Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BENTnFC8Kq9mt5tmVxyR5RZYwcU4Zhd97KGQWJpRbRPS/0/3137372e38372e3132322e302f32332d3233203d3e203533323131.roa
File:                     3137372e38372e3132322e302f32332d3233203d3e203533323131.roa (raw, json)
Hash identifier:          +FZmPapCixXAVoAtHNF2NuHhka7Fn/9FIvr7dmStyIc=
Subject key identifier:   1B:75:AB:1C:67:F7:83:3D:60:6F:B0:93:77:D1:4A:6D:F6:A8:C6:8F
Certificate issuer:       /CN=B809FFE7E958FC2B243CE9ABB1DFFD7FEDFE99A6
Certificate serial:       18CE845E31AE0942D632F663DD988F3BED0E16F8
Authority key identifier: B8:09:FF:E7:E9:58:FC:2B:24:3C:E9:AB:B1:DF:FD:7F:ED:FE:99:A6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B809FFE7E958FC2B243CE9ABB1DFFD7FEDFE99A6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BENTnFC8Kq9mt5tmVxyR5RZYwcU4Zhd97KGQWJpRbRPS/0/3137372e38372e3132322e302f32332d3233203d3e203533323131.roa
Signing time:             Sat 19 Feb 2022 17:18:29 +0000
ROA not before:           Sat 19 Feb 2022 17:13:29 +0000
ROA not after:            Sat 18 Feb 2023 17:18:29 +0000
asID:                     53211
IP address blocks:        177.87.122.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:ce:84:5e:31:ae:09:42:d6:32:f6:63:dd:98:8f:3b:ed:0e:16:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B809FFE7E958FC2B243CE9ABB1DFFD7FEDFE99A6
        Validity
            Not Before: Feb 19 17:13:29 2022 GMT
            Not After : Feb 18 17:18:29 2023 GMT
        Subject: CN=1B75AB1C67F7833D606FB09377D14A6DF6A8C68F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:d0:fd:0b:4f:24:96:0f:21:38:9b:09:55:da:
                    72:b1:b0:8e:7c:cf:df:09:ab:55:40:5a:4f:77:3d:
                    33:83:d5:76:60:5f:58:c2:af:1f:fa:f3:bd:44:e8:
                    fe:13:5d:a5:40:53:7a:f9:55:8e:2d:b1:ba:38:69:
                    ea:ae:8e:bc:ed:b1:c2:af:af:10:0e:99:55:2b:8b:
                    45:9a:90:3f:66:3c:be:bd:76:88:97:b1:a4:92:b0:
                    37:5f:4c:4b:74:a6:2b:23:e3:3f:2a:7d:9b:b5:94:
                    bb:54:aa:e0:74:a1:b9:87:b4:48:11:2f:c2:b5:a0:
                    af:c8:96:45:b0:95:12:40:aa:52:de:ca:bc:e1:d7:
                    d6:29:02:bb:4d:b1:90:d5:d8:35:cb:3f:a7:82:d8:
                    26:43:fc:4f:29:9d:35:8f:37:05:b7:9c:aa:c9:ce:
                    24:40:17:8f:1c:8b:67:a4:54:ab:34:24:29:e4:4e:
                    6d:e7:f5:fc:50:d7:7f:11:6b:3e:6f:8b:85:ec:2a:
                    5f:39:2d:fe:e6:45:0f:40:ec:b0:62:74:2f:47:4e:
                    97:e4:61:a7:a6:54:c1:11:4a:f6:17:d4:16:8d:0e:
                    c2:c9:a5:37:0e:96:a2:74:3d:a6:cd:a0:6c:f8:a2:
                    24:ec:f6:e4:dc:89:57:cc:7b:2f:e4:2e:20:b1:c2:
                    82:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:75:AB:1C:67:F7:83:3D:60:6F:B0:93:77:D1:4A:6D:F6:A8:C6:8F
            X509v3 Authority Key Identifier:
                keyid:B8:09:FF:E7:E9:58:FC:2B:24:3C:E9:AB:B1:DF:FD:7F:ED:FE:99:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BENTnFC8Kq9mt5tmVxyR5RZYwcU4Zhd97KGQWJpRbRPS/0/B809FFE7E958FC2B243CE9ABB1DFFD7FEDFE99A6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B809FFE7E958FC2B243CE9ABB1DFFD7FEDFE99A6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BENTnFC8Kq9mt5tmVxyR5RZYwcU4Zhd97KGQWJpRbRPS/0/3137372e38372e3132322e302f32332d3233203d3e203533323131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.87.122.0/23

    Signature Algorithm: sha256WithRSAEncryption
         03:17:c8:f3:59:c7:d3:2e:22:a4:aa:f4:8f:3e:1c:d7:24:10:
         9e:3c:47:d4:33:d4:64:2c:26:96:f5:56:8f:91:8f:c3:f1:4c:
         a8:07:9a:a5:c2:4a:e0:d5:84:d5:68:90:b9:78:33:56:3c:e9:
         53:27:e0:85:b4:71:19:14:fa:8e:96:fb:65:62:3d:d3:e7:be:
         a3:2a:19:22:52:09:41:00:a5:5f:33:60:cb:cf:be:e5:1b:7b:
         a4:a4:8c:15:37:ef:e6:9c:53:77:bd:f6:64:aa:a1:48:92:c6:
         20:e3:53:66:f6:19:1b:ba:a9:d6:f6:ea:23:d8:d7:a4:ee:b7:
         4e:79:ad:5a:58:f4:d0:de:78:30:51:9a:fc:ae:36:73:8b:12:
         e9:c2:6c:81:b0:11:57:39:f8:87:f4:b0:49:9c:aa:96:4f:9c:
         b7:3e:7b:82:65:71:2a:89:46:77:e2:50:be:b9:cc:59:4e:4e:
         fb:60:d0:14:65:24:4c:d9:0e:8f:13:1e:f5:03:d0:ee:f2:00:
         8b:dc:32:3a:18:40:8d:1f:44:7e:d9:6a:dd:17:eb:bc:ff:0e:
         3b:2c:b7:a8:be:c9:2b:6b:c3:6e:67:c5:e8:c6:56:d2:5d:56:
         62:56:a0:71:0b:94:80:c1:8c:5b:bd:92:47:ab:4e:a0:1c:8a:
         7b:e4:3d:be
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUGM6EXjGuCULWMvZj3ZiPO+0OFvgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjgwOUZGRTdFOTU4RkMyQjI0M0NFOUFCQjFERkZEN0ZF
REZFOTlBNjAeFw0yMjAyMTkxNzEzMjlaFw0yMzAyMTgxNzE4MjlaMDMxMTAvBgNV
BAMTKDFCNzVBQjFDNjdGNzgzM0Q2MDZGQjA5Mzc3RDE0QTZERjZBOEM2OEYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDG0P0LTySWDyE4mwlV2nKxsI58
z98Jq1VAWk93PTOD1XZgX1jCrx/6871E6P4TXaVAU3r5VY4tsbo4aequjrztscKv
rxAOmVUri0WakD9mPL69doiXsaSSsDdfTEt0pisj4z8qfZu1lLtUquB0obmHtEgR
L8K1oK/IlkWwlRJAqlLeyrzh19YpArtNsZDV2DXLP6eC2CZD/E8pnTWPNwW3nKrJ
ziRAF48ci2ekVKs0JCnkTm3n9fxQ138Raz5vi4XsKl85Lf7mRQ9A7LBidC9HTpfk
YaemVMERSvYX1BaNDsLJpTcOlqJ0PabNoGz4oiTs9uTciVfMey/kLiCxwoJ/AgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUG3WrHGf3gz1gb7CTd9FKbfaoxo8wHwYDVR0j
BBgwFoAUuAn/5+lY/CskPOmrsd/9f+3+maYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQkVOVG5GQzhLcTltdDV0bVZ4eVI1UlpZd2NVNFpoZDk3S0dRV0pwUmJS
UFMvMC9CODA5RkZFN0U5NThGQzJCMjQzQ0U5QUJCMURGRkQ3RkVERkU5OUE2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0I4MDlGRkU3RTk1OEZDMkIy
NDNDRTlBQkIxREZGRDdGRURGRTk5QTYuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0JFTlRuRkM4S3E5bXQ1dG1WeHlSNVJaWXdjVTRaaGQ5N0tHUVdKcFJiUlBTLzAv
MzEzNzM3MmUzODM3MmUzMTMyMzIyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzNTMz
MzIzMTMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQBsVd6MA0GCSqGSIb3DQEBCwUAA4IBAQADF8jzWcfT
LiKkqvSPPhzXJBCePEfUM9RkLCaW9VaPkY/D8UyoB5qlwkrg1YTVaJC5eDNWPOlT
J+CFtHEZFPqOlvtlYj3T576jKhkiUglBAKVfM2DLz77lG3ukpIwVN+/mnFN3vfZk
qqFIksYg41Nm9hkbuqnW9uoj2Nek7rdOea1aWPTQ3ngwUZr8rjZzixLpwmyBsBFX
OfiH9LBJnKqWT5y3PnuCZXEqiUZ34lC+ucxZTk77YNAUZSRM2Q6PEx71A9Du8gCL
3DI6GECNH0R+2WrdF+u8/w47LLeovskra8NuZ8XoxlbSXVZiVqBxC5SAwYxbvZJH
q06gHIp75D2+
-----END CERTIFICATE-----
Generated at Mon Jun 9 04:50:09 2025 by rpki-client