Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/udcpwPeLCyyZHX2DPiomkkvC6vTsPXSKqgudMDhJUia/0/3138362e3235302e3139322e302f32332d3234203d3e203238313632.roa
File:                     3138362e3235302e3139322e302f32332d3234203d3e203238313632.roa (raw, json)
Hash identifier:          0MWmA4cszO8JQbDWQKaDSato/n/6N1PpY7tx5kJNmxw=
Subject key identifier:   BC:52:D3:CA:6F:24:9E:AB:DB:A8:5D:97:D7:70:51:0A:27:BE:BE:17
Certificate issuer:       /CN=1F70DC418349ACE5BEFBF00729BD28DD4AC25CD6
Certificate serial:       6FFB8EEEA9BED7096A16BA777486610037EAA212
Authority key identifier: 1F:70:DC:41:83:49:AC:E5:BE:FB:F0:07:29:BD:28:DD:4A:C2:5C:D6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1F70DC418349ACE5BEFBF00729BD28DD4AC25CD6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/udcpwPeLCyyZHX2DPiomkkvC6vTsPXSKqgudMDhJUia/0/3138362e3235302e3139322e302f32332d3234203d3e203238313632.roa
Signing time:             Wed 01 Nov 2023 23:09:29 +0000
ROA not before:           Wed 01 Nov 2023 23:04:29 +0000
ROA not after:            Wed 30 Oct 2024 23:09:29 +0000
asID:                     28162
IP address blocks:        186.250.192.0/23 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:fb:8e:ee:a9:be:d7:09:6a:16:ba:77:74:86:61:00:37:ea:a2:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1F70DC418349ACE5BEFBF00729BD28DD4AC25CD6
        Validity
            Not Before: Nov  1 23:04:29 2023 GMT
            Not After : Oct 30 23:09:29 2024 GMT
        Subject: CN=BC52D3CA6F249EABDBA85D97D770510A27BEBE17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:01:03:da:37:df:38:4f:1f:eb:ff:46:f0:3d:
                    28:b1:c3:3d:da:d3:cc:96:38:58:cc:67:40:23:2a:
                    cd:7f:8c:df:5e:5d:bd:4d:a9:c1:e8:b5:97:93:73:
                    42:18:ee:6c:bc:00:74:74:11:9f:04:81:fb:81:ac:
                    23:5e:31:84:5f:db:6f:3e:67:6c:24:f0:5d:ce:42:
                    c0:33:fe:65:0e:d5:a6:86:31:62:63:43:b7:66:39:
                    2b:e3:38:96:2b:e6:d9:96:e9:e6:06:8b:4d:c4:68:
                    6f:d3:1a:f3:3d:bb:f7:4a:8c:1f:01:65:42:78:d2:
                    a8:c0:bb:18:15:d1:58:fd:cb:80:f1:92:85:bf:ec:
                    1c:a8:32:54:5a:ed:e4:e7:15:04:e8:1a:d4:c5:74:
                    01:7a:f2:90:fb:4a:aa:fc:9c:e3:73:2e:2f:49:26:
                    bd:c0:2f:31:eb:32:9f:d4:ec:14:ec:c0:1f:fa:3d:
                    fa:7c:86:77:a8:2c:93:2e:30:d0:97:90:be:14:8b:
                    71:1a:7a:ce:4e:34:45:55:44:65:8f:5f:b8:22:7f:
                    e8:24:b0:6f:2f:ff:2d:4a:e6:23:3d:47:42:52:34:
                    34:31:6f:f8:2c:6b:ed:d3:6e:9b:05:0b:ae:45:f5:
                    2c:3d:40:e1:19:5a:34:9d:2d:57:6a:de:08:16:86:
                    6e:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:52:D3:CA:6F:24:9E:AB:DB:A8:5D:97:D7:70:51:0A:27:BE:BE:17
            X509v3 Authority Key Identifier:
                keyid:1F:70:DC:41:83:49:AC:E5:BE:FB:F0:07:29:BD:28:DD:4A:C2:5C:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/udcpwPeLCyyZHX2DPiomkkvC6vTsPXSKqgudMDhJUia/0/1F70DC418349ACE5BEFBF00729BD28DD4AC25CD6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1F70DC418349ACE5BEFBF00729BD28DD4AC25CD6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/udcpwPeLCyyZHX2DPiomkkvC6vTsPXSKqgudMDhJUia/0/3138362e3235302e3139322e302f32332d3234203d3e203238313632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.250.192.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a3:ee:a3:76:93:22:0f:f6:af:a6:71:f7:83:46:9d:f1:64:16:
         7b:80:9b:4d:22:41:70:3e:89:d6:be:fa:9b:0c:74:40:94:d0:
         0b:8d:90:4b:a7:d7:48:6b:65:f1:ab:9e:52:aa:f6:76:d8:e0:
         7b:e7:94:63:be:ee:fe:3c:0b:59:da:36:f3:14:aa:02:d5:44:
         14:93:d2:1d:78:b5:ab:2a:84:d9:bb:17:00:cf:bf:66:8f:48:
         15:d4:9d:b6:dd:46:6b:0a:2d:01:29:ac:ee:3f:f8:e6:6d:37:
         cd:bc:02:af:09:85:d6:77:98:26:da:25:73:26:58:da:14:6a:
         92:4c:66:cd:9b:04:c3:da:7d:aa:1a:01:3d:b2:95:43:25:10:
         e7:3b:2e:4e:e1:bb:10:bc:88:60:09:f1:70:ea:0e:cc:26:83:
         76:6d:8f:c8:0d:7a:a8:7d:a6:4d:84:9e:c4:9a:ce:11:c1:e8:
         bb:12:ff:ec:9b:f3:6c:70:8d:ba:90:f0:4e:a4:1a:83:fa:3e:
         cb:a3:6c:3d:00:2d:83:0b:aa:5e:e4:88:12:06:1f:83:5b:20:
         05:4f:69:1d:45:ed:5a:f2:af:32:8f:93:0b:55:ed:4d:4b:7a:
         0b:e2:72:a7:11:eb:d1:1a:eb:f1:3f:0a:f7:55:26:7d:4c:17:
         92:4b:5b:81
-----BEGIN CERTIFICATE-----
MIIFRDCCBCygAwIBAgIUb/uO7qm+1wlqFrp3dIZhADfqohIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUY3MERDNDE4MzQ5QUNFNUJFRkJGMDA3MjlCRDI4REQ0
QUMyNUNENjAeFw0yMzExMDEyMzA0MjlaFw0yNDEwMzAyMzA5MjlaMDMxMTAvBgNV
BAMTKEJDNTJEM0NBNkYyNDlFQUJEQkE4NUQ5N0Q3NzA1MTBBMjdCRUJFMTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOAQPaN984Tx/r/0bwPSixwz3a
08yWOFjMZ0AjKs1/jN9eXb1NqcHotZeTc0IY7my8AHR0EZ8EgfuBrCNeMYRf228+
Z2wk8F3OQsAz/mUO1aaGMWJjQ7dmOSvjOJYr5tmW6eYGi03EaG/TGvM9u/dKjB8B
ZUJ40qjAuxgV0Vj9y4DxkoW/7ByoMlRa7eTnFQToGtTFdAF68pD7Sqr8nONzLi9J
Jr3ALzHrMp/U7BTswB/6Pfp8hneoLJMuMNCXkL4Ui3Eaes5ONEVVRGWPX7gif+gk
sG8v/y1K5iM9R0JSNDQxb/gsa+3TbpsFC65F9Sw9QOEZWjSdLVdq3ggWhm7FAgMB
AAGjggJOMIICSjAdBgNVHQ4EFgQUvFLTym8knqvbqF2X13BRCie+vhcwHwYDVR0j
BBgwFoAUH3DcQYNJrOW++/AHKb0o3UrCXNYwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby91ZGNwd1BlTEN5eVpIWDJEUGlvbWtrdkM2dlRzUFhTS3FndWRNRGhKVWlh
LzAvMUY3MERDNDE4MzQ5QUNFNUJFRkJGMDA3MjlCRDI4REQ0QUMyNUNENi5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMC8xRjcwREM0MTgzNDlBQ0U1QkVG
QkYwMDcyOUJEMjhERDRBQzI1Q0Q2LmNlcjCBrQYIKwYBBQUHAQsEgaAwgZ0wgZoG
CCsGAQUFBzALhoGNcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby91
ZGNwd1BlTEN5eVpIWDJEUGlvbWtrdkM2dlRzUFhTS3FndWRNRGhKVWlhLzAvMzEz
ODM2MmUzMjM1MzAyZTMxMzkzMjJlMzAyZjMyMzMyZDMyMzQyMDNkM2UyMDMyMzgz
MTM2MzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcB
Af8EEDAOMAwEAgABMAYDBAG6+sAwDQYJKoZIhvcNAQELBQADggEBAKPuo3aTIg/2
r6Zx94NGnfFkFnuAm00iQXA+ida++psMdECU0AuNkEun10hrZfGrnlKq9nbY4Hvn
lGO+7v48C1naNvMUqgLVRBST0h14tasqhNm7FwDPv2aPSBXUnbbdRmsKLQEprO4/
+OZtN828Aq8JhdZ3mCbaJXMmWNoUapJMZs2bBMPafaoaAT2ylUMlEOc7Lk7huxC8
iGAJ8XDqDswmg3Ztj8gNeqh9pk2EnsSazhHB6LsS/+yb82xwjbqQ8E6kGoP6Psuj
bD0ALYMLql7kiBIGH4NbIAVPaR1F7VryrzKPkwtV7U1LegvicqcR69Ea6/E/CvdV
Jn1MF5JLW4E=
-----END CERTIFICATE-----
Generated at Fri Mar 14 04:20:57 2025 by rpki-client