Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/81iVqZ9n9RSJSYazw3rqyycUbxJ1VwGrfabse2kwV2gT/0/3137302e3235342e37342e302f32342d3234203d3e20323633383838.roa
File:                     3137302e3235342e37342e302f32342d3234203d3e20323633383838.roa (raw, json)
Hash identifier:          1VzVyA58YGRTIsU3FcxUQIVGwCULSqCiWHWKoqQiG8k=
Subject key identifier:   9B:BA:C0:02:A2:33:0D:5F:7F:5C:22:83:C0:87:4B:24:DA:DD:6E:23
Certificate issuer:       /CN=D345B6970533DE54D08FAACFB67E42F987FCCE37
Certificate serial:       501FE9307C96121451AF01178FE751F8817ADCA1
Authority key identifier: D3:45:B6:97:05:33:DE:54:D0:8F:AA:CF:B6:7E:42:F9:87:FC:CE:37
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D345B6970533DE54D08FAACFB67E42F987FCCE37.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/81iVqZ9n9RSJSYazw3rqyycUbxJ1VwGrfabse2kwV2gT/0/3137302e3235342e37342e302f32342d3234203d3e20323633383838.roa
Signing time:             Tue 06 Sep 2022 15:00:01 +0000
ROA not before:           Tue 06 Sep 2022 14:55:01 +0000
ROA not after:            Tue 05 Sep 2023 15:00:01 +0000
asID:                     263888
IP address blocks:        170.254.74.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:1f:e9:30:7c:96:12:14:51:af:01:17:8f:e7:51:f8:81:7a:dc:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D345B6970533DE54D08FAACFB67E42F987FCCE37
        Validity
            Not Before: Sep  6 14:55:01 2022 GMT
            Not After : Sep  5 15:00:01 2023 GMT
        Subject: CN=3082010A0282010100BB7BA7A81B6E48FC7DD3B6C7D31B68C8F6BDEF443735E0E4A79E9926616DC146483B746074E1E3107EE16FFD250DFCF8C869C88946DB45BB026644970562B23B969C2C31F63148188AAE27F59BAFBE6B378BFBC34C064D6AA8BE8E2449F1E8C43F9F688D27958762D1DADED9828AAC4E90EB4DDD4606639147C0E6A10C1EF90E05B66DFAA0968AD32F8A77C174CCA815E8CC880642F08EAF3D729DF80FCD7F27EF250B597F7809B95672EAF5BEB574AF5EB6A533B3C4CE3D8BDC19A42507AED1DB13AA87CB4C326B1C830C1DD0EF3D28E01F7E06662ED2A077DDC462E3AADEEE413EB19259E95D62C0122F6979076718202BF23DCCF37591DCBC37B6C38195A10203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:7b:a7:a8:1b:6e:48:fc:7d:d3:b6:c7:d3:1b:
                    68:c8:f6:bd:ef:44:37:35:e0:e4:a7:9e:99:26:61:
                    6d:c1:46:48:3b:74:60:74:e1:e3:10:7e:e1:6f:fd:
                    25:0d:fc:f8:c8:69:c8:89:46:db:45:bb:02:66:44:
                    97:05:62:b2:3b:96:9c:2c:31:f6:31:48:18:8a:ae:
                    27:f5:9b:af:be:6b:37:8b:fb:c3:4c:06:4d:6a:a8:
                    be:8e:24:49:f1:e8:c4:3f:9f:68:8d:27:95:87:62:
                    d1:da:de:d9:82:8a:ac:4e:90:eb:4d:dd:46:06:63:
                    91:47:c0:e6:a1:0c:1e:f9:0e:05:b6:6d:fa:a0:96:
                    8a:d3:2f:8a:77:c1:74:cc:a8:15:e8:cc:88:06:42:
                    f0:8e:af:3d:72:9d:f8:0f:cd:7f:27:ef:25:0b:59:
                    7f:78:09:b9:56:72:ea:f5:be:b5:74:af:5e:b6:a5:
                    33:b3:c4:ce:3d:8b:dc:19:a4:25:07:ae:d1:db:13:
                    aa:87:cb:4c:32:6b:1c:83:0c:1d:d0:ef:3d:28:e0:
                    1f:7e:06:66:2e:d2:a0:77:dd:c4:62:e3:aa:de:ee:
                    41:3e:b1:92:59:e9:5d:62:c0:12:2f:69:79:07:67:
                    18:20:2b:f2:3d:cc:f3:75:91:dc:bc:37:b6:c3:81:
                    95:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:BA:C0:02:A2:33:0D:5F:7F:5C:22:83:C0:87:4B:24:DA:DD:6E:23
            X509v3 Authority Key Identifier:
                keyid:D3:45:B6:97:05:33:DE:54:D0:8F:AA:CF:B6:7E:42:F9:87:FC:CE:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/81iVqZ9n9RSJSYazw3rqyycUbxJ1VwGrfabse2kwV2gT/0/D345B6970533DE54D08FAACFB67E42F987FCCE37.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D345B6970533DE54D08FAACFB67E42F987FCCE37.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/81iVqZ9n9RSJSYazw3rqyycUbxJ1VwGrfabse2kwV2gT/0/3137302e3235342e37342e302f32342d3234203d3e20323633383838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.254.74.0/24

    Signature Algorithm: sha256WithRSAEncryption
         e2:d4:0b:74:a1:5f:70:c8:e3:3b:f4:12:98:3d:f5:37:64:cb:
         db:68:57:cd:7c:36:57:88:40:62:dd:ff:76:ba:b7:01:c1:1f:
         36:4f:1b:0f:a1:d9:f5:4c:8e:5b:ce:6d:6e:5b:12:a6:95:4d:
         02:3d:a4:5e:24:ce:37:54:a9:cf:56:b4:72:2b:00:a8:87:c9:
         dd:2a:03:f0:48:3a:e7:b6:71:3e:d2:51:9a:07:54:ee:9f:d4:
         8a:b6:11:dd:5c:32:08:ec:8e:e3:09:d9:07:46:bd:c0:e4:e1:
         2f:0e:99:1a:c3:2b:b0:ba:50:db:6f:ac:e8:1b:d6:78:8b:a8:
         31:12:58:80:8a:11:ee:51:ca:77:fa:18:85:f6:0d:f2:7c:0c:
         fd:ea:bd:8b:f0:67:9e:83:f0:61:b0:76:d1:04:02:0e:f7:d6:
         a1:ae:b6:fd:98:c7:9d:37:f9:06:ff:35:2c:e1:92:f6:9f:70:
         8f:12:1d:85:dd:37:1e:76:d3:62:de:8a:dc:8c:bd:3f:54:0a:
         84:6e:c2:25:68:1e:36:59:66:b2:f5:9f:98:35:b8:58:62:aa:
         be:90:cd:0b:d9:1a:53:92:07:f1:be:70:bd:13:12:f3:cf:f3:
         ab:3d:45:be:09:41:45:7f:1b:c1:d6:d7:b6:c2:34:21:63:b4:
         62:8c:04:79
-----BEGIN CERTIFICATE-----
MIIHQzCCBiugAwIBAgIUUB/pMHyWEhRRrwEXj+dR+IF63KEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDM0NUI2OTcwNTMzREU1NEQwOEZBQUNGQjY3RTQyRjk4
N0ZDQ0UzNzAeFw0yMjA5MDYxNDU1MDFaFw0yMzA5MDUxNTAwMDFaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQkI3QkE3QTgxQjZFNDhGQzdE
RDNCNkM3RDMxQjY4QzhGNkJERUY0NDM3MzVFMEU0QTc5RTk5MjY2MTZEQzE0NjQ4
M0I3NDYwNzRFMUUzMTA3RUUxNkZGRDI1MERGQ0Y4Qzg2OUM4ODk0NkRCNDVCQjAy
NjY0NDk3MDU2MkIyM0I5NjlDMkMzMUY2MzE0ODE4OEFBRTI3RjU5QkFGQkU2QjM3
OEJGQkMzNEMwNjRENkFBOEJFOEUyNDQ5RjFFOEM0M0Y5RjY4OEQyNzk1ODc2MkQx
REFERUQ5ODI4QUFDNEU5MEVCNERERDQ2MDY2MzkxNDdDMEU2QTEwQzFFRjkwRTA1
QjY2REZBQTA5NjhBRDMyRjhBNzdDMTc0Q0NBODE1RThDQzg4MDY0MkYwOEVBRjNE
NzI5REY4MEZDRDdGMjdFRjI1MEI1OTdGNzgwOUI5NTY3MkVBRjVCRUI1NzRBRjVF
QjZBNTMzQjNDNENFM0Q4QkRDMTlBNDI1MDdBRUQxREIxM0FBODdDQjRDMzI2QjFD
ODMwQzFERDBFRjNEMjhFMDFGN0UwNjY2MkVEMkEwNzdEREM0NjJFM0FBREVFRTQx
M0VCMTkyNTlFOTVENjJDMDEyMkY2OTc5MDc2NzE4MjAyQkYyM0RDQ0YzNzU5MURD
QkMzN0I2QzM4MTk1QTEwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAu3unqBtuSPx907bH0xtoyPa970Q3NeDkp56ZJmFtwUZIO3RgdOHj
EH7hb/0lDfz4yGnIiUbbRbsCZkSXBWKyO5acLDH2MUgYiq4n9Zuvvms3i/vDTAZN
aqi+jiRJ8ejEP59ojSeVh2LR2t7ZgoqsTpDrTd1GBmORR8DmoQwe+Q4Ftm36oJaK
0y+Kd8F0zKgV6MyIBkLwjq89cp34D81/J+8lC1l/eAm5VnLq9b61dK9etqUzs8TO
PYvcGaQlB67R2xOqh8tMMmscgwwd0O89KOAffgZmLtKgd93EYuOq3u5BPrGSWeld
YsASL2l5B2cYICvyPczzdZHcvDe2w4GVoQIDAQABo4ICUTCCAk0wHQYDVR0OBBYE
FJu6wAKiMw1ff1wig8CHSyTa3W4jMB8GA1UdIwQYMBaAFNNFtpcFM95U0I+qz7Z+
QvmH/M43MA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzgxaVZxWjluOVJTSlNZ
YXp3M3JxeXljVWJ4SjFWd0dyZmFic2Uya3dWMmdULzAvRDM0NUI2OTcwNTMzREU1
NEQwOEZBQUNGQjY3RTQyRjk4N0ZDQ0UzNy5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC9EMzQ1QjY5NzA1MzNERTU0RDA4RkFBQ0ZCNjdFNDJGOTg3RkND
RTM3LmNlcjCBrgYIKwYBBQUHAQsEgaEwgZ4wgZsGCCsGAQUFBzALhoGOcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby84MWlWcVo5bjlSU0pTWWF6dzNy
cXl5Y1VieEoxVndHcmZhYnNlMmt3VjJnVC8wLzMxMzczMDJlMzIzNTM0MmUzNzM0
MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjMzMzgzODM4LnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA
qv5KMA0GCSqGSIb3DQEBCwUAA4IBAQDi1At0oV9wyOM79BKYPfU3ZMvbaFfNfDZX
iEBi3f92urcBwR82TxsPodn1TI5bzm1uWxKmlU0CPaReJM43VKnPVrRyKwCoh8nd
KgPwSDrntnE+0lGaB1Tun9SKthHdXDII7I7jCdkHRr3A5OEvDpkawyuwulDbb6zo
G9Z4i6gxEliAihHuUcp3+hiF9g3yfAz96r2L8Geeg/BhsHbRBAIO99ahrrb9mMed
N/kG/zUs4ZL2n3CPEh2F3TcedtNi3orcjL0/VAqEbsIlaB42WWay9Z+YNbhYYqq+
kM0L2RpTkgfxvnC9ExLzz/OrPUW+CUFFfxvB1te2wjQhY7RijAR5
-----END CERTIFICATE-----
Generated at Tue Feb 18 13:31:14 2025 by rpki-client