Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/59jUntcWnN6uJLAnfRi2pJS4imMv17WzDeS7HUkDv8dy/0/3136382e3233322e38342e302f32332d3233203d3e20323634353632.roa
File:                     3136382e3233322e38342e302f32332d3233203d3e20323634353632.roa (raw, json)
Hash identifier:          AVrSmeLA6hOI9SbZuxpRtLKLdaxVaZegEqFqdWAW694=
Subject key identifier:   86:BE:04:02:2F:FC:7F:94:C2:6F:6F:88:C1:26:40:6F:68:DC:BD:41
Certificate issuer:       /CN=B1FD414C315A51B2503A7D1B9FE2EADA575BB03E
Certificate serial:       7384AFCBF67C754BD85F94FEAD0003F1793FD661
Authority key identifier: B1:FD:41:4C:31:5A:51:B2:50:3A:7D:1B:9F:E2:EA:DA:57:5B:B0:3E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B1FD414C315A51B2503A7D1B9FE2EADA575BB03E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/59jUntcWnN6uJLAnfRi2pJS4imMv17WzDeS7HUkDv8dy/0/3136382e3233322e38342e302f32332d3233203d3e20323634353632.roa
Signing time:             Fri 05 May 2023 19:15:29 +0000
ROA not before:           Fri 05 May 2023 19:10:29 +0000
ROA not after:            Fri 03 May 2024 19:15:29 +0000
asID:                     264562
IP address blocks:        168.232.84.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:84:af:cb:f6:7c:75:4b:d8:5f:94:fe:ad:00:03:f1:79:3f:d6:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B1FD414C315A51B2503A7D1B9FE2EADA575BB03E
        Validity
            Not Before: May  5 19:10:29 2023 GMT
            Not After : May  3 19:15:29 2024 GMT
        Subject: CN=86BE04022FFC7F94C26F6F88C126406F68DCBD41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:13:28:9a:35:e5:f6:85:e5:ff:44:2d:bc:4d:
                    86:a8:85:51:87:3b:44:48:07:8a:13:20:37:37:ce:
                    a0:f9:aa:cf:b9:9d:55:55:cf:42:a5:45:7f:00:de:
                    0a:66:a7:aa:77:db:8d:cd:a6:60:44:b2:2a:f7:0b:
                    77:20:85:5a:a4:15:d7:71:f2:2a:82:7b:83:e7:bd:
                    2e:a4:0e:f4:c2:df:35:a5:f5:d5:30:d6:b6:27:f8:
                    d3:35:ae:81:17:45:29:a3:b9:00:e7:ef:5a:ee:a3:
                    aa:34:55:23:44:d2:21:eb:6f:b3:da:50:89:2f:c5:
                    80:de:d0:f6:0e:60:7b:c0:d7:e7:6a:7b:7f:b4:18:
                    2f:55:ce:1a:99:5f:3e:fd:ec:d7:a3:68:b1:b4:84:
                    73:ca:eb:42:04:b2:69:fb:68:f2:d0:bd:fb:b2:5c:
                    9d:b7:7c:55:72:22:66:16:62:58:24:49:e7:1e:3c:
                    44:04:c0:13:1b:b2:17:c8:2c:f1:cc:b0:0b:c3:19:
                    c3:8b:75:69:05:f3:7b:7e:83:b6:e5:66:dd:b9:47:
                    bb:b2:7d:b4:f7:43:b2:24:b5:98:61:b6:1c:6f:bb:
                    2f:03:17:b1:c6:e4:b7:49:6e:fd:43:d5:c9:ba:3b:
                    08:a3:cb:61:bb:5b:28:a1:e1:17:f3:27:c7:5b:6d:
                    40:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:BE:04:02:2F:FC:7F:94:C2:6F:6F:88:C1:26:40:6F:68:DC:BD:41
            X509v3 Authority Key Identifier:
                keyid:B1:FD:41:4C:31:5A:51:B2:50:3A:7D:1B:9F:E2:EA:DA:57:5B:B0:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/59jUntcWnN6uJLAnfRi2pJS4imMv17WzDeS7HUkDv8dy/0/B1FD414C315A51B2503A7D1B9FE2EADA575BB03E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B1FD414C315A51B2503A7D1B9FE2EADA575BB03E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/59jUntcWnN6uJLAnfRi2pJS4imMv17WzDeS7HUkDv8dy/0/3136382e3233322e38342e302f32332d3233203d3e20323634353632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.232.84.0/23

    Signature Algorithm: sha256WithRSAEncryption
         61:8e:48:d9:73:3a:72:7f:c4:8b:0f:4f:4f:e2:b9:78:2b:e1:
         07:94:17:8b:3a:b8:48:ae:7c:05:ca:9f:91:67:3b:ab:8e:a0:
         41:aa:1e:92:2b:0a:be:5b:5b:6d:bc:4c:ed:ea:d3:99:de:2c:
         40:d7:73:4f:37:9a:2d:9f:ae:df:6b:78:dc:d4:45:b6:2b:a2:
         99:0a:8c:68:97:d3:2e:5b:c8:8d:6e:99:c6:b3:7e:2b:38:a5:
         79:2d:30:fd:b8:1f:17:9d:e4:b1:48:6b:55:79:d4:a5:1e:c0:
         8a:62:2f:d4:e6:e7:dc:91:8d:f5:5c:a4:c7:ea:e6:65:8a:42:
         93:f0:e6:7d:6b:4b:c6:c2:57:16:65:7a:6a:44:9e:f1:e8:51:
         4a:83:fb:3f:72:d8:d8:92:6d:b2:ce:b8:55:ed:86:01:50:ea:
         7a:52:10:93:1d:a5:61:8f:5d:0e:dd:80:3e:99:86:7c:50:8c:
         71:4f:29:8b:72:1b:22:1f:5b:33:b4:f4:cd:47:3f:31:8d:a4:
         d0:37:a9:74:94:67:71:18:6a:60:86:a0:c9:5e:af:7b:e2:7d:
         35:cd:2b:a4:61:8b:98:61:bc:6e:0e:82:d1:19:05:73:17:fc:
         09:9a:f2:a1:7a:94:e7:dc:0d:ac:8f:84:94:e5:32:ef:ad:38:
         1d:64:28:58
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUc4Svy/Z8dUvYX5T+rQAD8Xk/1mEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjFGRDQxNEMzMTVBNTFCMjUwM0E3RDFCOUZFMkVBREE1
NzVCQjAzRTAeFw0yMzA1MDUxOTEwMjlaFw0yNDA1MDMxOTE1MjlaMDMxMTAvBgNV
BAMTKDg2QkUwNDAyMkZGQzdGOTRDMjZGNkY4OEMxMjY0MDZGNjhEQ0JENDEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBEyiaNeX2heX/RC28TYaohVGH
O0RIB4oTIDc3zqD5qs+5nVVVz0KlRX8A3gpmp6p3243NpmBEsir3C3cghVqkFddx
8iqCe4PnvS6kDvTC3zWl9dUw1rYn+NM1roEXRSmjuQDn71ruo6o0VSNE0iHrb7Pa
UIkvxYDe0PYOYHvA1+dqe3+0GC9VzhqZXz797NejaLG0hHPK60IEsmn7aPLQvfuy
XJ23fFVyImYWYlgkSecePEQEwBMbshfILPHMsAvDGcOLdWkF83t+g7blZt25R7uy
fbT3Q7IktZhhthxvuy8DF7HG5LdJbv1D1cm6Owijy2G7Wyih4RfzJ8dbbUAFAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUhr4EAi/8f5TCb2+IwSZAb2jcvUEwHwYDVR0j
BBgwFoAUsf1BTDFaUbJQOn0bn+Lq2ldbsD4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNTlqVW50Y1duTjZ1SkxBbmZSaTJwSlM0aW1NdjE3V3pEZVM3SFVrRHY4
ZHkvMC9CMUZENDE0QzMxNUE1MUIyNTAzQTdEMUI5RkUyRUFEQTU3NUJCMDNFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0IxRkQ0MTRDMzE1QTUxQjI1
MDNBN0QxQjlGRTJFQURBNTc1QkIwM0UuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzU5alVudGNXbk42dUpMQW5mUmkycEpTNGltTXYxN1d6RGVTN0hVa0R2OGR5LzAv
MzEzNjM4MmUzMjMzMzIyZTM4MzQyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzMjM2
MzQzNTM2MzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAGo6FQwDQYJKoZIhvcNAQELBQADggEBAGGOSNlz
OnJ/xIsPT0/iuXgr4QeUF4s6uEiufAXKn5FnO6uOoEGqHpIrCr5bW228TO3q05ne
LEDXc083mi2frt9reNzURbYropkKjGiX0y5byI1umcazfis4pXktMP24Hxed5LFI
a1V51KUewIpiL9Tm59yRjfVcpMfq5mWKQpPw5n1rS8bCVxZlempEnvHoUUqD+z9y
2NiSbbLOuFXthgFQ6npSEJMdpWGPXQ7dgD6ZhnxQjHFPKYtyGyIfWzO09M1HPzGN
pNA3qXSUZ3EYamCGoMler3vifTXNK6Rhi5hhvG4OgtEZBXMX/Ama8qF6lOfcDayP
hJTlMu+tOB1kKFg=
-----END CERTIFICATE-----
Generated at Tue Feb 18 13:31:11 2025 by rpki-client