Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2WRJMCXpzmvFc9uDboy14s6cPwKqQVDHggronMknRm1V/0/3137302e3234372e31362e302f32332d3233203d3e203631373332.roa
File:                     3137302e3234372e31362e302f32332d3233203d3e203631373332.roa (raw, json)
Hash identifier:          spUr1UsblJvD/E4NZ5QOkJ9YQTf7WDMV0kdxqfbVRc4=
Subject key identifier:   00:BF:AB:9A:F9:7E:A4:20:06:E7:39:1A:95:51:9A:8D:4C:19:C9:01
Certificate issuer:       /CN=8529A7F829766A6E814929022549D58021B37145
Certificate serial:       5707514C703E147DC0212DC6F1DA54FFBBDC26D8
Authority key identifier: 85:29:A7:F8:29:76:6A:6E:81:49:29:02:25:49:D5:80:21:B3:71:45
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8529A7F829766A6E814929022549D58021B37145.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2WRJMCXpzmvFc9uDboy14s6cPwKqQVDHggronMknRm1V/0/3137302e3234372e31362e302f32332d3233203d3e203631373332.roa
Signing time:             Sat 27 May 2023 01:37:20 +0000
ROA not before:           Sat 27 May 2023 01:32:20 +0000
ROA not after:            Sat 25 May 2024 01:37:20 +0000
asID:                     61732
IP address blocks:        170.247.16.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:07:51:4c:70:3e:14:7d:c0:21:2d:c6:f1:da:54:ff:bb:dc:26:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8529A7F829766A6E814929022549D58021B37145
        Validity
            Not Before: May 27 01:32:20 2023 GMT
            Not After : May 25 01:37:20 2024 GMT
        Subject: CN=00BFAB9AF97EA42006E7391A95519A8D4C19C901
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:bb:e8:a4:a8:09:db:ab:18:ab:d9:5c:72:a2:
                    ca:f4:13:3e:0f:fe:eb:52:73:71:45:2a:26:34:0b:
                    5f:d3:96:71:b6:77:8d:8d:3f:5e:08:d1:69:8b:c2:
                    17:2b:86:4b:88:ee:cf:ec:20:0e:60:08:4f:ea:bd:
                    89:1a:1c:5e:ed:98:5f:ff:4b:33:9a:49:72:6b:c5:
                    23:f8:d9:61:24:45:f7:f6:6d:7d:72:f8:62:8e:b4:
                    15:6f:8b:10:3c:70:96:20:85:e7:44:9b:04:45:df:
                    6c:0d:49:dd:30:42:6d:af:13:a2:e0:17:fd:f7:cd:
                    eb:82:be:f9:45:6f:9f:62:d0:d8:3a:8a:b3:31:ce:
                    57:41:83:67:84:a9:a4:60:75:ad:c7:65:e9:12:75:
                    96:f1:6e:b3:36:01:53:26:99:88:35:31:f0:7d:ad:
                    d4:36:1f:91:7b:35:da:bf:e6:09:1a:64:9e:6c:02:
                    d0:02:c0:19:8b:2a:97:4a:0d:91:7a:27:e1:7e:87:
                    86:27:2f:8a:7c:fe:3e:e2:0a:33:6e:95:c0:f7:eb:
                    cb:f0:38:77:55:84:ef:8b:83:9c:b9:ae:45:36:66:
                    9a:17:7a:32:a2:76:c4:71:cd:56:de:79:bc:a0:ef:
                    81:1e:9c:b0:fa:a4:1d:63:72:02:6c:9d:a5:6a:9b:
                    45:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:BF:AB:9A:F9:7E:A4:20:06:E7:39:1A:95:51:9A:8D:4C:19:C9:01
            X509v3 Authority Key Identifier:
                keyid:85:29:A7:F8:29:76:6A:6E:81:49:29:02:25:49:D5:80:21:B3:71:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2WRJMCXpzmvFc9uDboy14s6cPwKqQVDHggronMknRm1V/0/8529A7F829766A6E814929022549D58021B37145.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8529A7F829766A6E814929022549D58021B37145.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2WRJMCXpzmvFc9uDboy14s6cPwKqQVDHggronMknRm1V/0/3137302e3234372e31362e302f32332d3233203d3e203631373332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.247.16.0/23

    Signature Algorithm: sha256WithRSAEncryption
         76:c8:40:8e:e8:66:bd:05:1e:ec:af:ca:c3:d0:2a:c1:da:c8:
         32:7b:ed:41:e5:56:e7:23:34:0c:d9:6e:70:7a:65:36:8a:5c:
         f8:f5:34:e2:8c:c6:fe:a7:7e:f2:4e:49:bc:f8:c8:61:8e:3f:
         13:d2:83:1b:e4:ad:f9:1d:6e:c7:64:d4:61:38:08:47:1f:07:
         23:51:3f:e1:80:1a:cf:a1:46:83:00:b0:35:47:ba:7b:4f:6a:
         3a:54:cc:a7:fa:21:26:8b:c5:7d:10:9c:10:0e:cf:21:ad:06:
         2c:ae:f6:c0:52:41:a8:a5:fc:6b:da:6c:0f:78:1c:94:f8:34:
         c9:fe:28:39:60:d5:67:12:28:96:ea:ed:89:0a:56:f4:6a:90:
         a1:69:1a:6a:6c:28:d7:06:7f:e5:6d:cf:96:d3:25:d6:8d:fa:
         08:61:c9:63:4e:0d:b6:ca:35:89:5e:8f:0a:38:63:35:a8:f5:
         d2:de:d3:32:e8:0f:7e:a7:1f:cc:cc:b9:a6:12:83:dd:e5:b4:
         8c:fe:65:7f:aa:14:ba:9e:8d:f4:b0:25:d7:cb:7b:9d:d3:5f:
         2e:2c:57:21:3d:d0:03:81:e6:58:be:d4:4b:1c:c5:eb:59:27:
         64:4c:b2:ea:64:e1:ac:c0:ba:0a:2f:87:0d:0d:10:19:f1:32:
         88:79:46:ef
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUVwdRTHA+FH3AIS3G8dpU/7vcJtgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODUyOUE3RjgyOTc2NkE2RTgxNDkyOTAyMjU0OUQ1ODAy
MUIzNzE0NTAeFw0yMzA1MjcwMTMyMjBaFw0yNDA1MjUwMTM3MjBaMDMxMTAvBgNV
BAMTKDAwQkZBQjlBRjk3RUE0MjAwNkU3MzkxQTk1NTE5QThENEMxOUM5MDEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDju+ikqAnbqxir2Vxyosr0Ez4P
/utSc3FFKiY0C1/TlnG2d42NP14I0WmLwhcrhkuI7s/sIA5gCE/qvYkaHF7tmF//
SzOaSXJrxSP42WEkRff2bX1y+GKOtBVvixA8cJYghedEmwRF32wNSd0wQm2vE6Lg
F/33zeuCvvlFb59i0Ng6irMxzldBg2eEqaRgda3HZekSdZbxbrM2AVMmmYg1MfB9
rdQ2H5F7Ndq/5gkaZJ5sAtACwBmLKpdKDZF6J+F+h4YnL4p8/j7iCjNulcD368vw
OHdVhO+Lg5y5rkU2ZpoXejKidsRxzVbeebyg74EenLD6pB1jcgJsnaVqm0VtAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUAL+rmvl+pCAG5zkalVGajUwZyQEwHwYDVR0j
BBgwFoAUhSmn+Cl2am6BSSkCJUnVgCGzcUUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMldSSk1DWHB6bXZGYzl1RGJveTE0czZjUHdLcVFWREhnZ3Jvbk1rblJt
MVYvMC84NTI5QTdGODI5NzY2QTZFODE0OTI5MDIyNTQ5RDU4MDIxQjM3MTQ1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzg1MjlBN0Y4Mjk3NjZBNkU4
MTQ5MjkwMjI1NDlENTgwMjFCMzcxNDUuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJXUkpNQ1hwem12RmM5dURib3kxNHM2Y1B3S3FRVkRIZ2dyb25Na25SbTFWLzAv
MzEzNzMwMmUzMjM0MzcyZTMxMzYyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzNjMx
MzczMzMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQBqvcQMA0GCSqGSIb3DQEBCwUAA4IBAQB2yECO6Ga9
BR7sr8rD0CrB2sgye+1B5VbnIzQM2W5wemU2ilz49TTijMb+p37yTkm8+Mhhjj8T
0oMb5K35HW7HZNRhOAhHHwcjUT/hgBrPoUaDALA1R7p7T2o6VMyn+iEmi8V9EJwQ
Ds8hrQYsrvbAUkGopfxr2mwPeByU+DTJ/ig5YNVnEiiW6u2JClb0apChaRpqbCjX
Bn/lbc+W0yXWjfoIYcljTg22yjWJXo8KOGM1qPXS3tMy6A9+px/MzLmmEoPd5bSM
/mV/qhS6no30sCXXy3ud018uLFchPdADgeZYvtRLHMXrWSdkTLLqZOGswLoKL4cN
DRAZ8TKIeUbv
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:09:31 2025 by rpki-client