Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/59jUntcWnN6uJLAnfRi2pJS4imMv17WzDeS7HUkDv8dy/0/3136382e3233322e38362e302f32332d3233203d3e20323634353632.roa
File:                     3136382e3233322e38362e302f32332d3233203d3e20323634353632.roa (raw, json)
Hash identifier:          f5uN1vhZjzbqYpfN6wQtHzfgtWfSpHpaEsunpVbUSqA=
Subject key identifier:   D1:45:49:E3:40:4F:70:AC:DA:9D:7D:60:57:5F:37:66:6F:49:CC:14
Certificate issuer:       /CN=B1FD414C315A51B2503A7D1B9FE2EADA575BB03E
Certificate serial:       728CF1F52986B173415DB17BBCD666450ED29078
Authority key identifier: B1:FD:41:4C:31:5A:51:B2:50:3A:7D:1B:9F:E2:EA:DA:57:5B:B0:3E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B1FD414C315A51B2503A7D1B9FE2EADA575BB03E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/59jUntcWnN6uJLAnfRi2pJS4imMv17WzDeS7HUkDv8dy/0/3136382e3233322e38362e302f32332d3233203d3e20323634353632.roa
Signing time:             Fri 05 May 2023 19:15:35 +0000
ROA not before:           Fri 05 May 2023 19:10:35 +0000
ROA not after:            Fri 03 May 2024 19:15:35 +0000
asID:                     264562
IP address blocks:        168.232.86.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:8c:f1:f5:29:86:b1:73:41:5d:b1:7b:bc:d6:66:45:0e:d2:90:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B1FD414C315A51B2503A7D1B9FE2EADA575BB03E
        Validity
            Not Before: May  5 19:10:35 2023 GMT
            Not After : May  3 19:15:35 2024 GMT
        Subject: CN=D14549E3404F70ACDA9D7D60575F37666F49CC14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:72:70:46:71:00:e9:05:97:01:d1:e0:68:6b:
                    7c:45:05:2b:44:81:19:be:c6:91:2a:d0:12:25:fd:
                    81:28:e9:1b:a1:1a:58:be:66:8d:9f:4b:c3:49:b0:
                    cd:51:2b:2f:30:8d:05:66:99:bd:3f:d1:ba:d6:8a:
                    2a:76:bc:c6:f2:a0:0f:10:cf:01:c6:5f:85:8d:d0:
                    c0:9f:f5:b2:55:1f:35:ce:57:50:08:15:44:1c:9a:
                    9b:97:00:73:53:70:9a:39:81:b2:14:60:44:f2:04:
                    30:d2:db:56:ca:90:92:c0:ea:73:3d:96:c1:30:ba:
                    66:27:0d:51:5a:50:3b:fd:93:b0:fb:5e:0a:cf:38:
                    1d:fa:94:23:c8:4a:76:05:47:e1:5d:4b:ee:4d:b3:
                    6f:08:09:bc:58:b4:76:69:9b:da:1d:86:11:ff:2e:
                    c1:9b:0f:92:58:3e:d2:67:58:22:44:67:73:f5:41:
                    d2:c0:7d:15:80:1a:5a:6b:1c:e3:1e:e7:d1:ce:be:
                    63:06:7a:a6:f4:9e:4b:3b:42:79:ef:d0:68:21:4d:
                    97:e1:db:2d:35:c1:9e:68:5c:31:10:a3:18:97:21:
                    df:bd:93:ea:fe:eb:90:4d:77:54:83:49:ea:48:a7:
                    4e:ed:54:c5:f3:b4:0e:8e:23:14:97:66:c8:68:94:
                    8c:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:45:49:E3:40:4F:70:AC:DA:9D:7D:60:57:5F:37:66:6F:49:CC:14
            X509v3 Authority Key Identifier:
                keyid:B1:FD:41:4C:31:5A:51:B2:50:3A:7D:1B:9F:E2:EA:DA:57:5B:B0:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/59jUntcWnN6uJLAnfRi2pJS4imMv17WzDeS7HUkDv8dy/0/B1FD414C315A51B2503A7D1B9FE2EADA575BB03E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B1FD414C315A51B2503A7D1B9FE2EADA575BB03E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/59jUntcWnN6uJLAnfRi2pJS4imMv17WzDeS7HUkDv8dy/0/3136382e3233322e38362e302f32332d3233203d3e20323634353632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.232.86.0/23

    Signature Algorithm: sha256WithRSAEncryption
         03:bc:94:99:cd:10:12:1a:68:60:b3:1d:e3:83:ae:93:8f:05:
         64:46:ed:f8:f1:cb:87:a4:b4:31:26:c0:a1:b1:0a:c9:95:41:
         bc:26:53:a8:d9:a8:92:bc:8f:a4:14:1c:88:51:e2:12:36:24:
         d8:4e:95:c3:56:d9:b9:6e:2c:65:aa:39:3a:37:27:ad:4d:ac:
         1e:96:ba:df:a2:bd:98:56:ae:24:60:5e:93:c5:18:38:fd:f8:
         23:89:19:79:b6:5e:7d:d7:cd:fe:e0:78:c1:ab:0d:22:b4:85:
         06:7f:d2:a3:2c:a4:3f:91:3c:99:5c:45:04:a4:95:a3:9b:58:
         10:a0:c8:af:0d:62:17:48:d0:e6:ce:4b:d3:23:61:4a:8f:44:
         b9:89:60:5b:cc:6f:dc:b1:2e:af:76:e2:60:f0:9b:78:43:1f:
         f6:39:ec:1e:34:6a:b1:cf:66:a7:95:e7:d8:3e:21:15:8a:5a:
         f0:83:8c:34:fd:0a:88:2a:b3:15:42:e3:87:f0:9d:51:69:a0:
         05:8e:f3:dc:e5:84:54:7b:1b:f3:0f:7e:2a:9c:16:22:f3:2c:
         ba:93:ec:f3:fe:d6:e8:ed:b7:21:e2:f6:a9:3e:20:9d:b2:3c:
         16:4d:f6:9b:1e:15:b6:bb:8f:be:d9:02:4b:eb:c8:26:3f:85:
         8c:84:60:37
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUcozx9SmGsXNBXbF7vNZmRQ7SkHgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjFGRDQxNEMzMTVBNTFCMjUwM0E3RDFCOUZFMkVBREE1
NzVCQjAzRTAeFw0yMzA1MDUxOTEwMzVaFw0yNDA1MDMxOTE1MzVaMDMxMTAvBgNV
BAMTKEQxNDU0OUUzNDA0RjcwQUNEQTlEN0Q2MDU3NUYzNzY2NkY0OUNDMTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9cnBGcQDpBZcB0eBoa3xFBStE
gRm+xpEq0BIl/YEo6RuhGli+Zo2fS8NJsM1RKy8wjQVmmb0/0brWiip2vMbyoA8Q
zwHGX4WN0MCf9bJVHzXOV1AIFUQcmpuXAHNTcJo5gbIUYETyBDDS21bKkJLA6nM9
lsEwumYnDVFaUDv9k7D7XgrPOB36lCPISnYFR+FdS+5Ns28ICbxYtHZpm9odhhH/
LsGbD5JYPtJnWCJEZ3P1QdLAfRWAGlprHOMe59HOvmMGeqb0nks7Qnnv0GghTZfh
2y01wZ5oXDEQoxiXId+9k+r+65BNd1SDSepIp07tVMXztA6OIxSXZsholIzbAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU0UVJ40BPcKzanX1gV183Zm9JzBQwHwYDVR0j
BBgwFoAUsf1BTDFaUbJQOn0bn+Lq2ldbsD4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNTlqVW50Y1duTjZ1SkxBbmZSaTJwSlM0aW1NdjE3V3pEZVM3SFVrRHY4
ZHkvMC9CMUZENDE0QzMxNUE1MUIyNTAzQTdEMUI5RkUyRUFEQTU3NUJCMDNFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0IxRkQ0MTRDMzE1QTUxQjI1
MDNBN0QxQjlGRTJFQURBNTc1QkIwM0UuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzU5alVudGNXbk42dUpMQW5mUmkycEpTNGltTXYxN1d6RGVTN0hVa0R2OGR5LzAv
MzEzNjM4MmUzMjMzMzIyZTM4MzYyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzMjM2
MzQzNTM2MzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAGo6FYwDQYJKoZIhvcNAQELBQADggEBAAO8lJnN
EBIaaGCzHeODrpOPBWRG7fjxy4ektDEmwKGxCsmVQbwmU6jZqJK8j6QUHIhR4hI2
JNhOlcNW2bluLGWqOTo3J61NrB6Wut+ivZhWriRgXpPFGDj9+COJGXm2Xn3Xzf7g
eMGrDSK0hQZ/0qMspD+RPJlcRQSklaObWBCgyK8NYhdI0ObOS9MjYUqPRLmJYFvM
b9yxLq924mDwm3hDH/Y57B40arHPZqeV59g+IRWKWvCDjDT9CogqsxVC44fwnVFp
oAWO89zlhFR7G/MPfiqcFiLzLLqT7PP+1ujttyHi9qk+IJ2yPBZN9pseFba7j77Z
AkvryCY/hYyEYDc=
-----END CERTIFICATE-----
Generated at Fri Mar 14 02:28:33 2025 by rpki-client