Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8B7YwzQXRn6vaj7DJHPqjMiQHiawVEBCJDNrt8fZMZWk/0/3137372e3132382e3136382e302f32322d3234203d3e20323632333736.roa
File:                     3137372e3132382e3136382e302f32322d3234203d3e20323632333736.roa (raw, json)
Hash identifier:          hkFptV7VUM4ELk+P8U/72B0R0nq1zFy0lz9jcoNJ7CQ=
Subject key identifier:   1F:EE:5C:76:23:EE:42:6E:0A:9A:A2:9C:0F:1B:62:06:CA:26:C3:58
Certificate issuer:       /CN=3F5605C55C36989F0F2C6640A7F7FDBBDB0B62F6
Certificate serial:       2D0457007C1DB9A2943285E7DF7906122A00EF20
Authority key identifier: 3F:56:05:C5:5C:36:98:9F:0F:2C:66:40:A7:F7:FD:BB:DB:0B:62:F6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3F5605C55C36989F0F2C6640A7F7FDBBDB0B62F6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8B7YwzQXRn6vaj7DJHPqjMiQHiawVEBCJDNrt8fZMZWk/0/3137372e3132382e3136382e302f32322d3234203d3e20323632333736.roa
Signing time:             Thu 10 Aug 2023 18:46:00 +0000
ROA not before:           Thu 10 Aug 2023 18:41:00 +0000
ROA not after:            Thu 08 Aug 2024 18:46:00 +0000
asID:                     262376
IP address blocks:        177.128.168.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:04:57:00:7c:1d:b9:a2:94:32:85:e7:df:79:06:12:2a:00:ef:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3F5605C55C36989F0F2C6640A7F7FDBBDB0B62F6
        Validity
            Not Before: Aug 10 18:41:00 2023 GMT
            Not After : Aug  8 18:46:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:1e:c0:fb:0a:b6:f5:02:67:0e:b4:98:f0:0f:
                    df:be:db:27:fe:87:53:13:a2:c6:47:d9:96:d6:d2:
                    72:f8:8f:96:bf:a4:4a:99:dd:0e:b0:49:6a:64:18:
                    2b:bf:fe:46:69:cc:1d:d4:06:ba:88:44:32:74:91:
                    7e:cc:60:49:45:f9:57:6d:02:11:e8:c8:eb:9d:5f:
                    32:71:ff:15:f7:ce:ec:3c:a5:b2:c0:94:a4:06:0e:
                    c8:46:ab:67:8d:1d:01:cf:37:24:b3:ef:f5:70:42:
                    76:c2:65:44:44:ef:ad:7f:63:37:d3:90:b7:5f:3b:
                    46:b3:30:3f:29:05:89:00:10:fd:bc:48:db:b1:67:
                    b4:3d:00:1d:29:ac:bf:01:a7:c8:3d:9b:8e:82:ae:
                    e2:8e:fb:d8:c7:3d:f0:42:5b:1f:d9:60:85:a1:43:
                    eb:cb:2a:39:e7:c0:60:cc:b5:45:72:cc:d2:7c:ac:
                    96:f1:66:d3:93:83:a8:c1:01:8b:59:19:60:c9:01:
                    20:04:ce:47:88:fe:e9:72:b0:2b:88:ce:5c:55:8a:
                    8a:06:d4:07:5d:e0:91:e0:1e:8b:f9:87:e5:e8:84:
                    8b:2b:cd:82:7c:c6:6f:85:14:06:af:d2:80:f3:cc:
                    a4:b0:f2:9d:ac:3b:f9:2f:58:39:d8:d1:d3:8e:40:
                    8d:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:EE:5C:76:23:EE:42:6E:0A:9A:A2:9C:0F:1B:62:06:CA:26:C3:58
            X509v3 Authority Key Identifier:
                keyid:3F:56:05:C5:5C:36:98:9F:0F:2C:66:40:A7:F7:FD:BB:DB:0B:62:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8B7YwzQXRn6vaj7DJHPqjMiQHiawVEBCJDNrt8fZMZWk/0/3F5605C55C36989F0F2C6640A7F7FDBBDB0B62F6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3F5605C55C36989F0F2C6640A7F7FDBBDB0B62F6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8B7YwzQXRn6vaj7DJHPqjMiQHiawVEBCJDNrt8fZMZWk/0/3137372e3132382e3136382e302f32322d3234203d3e20323632333736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.128.168.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b5:8a:21:eb:1c:ee:1b:d9:5c:fc:4b:63:3f:9d:6f:03:cf:ae:
         4a:db:e0:5d:b1:85:26:07:2e:a7:76:04:50:99:1a:aa:fa:3a:
         ad:36:d3:3d:84:f2:20:07:e9:6b:e6:09:a8:80:88:2e:6a:82:
         bf:a4:02:61:a9:9f:2d:97:80:e0:6d:ad:6c:36:40:2d:f9:7b:
         4f:37:45:c6:bc:ff:37:77:63:81:eb:d0:ff:2e:1c:27:0e:ea:
         a8:98:aa:6d:9c:25:c4:37:cd:5e:17:50:9a:30:61:ce:7c:49:
         4b:f7:46:aa:07:b3:e3:de:f1:e5:d0:b2:19:50:be:b7:bc:a2:
         98:67:7e:7e:29:85:2c:7d:70:05:49:d4:65:8e:ec:ca:f8:61:
         46:b4:54:b4:a8:7c:1a:30:18:f3:59:28:a9:9b:8b:7b:7d:0f:
         b5:ea:af:b1:7d:86:cd:b6:81:25:3c:81:69:b8:a0:47:9c:77:
         f9:b8:2e:b8:b9:ea:a3:66:e8:8d:1b:70:a7:66:0f:60:14:62:
         ba:71:3b:aa:0e:09:00:5b:53:dd:03:67:ff:bf:91:1c:a9:da:
         1e:c7:78:cf:fb:c6:da:bb:2b:2d:e7:27:3c:84:73:04:17:6f:
         6a:c7:c9:d6:7f:e8:7d:b8:24:bb:3e:5c:90:e0:bd:c6:cc:78:
         56:ed:4d:5b
-----BEGIN CERTIFICATE-----
MIIHRTCCBi2gAwIBAgIULQRXAHwduaKUMoXn33kGEioA7yAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0Y1NjA1QzU1QzM2OTg5RjBGMkM2NjQwQTdGN0ZEQkJE
QjBCNjJGNjAeFw0yMzA4MTAxODQxMDBaFw0yNDA4MDgxODQ2MDBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQzMxRUMwRkIwQUI2RjUwMjY3
MEVCNDk4RjAwRkRGQkVEQjI3RkU4NzUzMTNBMkM2NDdEOTk2RDZEMjcyRjg4Rjk2
QkZBNDRBOTlERDBFQjA0OTZBNjQxODJCQkZGRTQ2NjlDQzFERDQwNkJBODg0NDMy
NzQ5MTdFQ0M2MDQ5NDVGOTU3NkQwMjExRThDOEVCOUQ1RjMyNzFGRjE1RjdDRUVD
M0NBNUIyQzA5NEE0MDYwRUM4NDZBQjY3OEQxRDAxQ0YzNzI0QjNFRkY1NzA0Mjc2
QzI2NTQ0NDRFRkFEN0Y2MzM3RDM5MEI3NUYzQjQ2QjMzMDNGMjkwNTg5MDAxMEZE
QkM0OERCQjE2N0I0M0QwMDFEMjlBQ0JGMDFBN0M4M0Q5QjhFODJBRUUyOEVGQkQ4
QzczREYwNDI1QjFGRDk2MDg1QTE0M0VCQ0IyQTM5RTdDMDYwQ0NCNTQ1NzJDQ0Qy
N0NBQzk2RjE2NkQzOTM4M0E4QzEwMThCNTkxOTYwQzkwMTIwMDRDRTQ3ODhGRUU5
NzJCMDJCODhDRTVDNTU4QThBMDZENDA3NURFMDkxRTAxRThCRjk4N0U1RTg4NDhC
MkJDRDgyN0NDNjZGODUxNDA2QUZEMjgwRjNDQ0E0QjBGMjlEQUMzQkY5MkY1ODM5
RDhEMUQzOEU0MDhEQTEwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAwx7A+wq29QJnDrSY8A/fvtsn/odTE6LGR9mW1tJy+I+Wv6RKmd0O
sElqZBgrv/5Gacwd1Aa6iEQydJF+zGBJRflXbQIR6MjrnV8ycf8V987sPKWywJSk
Bg7IRqtnjR0Bzzcks+/1cEJ2wmVERO+tf2M305C3XztGszA/KQWJABD9vEjbsWe0
PQAdKay/AafIPZuOgq7ijvvYxz3wQlsf2WCFoUPryyo558BgzLVFcszSfKyW8WbT
k4OowQGLWRlgyQEgBM5HiP7pcrAriM5cVYqKBtQHXeCR4B6L+Yfl6ISLK82CfMZv
hRQGr9KA88yksPKdrDv5L1g52NHTjkCNoQIDAQABo4ICUzCCAk8wHQYDVR0OBBYE
FB/uXHYj7kJuCpqinA8bYgbKJsNYMB8GA1UdIwQYMBaAFD9WBcVcNpifDyxmQKf3
/bvbC2L2MA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzhCN1l3elFYUm42dmFq
N0RKSFBxak1pUUhpYXdWRUJDSkROcnQ4ZlpNWldrLzAvM0Y1NjA1QzU1QzM2OTg5
RjBGMkM2NjQwQTdGN0ZEQkJEQjBCNjJGNi5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC8zRjU2MDVDNTVDMzY5ODlGMEYyQzY2NDBBN0Y3RkRCQkRCMEI2
MkY2LmNlcjCBsAYIKwYBBQUHAQsEgaMwgaAwgZ0GCCsGAQUFBzALhoGQcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby84QjdZd3pRWFJuNnZhajdESkhQ
cWpNaVFIaWF3VkVCQ0pETnJ0OGZaTVpXay8wLzMxMzczNzJlMzEzMjM4MmUzMTM2
MzgyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM2MzIzMzM3MzYucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAKxgKgwDQYJKoZIhvcNAQELBQADggEBALWKIesc7hvZXPxLYz+dbwPPrkrb4F2x
hSYHLqd2BFCZGqr6Oq020z2E8iAH6WvmCaiAiC5qgr+kAmGpny2XgOBtrWw2QC35
e083Rca8/zd3Y4Hr0P8uHCcO6qiYqm2cJcQ3zV4XUJowYc58SUv3RqoHs+Pe8eXQ
shlQvre8ophnfn4phSx9cAVJ1GWO7Mr4YUa0VLSofBowGPNZKKmbi3t9D7Xqr7F9
hs22gSU8gWm4oEecd/m4Lri56qNm6I0bcKdmD2AUYrpxO6oOCQBbU90DZ/+/kRyp
2h7HeM/7xtq7Ky3nJzyEcwQXb2rHydZ/6H24JLs+XJDgvcbMeFbtTVs=
-----END CERTIFICATE-----
Generated at Thu Apr 17 07:36:19 2025 by rpki-client