Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3U7upcUMX49G3VSoYqDPaxXYnJWp19Cnr2akwqYdk9rx/0/3139312e372e38302e302f32302d3234203d3e203532393031.roa
File:                     3139312e372e38302e302f32302d3234203d3e203532393031.roa (raw, json)
Hash identifier:          wde8FElENxW26ytR+ODDAxNH2niqLsOuxbibaYAlwaI=
Subject key identifier:   73:1A:90:52:B1:4B:C4:E4:D6:1C:7E:B3:AB:E1:51:7A:1E:2A:0D:D0
Certificate issuer:       /CN=CD430FA11CF99A2A02BA82D505CCF24FBC8CE77E
Certificate serial:       33558969C60561B2E9B8689DEE9B810AF7010338
Authority key identifier: CD:43:0F:A1:1C:F9:9A:2A:02:BA:82:D5:05:CC:F2:4F:BC:8C:E7:7E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CD430FA11CF99A2A02BA82D505CCF24FBC8CE77E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3U7upcUMX49G3VSoYqDPaxXYnJWp19Cnr2akwqYdk9rx/0/3139312e372e38302e302f32302d3234203d3e203532393031.roa
Signing time:             Tue 12 Jul 2022 12:55:57 +0000
ROA not before:           Tue 12 Jul 2022 12:50:57 +0000
ROA not after:            Tue 11 Jul 2023 12:55:57 +0000
asID:                     52901
IP address blocks:        191.7.80.0/20 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:55:89:69:c6:05:61:b2:e9:b8:68:9d:ee:9b:81:0a:f7:01:03:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CD430FA11CF99A2A02BA82D505CCF24FBC8CE77E
        Validity
            Not Before: Jul 12 12:50:57 2022 GMT
            Not After : Jul 11 12:55:57 2023 GMT
        Subject: CN=731A9052B14BC4E4D61C7EB3ABE1517A1E2A0DD0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:71:0b:fe:9e:48:8a:24:af:af:7b:2d:72:bc:
                    5a:60:e6:2e:00:6d:63:9b:12:40:85:f2:a7:f7:a7:
                    b3:bd:be:36:ec:cc:30:a8:1a:ca:78:ff:1e:f0:75:
                    4f:57:aa:1a:3c:1d:79:b2:b0:63:76:0e:6c:77:15:
                    96:08:06:98:5f:2f:57:2a:f6:d2:0c:a0:0c:bd:a5:
                    77:e8:93:f0:3e:a6:a1:d6:ec:cc:89:ea:27:c8:3c:
                    9f:84:0e:6f:c3:80:ec:2d:cc:49:04:f6:4a:bc:c1:
                    ca:5b:e5:48:1d:64:74:b6:44:56:d4:21:a8:94:36:
                    bc:c7:94:31:74:d9:ab:58:46:98:4c:c1:3b:e4:47:
                    a7:dc:2c:f6:dc:1a:53:0b:c3:bf:f0:fe:de:f5:e8:
                    d6:2a:50:fa:a0:c4:63:41:f8:26:06:96:fa:e4:df:
                    7f:b2:1c:d6:7c:08:2a:66:17:2e:15:b1:74:a5:17:
                    d4:5e:7e:19:3e:4a:30:d6:da:75:23:2b:77:69:53:
                    55:76:1d:13:ec:d0:20:c8:65:65:b4:55:0a:fc:b5:
                    2c:55:ef:ea:30:16:58:b7:5f:4a:86:d1:42:ec:60:
                    7a:57:d6:3b:6b:15:98:df:94:94:19:c6:7b:68:d1:
                    51:1f:03:59:8e:69:d7:03:2e:47:69:79:ef:d0:d7:
                    ff:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:1A:90:52:B1:4B:C4:E4:D6:1C:7E:B3:AB:E1:51:7A:1E:2A:0D:D0
            X509v3 Authority Key Identifier:
                keyid:CD:43:0F:A1:1C:F9:9A:2A:02:BA:82:D5:05:CC:F2:4F:BC:8C:E7:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3U7upcUMX49G3VSoYqDPaxXYnJWp19Cnr2akwqYdk9rx/0/CD430FA11CF99A2A02BA82D505CCF24FBC8CE77E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CD430FA11CF99A2A02BA82D505CCF24FBC8CE77E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3U7upcUMX49G3VSoYqDPaxXYnJWp19Cnr2akwqYdk9rx/0/3139312e372e38302e302f32302d3234203d3e203532393031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.7.80.0/20

    Signature Algorithm: sha256WithRSAEncryption
         82:92:7f:5e:4b:90:8c:6d:33:80:50:ed:14:25:82:20:98:4e:
         d1:c2:99:d0:07:d8:4f:33:cf:a0:24:d5:f1:5a:8f:e6:ae:ad:
         bf:42:1c:60:eb:ca:03:0c:28:91:94:47:32:25:31:8f:ed:0b:
         20:fb:c3:df:ce:ab:b7:84:40:a3:3c:e2:50:6b:97:b9:93:84:
         a0:25:1f:1e:11:91:1f:4d:e3:6d:e9:37:5a:f0:a9:0e:2a:15:
         b1:90:f2:56:60:dc:4e:4a:c3:35:fd:10:fd:d6:a8:64:ef:89:
         00:df:6d:d9:7f:c5:91:cd:c0:36:28:68:65:da:b9:03:f7:30:
         3a:6d:a4:f3:36:ab:40:76:cb:40:18:46:bb:5e:90:a1:d3:fb:
         9e:18:65:da:89:4b:ab:c9:f3:0e:88:52:33:18:11:c1:c1:b2:
         e9:06:ec:97:e4:46:14:44:a8:bb:f7:bf:6c:1d:84:97:ea:7b:
         5b:53:f9:06:c2:63:f6:63:58:19:32:c0:17:b9:0d:70:2c:3e:
         3e:d2:b4:6c:f4:fc:45:25:77:95:56:5d:79:62:34:f4:6a:2f:
         10:48:bc:13:ec:d8:e7:a0:69:bd:ee:b3:67:67:e9:bc:f1:0b:
         48:0f:50:b6:ba:af:8e:ec:c7:e1:cd:1d:94:5e:41:5e:d2:90:
         5a:06:f8:39
-----BEGIN CERTIFICATE-----
MIIFQTCCBCmgAwIBAgIUM1WJacYFYbLpuGid7puBCvcBAzgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0Q0MzBGQTExQ0Y5OUEyQTAyQkE4MkQ1MDVDQ0YyNEZC
QzhDRTc3RTAeFw0yMjA3MTIxMjUwNTdaFw0yMzA3MTExMjU1NTdaMDMxMTAvBgNV
BAMTKDczMUE5MDUyQjE0QkM0RTRENjFDN0VCM0FCRTE1MTdBMUUyQTBERDAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUcQv+nkiKJK+vey1yvFpg5i4A
bWObEkCF8qf3p7O9vjbszDCoGsp4/x7wdU9Xqho8HXmysGN2Dmx3FZYIBphfL1cq
9tIMoAy9pXfok/A+pqHW7MyJ6ifIPJ+EDm/DgOwtzEkE9kq8wcpb5UgdZHS2RFbU
IaiUNrzHlDF02atYRphMwTvkR6fcLPbcGlMLw7/w/t716NYqUPqgxGNB+CYGlvrk
33+yHNZ8CCpmFy4VsXSlF9Refhk+SjDW2nUjK3dpU1V2HRPs0CDIZWW0VQr8tSxV
7+owFli3X0qG0ULsYHpX1jtrFZjflJQZxnto0VEfA1mOadcDLkdpee/Q1/9lAgMB
AAGjggJLMIICRzAdBgNVHQ4EFgQUcxqQUrFLxOTWHH6zq+FReh4qDdAwHwYDVR0j
BBgwFoAUzUMPoRz5mioCuoLVBczyT7yM534wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM1U3dXBjVU1YNDlHM1ZTb1lxRFBheFhZbkpXcDE5Q25yMmFrd3FZZGs5
cngvMC9DRDQzMEZBMTFDRjk5QTJBMDJCQTgyRDUwNUNDRjI0RkJDOENFNzdFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0NENDMwRkExMUNGOTlBMkEw
MkJBODJENTA1Q0NGMjRGQkM4Q0U3N0UuY2VyMIGoBggrBgEFBQcBCwSBmzCBmDCB
lQYIKwYBBQUHMAuGgYhyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNVN3VwY1VNWDQ5RzNWU29ZcURQYXhYWW5KV3AxOUNucjJha3dxWWRrOXJ4LzAv
MzEzOTMxMmUzNzJlMzgzMDJlMzAyZjMyMzAyZDMyMzQyMDNkM2UyMDM1MzIzOTMw
MzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAS/B1AwDQYJKoZIhvcNAQELBQADggEBAIKSf15LkIxtM4BQ
7RQlgiCYTtHCmdAH2E8zz6Ak1fFaj+aurb9CHGDrygMMKJGURzIlMY/tCyD7w9/O
q7eEQKM84lBrl7mThKAlHx4RkR9N423pN1rwqQ4qFbGQ8lZg3E5KwzX9EP3WqGTv
iQDfbdl/xZHNwDYoaGXauQP3MDptpPM2q0B2y0AYRrtekKHT+54YZdqJS6vJ8w6I
UjMYEcHBsukG7JfkRhREqLv3v2wdhJfqe1tT+QbCY/ZjWBkywBe5DXAsPj7StGz0
/EUld5VWXXliNPRqLxBIvBPs2Oegab3us2dn6bzxC0gPULa6r47sx+HNHZReQV7S
kFoG+Dk=
-----END CERTIFICATE-----
Generated at Sun Jun 8 15:27:45 2025 by rpki-client