Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2bHWSvQFEAjNHr1PpcwRkedgL6BZ9eokG4YvnsFgoPju/0/3137372e38372e3134342e302f32312d3231203d3e20323632393932.roa
File:                     3137372e38372e3134342e302f32312d3231203d3e20323632393932.roa (raw, json)
Hash identifier:          9ZYNyvW3272djsXx6EDJ2Mg0hByJx6OVAKvGrJWrTcE=
Subject key identifier:   88:C2:CF:71:BA:F5:4F:02:E5:D2:B3:7C:EA:14:A0:57:FA:DD:D2:21
Certificate issuer:       /CN=85189A4BDED8E2AE31C0DCF5336891EA164ECA37
Certificate serial:       3A5926FDF8F5B0947930293FBD27AD73494C7EE2
Authority key identifier: 85:18:9A:4B:DE:D8:E2:AE:31:C0:DC:F5:33:68:91:EA:16:4E:CA:37
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/85189A4BDED8E2AE31C0DCF5336891EA164ECA37.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2bHWSvQFEAjNHr1PpcwRkedgL6BZ9eokG4YvnsFgoPju/0/3137372e38372e3134342e302f32312d3231203d3e20323632393932.roa
Signing time:             Fri 16 Dec 2022 19:43:41 +0000
ROA not before:           Fri 16 Dec 2022 19:38:41 +0000
ROA not after:            Fri 15 Dec 2023 19:43:41 +0000
asID:                     262992
IP address blocks:        177.87.144.0/21 maxlen: 21
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:59:26:fd:f8:f5:b0:94:79:30:29:3f:bd:27:ad:73:49:4c:7e:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85189A4BDED8E2AE31C0DCF5336891EA164ECA37
        Validity
            Not Before: Dec 16 19:38:41 2022 GMT
            Not After : Dec 15 19:43:41 2023 GMT
        Subject: CN=88C2CF71BAF54F02E5D2B37CEA14A057FADDD221
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:79:9f:7d:4c:5d:81:1f:d4:32:58:20:53:42:
                    26:5f:5a:5a:6b:d7:02:de:79:da:0d:c8:dd:96:3d:
                    39:c8:7b:b9:00:0f:0b:38:37:bd:0a:c0:2e:39:13:
                    07:48:6c:26:af:0d:4b:a3:d3:31:74:2e:7f:0f:9d:
                    7f:92:bf:e0:a2:bf:18:d2:5c:3f:dc:44:b5:57:1d:
                    e7:6b:d3:7a:da:dd:ea:c2:e1:78:5a:9c:e2:c9:71:
                    c5:24:ad:db:7b:43:27:60:d7:ec:45:7d:8e:17:21:
                    5d:a4:91:01:66:71:af:c8:44:cc:24:0f:86:12:21:
                    ac:1c:8d:b9:c6:c3:d8:34:98:e8:8c:00:bb:5e:50:
                    6b:2a:39:92:43:0d:0a:aa:50:48:64:17:3d:f8:dd:
                    42:b3:7a:2d:e5:38:cd:24:af:84:3f:e9:8d:5f:a1:
                    a2:44:ab:a7:7d:c3:f4:78:0c:28:f0:01:d6:07:af:
                    67:ed:58:ad:e8:e8:1f:d2:52:63:b1:a6:74:b8:02:
                    14:c2:11:ed:1e:d4:1c:87:18:d5:db:58:3c:42:ee:
                    00:7f:a0:e6:39:a6:c5:26:62:78:37:c4:e2:96:e9:
                    6a:61:dc:c8:12:75:a0:af:52:83:fc:af:49:ec:c5:
                    85:4c:b9:54:04:12:77:b0:91:24:3a:02:b7:c8:da:
                    d7:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:C2:CF:71:BA:F5:4F:02:E5:D2:B3:7C:EA:14:A0:57:FA:DD:D2:21
            X509v3 Authority Key Identifier:
                keyid:85:18:9A:4B:DE:D8:E2:AE:31:C0:DC:F5:33:68:91:EA:16:4E:CA:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2bHWSvQFEAjNHr1PpcwRkedgL6BZ9eokG4YvnsFgoPju/0/85189A4BDED8E2AE31C0DCF5336891EA164ECA37.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/85189A4BDED8E2AE31C0DCF5336891EA164ECA37.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2bHWSvQFEAjNHr1PpcwRkedgL6BZ9eokG4YvnsFgoPju/0/3137372e38372e3134342e302f32312d3231203d3e20323632393932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.87.144.0/21

    Signature Algorithm: sha256WithRSAEncryption
         e2:f8:85:2e:68:1f:44:16:de:0f:78:56:ae:fd:c7:a1:bf:ab:
         b7:b9:c4:68:51:37:ef:f2:62:4b:42:41:c2:eb:f0:ec:88:95:
         1b:ed:7c:e2:ac:2e:a6:8c:d3:2b:37:62:6a:21:29:ad:83:ee:
         c5:31:55:25:e7:3c:40:b0:bc:a3:8e:3f:99:41:96:e3:f5:dc:
         8d:40:46:24:9f:87:9b:63:13:d3:d0:79:58:f4:a2:64:64:ff:
         4a:e2:fc:49:42:8b:e6:dd:0a:aa:11:0f:ae:3e:5c:77:3d:da:
         b4:47:d6:7a:e9:2c:18:22:c4:24:04:19:08:9d:fb:7e:5b:32:
         97:5a:29:7a:81:98:07:e2:17:61:0a:a1:8a:f2:66:96:e1:5e:
         06:e2:2c:73:0e:06:67:8b:f3:a2:e0:47:7d:15:56:a5:68:0a:
         af:e7:2d:11:fb:67:b5:90:a3:64:26:03:a6:7a:7a:10:5d:b5:
         61:bd:b8:41:a9:8e:e6:bf:6a:c1:d0:a6:17:ed:08:d4:2c:82:
         ba:eb:59:b3:86:a0:b1:ca:4d:57:53:72:9a:db:a9:91:5e:f5:
         8d:08:17:64:b4:77:4e:22:80:71:2b:df:a6:73:f3:8a:9a:e1:
         e7:6d:13:a6:93:89:83:ff:e3:5e:18:62:a4:2d:34:63:a3:45:
         77:07:3d:f7
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUOlkm/fj1sJR5MCk/vSetc0lMfuIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODUxODlBNEJERUQ4RTJBRTMxQzBEQ0Y1MzM2ODkxRUEx
NjRFQ0EzNzAeFw0yMjEyMTYxOTM4NDFaFw0yMzEyMTUxOTQzNDFaMDMxMTAvBgNV
BAMTKDg4QzJDRjcxQkFGNTRGMDJFNUQyQjM3Q0VBMTRBMDU3RkFEREQyMjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXeZ99TF2BH9QyWCBTQiZfWlpr
1wLeedoNyN2WPTnIe7kADws4N70KwC45EwdIbCavDUuj0zF0Ln8PnX+Sv+CivxjS
XD/cRLVXHedr03ra3erC4XhanOLJccUkrdt7Qydg1+xFfY4XIV2kkQFmca/IRMwk
D4YSIawcjbnGw9g0mOiMALteUGsqOZJDDQqqUEhkFz343UKzei3lOM0kr4Q/6Y1f
oaJEq6d9w/R4DCjwAdYHr2ftWK3o6B/SUmOxpnS4AhTCEe0e1ByHGNXbWDxC7gB/
oOY5psUmYng3xOKW6Wph3MgSdaCvUoP8r0nsxYVMuVQEEnewkSQ6ArfI2tdlAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUiMLPcbr1TwLl0rN86hSgV/rd0iEwHwYDVR0j
BBgwFoAUhRiaS97Y4q4xwNz1M2iR6hZOyjcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMmJIV1N2UUZFQWpOSHIxUHBjd1JrZWRnTDZCWjllb2tHNFl2bnNGZ29Q
anUvMC84NTE4OUE0QkRFRDhFMkFFMzFDMERDRjUzMzY4OTFFQTE2NEVDQTM3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzg1MTg5QTRCREVEOEUyQUUz
MUMwRENGNTMzNjg5MUVBMTY0RUNBMzcuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJiSFdTdlFGRUFqTkhyMVBwY3dSa2VkZ0w2Qlo5ZW9rRzRZdm5zRmdvUGp1LzAv
MzEzNzM3MmUzODM3MmUzMTM0MzQyZTMwMmYzMjMxMmQzMjMxMjAzZDNlMjAzMjM2
MzIzOTM5MzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAOxV5AwDQYJKoZIhvcNAQELBQADggEBAOL4hS5o
H0QW3g94Vq79x6G/q7e5xGhRN+/yYktCQcLr8OyIlRvtfOKsLqaM0ys3YmohKa2D
7sUxVSXnPECwvKOOP5lBluP13I1ARiSfh5tjE9PQeVj0omRk/0ri/ElCi+bdCqoR
D64+XHc92rRH1nrpLBgixCQEGQid+35bMpdaKXqBmAfiF2EKoYryZpbhXgbiLHMO
BmeL86LgR30VVqVoCq/nLRH7Z7WQo2QmA6Z6ehBdtWG9uEGpjua/asHQphftCNQs
grrrWbOGoLHKTVdTcprbqZFe9Y0IF2S0d04igHEr36Zz84qa4edtE6aTiYP/414Y
YqQtNGOjRXcHPfc=
-----END CERTIFICATE-----
Generated at Fri Mar 14 02:40:28 2025 by rpki-client