Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8DT8PSyzXcPqKEZZGvSVeW1VnuzqEB3kFhxw3xos5axH/0/3136382e3232372e3138342e302f32322d3234203d3e20323634383837.roa
File:                     3136382e3232372e3138342e302f32322d3234203d3e20323634383837.roa (raw, json)
Hash identifier:          XNbCPyao3x9iNyhaqiIhEYRXoqAfTN/pyoATIy2cBXY=
Subject key identifier:   CF:6A:4D:2A:E9:17:46:7B:1E:EB:F3:F8:60:AF:62:51:05:47:55:CF
Certificate issuer:       /CN=6F723D3D7999E774FB9A843A8D5F36A5691C67BE
Certificate serial:       2137029ACBF2460580A9CA07500DE2F51FBD586B
Authority key identifier: 6F:72:3D:3D:79:99:E7:74:FB:9A:84:3A:8D:5F:36:A5:69:1C:67:BE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6F723D3D7999E774FB9A843A8D5F36A5691C67BE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8DT8PSyzXcPqKEZZGvSVeW1VnuzqEB3kFhxw3xos5axH/0/3136382e3232372e3138342e302f32322d3234203d3e20323634383837.roa
Signing time:             Tue 20 Sep 2022 15:05:35 +0000
ROA not before:           Tue 20 Sep 2022 15:00:35 +0000
ROA not after:            Tue 19 Sep 2023 15:05:35 +0000
asID:                     264887
IP address blocks:        168.227.184.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:37:02:9a:cb:f2:46:05:80:a9:ca:07:50:0d:e2:f5:1f:bd:58:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6F723D3D7999E774FB9A843A8D5F36A5691C67BE
        Validity
            Not Before: Sep 20 15:00:35 2022 GMT
            Not After : Sep 19 15:05:35 2023 GMT
        Subject: CN=CF6A4D2AE917467B1EEBF3F860AF6251054755CF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:a0:d4:6b:d6:2d:6f:cf:cb:2e:59:81:d3:ce:
                    81:31:eb:15:95:b7:14:49:49:5b:08:6c:55:db:76:
                    4a:3d:7a:37:bb:e4:c0:81:15:f2:5b:87:a1:cc:6a:
                    0e:b2:5d:1c:57:02:fe:43:97:7b:99:74:1d:ed:28:
                    0e:d5:f4:98:e4:a3:bf:6f:ab:ab:60:31:37:79:31:
                    83:c7:d1:05:71:9e:ac:e9:9f:f1:5d:eb:8c:2c:f2:
                    04:1c:b4:34:60:e4:a8:8e:5d:1f:0d:12:fe:6f:f0:
                    9e:ee:af:20:ac:c9:ba:55:2d:ee:3c:e9:6c:20:c7:
                    0c:62:fc:54:66:74:11:f3:f5:6c:4e:23:45:3a:d7:
                    dc:a3:7b:e5:ca:4f:ed:c3:55:a9:04:b5:b9:5b:22:
                    41:01:7c:f1:b8:c9:92:fd:54:be:f4:58:d7:33:ef:
                    21:20:9a:a9:6b:1a:ae:a5:de:39:ae:af:ac:08:43:
                    c3:a6:00:46:78:08:4b:12:32:aa:5d:a6:11:0b:b9:
                    7f:c2:c5:1c:48:aa:b2:3a:5d:2d:21:19:ca:a5:8a:
                    07:43:39:69:02:9a:73:e1:fc:8b:7e:fd:66:86:fd:
                    bf:eb:11:77:db:70:cd:12:72:d1:c4:39:2f:b1:c4:
                    99:d8:ff:c4:05:23:67:0c:c3:89:8b:2c:27:b6:5e:
                    3a:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:6A:4D:2A:E9:17:46:7B:1E:EB:F3:F8:60:AF:62:51:05:47:55:CF
            X509v3 Authority Key Identifier:
                keyid:6F:72:3D:3D:79:99:E7:74:FB:9A:84:3A:8D:5F:36:A5:69:1C:67:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8DT8PSyzXcPqKEZZGvSVeW1VnuzqEB3kFhxw3xos5axH/0/6F723D3D7999E774FB9A843A8D5F36A5691C67BE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6F723D3D7999E774FB9A843A8D5F36A5691C67BE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8DT8PSyzXcPqKEZZGvSVeW1VnuzqEB3kFhxw3xos5axH/0/3136382e3232372e3138342e302f32322d3234203d3e20323634383837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.227.184.0/22

    Signature Algorithm: sha256WithRSAEncryption
         36:1e:fa:5d:04:60:23:8a:13:ef:aa:7a:11:5b:f9:83:cb:e5:
         d7:5e:31:20:f9:fa:78:f3:f6:c4:2f:8e:af:e7:95:e4:69:bb:
         1f:36:2e:c4:34:c6:c4:a7:cf:67:a1:5b:a8:4c:af:95:1a:85:
         6f:f0:88:41:59:17:39:0b:f0:cb:9c:03:5a:b7:14:d7:89:c1:
         10:6a:a8:77:9e:75:ef:f8:c1:2b:78:a8:2b:85:b3:da:49:e2:
         2f:8e:bd:18:55:85:eb:35:99:bd:16:c8:d6:9f:8e:30:2f:2d:
         57:e5:3b:ba:c1:2e:45:d5:d9:c1:27:ff:9d:a2:8d:3f:9d:66:
         de:0c:2f:e7:82:d8:30:56:5e:f2:bf:b5:43:99:c3:f7:76:55:
         bc:a4:cf:88:3b:d8:50:04:e7:a3:a2:ee:69:d6:cc:ee:de:5d:
         bf:53:47:bf:68:90:a3:8a:70:f2:e6:66:6a:f1:fb:51:3f:f2:
         40:51:62:21:2a:35:a9:7d:f6:b8:7e:61:ab:f2:66:76:52:ce:
         65:af:d3:40:f3:8d:e3:36:7f:27:9f:a8:1c:11:b7:2f:3f:1b:
         d3:dc:05:27:3b:41:4f:1b:b1:3e:c0:f6:b6:8f:a4:e7:05:6c:
         16:38:10:15:af:c9:d1:65:f6:d7:b4:7a:80:6b:c4:7e:5b:95:
         6a:37:ec:40
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUITcCmsvyRgWAqcoHUA3i9R+9WGswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkY3MjNEM0Q3OTk5RTc3NEZCOUE4NDNBOEQ1RjM2QTU2
OTFDNjdCRTAeFw0yMjA5MjAxNTAwMzVaFw0yMzA5MTkxNTA1MzVaMDMxMTAvBgNV
BAMTKENGNkE0RDJBRTkxNzQ2N0IxRUVCRjNGODYwQUY2MjUxMDU0NzU1Q0YwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8oNRr1i1vz8suWYHTzoEx6xWV
txRJSVsIbFXbdko9eje75MCBFfJbh6HMag6yXRxXAv5Dl3uZdB3tKA7V9Jjko79v
q6tgMTd5MYPH0QVxnqzpn/Fd64ws8gQctDRg5KiOXR8NEv5v8J7uryCsybpVLe48
6Wwgxwxi/FRmdBHz9WxOI0U619yje+XKT+3DVakEtblbIkEBfPG4yZL9VL70WNcz
7yEgmqlrGq6l3jmur6wIQ8OmAEZ4CEsSMqpdphELuX/CxRxIqrI6XS0hGcqligdD
OWkCmnPh/It+/WaG/b/rEXfbcM0SctHEOS+xxJnY/8QFI2cMw4mLLCe2XjoXAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUz2pNKukXRnse6/P4YK9iUQVHVc8wHwYDVR0j
BBgwFoAUb3I9PXmZ53T7moQ6jV82pWkcZ74wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOERUOFBTeXpYY1BxS0VaWkd2U1ZlVzFWbnV6cUVCM2tGaHh3M3hvczVh
eEgvMC82RjcyM0QzRDc5OTlFNzc0RkI5QTg0M0E4RDVGMzZBNTY5MUM2N0JFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzZGNzIzRDNENzk5OUU3NzRG
QjlBODQzQThENUYzNkE1NjkxQzY3QkUuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzhEVDhQU3l6WGNQcUtFWlpHdlNWZVcxVm51enFFQjNrRmh4dzN4b3M1YXhILzAv
MzEzNjM4MmUzMjMyMzcyZTMxMzgzNDJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDMy
MzYzNDM4MzgzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAqjjuDANBgkqhkiG9w0BAQsFAAOCAQEANh76
XQRgI4oT76p6EVv5g8vl114xIPn6ePP2xC+Or+eV5Gm7HzYuxDTGxKfPZ6FbqEyv
lRqFb/CIQVkXOQvwy5wDWrcU14nBEGqod5517/jBK3ioK4Wz2kniL469GFWF6zWZ
vRbI1p+OMC8tV+U7usEuRdXZwSf/naKNP51m3gwv54LYMFZe8r+1Q5nD93ZVvKTP
iDvYUATno6LuadbM7t5dv1NHv2iQo4pw8uZmavH7UT/yQFFiISo1qX32uH5hq/Jm
dlLOZa/TQPON4zZ/J5+oHBG3Lz8b09wFJztBTxuxPsD2to+k5wVsFjgQFa/J0WX2
17R6gGvEfluVajfsQA==
-----END CERTIFICATE-----
Generated at Fri Apr 18 14:18:27 2025 by rpki-client