Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J1hpyNjcQ6YZP31yRLLzEjTMTQWfPvBZMjtSxsRDfGtu/0/3138362e3235302e3139302e302f32342d3234203d3e20323633353534.roa
File:                     3138362e3235302e3139302e302f32342d3234203d3e20323633353534.roa (raw, json)
Hash identifier:          NC8uhfI9NROg4WygUMvdQIVatsW57C8/1G6t4FcbG5E=
Subject key identifier:   2E:F9:59:F8:BE:1E:83:14:1E:E5:15:07:AC:56:FF:AC:64:55:97:D4
Certificate issuer:       /CN=6A0F858E8F214AF5D4475E80E8A4E94F75A29444
Certificate serial:       58A2434066862DF31D2431ADE7542E2E49F7900B
Authority key identifier: 6A:0F:85:8E:8F:21:4A:F5:D4:47:5E:80:E8:A4:E9:4F:75:A2:94:44
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6A0F858E8F214AF5D4475E80E8A4E94F75A29444.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J1hpyNjcQ6YZP31yRLLzEjTMTQWfPvBZMjtSxsRDfGtu/0/3138362e3235302e3139302e302f32342d3234203d3e20323633353534.roa
Signing time:             Wed 28 Dec 2022 20:20:00 +0000
ROA not before:           Wed 28 Dec 2022 20:15:00 +0000
ROA not after:            Wed 27 Dec 2023 20:20:00 +0000
asID:                     263554
IP address blocks:        186.250.190.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:a2:43:40:66:86:2d:f3:1d:24:31:ad:e7:54:2e:2e:49:f7:90:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6A0F858E8F214AF5D4475E80E8A4E94F75A29444
        Validity
            Not Before: Dec 28 20:15:00 2022 GMT
            Not After : Dec 27 20:20:00 2023 GMT
        Subject: CN=3082010A0282010100D1D8A7F05CA6AE78A0CF2B0396419A1AE87BE3D5B7639AE5EFA22A98156A02724AF1C2F19FD42499436E7A07357D8B04F0CC0D7A1983031913CCDBC970A4ABB9829BF5584B85C1DE4EB137D3D479AAF69C92BEABC70C0419959BA9B983B47C736E9E641D4AAAEC85A1A23F3D666C2034DDFE21DE6E33A233A617778402B778C9A02C088CAA6447641CC165081CC5878209BD676A94F1337F33338BA96FF54419430CEF7CD61126D942DADB79601E6D9E54379F717A7649AC1889AB5F2EDC7A6978E4D1C493BD2580BA04913274C9069FF58381B912530BAE22D0C89832F2412D2D696655778ECD0DF31E0FFC9A35DA7A05D6617318904D9A030C719CFE19CAB90203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:d8:a7:f0:5c:a6:ae:78:a0:cf:2b:03:96:41:
                    9a:1a:e8:7b:e3:d5:b7:63:9a:e5:ef:a2:2a:98:15:
                    6a:02:72:4a:f1:c2:f1:9f:d4:24:99:43:6e:7a:07:
                    35:7d:8b:04:f0:cc:0d:7a:19:83:03:19:13:cc:db:
                    c9:70:a4:ab:b9:82:9b:f5:58:4b:85:c1:de:4e:b1:
                    37:d3:d4:79:aa:f6:9c:92:be:ab:c7:0c:04:19:95:
                    9b:a9:b9:83:b4:7c:73:6e:9e:64:1d:4a:aa:ec:85:
                    a1:a2:3f:3d:66:6c:20:34:dd:fe:21:de:6e:33:a2:
                    33:a6:17:77:84:02:b7:78:c9:a0:2c:08:8c:aa:64:
                    47:64:1c:c1:65:08:1c:c5:87:82:09:bd:67:6a:94:
                    f1:33:7f:33:33:8b:a9:6f:f5:44:19:43:0c:ef:7c:
                    d6:11:26:d9:42:da:db:79:60:1e:6d:9e:54:37:9f:
                    71:7a:76:49:ac:18:89:ab:5f:2e:dc:7a:69:78:e4:
                    d1:c4:93:bd:25:80:ba:04:91:32:74:c9:06:9f:f5:
                    83:81:b9:12:53:0b:ae:22:d0:c8:98:32:f2:41:2d:
                    2d:69:66:55:77:8e:cd:0d:f3:1e:0f:fc:9a:35:da:
                    7a:05:d6:61:73:18:90:4d:9a:03:0c:71:9c:fe:19:
                    ca:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:F9:59:F8:BE:1E:83:14:1E:E5:15:07:AC:56:FF:AC:64:55:97:D4
            X509v3 Authority Key Identifier:
                keyid:6A:0F:85:8E:8F:21:4A:F5:D4:47:5E:80:E8:A4:E9:4F:75:A2:94:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J1hpyNjcQ6YZP31yRLLzEjTMTQWfPvBZMjtSxsRDfGtu/0/6A0F858E8F214AF5D4475E80E8A4E94F75A29444.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6A0F858E8F214AF5D4475E80E8A4E94F75A29444.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J1hpyNjcQ6YZP31yRLLzEjTMTQWfPvBZMjtSxsRDfGtu/0/3138362e3235302e3139302e302f32342d3234203d3e20323633353534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.250.190.0/24

    Signature Algorithm: sha256WithRSAEncryption
         57:a4:a0:57:47:1b:07:e3:e2:ce:1f:b0:53:b7:53:d7:69:fd:
         d6:a9:5c:e3:58:66:b0:93:ff:dd:77:17:39:1a:46:3e:fc:72:
         19:68:55:aa:1d:d6:c9:e1:63:6f:91:40:58:55:45:1e:d0:38:
         74:86:78:61:80:65:b6:94:1b:1b:bb:c8:e2:4e:de:8b:f5:bb:
         fe:f2:60:fa:4e:d7:51:9c:69:c9:a0:18:51:6e:79:26:35:f6:
         fb:a6:80:92:d2:d6:43:f6:84:20:59:ea:2b:65:47:08:c0:b4:
         f3:ec:88:5f:4f:59:64:8b:82:b5:60:e7:70:80:83:f6:e4:55:
         ee:96:dc:45:88:36:a0:20:d3:80:36:ce:b6:ce:12:e1:df:0d:
         94:da:b4:6f:df:38:21:72:9d:03:aa:23:a6:a9:b8:56:04:61:
         9c:fc:29:e2:26:18:36:aa:4a:27:71:9d:45:16:d9:26:88:8b:
         69:67:21:dd:4a:89:53:07:01:b8:54:9d:16:8f:b4:ef:2b:bf:
         7b:cc:6b:e7:80:3d:b1:0f:7c:c5:13:90:68:e4:d2:9c:bc:89:
         f3:b0:38:f0:c4:c3:de:82:d6:a2:de:22:82:b2:4e:fc:c2:16:
         e3:71:79:48:9a:dc:b0:46:ed:8a:72:6f:5f:74:00:20:e2:2e:
         ca:94:9a:34
-----BEGIN CERTIFICATE-----
MIIHRTCCBi2gAwIBAgIUWKJDQGaGLfMdJDGt51QuLkn3kAswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkEwRjg1OEU4RjIxNEFGNUQ0NDc1RTgwRThBNEU5NEY3
NUEyOTQ0NDAeFw0yMjEyMjgyMDE1MDBaFw0yMzEyMjcyMDIwMDBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwRDFEOEE3RjA1Q0E2QUU3OEEw
Q0YyQjAzOTY0MTlBMUFFODdCRTNENUI3NjM5QUU1RUZBMjJBOTgxNTZBMDI3MjRB
RjFDMkYxOUZENDI0OTk0MzZFN0EwNzM1N0Q4QjA0RjBDQzBEN0ExOTgzMDMxOTEz
Q0NEQkM5NzBBNEFCQjk4MjlCRjU1ODRCODVDMURFNEVCMTM3RDNENDc5QUFGNjlD
OTJCRUFCQzcwQzA0MTk5NTlCQTlCOTgzQjQ3QzczNkU5RTY0MUQ0QUFBRUM4NUEx
QTIzRjNENjY2QzIwMzREREZFMjFERTZFMzNBMjMzQTYxNzc3ODQwMkI3NzhDOUEw
MkMwODhDQUE2NDQ3NjQxQ0MxNjUwODFDQzU4NzgyMDlCRDY3NkE5NEYxMzM3RjMz
MzM4QkE5NkZGNTQ0MTk0MzBDRUY3Q0Q2MTEyNkQ5NDJEQURCNzk2MDFFNkQ5RTU0
Mzc5RjcxN0E3NjQ5QUMxODg5QUI1RjJFREM3QTY5NzhFNEQxQzQ5M0JEMjU4MEJB
MDQ5MTMyNzRDOTA2OUZGNTgzODFCOTEyNTMwQkFFMjJEMEM4OTgzMkYyNDEyRDJE
Njk2NjU1Nzc4RUNEMERGMzFFMEZGQzlBMzVEQTdBMDVENjYxNzMxODkwNEQ5QTAz
MEM3MTlDRkUxOUNBQjkwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEA0din8FymrnigzysDlkGaGuh749W3Y5rl76IqmBVqAnJK8cLxn9Qk
mUNuegc1fYsE8MwNehmDAxkTzNvJcKSruYKb9VhLhcHeTrE309R5qvackr6rxwwE
GZWbqbmDtHxzbp5kHUqq7IWhoj89ZmwgNN3+Id5uM6Izphd3hAK3eMmgLAiMqmRH
ZBzBZQgcxYeCCb1napTxM38zM4upb/VEGUMM73zWESbZQtrbeWAebZ5UN59xenZJ
rBiJq18u3HppeOTRxJO9JYC6BJEydMkGn/WDgbkSUwuuItDImDLyQS0taWZVd47N
DfMeD/yaNdp6BdZhcxiQTZoDDHGc/hnKuQIDAQABo4ICUzCCAk8wHQYDVR0OBBYE
FC75Wfi+HoMUHuUVB6xW/6xkVZfUMB8GA1UdIwQYMBaAFGoPhY6PIUr11EdegOik
6U91opREMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0oxaHB5TmpjUTZZWlAz
MXlSTEx6RWpUTVRRV2ZQdkJaTWp0U3hzUkRmR3R1LzAvNkEwRjg1OEU4RjIxNEFG
NUQ0NDc1RTgwRThBNEU5NEY3NUEyOTQ0NC5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC82QTBGODU4RThGMjE0QUY1RDQ0NzVFODBFOEE0RTk0Rjc1QTI5
NDQ0LmNlcjCBsAYIKwYBBQUHAQsEgaMwgaAwgZ0GCCsGAQUFBzALhoGQcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9KMWhweU5qY1E2WVpQMzF5UkxM
ekVqVE1UUVdmUHZCWk1qdFN4c1JEZkd0dS8wLzMxMzgzNjJlMzIzNTMwMmUzMTM5
MzAyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2MzMzNTM1MzQucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAC6+r4wDQYJKoZIhvcNAQELBQADggEBAFekoFdHGwfj4s4fsFO3U9dp/dapXONY
ZrCT/913FzkaRj78chloVaod1snhY2+RQFhVRR7QOHSGeGGAZbaUGxu7yOJO3ov1
u/7yYPpO11GcacmgGFFueSY19vumgJLS1kP2hCBZ6itlRwjAtPPsiF9PWWSLgrVg
53CAg/bkVe6W3EWINqAg04A2zrbOEuHfDZTatG/fOCFynQOqI6apuFYEYZz8KeIm
GDaqSidxnUUW2SaIi2lnId1KiVMHAbhUnRaPtO8rv3vMa+eAPbEPfMUTkGjk0py8
ifOwOPDEw96C1qLeIoKyTvzCFuNxeUia3LBG7Ypyb190ACDiLsqUmjQ=
-----END CERTIFICATE-----
Generated at Tue Feb 18 13:36:08 2025 by rpki-client