
ROA not after:            Fri 13 Feb 2026 19:20:43 +0000
asID:                     52580
IP address blocks:        186.195.74.0/24 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:4e:2e:b0:95:2e:5e:d4:d7:d4:50:a1:2d:2d:a6:69:ca:e6:26:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FF36173E097169BA044538B64258000B42FABD8C
        Validity
            Not Before: Feb 14 19:15:43 2025 GMT
            Not After : Feb 13 19:20:43 2026 GMT
        Subject: CN=AF7F25939A38143FC5F4F7116F931B2FCC245ED0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:cf:38:6e:b8:66:7c:9c:32:60:fa:9a:20:52:
                    b8:45:8c:4d:81:01:8b:f2:42:b0:13:4d:95:dc:e6:
                    75:95:c2:02:3f:f9:d2:23:38:42:41:cc:a3:c7:34:
                    4f:33:f8:59:9f:ff:24:ed:6b:fb:48:3e:d5:0b:b0:
                    b5:09:16:ad:82:28:60:e0:fb:fa:97:3e:01:f7:8f:
                    08:93:5f:80:56:69:97:00:a5:6d:de:ea:29:12:ad:
                    dc:d1:4e:6b:e3:b7:c9:cb:5f:a7:86:b3:d5:2f:6f:
                    96:ea:c8:3e:a2:f2:06:61:8c:2f:e0:c9:e7:08:f1:
                    ae:e1:6f:b1:bb:7d:10:fa:a9:60:b9:00:42:3f:e4:
                    14:a9:88:3a:ef:78:4c:68:81:77:56:32:aa:a2:94:
                    2d:4d:17:e1:16:0c:3f:75:b0:2a:04:09:ff:f8:ff:
                    45:7f:71:8a:60:d5:2f:aa:fc:94:7f:9a:41:e3:c7:
                    c7:de:1e:28:ed:c1:dc:29:01:19:5a:3b:4b:44:e5:
                    04:3a:ba:3c:ed:58:b3:b0:3c:39:75:83:e5:fb:ae:
                    39:af:6a:b1:82:f7:db:5e:b1:36:e5:e7:ab:89:7e:
                    38:d6:37:9d:4f:fd:bb:29:a6:2a:a1:5c:ee:9e:a4:
                    86:34:2b:52:7f:1d:0c:fd:35:dc:70:9d:13:8b:10:
                    bf:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:7F:25:93:9A:38:14:3F:C5:F4:F7:11:6F:93:1B:2F:CC:24:5E:D0
            X509v3 Authority Key Identifier:
                keyid:FF:36:17:3E:09:71:69:BA:04:45:38:B6:42:58:00:0B:42:FA:BD:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/FF36173E097169BA044538B64258000B42FABD8C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF36173E097169BA044538B64258000B42FABD8C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/3138362e3139352e37342e302f32342d3332203d3e203532353830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.195.74.0/24

    Signature Algorithm: sha256WithRSAEncryption
         76:b6:56:97:38:89:5a:fa:b1:c1:a9:e7:30:1e:4f:75:6b:e4:
         76:30:cc:38:9a:b6:e9:da:87:1c:30:66:71:3a:74:ae:ba:22:
         bc:1e:20:f3:b4:a0:45:52:06:f5:4b:b0:db:a8:bd:be:c5:23:
         b3:96:69:91:32:f0:e5:46:50:eb:d0:6c:ec:7a:85:13:6d:2b:
         58:65:78:40:28:8c:1c:6a:af:eb:a5:f7:46:a7:c2:ff:26:a4:
         a5:90:c3:0b:73:73:1f:00:8a:75:95:64:57:2b:3c:97:f7:9d:
         14:13:44:a3:d0:2f:00:69:98:e2:21:80:c1:c2:96:00:53:06:
         d8:6d:b8:8f:80:15:1c:b6:58:1f:bc:54:93:17:72:1b:d5:64:
         19:31:f7:9c:5f:7b:8b:86:db:0f:bf:76:5d:b6:26:95:21:b9:
         9d:58:99:4a:ca:82:d2:2b:08:cd:74:c2:d2:c1:c6:b9:89:2b:
         d1:22:34:03:6e:2b:d5:90:e0:73:6b:46:5b:e6:51:c0:0d:6d:
         ff:82:d8:4b:1b:1a:39:53:cf:e4:31:53:ee:02:e5:f2:70:d8:
         fa:4c:1f:75:1e:06:a6:96:d9:f0:fd:69:bc:c8:b0:34:1b:c0:
         e0:37:d5:9f:1e:b4:25:3a:e8:96:e4:66:30:d9:be:a8:50:93:
         77:04:e9:c2
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUOE4usJUuXtTX1FChLS2macrmJpAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkYzNjE3M0UwOTcxNjlCQTA0NDUzOEI2NDI1ODAwMEI0
MkZBQkQ4QzAeFw0yNTAyMTQxOTE1NDNaFw0yNjAyMTMxOTIwNDNaMDMxMTAvBgNV
BAMTKEFGN0YyNTkzOUEzODE0M0ZDNUY0RjcxMTZGOTMxQjJGQ0MyNDVFRDAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtzzhuuGZ8nDJg+pogUrhFjE2B
AYvyQrATTZXc5nWVwgI/+dIjOEJBzKPHNE8z+Fmf/yTta/tIPtULsLUJFq2CKGDg
+/qXPgH3jwiTX4BWaZcApW3e6ikSrdzRTmvjt8nLX6eGs9Uvb5bqyD6i8gZhjC/g
yecI8a7hb7G7fRD6qWC5AEI/5BSpiDrveExogXdWMqqilC1NF+EWDD91sCoECf/4
/0V/cYpg1S+q/JR/mkHjx8feHijtwdwpARlaO0tE5QQ6ujztWLOwPDl1g+X7rjmv
arGC99tesTbl56uJfjjWN51P/bsppiqhXO6epIY0K1J/HQz9NdxwnROLEL9nAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUr38lk5o4FD/F9PcRb5MbL8wkXtAwHwYDVR0j
BBgwFoAU/zYXPglxaboERTi2QlgAC0L6vYwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSHBUOGppQldteU4zUnhuakdvUGNZR3BWUnd1VkYzZE1Wd1JldjNGTnp0
aTEvMC9GRjM2MTczRTA5NzE2OUJBMDQ0NTM4QjY0MjU4MDAwQjQyRkFCRDhDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0ZGMzYxNzNFMDk3MTY5QkEw
NDQ1MzhCNjQyNTgwMDBCNDJGQUJEOEMuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0hwVDhqaUJXbXlOM1J4bmpHb1BjWUdwVlJ3dVZGM2RNVndSZXYzRk56dGkxLzAv
MzEzODM2MmUzMTM5MzUyZTM3MzQyZTMwMmYzMjM0MmQzMzMyMjAzZDNlMjAzNTMy
MzUzODMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAusNKMA0GCSqGSIb3DQEBCwUAA4IBAQB2tlaXOIla
+rHBqecwHk91a+R2MMw4mrbp2occMGZxOnSuuiK8HiDztKBFUgb1S7DbqL2+xSOz
lmmRMvDlRlDr0GzseoUTbStYZXhAKIwcaq/rpfdGp8L/JqSlkMMLc3MfAIp1lWRX
KzyX950UE0Sj0C8AaZjiIYDBwpYAUwbYbbiPgBUctlgfvFSTF3Ib1WQZMfecX3uL
htsPv3ZdtiaVIbmdWJlKyoLSKwjNdMLSwca5iSvRIjQDbivVkOBza0Zb5lHADW3/
gthLGxo5U8/kMVPuAuXycNj6TB91Hgamltnw/Wm8yLA0G8DgN9WfHrQlOuiW5GYw
2b6oUJN3BOnC
-----END CERTIFICATE-----
Generated at Mon Apr 7 17:20:48 2025 by rpki-client