Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2rC2b4pRVSgEqvcauGPe3Eo89e5D5wz2Pyn764wLAnKF/0/3230312e37372e3137322e302f32342d3234203d3e203238363536.roa
File:                     3230312e37372e3137322e302f32342d3234203d3e203238363536.roa (raw, json)
Hash identifier:          Lxk3qzsxy27/gPR7IPfSYCpu/PnIWtZZ+PtKtHmpDSQ=
Subject key identifier:   F7:FF:B4:A7:3F:B2:69:A3:72:CD:67:61:04:5E:CE:6E:B2:F5:D3:B6
Certificate issuer:       /CN=4504054E9F641914E3EF0F436CCB1E127C868221
Certificate serial:       57B5563EC8CA96DC4B279E306DFA3C6C147D7EC8
Authority key identifier: 45:04:05:4E:9F:64:19:14:E3:EF:0F:43:6C:CB:1E:12:7C:86:82:21
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4504054E9F641914E3EF0F436CCB1E127C868221.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2rC2b4pRVSgEqvcauGPe3Eo89e5D5wz2Pyn764wLAnKF/0/3230312e37372e3137322e302f32342d3234203d3e203238363536.roa
Signing time:             Sun 23 Oct 2022 13:22:13 +0000
ROA not before:           Sun 23 Oct 2022 13:17:13 +0000
ROA not after:            Sun 22 Oct 2023 13:22:13 +0000
asID:                     28656
IP address blocks:        201.77.172.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:b5:56:3e:c8:ca:96:dc:4b:27:9e:30:6d:fa:3c:6c:14:7d:7e:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4504054E9F641914E3EF0F436CCB1E127C868221
        Validity
            Not Before: Oct 23 13:17:13 2022 GMT
            Not After : Oct 22 13:22:13 2023 GMT
        Subject: CN=F7FFB4A73FB269A372CD6761045ECE6EB2F5D3B6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:3d:a1:a2:75:4a:b9:31:bb:72:6a:c8:e0:19:
                    f6:85:30:99:e7:ee:f4:08:22:21:63:de:4a:d0:79:
                    4c:a5:f2:95:a8:de:55:29:1a:a8:79:62:ff:1a:19:
                    75:0a:ea:75:45:7b:a0:db:c4:30:4f:2c:33:90:1e:
                    c6:d9:cf:46:00:71:e0:e6:75:3f:87:e3:d8:b1:27:
                    13:a5:00:ff:cf:89:e4:48:39:80:a5:5a:6d:72:aa:
                    d7:6f:95:a9:eb:ec:fa:74:8a:6c:67:1a:79:71:08:
                    aa:6d:70:2d:f7:79:12:23:6b:60:01:1f:06:c1:b3:
                    27:14:6a:b6:af:84:87:6c:f8:51:c0:30:a1:7c:f9:
                    34:72:31:88:71:b4:ea:f7:6b:81:c7:c2:a7:ed:d5:
                    bb:71:f7:13:6d:5a:e6:af:b4:1c:a5:aa:61:b1:5e:
                    5b:ef:28:ff:1c:8b:a4:89:03:28:ab:09:86:c7:23:
                    de:a7:bb:1d:9f:a0:5f:7f:80:8d:b7:44:66:10:0c:
                    46:16:c0:14:4f:dc:1b:3b:55:a3:57:02:29:1d:1b:
                    4f:06:79:db:66:29:23:38:bb:05:9b:8b:83:2e:85:
                    de:01:e4:e2:e9:a8:8a:b9:17:c9:d0:0c:15:66:b5:
                    e5:51:e7:94:2c:84:b8:f5:87:1e:21:93:e9:bf:45:
                    94:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:FF:B4:A7:3F:B2:69:A3:72:CD:67:61:04:5E:CE:6E:B2:F5:D3:B6
            X509v3 Authority Key Identifier:
                keyid:45:04:05:4E:9F:64:19:14:E3:EF:0F:43:6C:CB:1E:12:7C:86:82:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2rC2b4pRVSgEqvcauGPe3Eo89e5D5wz2Pyn764wLAnKF/0/4504054E9F641914E3EF0F436CCB1E127C868221.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4504054E9F641914E3EF0F436CCB1E127C868221.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2rC2b4pRVSgEqvcauGPe3Eo89e5D5wz2Pyn764wLAnKF/0/3230312e37372e3137322e302f32342d3234203d3e203238363536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.77.172.0/24

    Signature Algorithm: sha256WithRSAEncryption
         33:a4:f6:c7:ac:fb:52:1c:e1:a6:33:1f:a6:bf:09:ab:a5:57:
         c5:98:1d:e8:19:85:13:93:3f:41:38:f5:03:0d:71:43:3f:ae:
         4d:3c:3d:61:97:2f:56:0f:44:1f:da:d5:f9:dd:33:30:c7:47:
         70:cb:57:e8:37:ef:13:82:f7:51:6c:e7:41:bf:7d:9c:b3:ef:
         85:85:8e:e5:2d:ea:d1:1d:bc:74:06:af:8a:3a:5b:a1:a3:60:
         d1:ae:98:b6:cb:d0:d7:de:c0:e5:a9:be:53:0b:a7:23:c0:18:
         3f:5c:c8:1f:2f:c3:05:82:40:36:9d:c7:1b:bd:99:ba:69:33:
         2e:15:e2:2a:d1:d8:09:48:d2:27:f0:d6:31:6c:c4:66:fc:73:
         4b:0f:b9:04:56:9f:36:43:bc:3f:8f:46:c9:7d:14:9f:44:04:
         0e:05:92:72:33:45:e3:4e:41:9a:d0:0f:2f:4d:b4:fd:42:f4:
         fe:15:b5:00:6c:38:65:9a:9c:e1:26:c6:85:c7:55:36:ce:ff:
         12:2b:4f:40:97:d6:41:6f:90:2d:70:8d:fd:cf:47:ad:dc:3b:
         8a:e9:ae:7a:25:fa:dc:c7:2e:9f:8b:30:c7:f3:cc:31:85:33:
         14:e4:b4:7e:5a:30:3c:cc:e6:af:28:7e:c8:02:bf:54:b1:6f:
         7d:3e:9c:9a
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUV7VWPsjKltxLJ54wbfo8bBR9fsgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDUwNDA1NEU5RjY0MTkxNEUzRUYwRjQzNkNDQjFFMTI3
Qzg2ODIyMTAeFw0yMjEwMjMxMzE3MTNaFw0yMzEwMjIxMzIyMTNaMDMxMTAvBgNV
BAMTKEY3RkZCNEE3M0ZCMjY5QTM3MkNENjc2MTA0NUVDRTZFQjJGNUQzQjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvPaGidUq5MbtyasjgGfaFMJnn
7vQIIiFj3krQeUyl8pWo3lUpGqh5Yv8aGXUK6nVFe6DbxDBPLDOQHsbZz0YAceDm
dT+H49ixJxOlAP/PieRIOYClWm1yqtdvlanr7Pp0imxnGnlxCKptcC33eRIja2AB
HwbBsycUaravhIds+FHAMKF8+TRyMYhxtOr3a4HHwqft1btx9xNtWuavtBylqmGx
XlvvKP8ci6SJAyirCYbHI96nux2foF9/gI23RGYQDEYWwBRP3Bs7VaNXAikdG08G
edtmKSM4uwWbi4Muhd4B5OLpqIq5F8nQDBVmteVR55QshLj1hx4hk+m/RZS/AgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQU9/+0pz+yaaNyzWdhBF7ObrL107YwHwYDVR0j
BBgwFoAURQQFTp9kGRTj7w9DbMseEnyGgiEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMnJDMmI0cFJWU2dFcXZjYXVHUGUzRW84OWU1RDV3ejJQeW43NjR3TEFu
S0YvMC80NTA0MDU0RTlGNjQxOTE0RTNFRjBGNDM2Q0NCMUUxMjdDODY4MjIxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzQ1MDQwNTRFOUY2NDE5MTRF
M0VGMEY0MzZDQ0IxRTEyN0M4NjgyMjEuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJyQzJiNHBSVlNnRXF2Y2F1R1BlM0VvODllNUQ1d3oyUHluNzY0d0xBbktGLzAv
MzIzMDMxMmUzNzM3MmUzMTM3MzIyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM4
MzYzNTM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAyU2sMA0GCSqGSIb3DQEBCwUAA4IBAQAzpPbHrPtS
HOGmMx+mvwmrpVfFmB3oGYUTkz9BOPUDDXFDP65NPD1hly9WD0Qf2tX53TMwx0dw
y1foN+8TgvdRbOdBv32cs++FhY7lLerRHbx0Bq+KOluho2DRrpi2y9DX3sDlqb5T
C6cjwBg/XMgfL8MFgkA2nccbvZm6aTMuFeIq0dgJSNIn8NYxbMRm/HNLD7kEVp82
Q7w/j0bJfRSfRAQOBZJyM0XjTkGa0A8vTbT9QvT+FbUAbDhlmpzhJsaFx1U2zv8S
K09Al9ZBb5AtcI39z0et3DuK6a56Jfrcxy6fizDH88wxhTMU5LR+WjA8zOavKH7I
Ar9UsW99Ppya
-----END CERTIFICATE-----
Generated at Sun Jun 8 17:15:41 2025 by rpki-client