Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8bPCsCn3mhiyv1jGXs2zBbyRT1ZETBxkKLNshfj3FTcW/0/3137372e33392e3130342e302f32322d3234203d3e20323638323030.roa
File:                     3137372e33392e3130342e302f32322d3234203d3e20323638323030.roa (raw, json)
Hash identifier:          YMNT5lQqcE+7pop5X8fq+lARomkzhXOm7Ln4hQ5iVF4=
Subject key identifier:   6C:A4:A6:90:B9:8E:8E:A7:CD:E3:0F:22:3C:10:C0:E4:EE:DA:8D:1A
Certificate issuer:       /CN=6F3CB5D768701FAFEA7064BEF7BD95141DF9CA84
Certificate serial:       427533CA69928086A37050C529128B175295B806
Authority key identifier: 6F:3C:B5:D7:68:70:1F:AF:EA:70:64:BE:F7:BD:95:14:1D:F9:CA:84
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6F3CB5D768701FAFEA7064BEF7BD95141DF9CA84.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8bPCsCn3mhiyv1jGXs2zBbyRT1ZETBxkKLNshfj3FTcW/0/3137372e33392e3130342e302f32322d3234203d3e20323638323030.roa
Signing time:             Fri 27 Oct 2023 13:42:09 +0000
ROA not before:           Fri 27 Oct 2023 13:37:09 +0000
ROA not after:            Fri 25 Oct 2024 13:42:09 +0000
asID:                     268200
IP address blocks:        177.39.104.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:75:33:ca:69:92:80:86:a3:70:50:c5:29:12:8b:17:52:95:b8:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6F3CB5D768701FAFEA7064BEF7BD95141DF9CA84
        Validity
            Not Before: Oct 27 13:37:09 2023 GMT
            Not After : Oct 25 13:42:09 2024 GMT
        Subject: CN=6CA4A690B98E8EA7CDE30F223C10C0E4EEDA8D1A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:f7:be:78:7a:44:0b:ca:49:62:5e:56:b8:7f:
                    0a:1c:5e:7c:47:03:3e:4b:1b:0b:8d:21:e3:56:51:
                    ad:ff:7c:fd:a1:b7:ef:95:e7:b3:a1:71:c2:d4:b6:
                    0e:be:cd:b3:de:14:29:d5:b3:b3:ce:ec:3e:c1:2c:
                    e4:95:a7:76:9d:83:18:70:d2:b0:de:0b:71:a1:24:
                    71:e8:aa:84:61:23:2b:97:40:de:35:ea:1b:b9:e6:
                    1e:8e:a3:fe:d7:bc:37:68:95:0b:a7:b6:67:b0:94:
                    03:a9:cc:a3:b9:ba:64:42:41:5b:48:9a:f2:f3:a2:
                    0d:d2:2a:28:ab:3c:cf:db:49:09:51:c3:c6:2e:cb:
                    42:f7:5c:91:1f:52:01:fb:a0:f6:7f:c5:3a:3a:c2:
                    97:90:c3:a0:9f:30:f0:68:52:16:a7:e8:78:df:12:
                    81:d4:ec:1b:e2:26:3e:a7:c9:02:c3:7a:09:ed:59:
                    78:c0:05:ea:a2:ea:d6:4d:94:d7:57:16:03:4a:e5:
                    49:c7:4e:89:1d:47:5d:81:e4:20:c3:7f:bb:31:c5:
                    96:36:56:76:f5:20:8c:1e:6b:5b:89:69:12:be:ab:
                    39:3a:0e:49:14:19:6a:bb:37:05:c5:96:bd:34:91:
                    12:c5:21:34:aa:c5:78:d6:a0:1a:be:f0:4c:17:64:
                    bd:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:A4:A6:90:B9:8E:8E:A7:CD:E3:0F:22:3C:10:C0:E4:EE:DA:8D:1A
            X509v3 Authority Key Identifier:
                keyid:6F:3C:B5:D7:68:70:1F:AF:EA:70:64:BE:F7:BD:95:14:1D:F9:CA:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8bPCsCn3mhiyv1jGXs2zBbyRT1ZETBxkKLNshfj3FTcW/0/6F3CB5D768701FAFEA7064BEF7BD95141DF9CA84.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6F3CB5D768701FAFEA7064BEF7BD95141DF9CA84.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8bPCsCn3mhiyv1jGXs2zBbyRT1ZETBxkKLNshfj3FTcW/0/3137372e33392e3130342e302f32322d3234203d3e20323638323030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.39.104.0/22

    Signature Algorithm: sha256WithRSAEncryption
         35:42:66:35:be:24:59:bd:85:2e:5f:ee:9b:31:95:2d:23:75:
         a4:83:d2:f3:5a:b4:d6:b3:72:f5:91:7f:f7:3e:b5:ee:0e:c3:
         d3:ee:30:b6:0c:92:29:a4:f6:1a:a3:30:bd:80:61:70:b6:d2:
         73:41:41:13:45:46:d1:92:4c:b3:6f:a0:45:37:c6:7c:89:01:
         f7:61:71:a9:5d:fe:1b:45:3a:a9:21:9d:ee:0b:20:6a:a6:82:
         ff:49:a0:af:9e:b1:18:3c:83:7c:8d:2c:0f:3d:62:15:e0:6d:
         97:ed:44:90:18:d0:9b:3c:f0:7b:05:9c:56:50:8d:01:23:1f:
         b2:80:26:14:99:e5:8c:31:b3:d4:87:69:94:a0:0c:84:48:3a:
         0c:b8:3f:d8:e2:d2:3f:7a:3d:f8:4a:bd:78:17:72:d4:ee:e9:
         e2:87:13:a3:de:59:58:6b:35:cf:d8:be:f5:69:3f:29:ce:e8:
         e9:a3:91:bf:d4:22:9b:4d:b5:e3:4c:a1:99:2d:d2:27:5d:d0:
         57:2b:a7:fd:fb:79:6c:e9:74:87:fd:24:9a:1f:ee:84:d1:7a:
         0d:19:8f:e2:80:e6:4b:36:a9:01:02:5f:fc:18:05:9c:9e:3f:
         9b:18:93:a0:c3:d7:a5:20:4e:5a:db:3a:87:87:24:b1:2d:6a:
         0a:96:4a:75
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUQnUzymmSgIajcFDFKRKLF1KVuAYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkYzQ0I1RDc2ODcwMUZBRkVBNzA2NEJFRjdCRDk1MTQx
REY5Q0E4NDAeFw0yMzEwMjcxMzM3MDlaFw0yNDEwMjUxMzQyMDlaMDMxMTAvBgNV
BAMTKDZDQTRBNjkwQjk4RThFQTdDREUzMEYyMjNDMTBDMEU0RUVEQThEMUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC79754ekQLykliXla4fwocXnxH
Az5LGwuNIeNWUa3/fP2ht++V57OhccLUtg6+zbPeFCnVs7PO7D7BLOSVp3adgxhw
0rDeC3GhJHHoqoRhIyuXQN416hu55h6Oo/7XvDdolQuntmewlAOpzKO5umRCQVtI
mvLzog3SKiirPM/bSQlRw8Yuy0L3XJEfUgH7oPZ/xTo6wpeQw6CfMPBoUhan6Hjf
EoHU7BviJj6nyQLDegntWXjABeqi6tZNlNdXFgNK5UnHTokdR12B5CDDf7sxxZY2
Vnb1IIwea1uJaRK+qzk6DkkUGWq7NwXFlr00kRLFITSqxXjWoBq+8EwXZL3zAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUbKSmkLmOjqfN4w8iPBDA5O7ajRowHwYDVR0j
BBgwFoAUbzy112hwH6/qcGS+972VFB35yoQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOGJQQ3NDbjNtaGl5djFqR1hzMnpCYnlSVDFaRVRCeGtLTE5zaGZqM0ZU
Y1cvMC82RjNDQjVENzY4NzAxRkFGRUE3MDY0QkVGN0JEOTUxNDFERjlDQTg0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzZGM0NCNUQ3Njg3MDFGQUZF
QTcwNjRCRUY3QkQ5NTE0MURGOUNBODQuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzhiUENzQ24zbWhpeXYxakdYczJ6QmJ5UlQxWkVUQnhrS0xOc2hmajNGVGNXLzAv
MzEzNzM3MmUzMzM5MmUzMTMwMzQyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM2
MzgzMjMwMzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAKxJ2gwDQYJKoZIhvcNAQELBQADggEBADVCZjW+
JFm9hS5f7psxlS0jdaSD0vNatNazcvWRf/c+te4Ow9PuMLYMkimk9hqjML2AYXC2
0nNBQRNFRtGSTLNvoEU3xnyJAfdhcald/htFOqkhne4LIGqmgv9JoK+esRg8g3yN
LA89YhXgbZftRJAY0Js88HsFnFZQjQEjH7KAJhSZ5Ywxs9SHaZSgDIRIOgy4P9ji
0j96PfhKvXgXctTu6eKHE6PeWVhrNc/YvvVpPynO6Omjkb/UIptNteNMoZkt0idd
0Fcrp/37eWzpdIf9JJof7oTReg0Zj+KA5ks2qQECX/wYBZyeP5sYk6DD16UgTlrb
OoeHJLEtagqWSnU=
-----END CERTIFICATE-----
Generated at Mon Apr 21 07:17:48 2025 by rpki-client