Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2zcXxm688UdzTnHCKPk49fSCV6Tc58TTHKuA5kkedkXR/0/3138312e3233322e3234302e302f32322d3232203d3e20323731353530.roa
File:                     3138312e3233322e3234302e302f32322d3232203d3e20323731353530.roa (raw, json)
Hash identifier:          bWWOAcH23qBgrlp+vmJXaEIZz5+wdMwxgfO+kFF2Z2s=
Subject key identifier:   90:92:4E:E8:FE:58:9C:BD:97:F9:73:DC:E1:85:9F:8A:A7:23:20:79
Certificate issuer:       /CN=2FF76076754B4C7F56163A6D57EC01836F824336
Certificate serial:       176D9B91C4994540F5B5A54F5FAD69E1599E9726
Authority key identifier: 2F:F7:60:76:75:4B:4C:7F:56:16:3A:6D:57:EC:01:83:6F:82:43:36
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2FF76076754B4C7F56163A6D57EC01836F824336.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2zcXxm688UdzTnHCKPk49fSCV6Tc58TTHKuA5kkedkXR/0/3138312e3233322e3234302e302f32322d3232203d3e20323731353530.roa
Signing time:             Wed 31 Jan 2024 00:00:00 +0000
ROA not before:           Tue 30 Jan 2024 23:55:00 +0000
ROA not after:            Wed 29 Jan 2025 00:00:00 +0000
asID:                     271550
IP address blocks:        181.232.240.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:6d:9b:91:c4:99:45:40:f5:b5:a5:4f:5f:ad:69:e1:59:9e:97:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2FF76076754B4C7F56163A6D57EC01836F824336
        Validity
            Not Before: Jan 30 23:55:00 2024 GMT
            Not After : Jan 29 00:00:00 2025 GMT
        Subject: CN=3082010A0282010100C75C541E7B9AE05811A7FE4CB6B664414276F6533DCBBD3876B9EC6023881B0CAA82F32506E28EA435EFFFD57DC4E399FD68D30A73BF34AFA0C69E65C7E497BBE6C70B71B1554C6BDB994EC0A1413371808743A3AA5547469DAA4833AD7B24A0E0DF99B82D24CDC0CD3207117F2119B9C1B45C53D9E24B14C20869BF17BB8621AC58F95117491C72D139F12BA0AC1EEA2BA3DA69A0B0DEAC3A0809E28AFD6CDD85C56A8F13AE0F31A3E5146BE1A9ECA54C3C4A8C8D9BF946C17EA9902BA14D5E44507355D4F929FA6C3C8E61D959002EF05BCD21B7CF8E6F0D336E376DAB42A70A0B8E77A016888346C6B1242DEB62E90F502DCEB8B24C8340992BB8A1AD766D0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:5c:54:1e:7b:9a:e0:58:11:a7:fe:4c:b6:b6:
                    64:41:42:76:f6:53:3d:cb:bd:38:76:b9:ec:60:23:
                    88:1b:0c:aa:82:f3:25:06:e2:8e:a4:35:ef:ff:d5:
                    7d:c4:e3:99:fd:68:d3:0a:73:bf:34:af:a0:c6:9e:
                    65:c7:e4:97:bb:e6:c7:0b:71:b1:55:4c:6b:db:99:
                    4e:c0:a1:41:33:71:80:87:43:a3:aa:55:47:46:9d:
                    aa:48:33:ad:7b:24:a0:e0:df:99:b8:2d:24:cd:c0:
                    cd:32:07:11:7f:21:19:b9:c1:b4:5c:53:d9:e2:4b:
                    14:c2:08:69:bf:17:bb:86:21:ac:58:f9:51:17:49:
                    1c:72:d1:39:f1:2b:a0:ac:1e:ea:2b:a3:da:69:a0:
                    b0:de:ac:3a:08:09:e2:8a:fd:6c:dd:85:c5:6a:8f:
                    13:ae:0f:31:a3:e5:14:6b:e1:a9:ec:a5:4c:3c:4a:
                    8c:8d:9b:f9:46:c1:7e:a9:90:2b:a1:4d:5e:44:50:
                    73:55:d4:f9:29:fa:6c:3c:8e:61:d9:59:00:2e:f0:
                    5b:cd:21:b7:cf:8e:6f:0d:33:6e:37:6d:ab:42:a7:
                    0a:0b:8e:77:a0:16:88:83:46:c6:b1:24:2d:eb:62:
                    e9:0f:50:2d:ce:b8:b2:4c:83:40:99:2b:b8:a1:ad:
                    76:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:92:4E:E8:FE:58:9C:BD:97:F9:73:DC:E1:85:9F:8A:A7:23:20:79
            X509v3 Authority Key Identifier:
                keyid:2F:F7:60:76:75:4B:4C:7F:56:16:3A:6D:57:EC:01:83:6F:82:43:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2zcXxm688UdzTnHCKPk49fSCV6Tc58TTHKuA5kkedkXR/0/2FF76076754B4C7F56163A6D57EC01836F824336.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2FF76076754B4C7F56163A6D57EC01836F824336.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2zcXxm688UdzTnHCKPk49fSCV6Tc58TTHKuA5kkedkXR/0/3138312e3233322e3234302e302f32322d3232203d3e20323731353530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.232.240.0/22

    Signature Algorithm: sha256WithRSAEncryption
         48:09:d5:ce:5d:9e:07:76:47:6d:2c:17:67:9a:73:b1:50:ef:
         4d:39:dd:6e:92:d8:6d:64:25:24:8e:d7:b2:25:e7:b6:b6:ad:
         69:24:a9:6c:bc:5d:35:e1:4e:ef:06:a1:97:cb:34:ef:2f:8c:
         e4:6e:14:c8:51:52:b9:d9:8f:cb:00:b5:52:9b:cf:2f:4e:21:
         27:64:63:93:9f:5f:a0:1d:ce:04:64:18:cd:85:d5:4d:d9:a4:
         46:cf:d1:5f:e0:b6:fb:22:f9:8d:a5:04:ec:70:43:53:c9:55:
         18:13:2c:16:4c:9a:34:7e:83:d4:4d:0d:56:8f:d0:17:74:e8:
         b7:d8:13:04:d6:c4:97:9f:5a:20:54:ba:77:88:fb:71:6b:e0:
         19:07:32:95:d9:7f:75:ba:a7:b0:e3:5b:33:be:dc:f0:73:ba:
         c6:70:75:43:3e:70:c4:4a:b0:4e:27:38:82:15:a7:6f:27:86:
         6c:78:5e:7d:c5:da:dd:cf:0e:f4:e9:8e:ac:f5:26:ce:97:91:
         fb:01:57:5c:ba:5f:77:cf:17:ac:20:83:8d:80:b4:71:a1:c8:
         69:76:f4:9b:45:5c:ac:bb:f1:c9:ca:17:35:2e:e7:57:5b:75:
         b4:b1:e9:e5:90:3f:fb:6d:fb:b2:05:f5:8d:fa:e5:25:05:81:
         4e:93:b2:21
-----BEGIN CERTIFICATE-----
MIIHRTCCBi2gAwIBAgIUF22bkcSZRUD1taVPX61p4VmelyYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkZGNzYwNzY3NTRCNEM3RjU2MTYzQTZENTdFQzAxODM2
RjgyNDMzNjAeFw0yNDAxMzAyMzU1MDBaFw0yNTAxMjkwMDAwMDBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQzc1QzU0MUU3QjlBRTA1ODEx
QTdGRTRDQjZCNjY0NDE0Mjc2RjY1MzNEQ0JCRDM4NzZCOUVDNjAyMzg4MUIwQ0FB
ODJGMzI1MDZFMjhFQTQzNUVGRkZENTdEQzRFMzk5RkQ2OEQzMEE3M0JGMzRBRkEw
QzY5RTY1QzdFNDk3QkJFNkM3MEI3MUIxNTU0QzZCREI5OTRFQzBBMTQxMzM3MTgw
ODc0M0EzQUE1NTQ3NDY5REFBNDgzM0FEN0IyNEEwRTBERjk5QjgyRDI0Q0RDMENE
MzIwNzExN0YyMTE5QjlDMUI0NUM1M0Q5RTI0QjE0QzIwODY5QkYxN0JCODYyMUFD
NThGOTUxMTc0OTFDNzJEMTM5RjEyQkEwQUMxRUVBMkJBM0RBNjlBMEIwREVBQzNB
MDgwOUUyOEFGRDZDREQ4NUM1NkE4RjEzQUUwRjMxQTNFNTE0NkJFMUE5RUNBNTRD
M0M0QThDOEQ5QkY5NDZDMTdFQTk5MDJCQTE0RDVFNDQ1MDczNTVENEY5MjlGQTZD
M0M4RTYxRDk1OTAwMkVGMDVCQ0QyMUI3Q0Y4RTZGMEQzMzZFMzc2REFCNDJBNzBB
MEI4RTc3QTAxNjg4ODM0NkM2QjEyNDJERUI2MkU5MEY1MDJEQ0VCOEIyNEM4MzQw
OTkyQkI4QTFBRDc2NkQwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAx1xUHnua4FgRp/5MtrZkQUJ29lM9y704drnsYCOIGwyqgvMlBuKO
pDXv/9V9xOOZ/WjTCnO/NK+gxp5lx+SXu+bHC3GxVUxr25lOwKFBM3GAh0OjqlVH
Rp2qSDOteySg4N+ZuC0kzcDNMgcRfyEZucG0XFPZ4ksUwghpvxe7hiGsWPlRF0kc
ctE58SugrB7qK6PaaaCw3qw6CAniiv1s3YXFao8Trg8xo+UUa+Gp7KVMPEqMjZv5
RsF+qZAroU1eRFBzVdT5KfpsPI5h2VkALvBbzSG3z45vDTNuN22rQqcKC453oBaI
g0bGsSQt62LpD1AtzriyTINAmSu4oa12bQIDAQABo4ICUzCCAk8wHQYDVR0OBBYE
FJCSTuj+WJy9l/lz3OGFn4qnIyB5MB8GA1UdIwQYMBaAFC/3YHZ1S0x/VhY6bVfs
AYNvgkM2MA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzJ6Y1h4bTY4OFVkelRu
SENLUGs0OWZTQ1Y2VGM1OFRUSEt1QTVra2Vka1hSLzAvMkZGNzYwNzY3NTRCNEM3
RjU2MTYzQTZENTdFQzAxODM2RjgyNDMzNi5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC8yRkY3NjA3Njc1NEI0QzdGNTYxNjNBNkQ1N0VDMDE4MzZGODI0
MzM2LmNlcjCBsAYIKwYBBQUHAQsEgaMwgaAwgZ0GCCsGAQUFBzALhoGQcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby8yemNYeG02ODhVZHpUbkhDS1Br
NDlmU0NWNlRjNThUVEhLdUE1a2tlZGtYUi8wLzMxMzgzMTJlMzIzMzMyMmUzMjM0
MzAyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzMjM3MzEzNTM1MzAucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAK16PAwDQYJKoZIhvcNAQELBQADggEBAEgJ1c5dngd2R20sF2eac7FQ70053W6S
2G1kJSSO17Il57a2rWkkqWy8XTXhTu8GoZfLNO8vjORuFMhRUrnZj8sAtVKbzy9O
ISdkY5OfX6AdzgRkGM2F1U3ZpEbP0V/gtvsi+Y2lBOxwQ1PJVRgTLBZMmjR+g9RN
DVaP0Bd06LfYEwTWxJefWiBUuneI+3Fr4BkHMpXZf3W6p7DjWzO+3PBzusZwdUM+
cMRKsE4nOIIVp28nhmx4Xn3F2t3PDvTpjqz1Js6XkfsBV1y6X3fPF6wgg42AtHGh
yGl29JtFXKy78cnKFzUu51dbdbSx6eWQP/tt+7IF9Y365SUFgU6TsiE=
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:28:45 2025 by rpki-client