Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4erqKUcKg9JvxMspUgu9JjdkfErNhpq1KDNg68PJtHg3/1/3136342e3136332e3232302e302f32332d3233203d3e20323637343535.roa
File:                     3136342e3136332e3232302e302f32332d3233203d3e20323637343535.roa (raw, json)
Hash identifier:          plGm1uNGRu8aOTDF8zrNFZ0j75/NKBOWrpI64P4iuL4=
Subject key identifier:   BB:B0:6E:89:1C:0D:E0:E3:4A:AA:B6:C3:99:99:0B:A4:72:1B:DA:C9
Certificate issuer:       /CN=B93B24DDC8B540595BCE75FEC923721BE80FEA1D
Certificate serial:       2AE06C6B300773468B6FAD75881681E33FF9892D
Authority key identifier: B9:3B:24:DD:C8:B5:40:59:5B:CE:75:FE:C9:23:72:1B:E8:0F:EA:1D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B93B24DDC8B540595BCE75FEC923721BE80FEA1D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4erqKUcKg9JvxMspUgu9JjdkfErNhpq1KDNg68PJtHg3/1/3136342e3136332e3232302e302f32332d3233203d3e20323637343535.roa
Signing time:             Thu 06 Mar 2025 03:13:47 +0000
ROA not before:           Thu 06 Mar 2025 03:08:47 +0000
ROA not after:            Thu 05 Mar 2026 03:13:47 +0000
asID:                     267455
IP address blocks:        164.163.220.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:e0:6c:6b:30:07:73:46:8b:6f:ad:75:88:16:81:e3:3f:f9:89:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B93B24DDC8B540595BCE75FEC923721BE80FEA1D
        Validity
            Not Before: Mar  6 03:08:47 2025 GMT
            Not After : Mar  5 03:13:47 2026 GMT
        Subject: CN=BBB06E891C0DE0E34AAAB6C399990BA4721BDAC9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:63:43:da:4c:b3:69:fc:50:01:c5:0a:a1:f4:
                    70:f5:eb:28:4c:16:15:1a:cb:2e:d9:01:26:fc:ca:
                    c9:89:ee:96:9a:a3:b0:0e:cf:fe:3f:17:18:a8:f9:
                    ae:14:08:d7:90:23:aa:85:de:ab:35:56:a2:06:92:
                    13:40:0d:42:93:e5:dc:e8:e6:66:12:4f:7b:7c:49:
                    46:51:6e:6e:47:8d:be:de:81:3c:b1:fc:8a:a0:9c:
                    ec:bd:07:5d:30:4f:a5:4a:3f:91:54:0c:4c:7e:49:
                    78:6f:5b:2e:2c:04:89:40:31:f2:4f:9a:57:9b:d2:
                    de:65:ca:97:23:74:1a:2d:5b:56:4f:01:4c:af:e7:
                    b4:f0:8d:f9:b4:db:cd:3e:f6:91:61:da:55:fd:c9:
                    f7:53:ad:ac:9d:52:5d:84:86:a0:04:b3:90:e5:58:
                    3d:60:e1:bb:a7:b1:e4:3a:1b:b8:b8:7a:9e:f1:7c:
                    38:ad:fb:f9:21:95:09:b8:ae:3a:19:a8:93:da:8e:
                    8a:a0:fd:88:cc:4e:bf:ae:2f:46:69:d8:55:4f:c2:
                    ce:3c:1d:11:d3:f0:bf:3b:03:ee:cb:ad:9f:09:24:
                    96:34:b9:24:a6:04:f1:bc:29:15:fa:9d:0a:a2:db:
                    de:39:9b:b6:01:23:55:9c:bc:3f:8b:bf:55:4d:6d:
                    03:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:B0:6E:89:1C:0D:E0:E3:4A:AA:B6:C3:99:99:0B:A4:72:1B:DA:C9
            X509v3 Authority Key Identifier:
                keyid:B9:3B:24:DD:C8:B5:40:59:5B:CE:75:FE:C9:23:72:1B:E8:0F:EA:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4erqKUcKg9JvxMspUgu9JjdkfErNhpq1KDNg68PJtHg3/1/B93B24DDC8B540595BCE75FEC923721BE80FEA1D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B93B24DDC8B540595BCE75FEC923721BE80FEA1D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4erqKUcKg9JvxMspUgu9JjdkfErNhpq1KDNg68PJtHg3/1/3136342e3136332e3232302e302f32332d3233203d3e20323637343535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.163.220.0/23

    Signature Algorithm: sha256WithRSAEncryption
         54:50:f0:73:8a:36:af:43:45:e5:70:bc:e2:d7:4e:e1:3f:53:
         c7:25:93:c5:e0:77:86:3b:4f:95:da:98:8e:f5:d5:c8:71:f3:
         f8:40:a2:fc:a1:c7:85:e7:d6:fc:3e:48:c8:2f:91:e0:35:c3:
         6e:95:5e:2c:6c:34:e7:62:3f:bb:e5:9a:bd:53:2e:36:41:b0:
         ff:98:ac:5d:53:98:f9:bf:8c:38:c5:27:94:6c:cf:56:f4:b1:
         e4:9f:d5:2f:26:c2:17:74:e0:7a:36:14:27:e1:0d:68:62:a5:
         e7:46:77:e2:51:ca:c5:c3:c6:8c:5f:50:33:fd:4a:9d:5f:f9:
         3a:c2:0d:40:a1:eb:03:af:2b:fc:85:b3:fc:0c:34:cb:04:3a:
         24:eb:44:bd:dd:bb:f0:8a:86:e5:95:9e:b8:c5:d1:f6:2a:72:
         55:22:15:b8:db:77:22:c0:84:bb:31:28:9d:e5:85:2d:fc:75:
         e2:ae:e0:94:ab:22:00:49:91:fb:1b:d9:e1:df:8d:d5:ec:a2:
         cc:0c:c5:64:20:e2:47:6c:70:32:9d:aa:82:5e:21:a4:8b:8d:
         6d:a0:d5:8a:d7:45:16:75:b8:94:b9:cb:b1:84:4a:6f:b3:20:
         36:19:4c:e4:75:85:f0:22:33:e1:03:40:61:bc:29:1e:e7:90:
         99:48:9d:fb
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUKuBsazAHc0aLb611iBaB4z/5iS0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjkzQjI0RERDOEI1NDA1OTVCQ0U3NUZFQzkyMzcyMUJF
ODBGRUExRDAeFw0yNTAzMDYwMzA4NDdaFw0yNjAzMDUwMzEzNDdaMDMxMTAvBgNV
BAMTKEJCQjA2RTg5MUMwREUwRTM0QUFBQjZDMzk5OTkwQkE0NzIxQkRBQzkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+Y0PaTLNp/FABxQqh9HD16yhM
FhUayy7ZASb8ysmJ7paao7AOz/4/Fxio+a4UCNeQI6qF3qs1VqIGkhNADUKT5dzo
5mYST3t8SUZRbm5Hjb7egTyx/IqgnOy9B10wT6VKP5FUDEx+SXhvWy4sBIlAMfJP
mleb0t5lypcjdBotW1ZPAUyv57Twjfm0280+9pFh2lX9yfdTraydUl2EhqAEs5Dl
WD1g4bunseQ6G7i4ep7xfDit+/khlQm4rjoZqJPajoqg/YjMTr+uL0Zp2FVPws48
HRHT8L87A+7LrZ8JJJY0uSSmBPG8KRX6nQqi2945m7YBI1WcvD+Lv1VNbQNDAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUu7BuiRwN4ONKqrbDmZkLpHIb2skwHwYDVR0j
BBgwFoAUuTsk3ci1QFlbznX+ySNyG+gP6h0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNGVycUtVY0tnOUp2eE1zcFVndTlKamRrZkVyTmhwcTFLRE5nNjhQSnRI
ZzMvMS9COTNCMjREREM4QjU0MDU5NUJDRTc1RkVDOTIzNzIxQkU4MEZFQTFELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0I5M0IyNEREQzhCNTQwNTk1
QkNFNzVGRUM5MjM3MjFCRTgwRkVBMUQuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRlcnFLVWNLZzlKdnhNc3BVZ3U5Smpka2ZFck5ocHExS0ROZzY4UEp0SGczLzEv
MzEzNjM0MmUzMTM2MzMyZTMyMzIzMDJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDMy
MzYzNzM0MzUzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAaSj3DANBgkqhkiG9w0BAQsFAAOCAQEAVFDw
c4o2r0NF5XC84tdO4T9TxyWTxeB3hjtPldqYjvXVyHHz+ECi/KHHhefW/D5IyC+R
4DXDbpVeLGw052I/u+WavVMuNkGw/5isXVOY+b+MOMUnlGzPVvSx5J/VLybCF3Tg
ejYUJ+ENaGKl50Z34lHKxcPGjF9QM/1KnV/5OsINQKHrA68r/IWz/Aw0ywQ6JOtE
vd278IqG5ZWeuMXR9ipyVSIVuNt3IsCEuzEoneWFLfx14q7glKsiAEmR+xvZ4d+N
1eyizAzFZCDiR2xwMp2qgl4hpIuNbaDVitdFFnW4lLnLsYRKb7MgNhlM5HWF8CIz
4QNAYbwpHueQmUid+w==
-----END CERTIFICATE-----
Generated at Sun Apr 6 08:34:26 2025 by rpki-client