Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7UKZQgY4Hzd9BZ9zKTWkqVqSLx48QbpV8Ubb8EW5HH6/0/3137302e38332e31362e302f32332d3332203d3e20323636343636.roa
File:                     3137302e38332e31362e302f32332d3332203d3e20323636343636.roa (raw, json)
Hash identifier:          YoM08pmFp7UFYOGBmBSvkHXP76JOtqmDlNAwPIU2CzA=
Subject key identifier:   00:C3:64:38:AB:A1:B7:D6:3F:52:99:B7:45:D4:60:4B:64:CA:A2:3F
Certificate issuer:       /CN=0B7B0831DF8AD4A37BCD7D74EBA3B3A3135186B9
Certificate serial:       1EBDD890C54E0628FC9EC3B888053C8CF080C0EF
Authority key identifier: 0B:7B:08:31:DF:8A:D4:A3:7B:CD:7D:74:EB:A3:B3:A3:13:51:86:B9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0B7B0831DF8AD4A37BCD7D74EBA3B3A3135186B9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7UKZQgY4Hzd9BZ9zKTWkqVqSLx48QbpV8Ubb8EW5HH6/0/3137302e38332e31362e302f32332d3332203d3e20323636343636.roa
Signing time:             Tue 14 Jan 2025 21:02:49 +0000
ROA not before:           Tue 14 Jan 2025 20:57:49 +0000
ROA not after:            Tue 13 Jan 2026 21:02:49 +0000
asID:                     266466
IP address blocks:        170.83.16.0/23 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:bd:d8:90:c5:4e:06:28:fc:9e:c3:b8:88:05:3c:8c:f0:80:c0:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0B7B0831DF8AD4A37BCD7D74EBA3B3A3135186B9
        Validity
            Not Before: Jan 14 20:57:49 2025 GMT
            Not After : Jan 13 21:02:49 2026 GMT
        Subject: CN=00C36438ABA1B7D63F5299B745D4604B64CAA23F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:20:d5:96:ad:76:9c:93:74:de:86:36:38:63:
                    41:15:5c:0b:6f:37:70:04:1e:8c:a7:48:ba:82:54:
                    ce:8f:b6:50:9d:a2:5b:e7:e3:96:b1:f5:9a:7d:db:
                    b8:e9:5a:9a:f8:f4:37:55:a4:f2:78:0e:0a:0d:5a:
                    26:55:c3:24:b4:78:fb:98:ed:1a:d6:88:61:dd:32:
                    1c:1a:7d:f4:e8:8f:79:f4:c5:5b:f9:0f:78:d5:eb:
                    00:3a:ca:aa:87:4d:52:8a:cb:3b:0b:80:8d:fe:7a:
                    25:cb:69:c6:94:77:0e:49:57:a6:5f:f1:8b:9e:81:
                    48:72:d3:48:23:0f:a9:b8:91:10:22:32:e6:c7:3a:
                    d1:ad:05:dc:44:a0:80:33:07:7c:88:8b:cd:36:b7:
                    23:a9:46:fd:67:d7:f4:4d:37:bb:ea:8a:48:df:af:
                    17:48:61:6c:f4:1c:f4:d2:60:8c:1f:5e:54:db:0f:
                    eb:eb:37:29:73:71:4e:2d:20:89:0f:1a:ef:b6:c7:
                    4c:8d:9a:2a:46:5b:50:90:44:b7:ab:b2:0e:9f:6a:
                    5c:85:a5:49:cc:68:07:12:80:10:10:51:71:39:9a:
                    8d:6b:c5:c8:7c:7f:3d:01:fb:1a:00:66:f2:25:1d:
                    ef:a5:79:36:f7:01:ba:83:2e:50:9a:1d:48:26:63:
                    ef:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:C3:64:38:AB:A1:B7:D6:3F:52:99:B7:45:D4:60:4B:64:CA:A2:3F
            X509v3 Authority Key Identifier:
                keyid:0B:7B:08:31:DF:8A:D4:A3:7B:CD:7D:74:EB:A3:B3:A3:13:51:86:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7UKZQgY4Hzd9BZ9zKTWkqVqSLx48QbpV8Ubb8EW5HH6/0/0B7B0831DF8AD4A37BCD7D74EBA3B3A3135186B9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0B7B0831DF8AD4A37BCD7D74EBA3B3A3135186B9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7UKZQgY4Hzd9BZ9zKTWkqVqSLx48QbpV8Ubb8EW5HH6/0/3137302e38332e31362e302f32332d3332203d3e20323636343636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.83.16.0/23

    Signature Algorithm: sha256WithRSAEncryption
         63:f0:da:f7:14:87:d7:f2:c5:bf:c6:a7:2d:2f:b0:7d:3d:7d:
         f7:9f:13:66:f6:32:b7:d3:a2:42:c9:7f:15:07:92:41:99:dd:
         c8:ff:a6:8f:a0:39:0f:11:ef:5a:8e:3e:bb:86:92:13:ae:eb:
         ff:c6:62:9f:9a:e8:14:bc:2a:31:46:64:f5:55:3b:51:14:c0:
         58:ad:c9:0a:bb:97:42:44:0c:32:cb:68:93:b8:e3:52:fb:61:
         fc:3e:cd:11:03:11:f8:24:db:b7:2b:d2:d5:c0:02:bd:a1:9a:
         c7:15:50:f0:38:80:65:25:94:da:8c:34:d5:91:b4:21:e2:cc:
         27:6d:2c:db:b9:40:7e:b0:b8:fd:1e:5c:20:56:a1:41:fa:74:
         45:d1:90:cc:95:0f:47:75:8d:8c:ae:c3:af:cf:7e:3d:d8:c7:
         89:d0:73:ab:2f:07:0e:7a:50:7c:18:5a:ff:64:93:8d:2e:a3:
         2a:71:b4:3f:eb:8c:c6:a5:89:42:46:04:7d:0a:03:74:df:c6:
         55:fd:45:11:20:22:f8:9d:bc:7a:07:40:94:df:5d:bd:b6:f0:
         13:b4:a4:72:01:d6:7c:b3:49:77:8b:85:58:54:c5:0e:45:8c:
         09:b8:e6:b9:9d:e2:b4:30:01:83:95:1e:c6:c0:a6:a6:60:42:
         f8:ce:8d:b6
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgIUHr3YkMVOBij8nsO4iAU8jPCAwO8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEI3QjA4MzFERjhBRDRBMzdCQ0Q3RDc0RUJBM0IzQTMx
MzUxODZCOTAeFw0yNTAxMTQyMDU3NDlaFw0yNjAxMTMyMTAyNDlaMDMxMTAvBgNV
BAMTKDAwQzM2NDM4QUJBMUI3RDYzRjUyOTlCNzQ1RDQ2MDRCNjRDQUEyM0YwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1INWWrXack3TehjY4Y0EVXAtv
N3AEHoynSLqCVM6PtlCdolvn45ax9Zp927jpWpr49DdVpPJ4DgoNWiZVwyS0ePuY
7RrWiGHdMhwaffToj3n0xVv5D3jV6wA6yqqHTVKKyzsLgI3+eiXLacaUdw5JV6Zf
8YuegUhy00gjD6m4kRAiMubHOtGtBdxEoIAzB3yIi802tyOpRv1n1/RNN7vqikjf
rxdIYWz0HPTSYIwfXlTbD+vrNylzcU4tIIkPGu+2x0yNmipGW1CQRLersg6falyF
pUnMaAcSgBAQUXE5mo1rxch8fz0B+xoAZvIlHe+leTb3AbqDLlCaHUgmY+/XAgMB
AAGjggJMMIICSDAdBgNVHQ4EFgQUAMNkOKuht9Y/Upm3RdRgS2TKoj8wHwYDVR0j
BBgwFoAUC3sIMd+K1KN7zX1066OzoxNRhrkwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby83VUtaUWdZNEh6ZDlCWjl6S1RXa3FWcVNMeDQ4UWJwVjhVYmI4RVc1SEg2
LzAvMEI3QjA4MzFERjhBRDRBMzdCQ0Q3RDc0RUJBM0IzQTMxMzUxODZCOS5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS8wQjdCMDgzMURGOEFENEEzN0JD
RDdENzRFQkEzQjNBMzEzNTE4NkI5LmNlcjCBqwYIKwYBBQUHAQsEgZ4wgZswgZgG
CCsGAQUFBzALhoGLcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby83
VUtaUWdZNEh6ZDlCWjl6S1RXa3FWcVNMeDQ4UWJwVjhVYmI4RVc1SEg2LzAvMzEz
NzMwMmUzODMzMmUzMTM2MmUzMDJmMzIzMzJkMzMzMjIwM2QzZTIwMzIzNjM2MzQz
NjM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/
BBAwDjAMBAIAATAGAwQBqlMQMA0GCSqGSIb3DQEBCwUAA4IBAQBj8Nr3FIfX8sW/
xqctL7B9PX33nxNm9jK306JCyX8VB5JBmd3I/6aPoDkPEe9ajj67hpITruv/xmKf
mugUvCoxRmT1VTtRFMBYrckKu5dCRAwyy2iTuONS+2H8Ps0RAxH4JNu3K9LVwAK9
oZrHFVDwOIBlJZTajDTVkbQh4swnbSzbuUB+sLj9HlwgVqFB+nRF0ZDMlQ9HdY2M
rsOvz3492MeJ0HOrLwcOelB8GFr/ZJONLqMqcbQ/64zGpYlCRgR9CgN038ZV/UUR
ICL4nbx6B0CU3129tvATtKRyAdZ8s0l3i4VYVMUORYwJuOa5neK0MAGDlR7GwKam
YEL4zo22
-----END CERTIFICATE-----
Generated at Wed Apr 9 06:13:45 2025 by rpki-client