Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3bAbbZ6x5FrwA4J6ad61JeotwdYCxR3vvdDuV7hHGqBf/0/3137372e31302e35362e302f32312d3231203d3e20323632383437.roa
File:                     3137372e31302e35362e302f32312d3231203d3e20323632383437.roa (raw, json)
Hash identifier:          jOjEBZTrHB6ICJnWxXuFMNox5dVGV/j6oxvE2yNCcUQ=
Subject key identifier:   1A:57:81:E8:29:56:44:B4:66:FD:02:06:8A:75:7D:5D:9B:8F:A9:87
Certificate issuer:       /CN=6BCF9F2C8F7BCF23D32B0C784120C9DA5C93A0D4
Certificate serial:       20E38B5A6E602FD8697B805E0965B7B482B2844F
Authority key identifier: 6B:CF:9F:2C:8F:7B:CF:23:D3:2B:0C:78:41:20:C9:DA:5C:93:A0:D4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6BCF9F2C8F7BCF23D32B0C784120C9DA5C93A0D4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3bAbbZ6x5FrwA4J6ad61JeotwdYCxR3vvdDuV7hHGqBf/0/3137372e31302e35362e302f32312d3231203d3e20323632383437.roa
Signing time:             Fri 17 Jun 2022 12:49:56 +0000
ROA not before:           Fri 17 Jun 2022 12:44:56 +0000
ROA not after:            Fri 16 Jun 2023 12:49:56 +0000
asID:                     262847
IP address blocks:        177.10.56.0/21 maxlen: 21
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:e3:8b:5a:6e:60:2f:d8:69:7b:80:5e:09:65:b7:b4:82:b2:84:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6BCF9F2C8F7BCF23D32B0C784120C9DA5C93A0D4
        Validity
            Not Before: Jun 17 12:44:56 2022 GMT
            Not After : Jun 16 12:49:56 2023 GMT
        Subject: CN=1A5781E8295644B466FD02068A757D5D9B8FA987
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:2f:5e:e0:f8:7d:29:a2:f9:d7:60:db:b3:d8:
                    49:4a:e5:7c:82:00:85:1d:30:9b:ce:42:7d:df:d3:
                    df:6b:2d:19:4f:ad:61:54:c1:e0:35:6a:e9:3c:5a:
                    fc:8e:98:7c:5a:8c:9b:45:a3:82:47:6e:8d:59:3b:
                    5e:be:0f:96:48:05:a7:ed:09:0f:08:58:a6:69:0b:
                    f0:07:cc:69:10:67:15:09:7d:58:d7:10:e6:a5:5e:
                    a0:0c:07:78:51:2a:ee:d5:11:2b:cc:63:48:d5:88:
                    21:36:d4:1f:9c:d3:cb:f6:15:75:27:2e:8d:ac:f7:
                    1f:c1:df:12:c8:b9:58:f1:8b:b1:72:34:4c:ba:18:
                    a9:b9:01:0a:be:ed:17:c1:cb:2a:70:6f:07:46:1b:
                    07:ef:7a:a9:33:d6:8b:de:2f:61:ec:9a:1d:27:eb:
                    82:a3:33:65:5d:df:4d:f7:88:0a:db:4a:2d:e1:92:
                    71:48:d6:64:7d:e3:9b:c3:29:43:1c:8e:3d:cb:7f:
                    88:bf:d1:ea:35:1e:6d:1a:fb:e5:84:95:44:8d:9c:
                    b8:a1:13:24:fb:7e:a6:6f:06:fe:34:84:3e:a1:1b:
                    87:8c:77:14:e4:b2:ff:da:08:80:f6:35:54:15:fc:
                    17:55:c0:d4:dc:2d:f1:e6:12:b0:b1:09:0d:d3:4b:
                    be:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:57:81:E8:29:56:44:B4:66:FD:02:06:8A:75:7D:5D:9B:8F:A9:87
            X509v3 Authority Key Identifier:
                keyid:6B:CF:9F:2C:8F:7B:CF:23:D3:2B:0C:78:41:20:C9:DA:5C:93:A0:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3bAbbZ6x5FrwA4J6ad61JeotwdYCxR3vvdDuV7hHGqBf/0/6BCF9F2C8F7BCF23D32B0C784120C9DA5C93A0D4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6BCF9F2C8F7BCF23D32B0C784120C9DA5C93A0D4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3bAbbZ6x5FrwA4J6ad61JeotwdYCxR3vvdDuV7hHGqBf/0/3137372e31302e35362e302f32312d3231203d3e20323632383437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.10.56.0/21

    Signature Algorithm: sha256WithRSAEncryption
         d7:fe:b2:50:65:52:bd:f0:c7:14:66:0b:5a:dc:59:82:71:b5:
         41:a1:95:1a:a4:43:80:f6:17:78:72:0f:b0:ad:a0:73:84:24:
         be:00:58:29:4f:d9:71:05:55:83:3c:66:56:c0:98:99:1d:76:
         e6:86:99:2c:6c:bf:76:ed:de:4b:f8:75:b6:00:ab:be:7f:ea:
         12:81:5c:2f:a6:97:85:c2:b8:c2:79:ab:59:42:ed:7a:46:f0:
         65:26:54:99:86:b7:cf:b4:30:3f:fb:27:81:d3:71:9a:9b:f5:
         51:92:e2:62:0c:b5:3a:47:d2:7c:88:ca:b7:d7:5c:c4:b5:f8:
         07:0b:4f:35:11:84:f3:fb:70:b0:5b:a7:77:1a:b3:7a:f1:60:
         83:15:8d:41:93:00:b9:bf:52:3a:d1:12:73:cd:0d:9a:45:e3:
         90:eb:6d:bf:a1:e0:d6:1d:7a:5a:c4:2a:7d:65:d3:8b:9f:2a:
         57:62:03:4b:52:d5:fc:d2:b2:2e:04:06:49:55:87:b5:f2:b6:
         af:89:e7:4e:e9:3c:79:0e:79:42:09:50:4a:67:7f:07:22:ac:
         15:76:cc:46:9f:5d:a3:7d:ce:27:8c:49:ce:20:71:3d:44:bf:
         a2:b0:a9:fe:d0:25:1c:e6:ec:4d:9f:5a:44:7f:1e:2d:d1:59:
         b5:ef:40:09
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUIOOLWm5gL9hpe4BeCWW3tIKyhE8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkJDRjlGMkM4RjdCQ0YyM0QzMkIwQzc4NDEyMEM5REE1
QzkzQTBENDAeFw0yMjA2MTcxMjQ0NTZaFw0yMzA2MTYxMjQ5NTZaMDMxMTAvBgNV
BAMTKDFBNTc4MUU4Mjk1NjQ0QjQ2NkZEMDIwNjhBNzU3RDVEOUI4RkE5ODcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDiL17g+H0povnXYNuz2ElK5XyC
AIUdMJvOQn3f099rLRlPrWFUweA1auk8WvyOmHxajJtFo4JHbo1ZO16+D5ZIBaft
CQ8IWKZpC/AHzGkQZxUJfVjXEOalXqAMB3hRKu7VESvMY0jViCE21B+c08v2FXUn
Lo2s9x/B3xLIuVjxi7FyNEy6GKm5AQq+7RfByypwbwdGGwfveqkz1oveL2Hsmh0n
64KjM2Vd3033iArbSi3hknFI1mR945vDKUMcjj3Lf4i/0eo1Hm0a++WElUSNnLih
EyT7fqZvBv40hD6hG4eMdxTksv/aCID2NVQV/BdVwNTcLfHmErCxCQ3TS761AgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUGleB6ClWRLRm/QIGinV9XZuPqYcwHwYDVR0j
BBgwFoAUa8+fLI97zyPTKwx4QSDJ2lyToNQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM2JBYmJaNng1RnJ3QTRKNmFkNjFKZW90d2RZQ3hSM3Z2ZER1VjdoSEdx
QmYvMC82QkNGOUYyQzhGN0JDRjIzRDMyQjBDNzg0MTIwQzlEQTVDOTNBMEQ0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzZCQ0Y5RjJDOEY3QkNGMjNE
MzJCMEM3ODQxMjBDOURBNUM5M0EwRDQuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNiQWJiWjZ4NUZyd0E0SjZhZDYxSmVvdHdkWUN4UjN2dmREdVY3aEhHcUJmLzAv
MzEzNzM3MmUzMTMwMmUzNTM2MmUzMDJmMzIzMTJkMzIzMTIwM2QzZTIwMzIzNjMy
MzgzNDM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQDsQo4MA0GCSqGSIb3DQEBCwUAA4IBAQDX/rJQZVK9
8McUZgta3FmCcbVBoZUapEOA9hd4cg+wraBzhCS+AFgpT9lxBVWDPGZWwJiZHXbm
hpksbL927d5L+HW2AKu+f+oSgVwvppeFwrjCeatZQu16RvBlJlSZhrfPtDA/+yeB
03Gam/VRkuJiDLU6R9J8iMq311zEtfgHC081EYTz+3CwW6d3GrN68WCDFY1BkwC5
v1I60RJzzQ2aReOQ622/oeDWHXpaxCp9ZdOLnypXYgNLUtX80rIuBAZJVYe18rav
iedO6Tx5DnlCCVBKZ38HIqwVdsxGn12jfc4njEnOIHE9RL+isKn+0CUc5uxNn1pE
fx4t0Vm170AJ
-----END CERTIFICATE-----
Generated at Fri Feb 21 11:18:26 2025 by rpki-client