Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/p6PvWskwYx2XivX7BGjwurXzybsrGDBCWJaG9hw26gJ/0/3138362e3234392e3235312e302f32342d3234203d3e20323633353730.roa
File:                     3138362e3234392e3235312e302f32342d3234203d3e20323633353730.roa (raw, json)
Hash identifier:          5atGHXJJpDE/pJ61uoVDSxfbZNDJfPC61/U+spoX12w=
Subject key identifier:   4B:D9:BC:BA:A4:A7:0C:59:C6:31:6E:42:65:3D:05:76:C7:CA:3A:4F
Certificate issuer:       /CN=9CCBEAFC8FE8C16A2770515F21C0664CA91ECC8E
Certificate serial:       0B3DA6513689E30C4332F62199AAB04A141DD6F5
Authority key identifier: 9C:CB:EA:FC:8F:E8:C1:6A:27:70:51:5F:21:C0:66:4C:A9:1E:CC:8E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CCBEAFC8FE8C16A2770515F21C0664CA91ECC8E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/p6PvWskwYx2XivX7BGjwurXzybsrGDBCWJaG9hw26gJ/0/3138362e3234392e3235312e302f32342d3234203d3e20323633353730.roa
Signing time:             Thu 06 Feb 2025 13:57:39 +0000
ROA not before:           Thu 06 Feb 2025 13:52:39 +0000
ROA not after:            Thu 05 Feb 2026 13:57:39 +0000
asID:                     263570
IP address blocks:        186.249.251.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:3d:a6:51:36:89:e3:0c:43:32:f6:21:99:aa:b0:4a:14:1d:d6:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9CCBEAFC8FE8C16A2770515F21C0664CA91ECC8E
        Validity
            Not Before: Feb  6 13:52:39 2025 GMT
            Not After : Feb  5 13:57:39 2026 GMT
        Subject: CN=4BD9BCBAA4A70C59C6316E42653D0576C7CA3A4F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:88:0d:3e:88:13:6c:2e:8a:67:1b:a8:85:a1:
                    39:ab:15:e8:64:d6:f4:0d:21:2c:51:77:c7:2d:cb:
                    db:73:0a:c8:ce:f6:c3:c4:36:b9:41:04:b9:cf:9c:
                    11:c8:db:ce:7d:53:a7:04:c3:be:b9:47:2e:b8:32:
                    bf:57:62:d6:c5:77:c4:70:52:f0:74:4f:e1:91:54:
                    70:16:59:3f:b4:7a:8b:b9:7e:1c:52:b4:ae:e9:b1:
                    df:d6:c7:5c:31:8b:dc:8b:9e:f6:bb:ef:50:2e:d2:
                    09:22:3d:08:01:5c:00:ae:bc:3a:fd:d5:ea:4a:10:
                    8f:ab:c9:f7:d4:03:23:b5:c6:bc:4e:44:68:17:d9:
                    63:6e:91:4a:31:ad:df:06:43:84:26:28:b3:75:f3:
                    67:4f:15:1d:56:20:cf:e7:b8:8a:0d:6f:01:4d:2f:
                    b8:1c:40:21:35:bf:5f:c3:d1:b6:29:85:51:58:1b:
                    fc:0f:65:84:b2:4b:a4:11:c4:d8:49:02:14:77:bc:
                    79:cd:20:a9:db:e3:13:f8:54:38:c6:5c:c7:4d:ad:
                    09:51:ad:9c:36:50:bc:9f:da:b4:24:75:76:5c:ce:
                    18:dd:8e:5d:0b:69:98:ce:64:13:6a:36:03:21:f2:
                    c5:09:8c:88:d0:27:54:86:ee:3c:b4:79:fb:2a:99:
                    56:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:D9:BC:BA:A4:A7:0C:59:C6:31:6E:42:65:3D:05:76:C7:CA:3A:4F
            X509v3 Authority Key Identifier:
                keyid:9C:CB:EA:FC:8F:E8:C1:6A:27:70:51:5F:21:C0:66:4C:A9:1E:CC:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/p6PvWskwYx2XivX7BGjwurXzybsrGDBCWJaG9hw26gJ/0/9CCBEAFC8FE8C16A2770515F21C0664CA91ECC8E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CCBEAFC8FE8C16A2770515F21C0664CA91ECC8E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/p6PvWskwYx2XivX7BGjwurXzybsrGDBCWJaG9hw26gJ/0/3138362e3234392e3235312e302f32342d3234203d3e20323633353730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.249.251.0/24

    Signature Algorithm: sha256WithRSAEncryption
         53:1f:cf:72:e0:e5:48:57:e0:d1:20:88:82:63:1e:a5:ff:31:
         57:c5:d9:d3:5f:c4:7c:06:78:4a:de:8a:79:c6:d7:a6:4d:28:
         7a:3f:2c:d7:f2:85:32:26:f2:e1:4c:53:52:46:c2:bb:87:07:
         47:93:73:43:1f:90:01:ac:ba:36:a4:61:38:2d:75:80:44:f1:
         41:9b:55:e6:e3:cc:5b:3b:23:7a:75:cb:57:a8:0e:b5:1c:62:
         2d:c3:ec:84:9a:42:59:4c:43:38:04:d6:15:fc:24:dc:24:12:
         c8:20:8c:6b:c7:13:18:73:e1:1e:60:71:32:73:dc:c8:0f:da:
         67:5d:ef:91:8a:bc:68:52:3d:a9:46:36:be:71:16:9b:43:3a:
         a0:f2:94:7f:d6:3b:48:bd:9c:60:67:d6:6b:ac:82:bd:60:37:
         ec:fd:3f:50:cb:90:b0:d2:a2:a9:f7:c8:4b:a0:ba:70:13:dd:
         8b:38:c3:88:c1:08:f9:21:23:c1:ae:52:29:c8:9f:e9:cc:88:
         3a:06:7f:ed:2b:5f:f9:9e:5e:b0:62:26:af:23:ce:9e:4c:80:
         85:20:b9:f2:44:9a:ab:11:17:35:b3:51:0f:2b:dc:dd:2f:69:
         84:5b:f4:7e:d3:e0:0f:b1:76:b9:f0:82:c2:c5:4f:7b:9b:69:
         33:ae:ae:13
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUCz2mUTaJ4wxDMvYhmaqwShQd1vUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUNDQkVBRkM4RkU4QzE2QTI3NzA1MTVGMjFDMDY2NENB
OTFFQ0M4RTAeFw0yNTAyMDYxMzUyMzlaFw0yNjAyMDUxMzU3MzlaMDMxMTAvBgNV
BAMTKDRCRDlCQ0JBQTRBNzBDNTlDNjMxNkU0MjY1M0QwNTc2QzdDQTNBNEYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChiA0+iBNsLopnG6iFoTmrFehk
1vQNISxRd8cty9tzCsjO9sPENrlBBLnPnBHI2859U6cEw765Ry64Mr9XYtbFd8Rw
UvB0T+GRVHAWWT+0eou5fhxStK7psd/Wx1wxi9yLnva771Au0gkiPQgBXACuvDr9
1epKEI+ryffUAyO1xrxORGgX2WNukUoxrd8GQ4QmKLN182dPFR1WIM/nuIoNbwFN
L7gcQCE1v1/D0bYphVFYG/wPZYSyS6QRxNhJAhR3vHnNIKnb4xP4VDjGXMdNrQlR
rZw2ULyf2rQkdXZczhjdjl0LaZjOZBNqNgMh8sUJjIjQJ1SG7jy0efsqmVa1AgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUS9m8uqSnDFnGMW5CZT0FdsfKOk8wHwYDVR0j
BBgwFoAUnMvq/I/owWoncFFfIcBmTKkezI4wDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9wNlB2V3Nrd1l4Mlhpdlg3Qkdqd3VyWHp5YnNyR0RCQ1dKYUc5aHcyNmdK
LzAvOUNDQkVBRkM4RkU4QzE2QTI3NzA1MTVGMjFDMDY2NENBOTFFQ0M4RS5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS85Q0NCRUFGQzhGRThDMTZBMjc3
MDUxNUYyMUMwNjY0Q0E5MUVDQzhFLmNlcjCBrwYIKwYBBQUHAQsEgaIwgZ8wgZwG
CCsGAQUFBzALhoGPcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9w
NlB2V3Nrd1l4Mlhpdlg3Qkdqd3VyWHp5YnNyR0RCQ1dKYUc5aHcyNmdKLzAvMzEz
ODM2MmUzMjM0MzkyZTMyMzUzMTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzYz
MzM1MzczMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcB
BwEB/wQQMA4wDAQCAAEwBgMEALr5+zANBgkqhkiG9w0BAQsFAAOCAQEAUx/PcuDl
SFfg0SCIgmMepf8xV8XZ01/EfAZ4St6KecbXpk0oej8s1/KFMiby4UxTUkbCu4cH
R5NzQx+QAay6NqRhOC11gETxQZtV5uPMWzsjenXLV6gOtRxiLcPshJpCWUxDOATW
Ffwk3CQSyCCMa8cTGHPhHmBxMnPcyA/aZ13vkYq8aFI9qUY2vnEWm0M6oPKUf9Y7
SL2cYGfWa6yCvWA37P0/UMuQsNKiqffIS6C6cBPdizjDiMEI+SEjwa5SKcif6cyI
OgZ/7Stf+Z5esGImryPOnkyAhSC58kSaqxEXNbNRDyvc3S9phFv0ftPgD7F2ufCC
wsVPe5tpM66uEw==
-----END CERTIFICATE-----
Generated at Thu Apr 10 13:57:54 2025 by rpki-client