Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3ryRE7VRKo2XYqkYuhiTvgzBHVL58xgofovLw6b8DdXe/0/3133312e3139362e3138362e302f32342d3234203d3e20323635393330.roa
File:                     3133312e3139362e3138362e302f32342d3234203d3e20323635393330.roa (raw, json)
Hash identifier:          CDhOz9eKyHFtsWakv37e2KUd4tMVP3oFZ2DKsJrHnB8=
Subject key identifier:   A7:D7:9D:32:D4:55:CF:FA:DA:5E:28:CA:F4:6D:4A:48:43:C3:A0:0E
Certificate issuer:       /CN=3233E2EDC348AC978221BFAE80C08A1A69277683
Certificate serial:       0E89AF385A87C7B2F3B08DB6E283B4E93948AB6D
Authority key identifier: 32:33:E2:ED:C3:48:AC:97:82:21:BF:AE:80:C0:8A:1A:69:27:76:83
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3233E2EDC348AC978221BFAE80C08A1A69277683.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3ryRE7VRKo2XYqkYuhiTvgzBHVL58xgofovLw6b8DdXe/0/3133312e3139362e3138362e302f32342d3234203d3e20323635393330.roa
Signing time:             Mon 06 Mar 2023 19:07:20 +0000
ROA not before:           Mon 06 Mar 2023 19:02:20 +0000
ROA not after:            Mon 04 Mar 2024 19:07:20 +0000
asID:                     265930
IP address blocks:        131.196.186.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:89:af:38:5a:87:c7:b2:f3:b0:8d:b6:e2:83:b4:e9:39:48:ab:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3233E2EDC348AC978221BFAE80C08A1A69277683
        Validity
            Not Before: Mar  6 19:02:20 2023 GMT
            Not After : Mar  4 19:07:20 2024 GMT
        Subject: CN=A7D79D32D455CFFADA5E28CAF46D4A4843C3A00E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:95:f7:d7:ac:05:18:d9:f3:c7:bc:d8:b3:cf:
                    ac:74:92:cf:16:fa:0f:d8:f5:eb:c9:b6:e4:5e:8b:
                    08:5f:2f:15:03:50:ba:4a:c2:7e:0b:f5:4a:29:d4:
                    0e:54:56:79:76:da:33:48:5e:52:06:50:e2:27:5a:
                    4f:ba:59:74:45:ef:2c:17:89:2f:4d:0e:44:54:c8:
                    43:f0:cb:63:6c:20:54:ce:4a:b8:d8:95:05:21:73:
                    f8:5d:73:93:2f:de:d4:fd:e8:ab:4e:0d:be:d4:a4:
                    c9:6f:c5:53:43:ec:8e:65:ec:e1:9d:48:ef:c6:d4:
                    4f:1a:9e:7c:8d:7a:fa:c1:e8:c8:93:74:cf:59:c9:
                    48:a6:2d:de:b3:08:28:57:ed:af:0e:9f:ff:1d:c6:
                    a2:83:eb:26:8c:c2:58:a8:ad:80:82:c8:ed:cb:1a:
                    4c:37:b2:fd:86:8a:79:b5:8a:56:ed:36:39:c1:9f:
                    da:74:50:09:31:de:63:43:f9:e7:db:23:0d:5e:16:
                    bb:f6:90:18:05:b5:0a:96:af:12:00:5a:46:3a:45:
                    2a:ef:b5:4e:33:01:14:7a:94:04:53:ea:1a:5d:d4:
                    c7:4e:c2:3b:97:cd:76:65:5d:78:c4:d7:85:9e:52:
                    66:4b:d1:65:2a:54:c4:5d:84:5a:0c:15:8e:0d:33:
                    bf:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:D7:9D:32:D4:55:CF:FA:DA:5E:28:CA:F4:6D:4A:48:43:C3:A0:0E
            X509v3 Authority Key Identifier:
                keyid:32:33:E2:ED:C3:48:AC:97:82:21:BF:AE:80:C0:8A:1A:69:27:76:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3ryRE7VRKo2XYqkYuhiTvgzBHVL58xgofovLw6b8DdXe/0/3233E2EDC348AC978221BFAE80C08A1A69277683.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3233E2EDC348AC978221BFAE80C08A1A69277683.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3ryRE7VRKo2XYqkYuhiTvgzBHVL58xgofovLw6b8DdXe/0/3133312e3139362e3138362e302f32342d3234203d3e20323635393330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.196.186.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1d:95:a3:8f:f2:56:38:4d:18:dc:2b:25:62:37:cf:2a:b3:ec:
         0d:67:45:d3:18:86:65:80:f0:5a:5c:ad:78:c2:c4:6d:dd:26:
         12:4e:60:e2:2f:f2:20:63:77:70:a6:16:97:98:49:e0:3f:16:
         fe:86:c1:8c:ce:aa:9b:48:7c:95:eb:52:1d:47:b2:a8:53:ed:
         73:fd:6b:28:29:ef:43:a4:58:c8:5f:0d:a3:93:d1:4f:5a:b1:
         c6:8b:d7:99:d8:4a:8b:af:7e:08:bf:70:9a:b0:19:61:21:bc:
         b0:30:52:cf:be:ec:0b:55:ab:41:79:9c:78:58:e2:e3:7b:d5:
         fb:e1:50:cf:17:36:74:82:39:47:af:e1:be:ce:60:27:f4:43:
         d0:1b:d0:4b:49:dc:ed:09:46:1c:ad:75:19:41:05:fa:63:52:
         d2:40:17:4f:56:f1:a1:98:1f:1e:ea:17:bc:fb:b0:f1:b2:8a:
         97:b9:86:2f:23:8c:83:25:91:20:0c:dc:5c:97:29:94:43:ce:
         7f:d8:e2:b1:3d:6e:2a:6b:5d:17:ff:9b:1b:cd:92:7d:f7:93:
         89:96:41:71:d0:fd:d5:fd:fe:8f:f1:7d:45:9d:64:6e:77:ff:
         63:9f:b0:f7:65:53:2c:a7:29:2b:b9:3b:5c:2a:e4:f6:43:d1:
         26:2e:30:b5
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUDomvOFqHx7LzsI224oO06TlIq20wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzIzM0UyRURDMzQ4QUM5NzgyMjFCRkFFODBDMDhBMUE2
OTI3NzY4MzAeFw0yMzAzMDYxOTAyMjBaFw0yNDAzMDQxOTA3MjBaMDMxMTAvBgNV
BAMTKEE3RDc5RDMyRDQ1NUNGRkFEQTVFMjhDQUY0NkQ0QTQ4NDNDM0EwMEUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJlffXrAUY2fPHvNizz6x0ks8W
+g/Y9evJtuReiwhfLxUDULpKwn4L9Uop1A5UVnl22jNIXlIGUOInWk+6WXRF7ywX
iS9NDkRUyEPwy2NsIFTOSrjYlQUhc/hdc5Mv3tT96KtODb7UpMlvxVND7I5l7OGd
SO/G1E8annyNevrB6MiTdM9ZyUimLd6zCChX7a8On/8dxqKD6yaMwliorYCCyO3L
Gkw3sv2Ginm1ilbtNjnBn9p0UAkx3mND+efbIw1eFrv2kBgFtQqWrxIAWkY6RSrv
tU4zARR6lART6hpd1MdOwjuXzXZlXXjE14WeUmZL0WUqVMRdhFoMFY4NM7+rAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUp9edMtRVz/raXijK9G1KSEPDoA4wHwYDVR0j
BBgwFoAUMjPi7cNIrJeCIb+ugMCKGmkndoMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM3J5UkU3VlJLbzJYWXFrWXVoaVR2Z3pCSFZMNTh4Z29mb3ZMdzZiOERk
WGUvMC8zMjMzRTJFREMzNDhBQzk3ODIyMUJGQUU4MEMwOEExQTY5Mjc3NjgzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzMyMzNFMkVEQzM0OEFDOTc4
MjIxQkZBRTgwQzA4QTFBNjkyNzc2ODMuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNyeVJFN1ZSS28yWFlxa1l1aGlUdmd6QkhWTDU4eGdvZm92THc2YjhEZFhlLzAv
MzEzMzMxMmUzMTM5MzYyZTMxMzgzNjJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzYzNTM5MzMzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAIPEujANBgkqhkiG9w0BAQsFAAOCAQEAHZWj
j/JWOE0Y3CslYjfPKrPsDWdF0xiGZYDwWlyteMLEbd0mEk5g4i/yIGN3cKYWl5hJ
4D8W/obBjM6qm0h8letSHUeyqFPtc/1rKCnvQ6RYyF8No5PRT1qxxovXmdhKi69+
CL9wmrAZYSG8sDBSz77sC1WrQXmceFji43vV++FQzxc2dII5R6/hvs5gJ/RD0BvQ
S0nc7QlGHK11GUEF+mNS0kAXT1bxoZgfHuoXvPuw8bKKl7mGLyOMgyWRIAzcXJcp
lEPOf9jisT1uKmtdF/+bG82SffeTiZZBcdD91f3+j/F9RZ1kbnf/Y5+w92VTLKcp
K7k7XCrk9kPRJi4wtQ==
-----END CERTIFICATE-----
Generated at Tue Feb 18 13:27:28 2025 by rpki-client