Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/nafc1DLob81eak9vq4q6njMjLBaVGp4UdENtBbnpEnK/0/3138372e39342e362e302f32332d3233203d3e20323730353834.roa
File:                     3138372e39342e362e302f32332d3233203d3e20323730353834.roa (raw, json)
Hash identifier:          H+6JZSe5qjcmJLphR3PQ1yb9me+GW52gFOh7WcmhJ+I=
Subject key identifier:   53:6E:29:49:BE:72:80:C3:35:08:EF:B8:06:6A:DF:82:AC:DF:DE:F1
Certificate issuer:       /CN=69AEEE567B07BFEFFEBA67EA5A872A67AE28A9C7
Certificate serial:       71D6C1F35C8E30E101A773B04AF8504BDD68E040
Authority key identifier: 69:AE:EE:56:7B:07:BF:EF:FE:BA:67:EA:5A:87:2A:67:AE:28:A9:C7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/69AEEE567B07BFEFFEBA67EA5A872A67AE28A9C7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/nafc1DLob81eak9vq4q6njMjLBaVGp4UdENtBbnpEnK/0/3138372e39342e362e302f32332d3233203d3e20323730353834.roa
Signing time:             Fri 31 Mar 2023 16:32:28 +0000
ROA not before:           Fri 31 Mar 2023 16:27:28 +0000
ROA not after:            Fri 29 Mar 2024 16:32:28 +0000
asID:                     270584
IP address blocks:        187.94.6.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:d6:c1:f3:5c:8e:30:e1:01:a7:73:b0:4a:f8:50:4b:dd:68:e0:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69AEEE567B07BFEFFEBA67EA5A872A67AE28A9C7
        Validity
            Not Before: Mar 31 16:27:28 2023 GMT
            Not After : Mar 29 16:32:28 2024 GMT
        Subject: CN=536E2949BE7280C33508EFB8066ADF82ACDFDEF1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:e4:eb:7d:d3:b8:a0:3f:57:8f:0a:a9:da:bd:
                    0e:e3:a7:f2:c0:75:9a:20:a6:a0:5b:31:07:6e:7f:
                    21:65:7f:e6:76:97:ab:82:6a:ac:a1:d9:b2:0f:25:
                    06:bd:be:b9:68:20:ad:06:72:f6:eb:27:9e:9f:cc:
                    82:0a:85:ac:11:1d:3f:8b:6b:8c:58:c2:59:cd:a6:
                    f5:43:56:4a:80:40:06:40:d4:0a:80:70:82:66:9f:
                    88:01:89:9f:6e:83:4b:02:35:61:dc:d7:d2:a3:08:
                    4a:c3:72:9f:27:1b:96:14:5a:38:66:6c:e7:c5:21:
                    25:61:c4:9d:fb:0d:c3:10:b6:08:6e:7c:6b:19:22:
                    30:19:0a:a2:dd:eb:90:c8:e4:98:3b:d6:b9:51:7c:
                    a5:a0:fc:58:8f:e2:68:eb:54:17:0f:04:d1:97:e7:
                    21:c0:df:c5:8b:d0:d3:ef:44:d2:79:4a:0d:b7:3d:
                    b7:be:18:15:74:3e:a3:30:0f:bd:ee:57:04:b3:51:
                    5f:bb:d3:37:e0:14:44:c4:e5:1f:4d:9c:0c:b9:61:
                    a8:31:0e:39:f4:d9:d6:43:cc:5b:ef:21:1f:b8:e6:
                    5f:f2:c7:dc:7f:dc:a5:60:7b:37:13:2a:9c:3e:78:
                    ae:4f:ff:14:d2:19:cc:35:63:bc:3a:09:58:2d:a7:
                    2e:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:6E:29:49:BE:72:80:C3:35:08:EF:B8:06:6A:DF:82:AC:DF:DE:F1
            X509v3 Authority Key Identifier:
                keyid:69:AE:EE:56:7B:07:BF:EF:FE:BA:67:EA:5A:87:2A:67:AE:28:A9:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nafc1DLob81eak9vq4q6njMjLBaVGp4UdENtBbnpEnK/0/69AEEE567B07BFEFFEBA67EA5A872A67AE28A9C7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/69AEEE567B07BFEFFEBA67EA5A872A67AE28A9C7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/nafc1DLob81eak9vq4q6njMjLBaVGp4UdENtBbnpEnK/0/3138372e39342e362e302f32332d3233203d3e20323730353834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.94.6.0/23

    Signature Algorithm: sha256WithRSAEncryption
         94:63:64:9d:b9:a0:1b:04:ba:e0:cd:b8:d5:bc:e4:b7:b0:f6:
         a1:a2:7a:56:20:48:25:73:85:45:03:e4:b0:38:98:73:7e:ac:
         f2:a6:31:e2:41:0d:ec:52:a4:0f:e3:fc:8c:13:bb:55:9f:31:
         07:61:0d:e4:8b:3a:9d:6d:bc:48:29:aa:87:22:49:da:ba:6b:
         c2:88:9c:36:43:b6:22:55:7c:92:44:e0:79:aa:28:a7:37:6b:
         72:21:24:9b:9a:17:e2:9f:d0:9c:db:d0:54:c0:19:7c:5b:db:
         00:fa:0b:72:25:56:fb:99:64:71:b3:b9:0a:bb:24:3e:28:3e:
         b3:65:3f:80:2d:d9:58:6e:2e:63:e0:d3:56:6d:de:cb:b5:94:
         d0:95:58:41:39:71:39:49:ac:f3:35:b8:e0:a3:2a:0d:4a:f2:
         1e:d3:f7:2a:60:67:b1:8a:31:f1:c5:ee:60:20:47:a4:5b:c8:
         75:74:c6:b2:2c:3a:7e:f1:cc:a0:75:ae:51:d0:be:db:13:18:
         47:24:cc:06:36:58:c2:27:2b:e0:8d:59:c9:2a:cd:4d:84:43:
         44:25:48:ed:94:3f:15:39:00:37:2d:80:d1:43:8b:a7:56:d4:
         99:b3:ed:a6:1e:53:7f:29:8e:a3:4b:49:b9:14:9a:4e:18:79:
         26:bf:91:3c
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIUcdbB81yOMOEBp3OwSvhQS91o4EAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjlBRUVFNTY3QjA3QkZFRkZFQkE2N0VBNUE4NzJBNjdB
RTI4QTlDNzAeFw0yMzAzMzExNjI3MjhaFw0yNDAzMjkxNjMyMjhaMDMxMTAvBgNV
BAMTKDUzNkUyOTQ5QkU3MjgwQzMzNTA4RUZCODA2NkFERjgyQUNERkRFRjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDA5Ot907igP1ePCqnavQ7jp/LA
dZogpqBbMQdufyFlf+Z2l6uCaqyh2bIPJQa9vrloIK0GcvbrJ56fzIIKhawRHT+L
a4xYwlnNpvVDVkqAQAZA1AqAcIJmn4gBiZ9ug0sCNWHc19KjCErDcp8nG5YUWjhm
bOfFISVhxJ37DcMQtghufGsZIjAZCqLd65DI5Jg71rlRfKWg/FiP4mjrVBcPBNGX
5yHA38WL0NPvRNJ5Sg23Pbe+GBV0PqMwD73uVwSzUV+70zfgFETE5R9NnAy5Yagx
Djn02dZDzFvvIR+45l/yx9x/3KVgezcTKpw+eK5P/xTSGcw1Y7w6CVgtpy6fAgMB
AAGjggJKMIICRjAdBgNVHQ4EFgQUU24pSb5ygMM1CO+4Bmrfgqzf3vEwHwYDVR0j
BBgwFoAUaa7uVnsHv+/+umfqWocqZ64oqccwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9uYWZjMURMb2I4MWVhazl2cTRxNm5qTWpMQmFWR3A0VWRFTnRCYm5wRW5L
LzAvNjlBRUVFNTY3QjA3QkZFRkZFQkE2N0VBNUE4NzJBNjdBRTI4QTlDNy5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMC82OUFFRUU1NjdCMDdCRkVGRkVC
QTY3RUE1QTg3MkE2N0FFMjhBOUM3LmNlcjCBqQYIKwYBBQUHAQsEgZwwgZkwgZYG
CCsGAQUFBzALhoGJcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9u
YWZjMURMb2I4MWVhazl2cTRxNm5qTWpMQmFWR3A0VWRFTnRCYm5wRW5LLzAvMzEz
ODM3MmUzOTM0MmUzNjJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDMyMzczMDM1Mzgz
NC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAbteBjANBgkqhkiG9w0BAQsFAAOCAQEAlGNknbmgGwS64M24
1bzkt7D2oaJ6ViBIJXOFRQPksDiYc36s8qYx4kEN7FKkD+P8jBO7VZ8xB2EN5Is6
nW28SCmqhyJJ2rprwoicNkO2IlV8kkTgeaoopzdrciEkm5oX4p/QnNvQVMAZfFvb
APoLciVW+5lkcbO5CrskPig+s2U/gC3ZWG4uY+DTVm3ey7WU0JVYQTlxOUms8zW4
4KMqDUryHtP3KmBnsYox8cXuYCBHpFvIdXTGsiw6fvHMoHWuUdC+2xMYRyTMBjZY
wicr4I1ZySrNTYRDRCVI7ZQ/FTkANy2A0UOLp1bUmbPtph5TfymOo0tJuRSaThh5
Jr+RPA==
-----END CERTIFICATE-----
Generated at Tue Feb 18 13:34:07 2025 by rpki-client