Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/81MBENFLH9n774A7GtBpX2iiDovbLZM3vKPcV2c7Ywpp/0/3136382e3139342e36372e302f32342d3234203d3e20323635333739.roa
File:                     3136382e3139342e36372e302f32342d3234203d3e20323635333739.roa (raw, json)
Hash identifier:          ldtLQn7NR2ugnnRIprGwTtN7tpBrPH7d2BC9Ppxh+Js=
Subject key identifier:   CF:63:74:4E:FF:A3:57:BE:7D:A2:B2:49:E2:48:9B:6A:9A:7C:69:81
Certificate issuer:       /CN=088F189D0C73ADF77B005E95BF5583276C57D174
Certificate serial:       42474C47D4B3C991615FA5FC06FF737CF808427C
Authority key identifier: 08:8F:18:9D:0C:73:AD:F7:7B:00:5E:95:BF:55:83:27:6C:57:D1:74
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/088F189D0C73ADF77B005E95BF5583276C57D174.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/81MBENFLH9n774A7GtBpX2iiDovbLZM3vKPcV2c7Ywpp/0/3136382e3139342e36372e302f32342d3234203d3e20323635333739.roa
Signing time:             Sat 16 Dec 2023 00:00:01 +0000
ROA not before:           Fri 15 Dec 2023 23:55:01 +0000
ROA not after:            Sat 14 Dec 2024 00:00:01 +0000
asID:                     265379
IP address blocks:        168.194.67.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:47:4c:47:d4:b3:c9:91:61:5f:a5:fc:06:ff:73:7c:f8:08:42:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=088F189D0C73ADF77B005E95BF5583276C57D174
        Validity
            Not Before: Dec 15 23:55:01 2023 GMT
            Not After : Dec 14 00:00:01 2024 GMT
        Subject: CN=CF63744EFFA357BE7DA2B249E2489B6A9A7C6981
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:b2:77:a1:f7:99:7e:b0:19:b8:92:16:e0:77:
                    ba:f9:bf:eb:9f:54:8f:99:8c:d0:5d:6f:64:ac:5f:
                    ab:f8:2b:f1:44:48:0a:4d:ac:cc:41:2e:cc:33:7b:
                    4d:8e:cc:20:55:8e:d2:bb:e8:d6:9b:3f:11:a1:26:
                    a8:ae:77:4f:43:cf:ce:d7:cb:ef:2f:e2:06:d0:cc:
                    ee:68:da:36:f0:61:66:9d:f9:14:a5:27:62:3d:69:
                    3b:62:ed:aa:e0:44:22:cf:8a:5d:76:00:2d:d9:8c:
                    0a:98:20:aa:da:d0:fd:4d:54:e6:14:40:fc:87:1d:
                    40:25:62:ce:b9:af:b9:75:ef:19:90:02:35:a2:6c:
                    1d:7c:87:5f:53:d2:07:d2:63:c2:e5:57:ea:45:04:
                    6b:da:7b:ea:41:be:cf:5d:f4:ac:88:00:d9:f0:8d:
                    85:29:f1:a0:b8:82:e1:ba:4c:5a:bf:f5:91:e0:8b:
                    8d:77:a3:7d:0a:b7:bc:e9:6d:b3:59:91:2b:34:bf:
                    57:38:96:ea:26:24:6c:ac:8d:c9:78:7c:38:f7:0b:
                    cc:a4:f8:be:3d:e1:6f:d4:02:e2:e7:e4:09:d2:e1:
                    c6:5e:33:8e:d9:8a:05:a8:90:08:bb:79:36:5a:59:
                    74:d5:e7:23:39:e9:26:ef:9f:e4:70:80:44:76:2a:
                    de:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:63:74:4E:FF:A3:57:BE:7D:A2:B2:49:E2:48:9B:6A:9A:7C:69:81
            X509v3 Authority Key Identifier:
                keyid:08:8F:18:9D:0C:73:AD:F7:7B:00:5E:95:BF:55:83:27:6C:57:D1:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/81MBENFLH9n774A7GtBpX2iiDovbLZM3vKPcV2c7Ywpp/0/088F189D0C73ADF77B005E95BF5583276C57D174.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/088F189D0C73ADF77B005E95BF5583276C57D174.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/81MBENFLH9n774A7GtBpX2iiDovbLZM3vKPcV2c7Ywpp/0/3136382e3139342e36372e302f32342d3234203d3e20323635333739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.194.67.0/24

    Signature Algorithm: sha256WithRSAEncryption
         45:56:6b:f7:9c:1d:c2:40:5e:99:97:93:00:a7:fc:17:90:f0:
         d9:e2:f1:b3:01:46:73:31:d3:f6:e0:50:8b:bd:96:3e:23:4e:
         c5:e6:f9:f1:12:14:93:10:00:b5:4a:82:75:c0:4a:09:e3:7a:
         34:ea:b9:3b:41:7e:64:22:69:44:1a:d8:c8:bf:b5:f5:00:7d:
         c8:08:ab:fb:68:3e:27:f6:57:52:19:4f:1b:4e:e0:da:9b:47:
         7d:2c:96:1c:8d:12:78:37:01:ff:73:89:86:43:c1:10:5d:25:
         ce:19:f0:23:24:b5:16:ef:0e:de:5f:fc:ad:10:a2:cd:c3:42:
         6e:d5:cd:d0:44:f4:b9:68:ad:fb:a9:6c:48:6b:a8:74:5a:9f:
         c8:16:5f:5b:0a:c7:62:30:86:fc:99:7b:a6:91:d2:9c:67:c6:
         cd:a5:93:e2:92:d0:6b:bf:d2:cb:6c:94:d7:8d:77:38:a0:da:
         02:37:c7:e0:53:3c:85:31:84:fe:d8:11:cf:4c:30:cf:db:cc:
         c0:52:25:f1:fd:cc:46:9e:93:e8:8c:49:eb:7e:a6:9c:02:dc:
         09:31:b6:76:98:ab:c4:2b:68:2d:ed:24:af:f5:27:f9:0f:32:
         05:80:eb:9e:dd:37:d9:2a:7d:f9:4e:94:06:41:ea:51:2f:dc:
         12:b9:17:ba
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUQkdMR9SzyZFhX6X8Bv9zfPgIQnwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDg4RjE4OUQwQzczQURGNzdCMDA1RTk1QkY1NTgzMjc2
QzU3RDE3NDAeFw0yMzEyMTUyMzU1MDFaFw0yNDEyMTQwMDAwMDFaMDMxMTAvBgNV
BAMTKENGNjM3NDRFRkZBMzU3QkU3REEyQjI0OUUyNDg5QjZBOUE3QzY5ODEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHsneh95l+sBm4khbgd7r5v+uf
VI+ZjNBdb2SsX6v4K/FESApNrMxBLswze02OzCBVjtK76NabPxGhJqiud09Dz87X
y+8v4gbQzO5o2jbwYWad+RSlJ2I9aTti7argRCLPil12AC3ZjAqYIKra0P1NVOYU
QPyHHUAlYs65r7l17xmQAjWibB18h19T0gfSY8LlV+pFBGvae+pBvs9d9KyIANnw
jYUp8aC4guG6TFq/9ZHgi413o30Kt7zpbbNZkSs0v1c4luomJGysjcl4fDj3C8yk
+L494W/UAuLn5AnS4cZeM47ZigWokAi7eTZaWXTV5yM56Sbvn+RwgER2Kt5vAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUz2N0Tv+jV759orJJ4kibapp8aYEwHwYDVR0j
BBgwFoAUCI8YnQxzrfd7AF6Vv1WDJ2xX0XQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vODFNQkVORkxIOW43NzRBN0d0QnBYMmlpRG92YkxaTTN2S1BjVjJjN1l3
cHAvMC8wODhGMTg5RDBDNzNBREY3N0IwMDVFOTVCRjU1ODMyNzZDNTdEMTc0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzA4OEYxODlEMEM3M0FERjc3
QjAwNUU5NUJGNTU4MzI3NkM1N0QxNzQuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzgxTUJFTkZMSDluNzc0QTdHdEJwWDJpaURvdmJMWk0zdktQY1YyYzdZd3BwLzAv
MzEzNjM4MmUzMTM5MzQyZTM2MzcyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzUzMzM3Mzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBACowkMwDQYJKoZIhvcNAQELBQADggEBAEVWa/ec
HcJAXpmXkwCn/BeQ8Nni8bMBRnMx0/bgUIu9lj4jTsXm+fESFJMQALVKgnXASgnj
ejTquTtBfmQiaUQa2Mi/tfUAfcgIq/toPif2V1IZTxtO4NqbR30slhyNEng3Af9z
iYZDwRBdJc4Z8CMktRbvDt5f/K0Qos3DQm7VzdBE9LlorfupbEhrqHRan8gWX1sK
x2IwhvyZe6aR0pxnxs2lk+KS0Gu/0stslNeNdzig2gI3x+BTPIUxhP7YEc9MMM/b
zMBSJfH9zEaek+iMSet+ppwC3AkxtnaYq8QraC3tJK/1J/kPMgWA657dN9kqfflO
lAZB6lEv3BK5F7o=
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:23:01 2025 by rpki-client