Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HwRtKBKxSP5bQFmnC58yZRBNt6G5XLMy1Awm2NQ6dnvN/0/3138362e3233332e3235342e302f32332d3233203d3e20323632343931.roa
File:                     3138362e3233332e3235342e302f32332d3233203d3e20323632343931.roa (raw, json)
Hash identifier:          V0R45t7BIhKTmxBqGG7J09iaYCP+c9CTy/BOcGKo0NE=
Subject key identifier:   D5:58:2E:9C:EF:F0:31:31:CE:49:A9:00:47:3B:5E:38:61:3B:05:31
Certificate issuer:       /CN=FE2A6E1AF0847EA1A7D677E2DA0912A1ABF4B9AC
Certificate serial:       077CA3A625A1305BE87C0636379C80FF4C6E39DE
Authority key identifier: FE:2A:6E:1A:F0:84:7E:A1:A7:D6:77:E2:DA:09:12:A1:AB:F4:B9:AC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FE2A6E1AF0847EA1A7D677E2DA0912A1ABF4B9AC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HwRtKBKxSP5bQFmnC58yZRBNt6G5XLMy1Awm2NQ6dnvN/0/3138362e3233332e3235342e302f32332d3233203d3e20323632343931.roa
Signing time:             Sat 26 Nov 2022 02:46:02 +0000
ROA not before:           Sat 26 Nov 2022 02:41:02 +0000
ROA not after:            Sat 25 Nov 2023 02:46:02 +0000
asID:                     262491
IP address blocks:        186.233.254.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:7c:a3:a6:25:a1:30:5b:e8:7c:06:36:37:9c:80:ff:4c:6e:39:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FE2A6E1AF0847EA1A7D677E2DA0912A1ABF4B9AC
        Validity
            Not Before: Nov 26 02:41:02 2022 GMT
            Not After : Nov 25 02:46:02 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:ea:81:ae:0c:80:11:22:38:b4:31:2f:6f:a7:
                    6b:66:bd:90:34:a7:38:3c:dc:64:f2:ff:4e:25:a3:
                    71:b3:7b:32:c1:7e:5c:02:e8:5f:54:f5:17:84:9f:
                    64:f3:c7:9c:16:5d:55:13:a6:b7:84:bb:da:98:fe:
                    00:b5:83:17:7e:00:1d:9d:ee:bf:a1:2d:1b:40:c5:
                    58:fc:98:dc:12:c4:42:cd:21:04:ac:31:77:c8:69:
                    62:c2:07:4d:b4:b3:39:ba:f8:51:6c:73:1e:01:63:
                    35:46:3b:2b:2b:76:86:7e:a2:bf:ee:93:8c:78:d2:
                    8f:fa:de:d5:81:f5:92:36:73:77:bc:14:81:00:72:
                    24:0b:b3:a1:8b:0f:f7:bc:04:78:43:59:7e:67:e1:
                    7d:73:13:9d:20:fc:b1:f6:d8:d1:16:34:f8:d0:22:
                    e6:4d:b2:90:0b:25:2d:ed:e9:42:8c:0b:22:e0:52:
                    07:3f:36:0b:a5:52:bd:f5:5c:c6:e6:bf:95:6d:85:
                    00:27:82:dd:dd:e8:6f:cd:a8:dc:7b:7d:c3:4d:9d:
                    e3:56:16:4f:d7:3b:b8:0a:6a:10:44:d4:40:55:3c:
                    8f:76:15:e4:8d:0f:e2:34:f9:cb:c4:fd:fe:31:cd:
                    bb:4d:af:46:be:7d:22:f1:e8:65:6e:54:4e:1c:83:
                    2e:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:58:2E:9C:EF:F0:31:31:CE:49:A9:00:47:3B:5E:38:61:3B:05:31
            X509v3 Authority Key Identifier:
                keyid:FE:2A:6E:1A:F0:84:7E:A1:A7:D6:77:E2:DA:09:12:A1:AB:F4:B9:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HwRtKBKxSP5bQFmnC58yZRBNt6G5XLMy1Awm2NQ6dnvN/0/FE2A6E1AF0847EA1A7D677E2DA0912A1ABF4B9AC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FE2A6E1AF0847EA1A7D677E2DA0912A1ABF4B9AC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HwRtKBKxSP5bQFmnC58yZRBNt6G5XLMy1Awm2NQ6dnvN/0/3138362e3233332e3235342e302f32332d3233203d3e20323632343931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.233.254.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0f:9c:b9:b9:34:4b:1a:ca:1c:86:8b:3e:df:8d:7c:0d:aa:f8:
         ab:10:45:f7:d6:06:10:bd:4d:96:35:4e:08:d9:ff:02:1c:35:
         b9:b7:a8:aa:8c:9a:4f:ac:d9:ba:17:fb:8e:ba:df:31:8f:7b:
         06:e4:79:23:3c:79:7d:f4:24:ec:5b:4d:90:8d:cb:63:cd:31:
         07:8a:b4:e1:29:06:7e:92:ac:37:02:f3:e7:bd:31:87:fd:84:
         28:1a:29:b0:9b:be:96:1d:0c:72:06:97:71:f0:26:f4:01:15:
         63:7b:7f:f0:ae:f3:1b:a6:7d:f5:f1:7a:d1:00:7c:e0:60:fb:
         e7:08:8c:b7:f5:4c:0b:62:d1:b1:6a:c7:f8:6e:73:9d:2d:4a:
         7d:9d:c6:44:8e:a9:97:6c:59:2a:a9:cd:d4:f8:21:61:ef:be:
         e4:9f:28:92:a1:2d:ec:43:47:e6:fe:95:68:3f:c7:0a:a9:ec:
         d8:da:6d:03:e7:21:7c:23:16:5a:9c:df:88:c9:76:81:f8:7a:
         8e:19:f3:dd:c6:f1:4a:81:58:0f:62:cd:6d:4f:e3:eb:eb:92:
         5e:86:34:24:f4:5b:cf:70:15:3f:05:32:95:95:af:7a:f0:8d:
         ca:21:89:68:6d:b8:c6:d4:cd:b6:4d:f2:36:64:c8:98:1e:15:
         ec:aa:27:3a
-----BEGIN CERTIFICATE-----
MIIHRTCCBi2gAwIBAgIUB3yjpiWhMFvofAY2N5yA/0xuOd4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkUyQTZFMUFGMDg0N0VBMUE3RDY3N0UyREEwOTEyQTFB
QkY0QjlBQzAeFw0yMjExMjYwMjQxMDJaFw0yMzExMjUwMjQ2MDJaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwRDVFQTgxQUUwQzgwMTEyMjM4
QjQzMTJGNkZBNzZCNjZCRDkwMzRBNzM4M0NEQzY0RjJGRjRFMjVBMzcxQjM3QjMy
QzE3RTVDMDJFODVGNTRGNTE3ODQ5RjY0RjNDNzlDMTY1RDU1MTNBNkI3ODRCQkRB
OThGRTAwQjU4MzE3N0UwMDFEOURFRUJGQTEyRDFCNDBDNTU4RkM5OERDMTJDNDQy
Q0QyMTA0QUMzMTc3Qzg2OTYyQzIwNzREQjRCMzM5QkFGODUxNkM3MzFFMDE2MzM1
NDYzQjJCMkI3Njg2N0VBMkJGRUU5MzhDNzhEMjhGRkFERUQ1ODFGNTkyMzY3Mzc3
QkMxNDgxMDA3MjI0MEJCM0ExOEIwRkY3QkMwNDc4NDM1OTdFNjdFMTdENzMxMzlE
MjBGQ0IxRjZEOEQxMTYzNEY4RDAyMkU2NERCMjkwMEIyNTJERURFOTQyOEMwQjIy
RTA1MjA3M0YzNjBCQTU1MkJERjU1Q0M2RTZCRjk1NkQ4NTAwMjc4MkRERERFODZG
Q0RBOERDN0I3REMzNEQ5REUzNTYxNjRGRDczQkI4MEE2QTEwNDRENDQwNTUzQzhG
NzYxNUU0OEQwRkUyMzRGOUNCQzRGREZFMzFDREJCNERBRjQ2QkU3RDIyRjFFODY1
NkU1NDRFMUM4MzJFN0IwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEA1eqBrgyAESI4tDEvb6drZr2QNKc4PNxk8v9OJaNxs3sywX5cAuhf
VPUXhJ9k88ecFl1VE6a3hLvamP4AtYMXfgAdne6/oS0bQMVY/JjcEsRCzSEErDF3
yGliwgdNtLM5uvhRbHMeAWM1RjsrK3aGfqK/7pOMeNKP+t7VgfWSNnN3vBSBAHIk
C7Ohiw/3vAR4Q1l+Z+F9cxOdIPyx9tjRFjT40CLmTbKQCyUt7elCjAsi4FIHPzYL
pVK99VzG5r+VbYUAJ4Ld3ehvzajce33DTZ3jVhZP1zu4CmoQRNRAVTyPdhXkjQ/i
NPnLxP3+Mc27Ta9Gvn0i8ehlblROHIMuewIDAQABo4ICUzCCAk8wHQYDVR0OBBYE
FNVYLpzv8DExzkmpAEc7XjhhOwUxMB8GA1UdIwQYMBaAFP4qbhrwhH6hp9Z34toJ
EqGr9LmsMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0h3UnRLQkt4U1A1YlFG
bW5DNTh5WlJCTnQ2RzVYTE15MUF3bTJOUTZkbnZOLzAvRkUyQTZFMUFGMDg0N0VB
MUE3RDY3N0UyREEwOTEyQTFBQkY0QjlBQy5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC9GRTJBNkUxQUYwODQ3RUExQTdENjc3RTJEQTA5MTJBMUFCRjRC
OUFDLmNlcjCBsAYIKwYBBQUHAQsEgaMwgaAwgZ0GCCsGAQUFBzALhoGQcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9Id1J0S0JLeFNQNWJRRm1uQzU4
eVpSQk50Nkc1WExNeTFBd20yTlE2ZG52Ti8wLzMxMzgzNjJlMzIzMzMzMmUzMjM1
MzQyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzMjM2MzIzNDM5MzEucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAG66f4wDQYJKoZIhvcNAQELBQADggEBAA+cubk0SxrKHIaLPt+NfA2q+KsQRffW
BhC9TZY1TgjZ/wIcNbm3qKqMmk+s2boX+4663zGPewbkeSM8eX30JOxbTZCNy2PN
MQeKtOEpBn6SrDcC8+e9MYf9hCgaKbCbvpYdDHIGl3HwJvQBFWN7f/Cu8xumffXx
etEAfOBg++cIjLf1TAti0bFqx/huc50tSn2dxkSOqZdsWSqpzdT4IWHvvuSfKJKh
LexDR+b+lWg/xwqp7NjabQPnIXwjFlqc34jJdoH4eo4Z893G8UqBWA9izW1P4+vr
kl6GNCT0W89wFT8FMpWVr3rwjcohiWhtuMbUzbZN8jZkyJgeFeyqJzo=
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:29:25 2025 by rpki-client