Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/57aLNec1j5Kc5Mw7u4MBiYA4AKUyjJ1UCcfzJRwCGChq/0/3134332e3133372e38382e302f32322d3234203d3e203532393830.roa
File:                     3134332e3133372e38382e302f32322d3234203d3e203532393830.roa (raw, json)
Hash identifier:          wwRKZ64kX+g6Am/PcDgepyDjxbRRoTLu08eVQhvSzK4=
Subject key identifier:   CA:2D:75:9A:14:DE:21:3C:F5:6E:7F:6D:35:DD:EE:03:6E:2A:C2:54
Certificate issuer:       /CN=D2D2D71D988525073935916EEBCA45B03AB78E14
Certificate serial:       46BBABC4A77913367B4C02C517077A5AB26376D1
Authority key identifier: D2:D2:D7:1D:98:85:25:07:39:35:91:6E:EB:CA:45:B0:3A:B7:8E:14
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D2D2D71D988525073935916EEBCA45B03AB78E14.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/57aLNec1j5Kc5Mw7u4MBiYA4AKUyjJ1UCcfzJRwCGChq/0/3134332e3133372e38382e302f32322d3234203d3e203532393830.roa
Signing time:             Mon 09 Jan 2023 18:00:02 +0000
ROA not before:           Mon 09 Jan 2023 17:55:02 +0000
ROA not after:            Tue 09 Jan 2024 18:00:02 +0000
asID:                     52980
IP address blocks:        143.137.88.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:bb:ab:c4:a7:79:13:36:7b:4c:02:c5:17:07:7a:5a:b2:63:76:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D2D2D71D988525073935916EEBCA45B03AB78E14
        Validity
            Not Before: Jan  9 17:55:02 2023 GMT
            Not After : Jan  9 18:00:02 2024 GMT
        Subject: CN=3082010A0282010100C61D71693F23A4FC22F7A6199EC909C34BBF74C8B7E9A6B6154C06F5C3CCC4269B4E90E6DF1E285022417BA74578A264D0A86D733A6A3CB6B7DFF61E6BC8C66A881604149E6D74114B94E649C6D926EEAC2F4BD8E9EFF7FEF7DDF20B096D4337EE94FAA7126130B17082505F8DDA7667C1D2402FEE33D6D919EE84358DB1F2BC3990911496FD6ED9C16C8E48C88F437CCC1F6866D8C436EADF99C6BD9529670292494AC0C97B0A76ABBB65EDCD181B29B76E37ADEB49E35A73A7A92D02C8EC6A8E2917A2DB5F1664DAEC5276357227E565F19F89A2ACF1EDEE85D5BC4E3C714B7CF42FE710D54C379CB77CA4FB72B90DC375BBA84D4354C3815BB44259FD42670203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:1d:71:69:3f:23:a4:fc:22:f7:a6:19:9e:c9:
                    09:c3:4b:bf:74:c8:b7:e9:a6:b6:15:4c:06:f5:c3:
                    cc:c4:26:9b:4e:90:e6:df:1e:28:50:22:41:7b:a7:
                    45:78:a2:64:d0:a8:6d:73:3a:6a:3c:b6:b7:df:f6:
                    1e:6b:c8:c6:6a:88:16:04:14:9e:6d:74:11:4b:94:
                    e6:49:c6:d9:26:ee:ac:2f:4b:d8:e9:ef:f7:fe:f7:
                    dd:f2:0b:09:6d:43:37:ee:94:fa:a7:12:61:30:b1:
                    70:82:50:5f:8d:da:76:67:c1:d2:40:2f:ee:33:d6:
                    d9:19:ee:84:35:8d:b1:f2:bc:39:90:91:14:96:fd:
                    6e:d9:c1:6c:8e:48:c8:8f:43:7c:cc:1f:68:66:d8:
                    c4:36:ea:df:99:c6:bd:95:29:67:02:92:49:4a:c0:
                    c9:7b:0a:76:ab:bb:65:ed:cd:18:1b:29:b7:6e:37:
                    ad:eb:49:e3:5a:73:a7:a9:2d:02:c8:ec:6a:8e:29:
                    17:a2:db:5f:16:64:da:ec:52:76:35:72:27:e5:65:
                    f1:9f:89:a2:ac:f1:ed:ee:85:d5:bc:4e:3c:71:4b:
                    7c:f4:2f:e7:10:d5:4c:37:9c:b7:7c:a4:fb:72:b9:
                    0d:c3:75:bb:a8:4d:43:54:c3:81:5b:b4:42:59:fd:
                    42:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:2D:75:9A:14:DE:21:3C:F5:6E:7F:6D:35:DD:EE:03:6E:2A:C2:54
            X509v3 Authority Key Identifier:
                keyid:D2:D2:D7:1D:98:85:25:07:39:35:91:6E:EB:CA:45:B0:3A:B7:8E:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/57aLNec1j5Kc5Mw7u4MBiYA4AKUyjJ1UCcfzJRwCGChq/0/D2D2D71D988525073935916EEBCA45B03AB78E14.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D2D2D71D988525073935916EEBCA45B03AB78E14.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/57aLNec1j5Kc5Mw7u4MBiYA4AKUyjJ1UCcfzJRwCGChq/0/3134332e3133372e38382e302f32322d3234203d3e203532393830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.137.88.0/22

    Signature Algorithm: sha256WithRSAEncryption
         63:89:e2:cb:55:04:93:98:8d:c6:70:78:09:ab:6e:75:69:20:
         a5:14:ff:d4:17:9b:da:64:7b:6b:dd:15:60:50:fa:0d:3d:72:
         c9:c6:ce:22:8f:a8:f5:1c:c2:3b:25:9a:51:dd:d1:6e:a8:fe:
         4c:0a:0a:e4:bb:71:9f:cf:a8:c0:03:75:1d:39:f4:37:6f:d9:
         93:f0:ef:0d:16:63:05:6a:0a:5c:fd:43:81:38:16:b5:7e:d1:
         84:81:c0:d9:20:51:74:32:6f:26:14:67:82:28:b4:b8:92:f3:
         1e:e8:a9:19:fe:a6:38:9b:ba:5b:c8:51:e5:aa:f2:bf:e0:a3:
         93:9d:81:21:da:ab:2f:d0:a4:08:4e:44:06:d3:79:74:f3:02:
         54:e0:bb:5a:2b:55:e2:9a:d2:5c:70:31:33:6b:1a:3d:26:f1:
         0a:e3:8a:7c:e5:69:a3:22:0f:71:f6:3b:19:e5:ee:20:99:e3:
         4e:d9:ec:51:1d:b7:61:9a:cd:60:68:ba:b8:54:50:19:20:53:
         4b:24:28:ee:f0:73:0a:8e:82:bf:09:1f:fe:cd:fd:c6:67:5a:
         8d:5d:95:a6:ee:89:12:65:33:7b:22:7d:6b:20:13:11:0d:5a:
         b5:28:d5:62:73:c2:fa:59:25:45:05:f2:00:1f:36:c9:05:b4:
         80:9f:6a:ee
-----BEGIN CERTIFICATE-----
MIIHQTCCBimgAwIBAgIURrurxKd5EzZ7TALFFwd6WrJjdtEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDJEMkQ3MUQ5ODg1MjUwNzM5MzU5MTZFRUJDQTQ1QjAz
QUI3OEUxNDAeFw0yMzAxMDkxNzU1MDJaFw0yNDAxMDkxODAwMDJaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQzYxRDcxNjkzRjIzQTRGQzIy
RjdBNjE5OUVDOTA5QzM0QkJGNzRDOEI3RTlBNkI2MTU0QzA2RjVDM0NDQzQyNjlC
NEU5MEU2REYxRTI4NTAyMjQxN0JBNzQ1NzhBMjY0RDBBODZENzMzQTZBM0NCNkI3
REZGNjFFNkJDOEM2NkE4ODE2MDQxNDlFNkQ3NDExNEI5NEU2NDlDNkQ5MjZFRUFD
MkY0QkQ4RTlFRkY3RkVGN0RERjIwQjA5NkQ0MzM3RUU5NEZBQTcxMjYxMzBCMTcw
ODI1MDVGOEREQTc2NjdDMUQyNDAyRkVFMzNENkQ5MTlFRTg0MzU4REIxRjJCQzM5
OTA5MTE0OTZGRDZFRDlDMTZDOEU0OEM4OEY0MzdDQ0MxRjY4NjZEOEM0MzZFQURG
OTlDNkJEOTUyOTY3MDI5MjQ5NEFDMEM5N0IwQTc2QUJCQjY1RURDRDE4MUIyOUI3
NkUzN0FERUI0OUUzNUE3M0E3QTkyRDAyQzhFQzZBOEUyOTE3QTJEQjVGMTY2NERB
RUM1Mjc2MzU3MjI3RTU2NUYxOUY4OUEyQUNGMUVERUU4NUQ1QkM0RTNDNzE0QjdD
RjQyRkU3MTBENTRDMzc5Q0I3N0NBNEZCNzJCOTBEQzM3NUJCQTg0RDQzNTRDMzgx
NUJCNDQyNTlGRDQyNjcwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAxh1xaT8jpPwi96YZnskJw0u/dMi36aa2FUwG9cPMxCabTpDm3x4o
UCJBe6dFeKJk0KhtczpqPLa33/Yea8jGaogWBBSebXQRS5TmScbZJu6sL0vY6e/3
/vfd8gsJbUM37pT6pxJhMLFwglBfjdp2Z8HSQC/uM9bZGe6ENY2x8rw5kJEUlv1u
2cFsjkjIj0N8zB9oZtjENurfmca9lSlnApJJSsDJewp2q7tl7c0YGym3bjet60nj
WnOnqS0CyOxqjikXottfFmTa7FJ2NXIn5WXxn4mirPHt7oXVvE48cUt89C/nENVM
N5y3fKT7crkNw3W7qE1DVMOBW7RCWf1CZwIDAQABo4ICTzCCAkswHQYDVR0OBBYE
FMotdZoU3iE89W5/bTXd7gNuKsJUMB8GA1UdIwQYMBaAFNLS1x2YhSUHOTWRbuvK
RbA6t44UMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzU3YUxOZWMxajVLYzVN
dzd1NE1CaVlBNEFLVXlqSjFVQ2NmekpSd0NHQ2hxLzAvRDJEMkQ3MUQ5ODg1MjUw
NzM5MzU5MTZFRUJDQTQ1QjAzQUI3OEUxNC5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC9EMkQyRDcxRDk4ODUyNTA3MzkzNTkxNkVFQkNBNDVCMDNBQjc4
RTE0LmNlcjCBrAYIKwYBBQUHAQsEgZ8wgZwwgZkGCCsGAQUFBzALhoGMcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby81N2FMTmVjMWo1S2M1TXc3dTRN
QmlZQTRBS1V5akoxVUNjZnpKUndDR0NocS8wLzMxMzQzMzJlMzEzMzM3MmUzODM4
MmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzUzMjM5MzgzMC5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAo+J
WDANBgkqhkiG9w0BAQsFAAOCAQEAY4niy1UEk5iNxnB4CatudWkgpRT/1Beb2mR7
a90VYFD6DT1yycbOIo+o9RzCOyWaUd3Rbqj+TAoK5Ltxn8+owAN1HTn0N2/Zk/Dv
DRZjBWoKXP1DgTgWtX7RhIHA2SBRdDJvJhRngii0uJLzHuipGf6mOJu6W8hR5ary
v+Cjk52BIdqrL9CkCE5EBtN5dPMCVOC7WitV4prSXHAxM2saPSbxCuOKfOVpoyIP
cfY7GeXuIJnjTtnsUR23YZrNYGi6uFRQGSBTSyQo7vBzCo6Cvwkf/s39xmdajV2V
pu6JEmUzeyJ9ayATEQ1atSjVYnPC+lklRQXyAB82yQW0gJ9q7g==
-----END CERTIFICATE-----
Generated at Fri Mar 14 01:26:15 2025 by rpki-client