Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3cinK9nXL69fN9kBHYWsETXQVAkwppcdDJApfF5exKtQ/0/3136382e3232372e3131392e302f32342d3234203d3e20323634393130.roa
File:                     3136382e3232372e3131392e302f32342d3234203d3e20323634393130.roa (raw, json)
Hash identifier:          s5yjWBgqR7b/EUSNoHw4n9dZCb9A72RRM3408SBPHBw=
Subject key identifier:   D8:BE:E0:2E:18:E0:D4:5D:30:15:D2:DF:10:74:60:F8:4D:D3:AB:99
Certificate issuer:       /CN=100D641D9246825DB5F200B9152379E6B866AE90
Certificate serial:       29D249F76DC56A1E22CFAA2CFAE2E85C2B1F5158
Authority key identifier: 10:0D:64:1D:92:46:82:5D:B5:F2:00:B9:15:23:79:E6:B8:66:AE:90
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/100D641D9246825DB5F200B9152379E6B866AE90.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3cinK9nXL69fN9kBHYWsETXQVAkwppcdDJApfF5exKtQ/0/3136382e3232372e3131392e302f32342d3234203d3e20323634393130.roa
Signing time:             Sat 13 May 2023 19:20:31 +0000
ROA not before:           Sat 13 May 2023 19:15:31 +0000
ROA not after:            Sat 11 May 2024 19:20:31 +0000
asID:                     264910
IP address blocks:        168.227.119.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:d2:49:f7:6d:c5:6a:1e:22:cf:aa:2c:fa:e2:e8:5c:2b:1f:51:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=100D641D9246825DB5F200B9152379E6B866AE90
        Validity
            Not Before: May 13 19:15:31 2023 GMT
            Not After : May 11 19:20:31 2024 GMT
        Subject: CN=D8BEE02E18E0D45D3015D2DF107460F84DD3AB99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:f0:c2:b9:bc:bc:1e:6b:a8:5f:90:65:e4:4e:
                    07:c7:bc:c2:45:f6:71:d8:de:d0:d4:8e:28:bf:43:
                    2c:74:12:8d:bd:1e:46:62:cc:64:ea:c1:fd:57:b2:
                    41:56:d2:7b:a6:f3:2d:91:07:c8:ea:f4:c5:97:55:
                    b0:2f:3a:b9:35:80:cb:7e:33:c1:41:cb:e4:0d:b4:
                    45:32:c0:67:67:41:ff:6a:fa:84:a9:de:20:b2:bb:
                    bc:17:99:e9:1f:45:2f:3b:d2:f0:87:90:96:4d:16:
                    ec:cb:cf:08:fb:1f:5c:7b:7b:21:2f:1e:a8:81:47:
                    4b:11:73:06:43:fa:bc:4d:03:22:76:cc:56:b7:7c:
                    a5:41:fd:c8:df:87:f2:ef:96:6f:de:24:91:44:7d:
                    9c:0a:15:c4:e0:44:ff:36:b9:d9:1a:1a:62:2c:db:
                    32:5a:09:97:d6:59:15:80:b8:bd:d2:61:35:51:c0:
                    19:2f:be:1f:71:8e:81:ee:92:f6:c7:3c:3f:ea:48:
                    f3:8e:5d:51:4e:ed:5a:96:94:d4:ca:fa:29:05:1d:
                    54:f1:ba:d7:d4:a4:5a:0d:09:23:00:66:20:c9:b5:
                    0f:30:9b:30:ff:42:0e:0a:21:fe:d1:09:4c:da:e3:
                    a0:f6:d9:68:c3:f0:8a:45:8b:5a:d3:cf:85:65:8b:
                    14:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:BE:E0:2E:18:E0:D4:5D:30:15:D2:DF:10:74:60:F8:4D:D3:AB:99
            X509v3 Authority Key Identifier:
                keyid:10:0D:64:1D:92:46:82:5D:B5:F2:00:B9:15:23:79:E6:B8:66:AE:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3cinK9nXL69fN9kBHYWsETXQVAkwppcdDJApfF5exKtQ/0/100D641D9246825DB5F200B9152379E6B866AE90.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/100D641D9246825DB5F200B9152379E6B866AE90.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3cinK9nXL69fN9kBHYWsETXQVAkwppcdDJApfF5exKtQ/0/3136382e3232372e3131392e302f32342d3234203d3e20323634393130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.227.119.0/24

    Signature Algorithm: sha256WithRSAEncryption
         66:37:70:a0:b1:af:9a:60:af:30:4b:02:cc:c7:7f:b9:c1:c0:
         de:7b:12:65:61:b8:a8:d3:9b:70:a1:a2:a3:42:2e:e4:98:8e:
         26:e2:f1:a5:8f:cd:61:a4:54:76:e6:a3:4f:a8:75:84:95:a1:
         1c:ee:3e:d9:ec:7f:2d:27:97:a4:c4:73:60:4b:70:ed:ce:02:
         ac:ce:5d:d0:09:57:2e:73:9a:0b:55:91:8d:56:66:b0:a2:72:
         16:5b:4d:3b:bf:60:91:17:c6:6c:dc:0a:3b:bb:94:cc:9e:4a:
         f4:35:3b:e2:b9:a5:25:bb:56:88:be:c9:0a:aa:f4:d3:4a:b5:
         ef:77:18:75:9e:e9:8d:87:85:b2:4b:ac:6e:2e:cb:b2:62:61:
         c1:1f:56:ca:a6:b9:da:15:30:68:3d:9e:42:aa:af:a2:99:00:
         87:ed:9a:b0:7c:43:fd:5a:08:29:73:eb:00:7c:c1:4c:88:d1:
         92:dc:66:d4:f4:f7:8c:05:e9:fb:3e:eb:74:e8:39:e1:be:3b:
         99:2d:7b:42:5d:a8:5c:83:f1:c9:4f:e9:fb:36:ae:a7:36:b0:
         1f:c4:4d:d9:32:f0:7d:be:9f:2e:94:49:e2:53:2d:8e:2a:26:
         92:80:d6:c6:f2:1b:8a:49:cd:21:68:e5:bc:ac:19:4b:b9:1e:
         29:f0:18:ff
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUKdJJ923Fah4iz6os+uLoXCsfUVgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTAwRDY0MUQ5MjQ2ODI1REI1RjIwMEI5MTUyMzc5RTZC
ODY2QUU5MDAeFw0yMzA1MTMxOTE1MzFaFw0yNDA1MTExOTIwMzFaMDMxMTAvBgNV
BAMTKEQ4QkVFMDJFMThFMEQ0NUQzMDE1RDJERjEwNzQ2MEY4NEREM0FCOTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCl8MK5vLwea6hfkGXkTgfHvMJF
9nHY3tDUjii/Qyx0Eo29HkZizGTqwf1XskFW0num8y2RB8jq9MWXVbAvOrk1gMt+
M8FBy+QNtEUywGdnQf9q+oSp3iCyu7wXmekfRS870vCHkJZNFuzLzwj7H1x7eyEv
HqiBR0sRcwZD+rxNAyJ2zFa3fKVB/cjfh/Lvlm/eJJFEfZwKFcTgRP82udkaGmIs
2zJaCZfWWRWAuL3SYTVRwBkvvh9xjoHukvbHPD/qSPOOXVFO7VqWlNTK+ikFHVTx
utfUpFoNCSMAZiDJtQ8wmzD/Qg4KIf7RCUza46D22WjD8IpFi1rTz4VlixT9AgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQU2L7gLhjg1F0wFdLfEHRg+E3Tq5kwHwYDVR0j
BBgwFoAUEA1kHZJGgl218gC5FSN55rhmrpAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM2Npbks5blhMNjlmTjlrQkhZV3NFVFhRVkFrd3BwY2RESkFwZkY1ZXhL
dFEvMC8xMDBENjQxRDkyNDY4MjVEQjVGMjAwQjkxNTIzNzlFNkI4NjZBRTkwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzEwMEQ2NDFEOTI0NjgyNURC
NUYyMDBCOTE1MjM3OUU2Qjg2NkFFOTAuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNjaW5LOW5YTDY5Zk45a0JIWVdzRVRYUVZBa3dwcGNkREpBcGZGNWV4S3RRLzAv
MzEzNjM4MmUzMjMyMzcyZTMxMzEzOTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzYzNDM5MzEzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAKjjdzANBgkqhkiG9w0BAQsFAAOCAQEAZjdw
oLGvmmCvMEsCzMd/ucHA3nsSZWG4qNObcKGio0Iu5JiOJuLxpY/NYaRUduajT6h1
hJWhHO4+2ex/LSeXpMRzYEtw7c4CrM5d0AlXLnOaC1WRjVZmsKJyFltNO79gkRfG
bNwKO7uUzJ5K9DU74rmlJbtWiL7JCqr000q173cYdZ7pjYeFskusbi7LsmJhwR9W
yqa52hUwaD2eQqqvopkAh+2asHxD/VoIKXPrAHzBTIjRktxm1PT3jAXp+z7rdOg5
4b47mS17Ql2oXIPxyU/p+zaupzawH8RN2TLwfb6fLpRJ4lMtjiomkoDWxvIbiknN
IWjlvKwZS7keKfAY/w==
-----END CERTIFICATE-----
Generated at Mon Feb 17 02:15:32 2025 by rpki-client