Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2rC2b4pRVSgEqvcauGPe3Eo89e5D5wz2Pyn764wLAnKF/0/3230312e37372e3136322e302f32342d3234203d3e203238363536.roa
File:                     3230312e37372e3136322e302f32342d3234203d3e203238363536.roa (raw, json)
Hash identifier:          lHOb4z7zjZKBHRmipOKtucZxf7TLkbqlcrRV4V4pzP4=
Subject key identifier:   C8:A2:A9:BA:17:A8:2D:43:23:E0:EB:B9:6D:45:C0:F2:42:A4:5D:A8
Certificate issuer:       /CN=4504054E9F641914E3EF0F436CCB1E127C868221
Certificate serial:       2DB23A3C699CC3D0DE736E45915BAF32E7B6249E
Authority key identifier: 45:04:05:4E:9F:64:19:14:E3:EF:0F:43:6C:CB:1E:12:7C:86:82:21
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4504054E9F641914E3EF0F436CCB1E127C868221.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2rC2b4pRVSgEqvcauGPe3Eo89e5D5wz2Pyn764wLAnKF/0/3230312e37372e3136322e302f32342d3234203d3e203238363536.roa
Signing time:             Sun 23 Oct 2022 13:25:15 +0000
ROA not before:           Sun 23 Oct 2022 13:20:15 +0000
ROA not after:            Sun 22 Oct 2023 13:25:15 +0000
asID:                     28656
IP address blocks:        201.77.162.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:b2:3a:3c:69:9c:c3:d0:de:73:6e:45:91:5b:af:32:e7:b6:24:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4504054E9F641914E3EF0F436CCB1E127C868221
        Validity
            Not Before: Oct 23 13:20:15 2022 GMT
            Not After : Oct 22 13:25:15 2023 GMT
        Subject: CN=C8A2A9BA17A82D4323E0EBB96D45C0F242A45DA8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:e7:dd:fc:43:16:44:b3:4c:23:a2:89:e2:07:
                    67:d0:31:3d:6f:da:6e:69:32:66:5a:75:88:27:ef:
                    f4:6b:b0:1b:75:54:8b:76:a0:73:8d:7e:79:50:c5:
                    85:e6:21:94:e4:d6:c8:45:fc:29:29:93:c3:60:16:
                    bc:46:86:e7:7f:29:ea:d5:b8:e5:a4:e2:7b:3b:b8:
                    1c:30:e5:47:78:a6:ea:4c:d8:3c:cd:73:0a:b1:5d:
                    d7:8c:2f:10:a6:84:13:1e:5e:43:ba:9a:08:8f:94:
                    df:ea:05:9b:63:e8:39:46:32:cb:30:3c:e8:5d:6c:
                    08:0a:9b:44:00:ea:8a:37:16:37:f6:ed:a6:93:7d:
                    4f:f8:e9:3e:9f:62:33:f3:f5:a7:0b:70:a2:38:04:
                    8f:79:73:29:0d:32:86:95:1e:a4:94:79:2f:5c:58:
                    00:20:b5:7c:97:8d:46:df:89:34:14:68:30:2c:40:
                    a7:c5:b1:ed:db:50:8b:b1:c9:0c:e1:6c:4e:c5:41:
                    6e:93:eb:6d:78:38:8c:33:31:2b:06:09:e1:10:f1:
                    3b:98:04:2e:9d:30:07:33:04:f6:74:a7:54:e1:ad:
                    75:6d:e4:ff:2a:11:48:31:1b:22:96:66:f0:24:a5:
                    16:10:40:48:3d:51:ec:14:8b:de:ca:4b:df:09:6b:
                    d3:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:A2:A9:BA:17:A8:2D:43:23:E0:EB:B9:6D:45:C0:F2:42:A4:5D:A8
            X509v3 Authority Key Identifier:
                keyid:45:04:05:4E:9F:64:19:14:E3:EF:0F:43:6C:CB:1E:12:7C:86:82:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2rC2b4pRVSgEqvcauGPe3Eo89e5D5wz2Pyn764wLAnKF/0/4504054E9F641914E3EF0F436CCB1E127C868221.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4504054E9F641914E3EF0F436CCB1E127C868221.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2rC2b4pRVSgEqvcauGPe3Eo89e5D5wz2Pyn764wLAnKF/0/3230312e37372e3136322e302f32342d3234203d3e203238363536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.77.162.0/24

    Signature Algorithm: sha256WithRSAEncryption
         03:c6:2d:fc:63:f9:b1:62:d4:f8:96:eb:b1:43:f4:4a:68:ed:
         0e:51:6d:0f:f7:06:cd:f3:c3:16:62:d9:ef:d0:72:de:a2:cb:
         d4:ce:80:25:54:32:71:7c:a0:2b:67:37:af:26:ba:cc:24:0f:
         ff:f6:44:0e:fc:f2:3a:4b:33:fe:1b:2c:dd:42:0a:fb:05:69:
         c8:25:82:11:52:9e:7e:93:ba:3f:73:c9:5d:e8:54:e6:41:f2:
         a4:28:39:e3:ad:dd:d9:03:67:43:3f:47:d0:52:d3:f1:fb:75:
         c6:52:2a:57:d2:11:26:fd:12:81:94:ab:2d:22:9c:60:c9:87:
         17:a9:e6:8c:66:e7:5a:1f:b0:bb:24:a6:8b:13:e0:f5:1e:ed:
         b2:16:b9:76:33:12:af:b2:74:3e:32:66:f6:36:ef:ad:b7:56:
         cd:b1:73:77:98:12:e6:12:9b:f7:6e:e9:32:46:d3:32:98:b0:
         a4:28:ac:a2:e0:23:8c:d2:d0:04:48:5e:3b:2c:ad:94:db:83:
         ea:fd:34:e2:23:bd:8f:52:cd:1b:97:53:32:f7:c1:f7:96:1e:
         5a:88:a3:98:da:c8:ac:5f:55:12:8c:d6:4b:52:8b:76:9d:02:
         b9:de:fd:ec:4d:47:6e:d6:05:a8:23:df:17:db:0d:98:c3:7b:
         40:2e:11:e0
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIULbI6PGmcw9Dec25FkVuvMue2JJ4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDUwNDA1NEU5RjY0MTkxNEUzRUYwRjQzNkNDQjFFMTI3
Qzg2ODIyMTAeFw0yMjEwMjMxMzIwMTVaFw0yMzEwMjIxMzI1MTVaMDMxMTAvBgNV
BAMTKEM4QTJBOUJBMTdBODJENDMyM0UwRUJCOTZENDVDMEYyNDJBNDVEQTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC35938QxZEs0wjooniB2fQMT1v
2m5pMmZadYgn7/RrsBt1VIt2oHONfnlQxYXmIZTk1shF/Ckpk8NgFrxGhud/KerV
uOWk4ns7uBww5Ud4pupM2DzNcwqxXdeMLxCmhBMeXkO6mgiPlN/qBZtj6DlGMssw
POhdbAgKm0QA6oo3Fjf27aaTfU/46T6fYjPz9acLcKI4BI95cykNMoaVHqSUeS9c
WAAgtXyXjUbfiTQUaDAsQKfFse3bUIuxyQzhbE7FQW6T6214OIwzMSsGCeEQ8TuY
BC6dMAczBPZ0p1ThrXVt5P8qEUgxGyKWZvAkpRYQQEg9UewUi97KS98Ja9OtAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUyKKpuheoLUMj4Ou5bUXA8kKkXagwHwYDVR0j
BBgwFoAURQQFTp9kGRTj7w9DbMseEnyGgiEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMnJDMmI0cFJWU2dFcXZjYXVHUGUzRW84OWU1RDV3ejJQeW43NjR3TEFu
S0YvMC80NTA0MDU0RTlGNjQxOTE0RTNFRjBGNDM2Q0NCMUUxMjdDODY4MjIxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzQ1MDQwNTRFOUY2NDE5MTRF
M0VGMEY0MzZDQ0IxRTEyN0M4NjgyMjEuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJyQzJiNHBSVlNnRXF2Y2F1R1BlM0VvODllNUQ1d3oyUHluNzY0d0xBbktGLzAv
MzIzMDMxMmUzNzM3MmUzMTM2MzIyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM4
MzYzNTM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAyU2iMA0GCSqGSIb3DQEBCwUAA4IBAQADxi38Y/mx
YtT4luuxQ/RKaO0OUW0P9wbN88MWYtnv0HLeosvUzoAlVDJxfKArZzevJrrMJA//
9kQO/PI6SzP+GyzdQgr7BWnIJYIRUp5+k7o/c8ld6FTmQfKkKDnjrd3ZA2dDP0fQ
UtPx+3XGUipX0hEm/RKBlKstIpxgyYcXqeaMZudaH7C7JKaLE+D1Hu2yFrl2MxKv
snQ+Mmb2Nu+tt1bNsXN3mBLmEpv3bukyRtMymLCkKKyi4COM0tAESF47LK2U24Pq
/TTiI72PUs0bl1My98H3lh5aiKOY2sisX1USjNZLUot2nQK53v3sTUdu1gWoI98X
2w2Yw3tALhHg
-----END CERTIFICATE-----
Generated at Tue Feb 18 13:33:45 2025 by rpki-client