Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/67TVgfR8GUHbm1jiVe7Aw2Um9YMKqS4pGxLMsGPEhqbP/0/3137302e3135302e38332e302f32342d3234203d3e20323633323936.roa
File:                     3137302e3135302e38332e302f32342d3234203d3e20323633323936.roa (raw, json)
Hash identifier:          VbiOdersNxJXsgDtKJhV/PBjoE+1btoYQToAG+SUxpI=
Subject key identifier:   59:5C:05:5B:C5:E9:F5:50:42:03:38:A6:7B:83:BE:CC:A6:3A:7A:43
Certificate issuer:       /CN=E1F3A29C8CB7951F5FEA712A260A925D0861BB06
Certificate serial:       1C39E275EB941BD135F5745B0884E04FE20C72DF
Authority key identifier: E1:F3:A2:9C:8C:B7:95:1F:5F:EA:71:2A:26:0A:92:5D:08:61:BB:06
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E1F3A29C8CB7951F5FEA712A260A925D0861BB06.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/67TVgfR8GUHbm1jiVe7Aw2Um9YMKqS4pGxLMsGPEhqbP/0/3137302e3135302e38332e302f32342d3234203d3e20323633323936.roa
Signing time:             Tue 18 Jan 2022 19:22:11 +0000
ROA not before:           Tue 18 Jan 2022 19:17:11 +0000
ROA not after:            Tue 17 Jan 2023 19:22:11 +0000
asID:                     263296
IP address blocks:        170.150.83.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:39:e2:75:eb:94:1b:d1:35:f5:74:5b:08:84:e0:4f:e2:0c:72:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E1F3A29C8CB7951F5FEA712A260A925D0861BB06
        Validity
            Not Before: Jan 18 19:17:11 2022 GMT
            Not After : Jan 17 19:22:11 2023 GMT
        Subject: CN=595C055BC5E9F550420338A67B83BECCA63A7A43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:13:ab:1e:32:1f:91:52:60:d5:38:05:16:0b:
                    5f:78:40:6f:17:64:23:d4:78:78:06:6f:14:fe:00:
                    80:c9:4e:45:a5:99:95:8f:70:c4:ab:06:52:f5:e3:
                    e3:9f:83:98:44:49:39:45:4b:4d:33:6d:d8:29:be:
                    3a:27:f1:5c:5b:ec:b1:18:aa:c5:51:7a:6c:d6:55:
                    ce:9d:be:e4:c9:f6:50:6f:5a:a8:08:74:9a:6f:a3:
                    ce:b3:88:94:49:c8:22:36:d2:6d:19:d7:19:16:37:
                    8e:f0:68:ed:5f:65:e0:f0:23:48:95:85:d3:19:ae:
                    5a:6c:30:58:ae:b4:20:c0:b4:33:3e:ba:bd:55:1c:
                    66:9b:5d:e9:10:50:42:c5:30:c3:f9:b4:60:47:e5:
                    9e:46:45:12:e2:e9:2d:9b:1a:67:ec:53:0f:d8:0c:
                    19:a4:b9:61:ef:37:b0:d1:f1:af:fc:c5:40:af:8c:
                    88:d5:4c:38:57:1f:0e:88:c0:af:38:f2:1c:29:de:
                    4e:8c:7e:4c:f2:55:a5:b5:e0:6d:ca:57:8b:9f:81:
                    32:e6:5d:f6:8c:cf:ae:e7:1d:cf:6b:18:98:62:6a:
                    60:86:63:46:60:b4:c9:ea:e4:05:cd:36:91:db:3b:
                    a1:56:9a:e0:8d:5c:3b:ae:85:5e:3b:65:91:1a:85:
                    b9:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:5C:05:5B:C5:E9:F5:50:42:03:38:A6:7B:83:BE:CC:A6:3A:7A:43
            X509v3 Authority Key Identifier:
                keyid:E1:F3:A2:9C:8C:B7:95:1F:5F:EA:71:2A:26:0A:92:5D:08:61:BB:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/67TVgfR8GUHbm1jiVe7Aw2Um9YMKqS4pGxLMsGPEhqbP/0/E1F3A29C8CB7951F5FEA712A260A925D0861BB06.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E1F3A29C8CB7951F5FEA712A260A925D0861BB06.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/67TVgfR8GUHbm1jiVe7Aw2Um9YMKqS4pGxLMsGPEhqbP/0/3137302e3135302e38332e302f32342d3234203d3e20323633323936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.150.83.0/24

    Signature Algorithm: sha256WithRSAEncryption
         77:58:d5:b0:12:fa:f6:ea:38:c3:18:e9:77:be:47:b7:0c:d0:
         f5:81:e2:45:97:7e:da:9e:b0:17:0c:49:c8:1e:24:ef:9c:7f:
         d3:eb:cc:bc:f6:20:1c:1c:51:9c:91:39:ae:f7:a7:0d:66:64:
         62:4f:43:74:18:89:4e:e0:3f:f0:cc:d1:6a:85:4b:3b:7b:c2:
         ff:f5:c2:45:d9:a6:f2:37:b4:db:8e:69:9a:4d:38:03:52:52:
         b5:c8:eb:d6:71:c1:01:1c:47:f4:c1:f6:c7:dc:61:87:04:93:
         e9:03:aa:29:01:9e:7b:84:fb:38:6e:82:67:16:44:f7:f8:3f:
         7e:46:7a:8b:7e:14:67:05:a0:4a:10:4b:3d:8e:34:af:94:36:
         07:ba:22:56:78:66:73:e8:7d:7a:85:ef:b1:36:82:1d:c2:40:
         c4:ad:2d:66:33:9a:31:83:48:34:d7:90:27:a7:ab:8b:a1:b9:
         66:3c:67:3c:16:14:c1:00:8d:ff:2a:7d:5e:58:8b:d4:0b:b9:
         45:40:4e:25:86:e1:63:8a:e7:e7:0b:29:92:98:29:14:f4:ad:
         19:ab:e2:d9:3d:26:b9:ca:69:30:3c:2d:0d:6b:40:a4:e6:9b:
         84:56:95:ee:a2:a9:dc:5c:51:41:f2:6a:03:b5:69:ca:21:ae:
         c3:8e:1b:e3
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUHDnideuUG9E19XRbCITgT+IMct8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTFGM0EyOUM4Q0I3OTUxRjVGRUE3MTJBMjYwQTkyNUQw
ODYxQkIwNjAeFw0yMjAxMTgxOTE3MTFaFw0yMzAxMTcxOTIyMTFaMDMxMTAvBgNV
BAMTKDU5NUMwNTVCQzVFOUY1NTA0MjAzMzhBNjdCODNCRUNDQTYzQTdBNDMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDlE6seMh+RUmDVOAUWC194QG8X
ZCPUeHgGbxT+AIDJTkWlmZWPcMSrBlL14+Ofg5hESTlFS00zbdgpvjon8Vxb7LEY
qsVRemzWVc6dvuTJ9lBvWqgIdJpvo86ziJRJyCI20m0Z1xkWN47waO1fZeDwI0iV
hdMZrlpsMFiutCDAtDM+ur1VHGabXekQUELFMMP5tGBH5Z5GRRLi6S2bGmfsUw/Y
DBmkuWHvN7DR8a/8xUCvjIjVTDhXHw6IwK848hwp3k6MfkzyVaW14G3KV4ufgTLm
XfaMz67nHc9rGJhiamCGY0ZgtMnq5AXNNpHbO6FWmuCNXDuuhV47ZZEahbkLAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUWVwFW8Xp9VBCAzime4O+zKY6ekMwHwYDVR0j
BBgwFoAU4fOinIy3lR9f6nEqJgqSXQhhuwYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNjdUVmdmUjhHVUhibTFqaVZlN0F3MlVtOVlNS3FTNHBHeExNc0dQRWhx
YlAvMC9FMUYzQTI5QzhDQjc5NTFGNUZFQTcxMkEyNjBBOTI1RDA4NjFCQjA2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0UxRjNBMjlDOENCNzk1MUY1
RkVBNzEyQTI2MEE5MjVEMDg2MUJCMDYuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzY3VFZnZlI4R1VIYm0xamlWZTdBdzJVbTlZTUtxUzRwR3hMTXNHUEVocWJQLzAv
MzEzNzMwMmUzMTM1MzAyZTM4MzMyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzMzMjM5MzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBACqllMwDQYJKoZIhvcNAQELBQADggEBAHdY1bAS
+vbqOMMY6Xe+R7cM0PWB4kWXftqesBcMScgeJO+cf9PrzLz2IBwcUZyROa73pw1m
ZGJPQ3QYiU7gP/DM0WqFSzt7wv/1wkXZpvI3tNuOaZpNOANSUrXI69ZxwQEcR/TB
9sfcYYcEk+kDqikBnnuE+zhugmcWRPf4P35Geot+FGcFoEoQSz2ONK+UNge6IlZ4
ZnPofXqF77E2gh3CQMStLWYzmjGDSDTXkCenq4uhuWY8ZzwWFMEAjf8qfV5Yi9QL
uUVATiWG4WOK5+cLKZKYKRT0rRmr4tk9JrnKaTA8LQ1rQKTmm4RWle6iqdxcUUHy
agO1acohrsOOG+M=
-----END CERTIFICATE-----
Generated at Tue Feb 18 13:22:38 2025 by rpki-client