Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2rC2b4pRVSgEqvcauGPe3Eo89e5D5wz2Pyn764wLAnKF/0/3230312e37372e3137312e302f32342d3234203d3e203238363536.roa
File:                     3230312e37372e3137312e302f32342d3234203d3e203238363536.roa (raw, json)
Hash identifier:          L2C7BmNZJ4N7/seUILNyVY6OcZ6dVjm3Ub2h8edolAM=
Subject key identifier:   1C:47:1E:71:68:19:B4:51:71:ED:C2:0F:74:8F:06:6D:1D:34:CF:C8
Certificate issuer:       /CN=4504054E9F641914E3EF0F436CCB1E127C868221
Certificate serial:       142201681A81943CDC18D2B1CAFFE108DCA587E1
Authority key identifier: 45:04:05:4E:9F:64:19:14:E3:EF:0F:43:6C:CB:1E:12:7C:86:82:21
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4504054E9F641914E3EF0F436CCB1E127C868221.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2rC2b4pRVSgEqvcauGPe3Eo89e5D5wz2Pyn764wLAnKF/0/3230312e37372e3137312e302f32342d3234203d3e203238363536.roa
Signing time:             Sun 23 Oct 2022 13:22:12 +0000
ROA not before:           Sun 23 Oct 2022 13:17:12 +0000
ROA not after:            Sun 22 Oct 2023 13:22:12 +0000
asID:                     28656
IP address blocks:        201.77.171.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:22:01:68:1a:81:94:3c:dc:18:d2:b1:ca:ff:e1:08:dc:a5:87:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4504054E9F641914E3EF0F436CCB1E127C868221
        Validity
            Not Before: Oct 23 13:17:12 2022 GMT
            Not After : Oct 22 13:22:12 2023 GMT
        Subject: CN=1C471E716819B45171EDC20F748F066D1D34CFC8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:64:d5:b4:6c:f9:11:b9:2e:ac:f6:fd:1a:5a:
                    f6:70:84:12:6f:fd:77:19:0b:35:f7:91:8b:4d:d7:
                    fa:57:ed:8e:cf:aa:8c:87:b1:22:ad:b5:2e:1d:30:
                    88:c3:d9:26:91:fe:49:51:37:91:95:4f:da:c5:38:
                    7c:a7:fc:f0:8f:08:d8:b9:01:56:64:68:4a:d5:c0:
                    0d:4f:39:b5:c7:c5:fd:57:11:c0:51:1d:fb:ed:db:
                    78:6a:ba:73:f6:e3:72:81:dc:37:8b:b7:0e:0a:4f:
                    ee:13:55:d9:b4:35:e1:59:fe:4e:bb:09:be:eb:1f:
                    bc:5d:b2:a7:97:48:8b:a8:08:7d:c6:9f:0b:71:80:
                    8f:df:58:15:6a:10:53:03:f3:f9:4f:37:00:a4:fc:
                    d8:6b:c0:8b:a6:75:1d:0d:06:37:ca:9e:f3:08:1b:
                    8a:bc:48:04:55:1b:06:3b:54:ef:38:13:59:fe:08:
                    d6:04:69:41:1c:33:ff:eb:5a:c5:ed:50:a2:1c:47:
                    18:56:2b:c4:34:2c:54:a4:a1:61:50:1e:d3:7f:fb:
                    1e:d1:b5:8f:74:3e:c0:96:02:4a:50:c6:d7:56:fa:
                    bb:97:1a:fb:f9:d8:12:78:86:7a:ca:ef:6b:4a:a0:
                    c9:92:e7:ee:f7:17:5a:d5:30:b5:36:2f:5b:5d:53:
                    d6:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:47:1E:71:68:19:B4:51:71:ED:C2:0F:74:8F:06:6D:1D:34:CF:C8
            X509v3 Authority Key Identifier:
                keyid:45:04:05:4E:9F:64:19:14:E3:EF:0F:43:6C:CB:1E:12:7C:86:82:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2rC2b4pRVSgEqvcauGPe3Eo89e5D5wz2Pyn764wLAnKF/0/4504054E9F641914E3EF0F436CCB1E127C868221.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4504054E9F641914E3EF0F436CCB1E127C868221.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2rC2b4pRVSgEqvcauGPe3Eo89e5D5wz2Pyn764wLAnKF/0/3230312e37372e3137312e302f32342d3234203d3e203238363536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.77.171.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8c:1a:38:93:23:11:fa:6a:a7:2e:ea:f9:84:78:61:e2:82:3e:
         31:07:61:b6:ca:91:72:f8:a3:d9:74:c5:68:97:bf:3b:8d:ad:
         16:2d:b8:ed:c6:11:5e:68:fa:62:40:53:bf:bf:9e:b4:9b:6a:
         24:c7:d1:09:86:bf:61:4a:99:50:6c:c0:52:ac:ed:ac:e3:0f:
         a5:6a:24:f0:cd:70:7a:75:ae:40:45:39:ef:3f:60:28:3d:f4:
         99:49:d9:8f:7f:ed:8d:c7:b9:88:cd:71:ae:14:bb:3a:38:17:
         7e:66:c3:32:5c:9b:50:2e:04:96:35:01:9c:2c:66:f4:c1:cb:
         a1:11:36:8a:47:0a:59:5d:78:98:4a:4d:68:53:eb:1b:84:28:
         50:43:06:d4:65:3f:35:2f:e5:6f:a5:e6:40:97:36:2e:2a:86:
         08:b1:73:94:d0:34:e9:d4:5c:13:ff:a9:2f:94:ce:24:e9:92:
         98:c0:4b:ca:45:63:41:69:7c:1a:5a:8f:b9:0d:49:68:a8:db:
         73:75:82:73:9c:a2:11:9b:36:54:d6:34:08:56:ed:47:fc:ff:
         c7:26:4b:5d:f5:2f:a0:76:0d:6a:06:48:ae:27:65:f7:39:52:
         88:fe:e9:e2:df:d2:9f:5b:e3:1d:eb:ba:85:97:f1:f9:28:e9:
         75:99:28:62
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUFCIBaBqBlDzcGNKxyv/hCNylh+EwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDUwNDA1NEU5RjY0MTkxNEUzRUYwRjQzNkNDQjFFMTI3
Qzg2ODIyMTAeFw0yMjEwMjMxMzE3MTJaFw0yMzEwMjIxMzIyMTJaMDMxMTAvBgNV
BAMTKDFDNDcxRTcxNjgxOUI0NTE3MUVEQzIwRjc0OEYwNjZEMUQzNENGQzgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2ZNW0bPkRuS6s9v0aWvZwhBJv
/XcZCzX3kYtN1/pX7Y7PqoyHsSKttS4dMIjD2SaR/klRN5GVT9rFOHyn/PCPCNi5
AVZkaErVwA1PObXHxf1XEcBRHfvt23hqunP243KB3DeLtw4KT+4TVdm0NeFZ/k67
Cb7rH7xdsqeXSIuoCH3GnwtxgI/fWBVqEFMD8/lPNwCk/NhrwIumdR0NBjfKnvMI
G4q8SARVGwY7VO84E1n+CNYEaUEcM//rWsXtUKIcRxhWK8Q0LFSkoWFQHtN/+x7R
tY90PsCWAkpQxtdW+ruXGvv52BJ4hnrK72tKoMmS5+73F1rVMLU2L1tdU9ZFAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUHEcecWgZtFFx7cIPdI8GbR00z8gwHwYDVR0j
BBgwFoAURQQFTp9kGRTj7w9DbMseEnyGgiEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMnJDMmI0cFJWU2dFcXZjYXVHUGUzRW84OWU1RDV3ejJQeW43NjR3TEFu
S0YvMC80NTA0MDU0RTlGNjQxOTE0RTNFRjBGNDM2Q0NCMUUxMjdDODY4MjIxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzQ1MDQwNTRFOUY2NDE5MTRF
M0VGMEY0MzZDQ0IxRTEyN0M4NjgyMjEuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJyQzJiNHBSVlNnRXF2Y2F1R1BlM0VvODllNUQ1d3oyUHluNzY0d0xBbktGLzAv
MzIzMDMxMmUzNzM3MmUzMTM3MzEyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM4
MzYzNTM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAyU2rMA0GCSqGSIb3DQEBCwUAA4IBAQCMGjiTIxH6
aqcu6vmEeGHigj4xB2G2ypFy+KPZdMVol787ja0WLbjtxhFeaPpiQFO/v560m2ok
x9EJhr9hSplQbMBSrO2s4w+laiTwzXB6da5ARTnvP2AoPfSZSdmPf+2Nx7mIzXGu
FLs6OBd+ZsMyXJtQLgSWNQGcLGb0wcuhETaKRwpZXXiYSk1oU+sbhChQQwbUZT81
L+VvpeZAlzYuKoYIsXOU0DTp1FwT/6kvlM4k6ZKYwEvKRWNBaXwaWo+5DUloqNtz
dYJznKIRmzZU1jQIVu1H/P/HJktd9S+gdg1qBkiuJ2X3OVKI/uni39KfW+Md67qF
l/H5KOl1mShi
-----END CERTIFICATE-----
Generated at Tue Feb 18 13:45:13 2025 by rpki-client