Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7oVrcem1iPXHJTcEEqq1tbeDTVXTss45xizLh2rPJeuC/0/3139312e3234312e382e302f32322d3234203d3e20323633363633.roa
File:                     3139312e3234312e382e302f32322d3234203d3e20323633363633.roa (raw, json)
Hash identifier:          75blB4e39bjSGnK+CmHwvmzs7uz7l4ps5AbKa6/Z6qA=
Subject key identifier:   44:11:8B:CB:FE:9F:56:DF:C4:24:88:9E:30:5A:36:50:08:6C:FB:95
Certificate issuer:       /CN=9CC5CFF7E9D168495B51D83F3C355F10409474FF
Certificate serial:       5CDCFD1371535CB710B79D2B981A369154097FB5
Authority key identifier: 9C:C5:CF:F7:E9:D1:68:49:5B:51:D8:3F:3C:35:5F:10:40:94:74:FF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9CC5CFF7E9D168495B51D83F3C355F10409474FF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7oVrcem1iPXHJTcEEqq1tbeDTVXTss45xizLh2rPJeuC/0/3139312e3234312e382e302f32322d3234203d3e20323633363633.roa
Signing time:             Fri 22 Mar 2024 14:31:48 +0000
ROA not before:           Fri 22 Mar 2024 14:26:48 +0000
ROA not after:            Fri 21 Mar 2025 14:31:48 +0000
asID:                     263663
IP address blocks:        191.241.8.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:dc:fd:13:71:53:5c:b7:10:b7:9d:2b:98:1a:36:91:54:09:7f:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9CC5CFF7E9D168495B51D83F3C355F10409474FF
        Validity
            Not Before: Mar 22 14:26:48 2024 GMT
            Not After : Mar 21 14:31:48 2025 GMT
        Subject: CN=44118BCBFE9F56DFC424889E305A3650086CFB95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:fe:0d:2f:30:f5:b3:26:c7:61:9a:fd:83:62:
                    1c:86:d2:7b:cd:11:a6:ae:21:26:4f:b7:a8:37:50:
                    92:d0:55:87:20:a2:ef:b7:ed:74:aa:83:76:34:6c:
                    4a:32:5d:c0:da:1c:3f:c7:72:a1:12:36:96:18:a1:
                    92:57:61:4f:d6:ed:fa:68:15:0c:96:23:d0:38:1f:
                    64:02:1c:1f:2b:62:1e:0d:53:91:85:ab:ce:e7:b5:
                    a1:e2:32:ac:e2:16:3a:07:e4:44:07:cb:7b:d0:4e:
                    20:a3:e5:bd:08:2a:46:d6:b7:6d:43:ae:f4:a0:7f:
                    a3:4c:5e:41:13:31:ae:b9:f6:fc:ac:ef:22:76:4e:
                    02:71:a4:5e:6a:98:ed:1f:31:30:08:bc:05:db:81:
                    75:1d:9e:73:34:94:23:d3:c4:a8:a4:56:0f:f0:1e:
                    3e:91:03:11:9c:3f:c9:92:99:d2:3f:3d:47:9d:58:
                    9d:b7:9c:10:e0:a1:07:d8:e6:1e:dc:67:cf:92:e5:
                    82:fc:b5:c1:5a:f5:03:05:94:b7:fa:b7:55:6a:3e:
                    8e:95:3d:e5:52:f4:95:3a:bc:08:3d:22:a7:3b:04:
                    8f:8a:40:c9:ec:61:57:c4:1c:b2:0e:36:51:ab:2c:
                    a8:ec:43:95:c5:a2:c9:e9:b6:a1:f7:d5:6e:00:fe:
                    16:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:11:8B:CB:FE:9F:56:DF:C4:24:88:9E:30:5A:36:50:08:6C:FB:95
            X509v3 Authority Key Identifier:
                keyid:9C:C5:CF:F7:E9:D1:68:49:5B:51:D8:3F:3C:35:5F:10:40:94:74:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7oVrcem1iPXHJTcEEqq1tbeDTVXTss45xizLh2rPJeuC/0/9CC5CFF7E9D168495B51D83F3C355F10409474FF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9CC5CFF7E9D168495B51D83F3C355F10409474FF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7oVrcem1iPXHJTcEEqq1tbeDTVXTss45xizLh2rPJeuC/0/3139312e3234312e382e302f32322d3234203d3e20323633363633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.241.8.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1e:d5:96:7c:0a:a8:07:4a:37:e4:37:79:f6:e2:ab:a7:56:2f:
         ea:3a:4d:01:e9:de:d0:8e:43:70:45:78:c8:3e:6f:3f:3f:7d:
         05:76:8f:ef:12:33:ca:6e:64:b5:ca:28:dd:ee:75:21:79:36:
         3d:ed:71:ba:10:80:98:0a:4d:33:e1:26:ee:49:e6:c6:b5:bf:
         9d:ab:68:47:eb:9e:e4:cd:cd:95:9a:30:f6:41:b5:d0:76:17:
         08:a2:ed:d6:57:60:e1:d9:86:88:21:35:6e:56:dd:4a:c2:8a:
         9b:24:31:83:8d:07:9c:6b:30:85:4c:24:8f:58:64:ad:19:f0:
         ec:24:1e:69:30:72:31:1b:49:60:e5:b8:50:cb:9f:dd:f9:29:
         cd:1b:4a:f5:4d:3c:f0:ee:f7:bc:de:aa:66:1e:ee:0a:56:82:
         01:7e:e6:70:ee:f3:9d:b9:9e:07:cb:8c:3a:66:2e:85:b1:5f:
         0d:d0:12:2e:b2:b8:db:5e:36:98:a0:31:83:0e:8f:d0:39:59:
         7b:d3:6f:a7:5d:d3:63:cb:73:88:5f:96:8d:d6:a9:c6:a3:a7:
         ce:cb:1f:32:7b:d5:68:2d:22:5b:96:36:d6:55:19:2f:14:f4:
         a8:3b:43:69:ea:cf:44:50:90:94:36:4e:e3:ae:d2:a5:3e:22:
         15:27:b5:0a
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUXNz9E3FTXLcQt50rmBo2kVQJf7UwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUNDNUNGRjdFOUQxNjg0OTVCNTFEODNGM0MzNTVGMTA0
MDk0NzRGRjAeFw0yNDAzMjIxNDI2NDhaFw0yNTAzMjExNDMxNDhaMDMxMTAvBgNV
BAMTKDQ0MTE4QkNCRkU5RjU2REZDNDI0ODg5RTMwNUEzNjUwMDg2Q0ZCOTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCg/g0vMPWzJsdhmv2DYhyG0nvN
EaauISZPt6g3UJLQVYcgou+37XSqg3Y0bEoyXcDaHD/HcqESNpYYoZJXYU/W7fpo
FQyWI9A4H2QCHB8rYh4NU5GFq87ntaHiMqziFjoH5EQHy3vQTiCj5b0IKkbWt21D
rvSgf6NMXkETMa659vys7yJ2TgJxpF5qmO0fMTAIvAXbgXUdnnM0lCPTxKikVg/w
Hj6RAxGcP8mSmdI/PUedWJ23nBDgoQfY5h7cZ8+S5YL8tcFa9QMFlLf6t1VqPo6V
PeVS9JU6vAg9Iqc7BI+KQMnsYVfEHLIONlGrLKjsQ5XFosnptqH31W4A/hYbAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQURBGLy/6fVt/EJIieMFo2UAhs+5UwHwYDVR0j
BBgwFoAUnMXP9+nRaElbUdg/PDVfEECUdP8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vN29WcmNlbTFpUFhISlRjRUVxcTF0YmVEVFZYVHNzNDV4aXpMaDJyUEpl
dUMvMC85Q0M1Q0ZGN0U5RDE2ODQ5NUI1MUQ4M0YzQzM1NUYxMDQwOTQ3NEZGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzlDQzVDRkY3RTlEMTY4NDk1
QjUxRDgzRjNDMzU1RjEwNDA5NDc0RkYuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzdvVnJjZW0xaVBYSEpUY0VFcXExdGJlRFRWWFRzczQ1eGl6TGgyclBKZXVDLzAv
MzEzOTMxMmUzMjM0MzEyZTM4MmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzNjMz
MzYzNjMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCv/EIMA0GCSqGSIb3DQEBCwUAA4IBAQAe1ZZ8CqgH
SjfkN3n24qunVi/qOk0B6d7QjkNwRXjIPm8/P30Fdo/vEjPKbmS1yijd7nUheTY9
7XG6EICYCk0z4SbuSebGtb+dq2hH657kzc2VmjD2QbXQdhcIou3WV2Dh2YaIITVu
Vt1KwoqbJDGDjQecazCFTCSPWGStGfDsJB5pMHIxG0lg5bhQy5/d+SnNG0r1TTzw
7ve83qpmHu4KVoIBfuZw7vOduZ4Hy4w6Zi6FsV8N0BIusrjbXjaYoDGDDo/QOVl7
02+nXdNjy3OIX5aN1qnGo6fOyx8ye9VoLSJbljbWVRkvFPSoO0Np6s9EUJCUNk7j
rtKlPiIVJ7UK
-----END CERTIFICATE-----
Generated at Tue Feb 18 13:37:10 2025 by rpki-client