Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3wQZDhePMo15xSSUHtvhgP7P5d1Rc5NopbszNmu4xZ3E/0/3132382e3230312e3133392e302f32342d3234203d3e20323636363330.roa
File:                     3132382e3230312e3133392e302f32342d3234203d3e20323636363330.roa (raw, json)
Hash identifier:          mYfHPkMjgxDFAw6mbSYaUEm7DXZrv7XJGrPKhHlSvwo=
Subject key identifier:   7A:4B:8E:9A:01:F8:53:43:40:68:7C:1E:B7:56:78:34:62:37:D3:B6
Certificate issuer:       /CN=8FD98CD8D57D4B254EF5B2B6D7C46F6B0026369F
Certificate serial:       78C6CB5EC258A8D449B08093E85DB35D913D37D8
Authority key identifier: 8F:D9:8C:D8:D5:7D:4B:25:4E:F5:B2:B6:D7:C4:6F:6B:00:26:36:9F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8FD98CD8D57D4B254EF5B2B6D7C46F6B0026369F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3wQZDhePMo15xSSUHtvhgP7P5d1Rc5NopbszNmu4xZ3E/0/3132382e3230312e3133392e302f32342d3234203d3e20323636363330.roa
Signing time:             Thu 27 Jul 2023 23:03:53 +0000
ROA not before:           Thu 27 Jul 2023 22:58:53 +0000
ROA not after:            Thu 25 Jul 2024 23:03:53 +0000
asID:                     266630
IP address blocks:        128.201.139.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:c6:cb:5e:c2:58:a8:d4:49:b0:80:93:e8:5d:b3:5d:91:3d:37:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8FD98CD8D57D4B254EF5B2B6D7C46F6B0026369F
        Validity
            Not Before: Jul 27 22:58:53 2023 GMT
            Not After : Jul 25 23:03:53 2024 GMT
        Subject: CN=7A4B8E9A01F8534340687C1EB75678346237D3B6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:55:9d:be:e9:ca:e1:57:05:23:62:b1:23:37:
                    3b:03:97:6a:94:04:8d:7c:d1:6c:2c:36:4d:81:1c:
                    1b:22:db:ae:8f:f7:b0:70:2b:6b:4e:3c:0b:85:5c:
                    d5:56:62:1f:34:0b:0f:e2:e6:53:37:a5:e5:d2:66:
                    93:c1:ab:4c:b6:fe:e7:b0:46:77:f9:ba:35:bd:07:
                    6e:72:1e:5a:e5:d5:ab:65:6c:e0:f2:04:c5:ac:23:
                    f4:6c:73:54:e3:63:2f:ae:31:be:73:8c:05:d7:14:
                    d3:3d:73:2e:96:d8:df:ea:c1:bd:20:94:66:99:31:
                    db:9e:5b:bc:38:e0:4b:af:88:58:08:31:a4:ef:db:
                    2d:42:66:1b:05:a0:8c:e4:2b:e2:9a:90:b1:45:a8:
                    78:80:73:bf:75:76:06:7f:32:b8:cb:a0:f0:06:db:
                    bb:8f:d4:28:fb:05:33:77:2e:fa:5d:a1:6d:11:50:
                    1d:14:a3:d5:e6:62:f5:a3:78:9c:ac:28:ea:f1:31:
                    98:2b:35:40:29:18:6a:72:d6:a8:cb:b8:63:1d:ca:
                    e9:b9:e5:56:46:9c:f8:87:99:aa:d6:5c:cb:3a:77:
                    32:3b:b4:40:37:7f:c0:87:1a:a8:87:ca:3e:f8:dc:
                    80:35:ea:27:82:82:f8:43:3e:a1:5a:56:78:7f:76:
                    88:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:4B:8E:9A:01:F8:53:43:40:68:7C:1E:B7:56:78:34:62:37:D3:B6
            X509v3 Authority Key Identifier:
                keyid:8F:D9:8C:D8:D5:7D:4B:25:4E:F5:B2:B6:D7:C4:6F:6B:00:26:36:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3wQZDhePMo15xSSUHtvhgP7P5d1Rc5NopbszNmu4xZ3E/0/8FD98CD8D57D4B254EF5B2B6D7C46F6B0026369F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8FD98CD8D57D4B254EF5B2B6D7C46F6B0026369F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3wQZDhePMo15xSSUHtvhgP7P5d1Rc5NopbszNmu4xZ3E/0/3132382e3230312e3133392e302f32342d3234203d3e20323636363330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.201.139.0/24

    Signature Algorithm: sha256WithRSAEncryption
         04:0a:8d:2f:78:6d:ec:7b:c2:a5:55:77:01:09:82:3c:65:82:
         13:b5:8a:d9:81:3b:01:37:b3:e9:e2:99:fa:15:fa:2f:c7:2b:
         b7:c9:0f:2b:38:8b:9c:60:1c:00:7e:4c:d2:d6:b4:8b:9b:2f:
         b1:19:70:a3:2d:1e:20:4c:f3:d0:49:fe:6b:09:9d:8d:9a:5a:
         d2:67:7e:92:de:2f:b7:b2:5c:73:6b:5e:0f:8b:01:62:52:58:
         6d:65:76:6e:1f:dd:50:d2:f9:dc:fd:7f:bc:a3:64:85:4d:31:
         3f:0c:f9:65:b9:d3:9a:96:1a:e4:5d:09:81:9e:e4:5d:ed:49:
         9c:51:77:1f:a5:eb:09:35:cf:d7:1d:82:8a:78:d0:b4:52:9c:
         70:99:90:22:d3:d9:45:51:ac:7a:d0:60:a4:5b:82:6e:6c:45:
         ec:3e:45:4d:cd:ff:01:02:ed:8c:14:4f:7a:9d:f5:70:2d:28:
         d6:72:56:27:64:4d:e8:3e:ee:5d:33:1b:d2:fc:55:92:4c:b6:
         3b:61:99:4e:4e:95:ab:5b:e9:a8:87:c9:79:83:7c:f3:5d:df:
         dc:1e:1b:90:98:3f:22:0c:c6:33:db:0e:98:d9:9d:5e:fd:30:
         74:bd:7c:97:84:9e:2e:14:1a:65:1c:cb:ee:03:4c:f3:86:1f:
         ca:9c:2f:34
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUeMbLXsJYqNRJsICT6F2zXZE9N9gwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEZEOThDRDhENTdENEIyNTRFRjVCMkI2RDdDNDZGNkIw
MDI2MzY5RjAeFw0yMzA3MjcyMjU4NTNaFw0yNDA3MjUyMzAzNTNaMDMxMTAvBgNV
BAMTKDdBNEI4RTlBMDFGODUzNDM0MDY4N0MxRUI3NTY3ODM0NjIzN0QzQjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuVZ2+6crhVwUjYrEjNzsDl2qU
BI180WwsNk2BHBsi266P97BwK2tOPAuFXNVWYh80Cw/i5lM3peXSZpPBq0y2/uew
Rnf5ujW9B25yHlrl1atlbODyBMWsI/Rsc1TjYy+uMb5zjAXXFNM9cy6W2N/qwb0g
lGaZMdueW7w44EuviFgIMaTv2y1CZhsFoIzkK+KakLFFqHiAc791dgZ/MrjLoPAG
27uP1Cj7BTN3LvpdoW0RUB0Uo9XmYvWjeJysKOrxMZgrNUApGGpy1qjLuGMdyum5
5VZGnPiHmarWXMs6dzI7tEA3f8CHGqiHyj743IA16ieCgvhDPqFaVnh/doiLAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUekuOmgH4U0NAaHwet1Z4NGI307YwHwYDVR0j
BBgwFoAUj9mM2NV9SyVO9bK218RvawAmNp8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM3dRWkRoZVBNbzE1eFNTVUh0dmhnUDdQNWQxUmM1Tm9wYnN6Tm11NHha
M0UvMC84RkQ5OENEOEQ1N0Q0QjI1NEVGNUIyQjZEN0M0NkY2QjAwMjYzNjlGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzhGRDk4Q0Q4RDU3RDRCMjU0
RUY1QjJCNkQ3QzQ2RjZCMDAyNjM2OUYuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzN3UVpEaGVQTW8xNXhTU1VIdHZoZ1A3UDVkMVJjNU5vcGJzek5tdTR4WjNFLzAv
MzEzMjM4MmUzMjMwMzEyZTMxMzMzOTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzYzNjM2MzMzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAIDJizANBgkqhkiG9w0BAQsFAAOCAQEABAqN
L3ht7HvCpVV3AQmCPGWCE7WK2YE7ATez6eKZ+hX6L8crt8kPKziLnGAcAH5M0ta0
i5svsRlwoy0eIEzz0En+awmdjZpa0md+kt4vt7Jcc2teD4sBYlJYbWV2bh/dUNL5
3P1/vKNkhU0xPwz5ZbnTmpYa5F0JgZ7kXe1JnFF3H6XrCTXP1x2CinjQtFKccJmQ
ItPZRVGsetBgpFuCbmxF7D5FTc3/AQLtjBRPep31cC0o1nJWJ2RN6D7uXTMb0vxV
kky2O2GZTk6Vq1vpqIfJeYN8813f3B4bkJg/IgzGM9sOmNmdXv0wdL18l4SeLhQa
ZRzL7gNM84YfypwvNA==
-----END CERTIFICATE-----
Generated at Tue Feb 18 13:44:07 2025 by rpki-client