Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J8UwqwagHB8YtrsjaWibULQMxFJ6fiZ9PM2UB9Ps1wiJ/0/3138372e3130332e3230382e302f32302d3234203d3e203238313430.roa
File:                     3138372e3130332e3230382e302f32302d3234203d3e203238313430.roa (raw, json)
Hash identifier:          2xXD5nF4OmFHl5s0R6/dvMtlmiBv99+r6j1EJXhFKWk=
Subject key identifier:   C3:6E:4F:25:95:D4:01:5B:F5:DD:EA:7D:C6:4B:2E:D0:80:02:EB:23
Certificate issuer:       /CN=F62DE795A8A9D5008B0F890B1AE18AC4AB39928F
Certificate serial:       3F2CDDDDC19EFABDC001EBF71981DA0F0464A47E
Authority key identifier: F6:2D:E7:95:A8:A9:D5:00:8B:0F:89:0B:1A:E1:8A:C4:AB:39:92:8F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F62DE795A8A9D5008B0F890B1AE18AC4AB39928F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J8UwqwagHB8YtrsjaWibULQMxFJ6fiZ9PM2UB9Ps1wiJ/0/3138372e3130332e3230382e302f32302d3234203d3e203238313430.roa
Signing time:             Thu 10 Aug 2023 22:56:09 +0000
ROA not before:           Thu 10 Aug 2023 22:51:09 +0000
ROA not after:            Thu 08 Aug 2024 22:56:09 +0000
asID:                     28140
IP address blocks:        187.103.208.0/20 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:2c:dd:dd:c1:9e:fa:bd:c0:01:eb:f7:19:81:da:0f:04:64:a4:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F62DE795A8A9D5008B0F890B1AE18AC4AB39928F
        Validity
            Not Before: Aug 10 22:51:09 2023 GMT
            Not After : Aug  8 22:56:09 2024 GMT
        Subject: CN=C36E4F2595D4015BF5DDEA7DC64B2ED08002EB23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:ce:5c:5a:f1:87:ed:67:6d:41:ac:3d:85:30:
                    1b:0c:30:0c:f2:69:d2:e0:30:d2:5f:52:9b:31:07:
                    a0:ba:ac:af:73:2b:18:1b:ad:6a:86:77:6e:9a:4d:
                    90:74:e6:bb:9c:61:19:e4:95:0f:9a:71:d5:c3:c5:
                    76:7a:ae:12:e7:a4:a9:28:a1:02:e2:c1:95:1f:e3:
                    92:a9:22:2a:d9:97:7a:bb:94:b1:9f:94:03:a8:1b:
                    6b:40:63:4b:c9:b7:9e:d5:e3:52:fa:50:72:37:e6:
                    7c:3e:a1:dd:84:ef:cb:bb:8b:b8:50:55:52:cd:c7:
                    1e:4a:21:a4:9b:fe:68:e2:0a:86:cf:f9:64:89:6d:
                    b6:f9:18:5b:6d:67:32:89:6d:03:9b:1c:8b:84:46:
                    6f:79:f3:29:d2:b0:58:39:ee:0c:60:2f:a4:c6:2e:
                    c8:b3:0d:a8:ee:8f:7d:91:51:64:a3:a5:2c:e9:74:
                    eb:e5:8c:59:59:f7:8a:f3:9c:70:5e:89:1a:b0:53:
                    14:69:af:11:d8:a1:c9:a2:2f:47:73:69:80:7d:26:
                    cb:6f:45:7d:3d:05:eb:29:a3:47:f7:55:c9:89:b8:
                    bc:04:14:d9:3a:78:d8:32:b3:82:7d:75:96:6d:56:
                    e8:d7:ac:00:3b:fe:a5:12:af:42:a2:de:b9:1b:02:
                    8f:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:6E:4F:25:95:D4:01:5B:F5:DD:EA:7D:C6:4B:2E:D0:80:02:EB:23
            X509v3 Authority Key Identifier:
                keyid:F6:2D:E7:95:A8:A9:D5:00:8B:0F:89:0B:1A:E1:8A:C4:AB:39:92:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J8UwqwagHB8YtrsjaWibULQMxFJ6fiZ9PM2UB9Ps1wiJ/0/F62DE795A8A9D5008B0F890B1AE18AC4AB39928F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F62DE795A8A9D5008B0F890B1AE18AC4AB39928F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J8UwqwagHB8YtrsjaWibULQMxFJ6fiZ9PM2UB9Ps1wiJ/0/3138372e3130332e3230382e302f32302d3234203d3e203238313430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.103.208.0/20

    Signature Algorithm: sha256WithRSAEncryption
         ae:25:dd:ce:8a:9f:f3:4f:bf:24:07:3c:56:07:d2:b4:47:b1:
         63:e5:70:36:82:6d:38:10:ff:51:15:e3:4d:90:7c:c9:1c:2e:
         a8:c5:68:f8:23:86:ee:ba:84:99:65:9c:fb:ed:85:e9:ce:a7:
         10:97:b5:db:11:72:02:3b:2f:ac:c5:82:96:95:5c:d9:4a:9f:
         41:23:0c:7d:8f:fa:cd:8d:4a:8f:b6:b3:bb:f5:b1:b7:17:a1:
         36:44:84:99:d7:15:63:81:3d:94:ea:48:8a:8d:98:bc:c0:09:
         91:bd:dc:1f:8f:2c:15:15:82:02:e2:bd:a5:d9:c1:3e:40:3b:
         79:89:b1:f8:e0:6a:53:fa:a7:d0:87:18:ee:1d:64:c8:4a:17:
         87:39:fa:9f:48:85:5e:91:c2:75:3c:8c:69:80:b5:be:80:9d:
         cf:de:92:25:d8:d2:f5:17:c9:b2:f0:ee:c7:ac:94:e0:b5:59:
         6d:66:a9:07:6f:cb:fd:00:42:48:66:53:75:28:df:5a:0a:01:
         08:40:a4:45:67:d1:aa:b9:b4:f3:d3:d9:e8:ce:4b:9e:39:af:
         46:f3:fe:10:44:c7:43:d6:6c:d1:e0:ba:04:d3:cf:e1:e0:be:
         10:21:92:ef:08:7c:10:fe:8e:d8:49:51:aa:53:82:25:6a:fe:
         0f:95:99:e4
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUPyzd3cGe+r3AAev3GYHaDwRkpH4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjYyREU3OTVBOEE5RDUwMDhCMEY4OTBCMUFFMThBQzRB
QjM5OTI4RjAeFw0yMzA4MTAyMjUxMDlaFw0yNDA4MDgyMjU2MDlaMDMxMTAvBgNV
BAMTKEMzNkU0RjI1OTVENDAxNUJGNURERUE3REM2NEIyRUQwODAwMkVCMjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMzlxa8YftZ21BrD2FMBsMMAzy
adLgMNJfUpsxB6C6rK9zKxgbrWqGd26aTZB05rucYRnklQ+acdXDxXZ6rhLnpKko
oQLiwZUf45KpIirZl3q7lLGflAOoG2tAY0vJt57V41L6UHI35nw+od2E78u7i7hQ
VVLNxx5KIaSb/mjiCobP+WSJbbb5GFttZzKJbQObHIuERm958ynSsFg57gxgL6TG
LsizDajuj32RUWSjpSzpdOvljFlZ94rznHBeiRqwUxRprxHYocmiL0dzaYB9Jstv
RX09Bespo0f3VcmJuLwEFNk6eNgys4J9dZZtVujXrAA7/qUSr0Ki3rkbAo85AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUw25PJZXUAVv13ep9xksu0IAC6yMwHwYDVR0j
BBgwFoAU9i3nlaip1QCLD4kLGuGKxKs5ko8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSjhVd3F3YWdIQjhZdHJzamFXaWJVTFFNeEZKNmZpWjlQTTJVQjlQczF3
aUovMC9GNjJERTc5NUE4QTlENTAwOEIwRjg5MEIxQUUxOEFDNEFCMzk5MjhGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0Y2MkRFNzk1QThBOUQ1MDA4
QjBGODkwQjFBRTE4QUM0QUIzOTkyOEYuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0o4VXdxd2FnSEI4WXRyc2phV2liVUxRTXhGSjZmaVo5UE0yVUI5UHMxd2lKLzAv
MzEzODM3MmUzMTMwMzMyZTMyMzAzODJlMzAyZjMyMzAyZDMyMzQyMDNkM2UyMDMy
MzgzMTM0MzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAS7Z9AwDQYJKoZIhvcNAQELBQADggEBAK4l3c6K
n/NPvyQHPFYH0rRHsWPlcDaCbTgQ/1EV402QfMkcLqjFaPgjhu66hJllnPvthenO
pxCXtdsRcgI7L6zFgpaVXNlKn0EjDH2P+s2NSo+2s7v1sbcXoTZEhJnXFWOBPZTq
SIqNmLzACZG93B+PLBUVggLivaXZwT5AO3mJsfjgalP6p9CHGO4dZMhKF4c5+p9I
hV6RwnU8jGmAtb6Anc/ekiXY0vUXybLw7seslOC1WW1mqQdvy/0AQkhmU3Uo31oK
AQhApEVn0aq5tPPT2ejOS545r0bz/hBEx0PWbNHgugTTz+HgvhAhku8IfBD+jthJ
UapTgiVq/g+VmeQ=
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:16:26 2025 by rpki-client