Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/3138362e3139352e37372e302f32342d3332203d3e203532353830.roa
File:                     3138362e3139352e37372e302f32342d3332203d3e203532353830.roa (raw, json)
Hash identifier:          86mj99+OOgdFyWI4vt0k4cENg/ZRMfh5ou7JemVcWt4=
Subject key identifier:   67:2D:2E:B8:F2:A2:1C:96:D9:02:62:E5:71:9A:6B:B7:62:73:32:E5
Certificate issuer:       /CN=FF36173E097169BA044538B64258000B42FABD8C
Certificate serial:       6682862760B44ED44F628173CE0EC9EEC2A71BFF
Authority key identifier: FF:36:17:3E:09:71:69:BA:04:45:38:B6:42:58:00:0B:42:FA:BD:8C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF36173E097169BA044538B64258000B42FABD8C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/3138362e3139352e37372e302f32342d3332203d3e203532353830.roa
Signing time:             Fri 14 Feb 2025 19:22:25 +0000
ROA not before:           Fri 14 Feb 2025 19:17:25 +0000
ROA not after:            Fri 13 Feb 2026 19:22:25 +0000
asID:                     52580
IP address blocks:        186.195.77.0/24 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:82:86:27:60:b4:4e:d4:4f:62:81:73:ce:0e:c9:ee:c2:a7:1b:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FF36173E097169BA044538B64258000B42FABD8C
        Validity
            Not Before: Feb 14 19:17:25 2025 GMT
            Not After : Feb 13 19:22:25 2026 GMT
        Subject: CN=672D2EB8F2A21C96D90262E5719A6BB7627332E5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:74:3a:89:03:fc:9b:1f:05:6e:c3:6e:12:29:
                    0c:df:f7:98:a8:63:c3:aa:a2:4f:cd:03:46:f4:60:
                    ad:02:b4:62:e1:c6:d0:42:bf:9f:16:8a:19:19:84:
                    5c:23:a7:34:45:f1:93:38:9c:3e:10:04:b1:b7:f9:
                    f5:db:65:69:34:09:28:42:14:36:17:db:19:47:bf:
                    5b:51:84:78:ce:74:83:9c:52:6a:6c:c9:c3:88:50:
                    9d:62:11:82:53:f6:05:55:c6:42:28:49:0e:0f:5d:
                    c7:d4:1f:01:2d:9f:0c:7e:6d:e4:d3:7d:3c:bd:76:
                    5c:ea:d7:b0:b3:e9:93:f9:2e:e8:31:48:f8:62:d4:
                    1f:67:8c:79:dd:a1:67:71:e7:79:38:8c:22:ee:d3:
                    92:5f:2f:4d:c7:69:e6:3b:65:f1:d7:7e:18:01:46:
                    59:b0:6e:c5:f3:52:08:10:0f:17:8b:d2:e5:99:10:
                    6b:e2:f1:e4:8a:8c:56:c1:42:42:d9:b0:4f:ec:06:
                    dc:a5:2d:54:76:9b:a2:69:7a:78:22:e7:34:ed:cc:
                    a5:48:1c:d5:80:93:c9:f4:95:76:48:73:15:ee:2a:
                    a2:ff:1b:b2:56:13:dc:8f:94:ae:39:0a:d2:de:f9:
                    c1:87:76:c5:aa:16:64:31:5d:cf:d5:cd:d9:12:e3:
                    e7:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:2D:2E:B8:F2:A2:1C:96:D9:02:62:E5:71:9A:6B:B7:62:73:32:E5
            X509v3 Authority Key Identifier:
                keyid:FF:36:17:3E:09:71:69:BA:04:45:38:B6:42:58:00:0B:42:FA:BD:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/FF36173E097169BA044538B64258000B42FABD8C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF36173E097169BA044538B64258000B42FABD8C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/3138362e3139352e37372e302f32342d3332203d3e203532353830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.195.77.0/24

    Signature Algorithm: sha256WithRSAEncryption
         02:32:11:9f:97:07:e8:4d:16:10:f6:40:22:c9:c6:6e:63:f5:
         2a:8d:70:be:aa:0d:a6:98:6f:32:5a:7e:0c:99:fa:b1:75:b0:
         19:9d:2d:a9:d9:5f:07:67:50:6d:72:43:ff:73:ba:06:94:6e:
         fa:53:72:6b:5a:3b:47:57:bd:0a:03:24:a6:3c:9a:f1:d7:ed:
         05:fe:93:23:ac:13:6d:0e:40:2f:d7:d8:46:d1:46:86:c7:a7:
         27:30:72:85:44:b3:c9:a3:ec:8b:1f:a1:25:b8:c8:a6:bb:d8:
         59:80:9d:8a:1f:0d:2b:24:cc:fc:d2:07:58:66:6a:f2:fc:75:
         ff:10:80:05:98:b7:19:1d:75:c4:d8:a7:8a:30:74:55:68:62:
         cb:c5:94:66:fc:a5:da:82:e9:d8:b5:1a:4f:3f:5b:f2:9c:99:
         c1:ea:22:3f:18:89:44:b9:c5:e7:80:90:3e:1a:b5:30:f1:cd:
         88:73:c4:ff:cc:f4:b2:1d:56:bb:9d:20:85:8a:b3:98:2d:d7:
         5d:ef:1c:41:6e:ae:94:89:5d:d4:73:fa:4c:2f:4b:a2:c3:4a:
         9a:bd:c5:29:65:dd:23:f8:03:b3:bc:a2:c6:e8:21:72:28:d4:
         2f:c5:4f:69:dc:0d:bf:3f:b9:1a:3d:ed:2c:8b:fa:9f:8a:56:
         6e:53:86:03
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUZoKGJ2C0TtRPYoFzzg7J7sKnG/8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkYzNjE3M0UwOTcxNjlCQTA0NDUzOEI2NDI1ODAwMEI0
MkZBQkQ4QzAeFw0yNTAyMTQxOTE3MjVaFw0yNjAyMTMxOTIyMjVaMDMxMTAvBgNV
BAMTKDY3MkQyRUI4RjJBMjFDOTZEOTAyNjJFNTcxOUE2QkI3NjI3MzMyRTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDtdDqJA/ybHwVuw24SKQzf95io
Y8Oqok/NA0b0YK0CtGLhxtBCv58WihkZhFwjpzRF8ZM4nD4QBLG3+fXbZWk0CShC
FDYX2xlHv1tRhHjOdIOcUmpsycOIUJ1iEYJT9gVVxkIoSQ4PXcfUHwEtnwx+beTT
fTy9dlzq17Cz6ZP5LugxSPhi1B9njHndoWdx53k4jCLu05JfL03HaeY7ZfHXfhgB
RlmwbsXzUggQDxeL0uWZEGvi8eSKjFbBQkLZsE/sBtylLVR2m6Jpengi5zTtzKVI
HNWAk8n0lXZIcxXuKqL/G7JWE9yPlK45CtLe+cGHdsWqFmQxXc/VzdkS4+cFAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUZy0uuPKiHJbZAmLlcZprt2JzMuUwHwYDVR0j
BBgwFoAU/zYXPglxaboERTi2QlgAC0L6vYwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSHBUOGppQldteU4zUnhuakdvUGNZR3BWUnd1VkYzZE1Wd1JldjNGTnp0
aTEvMC9GRjM2MTczRTA5NzE2OUJBMDQ0NTM4QjY0MjU4MDAwQjQyRkFCRDhDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0ZGMzYxNzNFMDk3MTY5QkEw
NDQ1MzhCNjQyNTgwMDBCNDJGQUJEOEMuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0hwVDhqaUJXbXlOM1J4bmpHb1BjWUdwVlJ3dVZGM2RNVndSZXYzRk56dGkxLzAv
MzEzODM2MmUzMTM5MzUyZTM3MzcyZTMwMmYzMjM0MmQzMzMyMjAzZDNlMjAzNTMy
MzUzODMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAusNNMA0GCSqGSIb3DQEBCwUAA4IBAQACMhGflwfo
TRYQ9kAiycZuY/UqjXC+qg2mmG8yWn4MmfqxdbAZnS2p2V8HZ1BtckP/c7oGlG76
U3JrWjtHV70KAySmPJrx1+0F/pMjrBNtDkAv19hG0UaGx6cnMHKFRLPJo+yLH6El
uMimu9hZgJ2KHw0rJMz80gdYZmry/HX/EIAFmLcZHXXE2KeKMHRVaGLLxZRm/KXa
gunYtRpPP1vynJnB6iI/GIlEucXngJA+GrUw8c2Ic8T/zPSyHVa7nSCFirOYLddd
7xxBbq6UiV3Uc/pML0uiw0qavcUpZd0j+AOzvKLG6CFyKNQvxU9p3A2/P7kaPe0s
i/qfilZuU4YD
-----END CERTIFICATE-----
Generated at Mon Apr 7 17:24:01 2025 by rpki-client