Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/67TVgfR8GUHbm1jiVe7Aw2Um9YMKqS4pGxLMsGPEhqbP/0/3137372e38352e34342e302f32342d3234203d3e20323633323936.roa
File:                     3137372e38352e34342e302f32342d3234203d3e20323633323936.roa (raw, json)
Hash identifier:          JrJIAjgd97mN8VHZSyV4AwRVvKH7K/uKQUnCctcgFnU=
Subject key identifier:   1B:81:44:C0:24:EF:41:5E:8D:5D:FE:CC:B1:FE:30:2F:91:CA:4A:82
Certificate issuer:       /CN=E1F3A29C8CB7951F5FEA712A260A925D0861BB06
Certificate serial:       2B1A2541BA9CA22950D22B7375C17E255328C2F3
Authority key identifier: E1:F3:A2:9C:8C:B7:95:1F:5F:EA:71:2A:26:0A:92:5D:08:61:BB:06
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E1F3A29C8CB7951F5FEA712A260A925D0861BB06.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/67TVgfR8GUHbm1jiVe7Aw2Um9YMKqS4pGxLMsGPEhqbP/0/3137372e38352e34342e302f32342d3234203d3e20323633323936.roa
Signing time:             Tue 18 Jan 2022 19:22:11 +0000
ROA not before:           Tue 18 Jan 2022 19:17:11 +0000
ROA not after:            Tue 17 Jan 2023 19:22:11 +0000
asID:                     263296
IP address blocks:        177.85.44.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:1a:25:41:ba:9c:a2:29:50:d2:2b:73:75:c1:7e:25:53:28:c2:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E1F3A29C8CB7951F5FEA712A260A925D0861BB06
        Validity
            Not Before: Jan 18 19:17:11 2022 GMT
            Not After : Jan 17 19:22:11 2023 GMT
        Subject: CN=1B8144C024EF415E8D5DFECCB1FE302F91CA4A82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:0c:23:84:53:23:63:cd:50:66:9c:5d:58:1e:
                    7a:b0:3b:e7:0e:8c:c5:0c:4f:d6:72:b4:bd:9b:c9:
                    da:a6:2f:53:fb:25:72:66:63:f8:00:b2:ee:76:36:
                    63:3b:8a:08:5f:ba:97:0e:a8:c0:9c:7c:c2:4c:f7:
                    44:fa:13:85:e7:ae:c7:40:fe:29:99:a9:10:7d:34:
                    90:3f:5a:c8:fa:65:56:1b:95:1d:3d:6e:fe:64:92:
                    cc:17:d6:bd:a6:c7:c7:82:1f:95:f0:b9:a7:2c:74:
                    0d:9a:cf:b5:8d:b7:ff:1b:91:81:62:17:0d:61:6f:
                    40:c9:ca:0a:97:85:54:cd:6f:02:a1:94:db:7d:96:
                    22:c9:c1:7e:c5:95:ea:62:c9:a5:74:c6:33:e9:5c:
                    64:bf:24:b9:d8:e1:b8:9f:43:18:a5:e0:25:a3:94:
                    4b:6c:4d:b3:bb:25:72:7d:b5:55:c1:71:f4:b1:4c:
                    62:39:38:62:1e:f5:1c:06:97:bb:a6:b8:a5:7c:4d:
                    45:89:e0:ca:c4:05:44:72:31:90:7d:ce:7a:97:9c:
                    bd:b4:1e:7b:c7:7a:4d:67:f9:a7:84:f6:1f:8a:4c:
                    c1:a4:70:11:d7:d7:01:df:0a:85:a9:d3:6a:2f:b9:
                    33:8b:dc:dc:84:5c:01:fc:ee:82:21:05:c6:ef:d7:
                    6c:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:81:44:C0:24:EF:41:5E:8D:5D:FE:CC:B1:FE:30:2F:91:CA:4A:82
            X509v3 Authority Key Identifier:
                keyid:E1:F3:A2:9C:8C:B7:95:1F:5F:EA:71:2A:26:0A:92:5D:08:61:BB:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/67TVgfR8GUHbm1jiVe7Aw2Um9YMKqS4pGxLMsGPEhqbP/0/E1F3A29C8CB7951F5FEA712A260A925D0861BB06.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E1F3A29C8CB7951F5FEA712A260A925D0861BB06.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/67TVgfR8GUHbm1jiVe7Aw2Um9YMKqS4pGxLMsGPEhqbP/0/3137372e38352e34342e302f32342d3234203d3e20323633323936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.85.44.0/24

    Signature Algorithm: sha256WithRSAEncryption
         70:d5:e5:96:e9:30:52:16:91:ba:b1:b4:ba:43:df:51:51:8a:
         aa:fd:6b:ae:57:dc:20:9b:55:22:8a:fb:99:5f:5e:01:9c:18:
         de:25:4c:83:f0:05:0e:50:39:37:ce:21:26:e1:ec:d5:cd:39:
         24:81:9e:b8:2b:d8:56:9a:8e:f9:05:7d:b0:d3:62:0c:f2:31:
         4e:ee:92:9d:15:50:61:b5:70:2c:21:22:07:d5:bf:7e:a7:84:
         8c:d7:21:9f:51:7f:19:ba:e9:7a:8d:5e:0d:56:6a:a5:fa:dc:
         28:bc:ed:f3:ec:bc:c8:7d:4c:85:f6:d9:e1:7b:c6:29:ca:e7:
         08:f8:04:63:df:d2:59:37:42:9f:29:06:03:e4:f1:4b:51:bb:
         95:e6:81:28:b5:ca:92:de:e7:f7:c3:75:42:59:e1:6b:6f:b6:
         e4:6e:bb:e3:ca:18:49:d9:2a:78:f3:40:06:2d:12:47:53:bc:
         47:85:00:75:e8:06:19:93:d3:20:de:18:ec:14:e4:09:af:55:
         1b:b2:f0:2e:aa:42:c9:6a:30:a8:18:57:7d:72:4b:97:d8:b1:
         06:24:fb:a6:6e:dc:ce:f7:01:2b:37:79:be:c5:31:e6:e0:9e:
         ed:01:cf:db:72:9d:f9:82:77:04:d9:1e:f2:d2:f1:20:dd:81:
         61:78:75:69
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUKxolQbqcoilQ0itzdcF+JVMowvMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTFGM0EyOUM4Q0I3OTUxRjVGRUE3MTJBMjYwQTkyNUQw
ODYxQkIwNjAeFw0yMjAxMTgxOTE3MTFaFw0yMzAxMTcxOTIyMTFaMDMxMTAvBgNV
BAMTKDFCODE0NEMwMjRFRjQxNUU4RDVERkVDQ0IxRkUzMDJGOTFDQTRBODIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdDCOEUyNjzVBmnF1YHnqwO+cO
jMUMT9ZytL2bydqmL1P7JXJmY/gAsu52NmM7ighfupcOqMCcfMJM90T6E4XnrsdA
/imZqRB9NJA/Wsj6ZVYblR09bv5kkswX1r2mx8eCH5XwuacsdA2az7WNt/8bkYFi
Fw1hb0DJygqXhVTNbwKhlNt9liLJwX7FlepiyaV0xjPpXGS/JLnY4bifQxil4CWj
lEtsTbO7JXJ9tVXBcfSxTGI5OGIe9RwGl7umuKV8TUWJ4MrEBURyMZB9znqXnL20
HnvHek1n+aeE9h+KTMGkcBHX1wHfCoWp02ovuTOL3NyEXAH87oIhBcbv12y9AgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUG4FEwCTvQV6NXf7Msf4wL5HKSoIwHwYDVR0j
BBgwFoAU4fOinIy3lR9f6nEqJgqSXQhhuwYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNjdUVmdmUjhHVUhibTFqaVZlN0F3MlVtOVlNS3FTNHBHeExNc0dQRWhx
YlAvMC9FMUYzQTI5QzhDQjc5NTFGNUZFQTcxMkEyNjBBOTI1RDA4NjFCQjA2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0UxRjNBMjlDOENCNzk1MUY1
RkVBNzEyQTI2MEE5MjVEMDg2MUJCMDYuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzY3VFZnZlI4R1VIYm0xamlWZTdBdzJVbTlZTUtxUzRwR3hMTXNHUEVocWJQLzAv
MzEzNzM3MmUzODM1MmUzNDM0MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjMz
MzIzOTM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAsVUsMA0GCSqGSIb3DQEBCwUAA4IBAQBw1eWW6TBS
FpG6sbS6Q99RUYqq/WuuV9wgm1UiivuZX14BnBjeJUyD8AUOUDk3ziEm4ezVzTkk
gZ64K9hWmo75BX2w02IM8jFO7pKdFVBhtXAsISIH1b9+p4SM1yGfUX8Zuul6jV4N
Vmql+twovO3z7LzIfUyF9tnhe8YpyucI+ARj39JZN0KfKQYD5PFLUbuV5oEotcqS
3uf3w3VCWeFrb7bkbrvjyhhJ2Sp480AGLRJHU7xHhQB16AYZk9Mg3hjsFOQJr1Ub
svAuqkLJajCoGFd9ckuX2LEGJPumbtzO9wErN3m+xTHm4J7tAc/bcp35gncE2R7y
0vEg3YFheHVp
-----END CERTIFICATE-----
Generated at Mon Apr 21 20:43:32 2025 by rpki-client