Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/67TVgfR8GUHbm1jiVe7Aw2Um9YMKqS4pGxLMsGPEhqbP/0/3137302e3135302e38322e302f32332d3233203d3e20323633323936.roa
File:                     3137302e3135302e38322e302f32332d3233203d3e20323633323936.roa (raw, json)
Hash identifier:          aZjykh4xgtDjiF5ZaNtfqyugxZ6P6HiVQ8zIejI9NXU=
Subject key identifier:   FD:5B:23:B0:F0:8E:C9:60:33:6B:4E:18:87:5C:06:50:97:D3:E4:4F
Certificate issuer:       /CN=E1F3A29C8CB7951F5FEA712A260A925D0861BB06
Certificate serial:       4AED15E6245D3CED5E9C502E9D5769069115DFB2
Authority key identifier: E1:F3:A2:9C:8C:B7:95:1F:5F:EA:71:2A:26:0A:92:5D:08:61:BB:06
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E1F3A29C8CB7951F5FEA712A260A925D0861BB06.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/67TVgfR8GUHbm1jiVe7Aw2Um9YMKqS4pGxLMsGPEhqbP/0/3137302e3135302e38322e302f32332d3233203d3e20323633323936.roa
Signing time:             Tue 18 Jan 2022 19:22:11 +0000
ROA not before:           Tue 18 Jan 2022 19:17:11 +0000
ROA not after:            Tue 17 Jan 2023 19:22:11 +0000
asID:                     263296
IP address blocks:        170.150.82.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:ed:15:e6:24:5d:3c:ed:5e:9c:50:2e:9d:57:69:06:91:15:df:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E1F3A29C8CB7951F5FEA712A260A925D0861BB06
        Validity
            Not Before: Jan 18 19:17:11 2022 GMT
            Not After : Jan 17 19:22:11 2023 GMT
        Subject: CN=FD5B23B0F08EC960336B4E18875C065097D3E44F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:1f:bf:c8:47:a8:07:5e:ff:8d:b3:f4:0d:5c:
                    13:eb:db:a9:08:e0:09:1c:d1:7d:dc:f6:74:67:eb:
                    ef:b8:21:36:21:45:a3:9c:a5:5d:78:fe:1c:ea:77:
                    5c:81:de:4f:ec:ca:e5:23:64:e2:20:ea:4b:8e:f6:
                    54:a9:b9:bb:f8:42:78:b3:90:be:d2:96:bb:e6:03:
                    b3:9a:06:ec:1e:30:41:8b:47:28:90:db:d8:7b:be:
                    aa:ce:cb:24:64:8a:fb:ab:a8:82:53:67:54:00:2a:
                    fe:92:7e:a9:87:35:cf:b3:00:89:8d:09:a0:f0:bc:
                    99:a6:c0:40:de:a5:b5:15:b1:2b:a8:8e:b7:d1:a0:
                    09:8c:2c:8c:bd:85:21:c5:d9:30:7e:ba:92:8b:c4:
                    ba:fa:1d:2a:d1:61:82:b3:db:f4:7e:e0:1d:c0:66:
                    18:2d:d7:44:d3:d3:b5:c3:58:a8:51:c7:f6:84:86:
                    71:6e:fd:0e:2e:3b:c4:95:c1:28:5b:bf:d7:1e:6f:
                    93:c5:84:3d:91:82:a7:d2:6a:ae:02:c7:bf:eb:c4:
                    7b:a5:8c:00:ac:92:05:3a:f2:9f:d7:99:b5:29:32:
                    b7:ff:35:6d:22:b3:b2:f1:a5:44:22:58:c6:d2:c5:
                    7f:e2:9b:59:49:d3:8c:4a:c8:af:71:ad:12:df:f7:
                    28:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:5B:23:B0:F0:8E:C9:60:33:6B:4E:18:87:5C:06:50:97:D3:E4:4F
            X509v3 Authority Key Identifier:
                keyid:E1:F3:A2:9C:8C:B7:95:1F:5F:EA:71:2A:26:0A:92:5D:08:61:BB:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/67TVgfR8GUHbm1jiVe7Aw2Um9YMKqS4pGxLMsGPEhqbP/0/E1F3A29C8CB7951F5FEA712A260A925D0861BB06.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E1F3A29C8CB7951F5FEA712A260A925D0861BB06.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/67TVgfR8GUHbm1jiVe7Aw2Um9YMKqS4pGxLMsGPEhqbP/0/3137302e3135302e38322e302f32332d3233203d3e20323633323936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.150.82.0/23

    Signature Algorithm: sha256WithRSAEncryption
         07:4e:6f:82:06:b8:37:b3:8d:23:07:fe:f3:49:a4:a5:cb:c3:
         dd:3c:a8:26:d7:f5:3c:e2:52:18:2b:be:f3:65:78:76:68:6d:
         dd:4c:fc:1b:8c:9f:b0:80:98:d8:c6:24:36:8f:db:02:45:41:
         48:74:b2:d5:d8:51:a6:be:72:43:60:e0:3a:5b:e7:20:8a:db:
         d1:95:e8:f5:e3:b7:62:4b:f4:3a:30:17:68:f6:8b:ed:08:ff:
         19:20:87:5f:1f:f9:f2:4a:57:83:c3:e9:61:d0:05:71:99:6c:
         c0:dd:1b:6d:d9:eb:be:d0:50:9c:ae:29:5a:87:30:45:63:15:
         70:e5:2c:a3:d4:96:c7:5b:43:8e:ef:8e:c7:b6:3c:24:69:40:
         31:d8:96:5b:17:7c:8d:f6:a6:02:1c:3a:88:96:37:8d:28:c5:
         84:ff:0b:c7:14:38:2a:09:5a:6d:b3:c1:c3:be:3a:b2:09:d1:
         bd:10:80:f6:65:c9:2e:90:43:f8:7f:50:3c:38:73:b8:ca:fa:
         df:d2:26:9c:c7:00:5a:de:4c:6b:74:d4:fa:16:d6:13:7a:a6:
         c7:d4:36:fc:55:81:86:d1:54:08:ff:01:f1:74:c3:0b:bf:78:
         9d:f4:0f:36:95:96:3c:20:a0:cb:bd:c7:e5:ba:4e:b1:2f:94:
         af:66:09:63
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUSu0V5iRdPO1enFAunVdpBpEV37IwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTFGM0EyOUM4Q0I3OTUxRjVGRUE3MTJBMjYwQTkyNUQw
ODYxQkIwNjAeFw0yMjAxMTgxOTE3MTFaFw0yMzAxMTcxOTIyMTFaMDMxMTAvBgNV
BAMTKEZENUIyM0IwRjA4RUM5NjAzMzZCNEUxODg3NUMwNjUwOTdEM0U0NEYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7H7/IR6gHXv+Ns/QNXBPr26kI
4Akc0X3c9nRn6++4ITYhRaOcpV14/hzqd1yB3k/syuUjZOIg6kuO9lSpubv4Qniz
kL7SlrvmA7OaBuweMEGLRyiQ29h7vqrOyyRkivurqIJTZ1QAKv6SfqmHNc+zAImN
CaDwvJmmwEDepbUVsSuojrfRoAmMLIy9hSHF2TB+upKLxLr6HSrRYYKz2/R+4B3A
Zhgt10TT07XDWKhRx/aEhnFu/Q4uO8SVwShbv9ceb5PFhD2RgqfSaq4Cx7/rxHul
jACskgU68p/XmbUpMrf/NW0is7LxpUQiWMbSxX/im1lJ04xKyK9xrRLf9yhNAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU/VsjsPCOyWAza04Yh1wGUJfT5E8wHwYDVR0j
BBgwFoAU4fOinIy3lR9f6nEqJgqSXQhhuwYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNjdUVmdmUjhHVUhibTFqaVZlN0F3MlVtOVlNS3FTNHBHeExNc0dQRWhx
YlAvMC9FMUYzQTI5QzhDQjc5NTFGNUZFQTcxMkEyNjBBOTI1RDA4NjFCQjA2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0UxRjNBMjlDOENCNzk1MUY1
RkVBNzEyQTI2MEE5MjVEMDg2MUJCMDYuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzY3VFZnZlI4R1VIYm0xamlWZTdBdzJVbTlZTUtxUzRwR3hMTXNHUEVocWJQLzAv
MzEzNzMwMmUzMTM1MzAyZTM4MzIyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzMjM2
MzMzMjM5MzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAGqllIwDQYJKoZIhvcNAQELBQADggEBAAdOb4IG
uDezjSMH/vNJpKXLw908qCbX9TziUhgrvvNleHZobd1M/BuMn7CAmNjGJDaP2wJF
QUh0stXYUaa+ckNg4Dpb5yCK29GV6PXjt2JL9DowF2j2i+0I/xkgh18f+fJKV4PD
6WHQBXGZbMDdG23Z677QUJyuKVqHMEVjFXDlLKPUlsdbQ47vjse2PCRpQDHYllsX
fI32pgIcOoiWN40oxYT/C8cUOCoJWm2zwcO+OrIJ0b0QgPZlyS6QQ/h/UDw4c7jK
+t/SJpzHAFreTGt01PoW1hN6psfUNvxVgYbRVAj/AfF0wwu/eJ30DzaVljwgoMu9
x+W6TrEvlK9mCWM=
-----END CERTIFICATE-----
Generated at Tue Apr 22 02:53:20 2025 by rpki-client