Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6x51inqhgbhbB9SwduF16yZfHPZrkKZbEdfsRyY6DKAe/0/3137302e3234372e3131322e302f32322d3232203d3e20323633393033.roa
File:                     3137302e3234372e3131322e302f32322d3232203d3e20323633393033.roa (raw, json)
Hash identifier:          OJrJQUC3H8bNkHpXEXK31QMQPe6waWWFZeAO2RoMqME=
Subject key identifier:   76:46:A0:08:6B:0C:10:13:1E:09:7C:27:5B:21:96:37:2F:FC:77:E8
Certificate issuer:       /CN=329861E01AE7B51B7D7965F1537F72FFCB2506D3
Certificate serial:       3E7AF78E1DBF4DA725D404B67EC5A76DB23B8245
Authority key identifier: 32:98:61:E0:1A:E7:B5:1B:7D:79:65:F1:53:7F:72:FF:CB:25:06:D3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/329861E01AE7B51B7D7965F1537F72FFCB2506D3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6x51inqhgbhbB9SwduF16yZfHPZrkKZbEdfsRyY6DKAe/0/3137302e3234372e3131322e302f32322d3232203d3e20323633393033.roa
Signing time:             Fri 23 Dec 2022 16:40:42 +0000
ROA not before:           Fri 23 Dec 2022 16:35:42 +0000
ROA not after:            Fri 22 Dec 2023 16:40:42 +0000
asID:                     263903
IP address blocks:        170.247.112.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:7a:f7:8e:1d:bf:4d:a7:25:d4:04:b6:7e:c5:a7:6d:b2:3b:82:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=329861E01AE7B51B7D7965F1537F72FFCB2506D3
        Validity
            Not Before: Dec 23 16:35:42 2022 GMT
            Not After : Dec 22 16:40:42 2023 GMT
        Subject: CN=7646A0086B0C10131E097C275B2196372FFC77E8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:66:05:dd:3b:e4:5d:a8:3b:bb:13:d1:11:b6:
                    5b:7b:22:15:d9:d1:9d:0d:1e:ee:fb:df:1c:b0:fd:
                    30:d9:23:8c:8c:c5:f9:74:05:58:23:29:15:31:cd:
                    1c:f5:2e:9a:e8:dc:1a:dc:80:df:70:7a:35:da:3b:
                    3f:83:f5:04:26:9b:62:b1:0a:9c:20:14:ef:a9:1e:
                    17:7e:32:dc:6b:e2:b5:50:ca:24:66:b3:4a:b4:8d:
                    15:2a:e0:bb:c4:62:d7:4a:d2:3d:8a:75:25:e5:2e:
                    10:33:be:33:5c:5d:13:aa:a9:a4:59:ea:71:e2:ea:
                    86:5d:ee:92:e0:fe:50:48:31:eb:1f:33:13:2f:f5:
                    d0:0b:a0:98:57:14:18:2e:94:d3:19:fd:2a:f4:93:
                    0f:17:df:6c:33:77:ba:05:90:38:19:92:37:4d:12:
                    22:cc:4d:a7:6d:8c:cf:2c:54:c5:d2:0b:1c:17:20:
                    b0:60:8c:bf:0c:b0:c2:c4:a9:da:c3:f9:44:0c:2d:
                    ce:91:91:bc:81:47:e7:3b:31:1d:a3:ee:59:82:80:
                    fc:ba:de:26:96:e3:fc:8c:32:63:65:e1:e2:36:9e:
                    3a:7e:b6:66:6a:55:33:a8:2b:fe:cb:25:ff:de:55:
                    6e:eb:75:13:4b:93:fd:c2:9f:76:35:29:f0:6e:e8:
                    ba:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:46:A0:08:6B:0C:10:13:1E:09:7C:27:5B:21:96:37:2F:FC:77:E8
            X509v3 Authority Key Identifier:
                keyid:32:98:61:E0:1A:E7:B5:1B:7D:79:65:F1:53:7F:72:FF:CB:25:06:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6x51inqhgbhbB9SwduF16yZfHPZrkKZbEdfsRyY6DKAe/0/329861E01AE7B51B7D7965F1537F72FFCB2506D3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/329861E01AE7B51B7D7965F1537F72FFCB2506D3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6x51inqhgbhbB9SwduF16yZfHPZrkKZbEdfsRyY6DKAe/0/3137302e3234372e3131322e302f32322d3232203d3e20323633393033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.247.112.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a6:f6:12:d3:6d:87:9f:c2:83:4a:28:4a:83:ec:de:d8:a7:bb:
         b0:b8:f3:65:f0:59:a8:3a:2d:0a:3a:e9:32:cd:51:f1:4f:c1:
         b3:97:53:65:ff:2f:70:0d:88:6c:4d:e1:61:c0:eb:10:73:aa:
         c9:4a:6b:85:a3:fb:fc:2c:71:c2:38:f6:ab:6c:f1:f5:af:07:
         43:ae:b6:cb:0c:cd:81:ab:59:46:d3:eb:14:68:78:b9:16:25:
         ce:83:41:6e:2d:96:26:7f:35:76:ce:0f:4d:67:d9:90:09:d8:
         4b:1d:c2:93:40:37:93:6d:86:f3:3b:a2:2d:aa:bf:db:fd:82:
         56:04:75:f3:a8:1c:97:7e:ff:e2:5f:cb:19:18:49:f6:cc:4a:
         e7:32:76:c7:0a:97:9b:63:b7:e5:02:bf:2d:a1:af:db:7c:a6:
         6c:30:dc:1b:a2:a8:bb:63:09:26:c3:9f:a9:a5:60:c3:52:68:
         27:40:cb:1a:57:19:30:71:b6:49:21:f0:7f:ec:21:42:bd:26:
         42:62:e4:9d:75:25:f3:dc:0d:2c:9e:ef:72:5e:c6:b3:10:23:
         1e:d2:a2:7e:a9:b4:59:ac:21:5a:3c:92:2c:ab:36:0a:48:d0:
         6d:ab:a9:59:8f:c1:56:c5:4c:ce:9f:81:17:3e:95:49:39:69:
         3e:1c:72:f2
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUPnr3jh2/Tacl1AS2fsWnbbI7gkUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzI5ODYxRTAxQUU3QjUxQjdENzk2NUYxNTM3RjcyRkZD
QjI1MDZEMzAeFw0yMjEyMjMxNjM1NDJaFw0yMzEyMjIxNjQwNDJaMDMxMTAvBgNV
BAMTKDc2NDZBMDA4NkIwQzEwMTMxRTA5N0MyNzVCMjE5NjM3MkZGQzc3RTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtZgXdO+RdqDu7E9ERtlt7IhXZ
0Z0NHu773xyw/TDZI4yMxfl0BVgjKRUxzRz1Lpro3BrcgN9wejXaOz+D9QQmm2Kx
CpwgFO+pHhd+Mtxr4rVQyiRms0q0jRUq4LvEYtdK0j2KdSXlLhAzvjNcXROqqaRZ
6nHi6oZd7pLg/lBIMesfMxMv9dALoJhXFBgulNMZ/Sr0kw8X32wzd7oFkDgZkjdN
EiLMTadtjM8sVMXSCxwXILBgjL8MsMLEqdrD+UQMLc6RkbyBR+c7MR2j7lmCgPy6
3iaW4/yMMmNl4eI2njp+tmZqVTOoK/7LJf/eVW7rdRNLk/3Cn3Y1KfBu6Lq7AgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUdkagCGsMEBMeCXwnWyGWNy/8d+gwHwYDVR0j
BBgwFoAUMphh4BrntRt9eWXxU39y/8slBtMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNng1MWlucWhnYmhiQjlTd2R1RjE2eVpmSFBacmtLWmJFZGZzUnlZNkRL
QWUvMC8zMjk4NjFFMDFBRTdCNTFCN0Q3OTY1RjE1MzdGNzJGRkNCMjUwNkQzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzMyOTg2MUUwMUFFN0I1MUI3
RDc5NjVGMTUzN0Y3MkZGQ0IyNTA2RDMuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzZ4NTFpbnFoZ2JoYkI5U3dkdUYxNnlaZkhQWnJrS1piRWRmc1J5WTZES0FlLzAv
MzEzNzMwMmUzMjM0MzcyZTMxMzEzMjJlMzAyZjMyMzIyZDMyMzIyMDNkM2UyMDMy
MzYzMzM5MzAzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAqr3cDANBgkqhkiG9w0BAQsFAAOCAQEApvYS
022Hn8KDSihKg+ze2Ke7sLjzZfBZqDotCjrpMs1R8U/Bs5dTZf8vcA2IbE3hYcDr
EHOqyUprhaP7/Cxxwjj2q2zx9a8HQ662ywzNgatZRtPrFGh4uRYlzoNBbi2WJn81
ds4PTWfZkAnYSx3Ck0A3k22G8zuiLaq/2/2CVgR186gcl37/4l/LGRhJ9sxK5zJ2
xwqXm2O35QK/LaGv23ymbDDcG6Kou2MJJsOfqaVgw1JoJ0DLGlcZMHG2SSHwf+wh
Qr0mQmLknXUl89wNLJ7vcl7GsxAjHtKifqm0WawhWjySLKs2CkjQbaupWY/BVsVM
zp+BFz6VSTlpPhxy8g==
-----END CERTIFICATE-----
Generated at Wed Apr 23 03:45:17 2025 by rpki-client