Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8kUmK7JT6oTdEnZFhHK18LpnpKYuHM8q1GhbTrMJb8pd/0/3137302e3234352e3130302e302f32322d3232203d3e203238323230.roa
File:                     3137302e3234352e3130302e302f32322d3232203d3e203238323230.roa (raw, json)
Hash identifier:          KImI5IbZs8p+Nb10itmv7Oo0tpoLXe08vhWSIDbVIH0=
Subject key identifier:   CE:D3:6B:E3:1A:BC:DD:3A:51:6D:D6:08:C6:F5:00:5A:8E:EE:7C:E7
Certificate issuer:       /CN=2665C5CDE8A42C9F8B1032308AEC6CF95990FC6F
Certificate serial:       14BD990E932B464AEEE8051CECB7BB68F574D5A5
Authority key identifier: 26:65:C5:CD:E8:A4:2C:9F:8B:10:32:30:8A:EC:6C:F9:59:90:FC:6F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2665C5CDE8A42C9F8B1032308AEC6CF95990FC6F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8kUmK7JT6oTdEnZFhHK18LpnpKYuHM8q1GhbTrMJb8pd/0/3137302e3234352e3130302e302f32322d3232203d3e203238323230.roa
Signing time:             Thu 06 Oct 2022 17:56:28 +0000
ROA not before:           Thu 06 Oct 2022 17:51:28 +0000
ROA not after:            Thu 05 Oct 2023 17:56:28 +0000
asID:                     28220
IP address blocks:        170.245.100.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:bd:99:0e:93:2b:46:4a:ee:e8:05:1c:ec:b7:bb:68:f5:74:d5:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2665C5CDE8A42C9F8B1032308AEC6CF95990FC6F
        Validity
            Not Before: Oct  6 17:51:28 2022 GMT
            Not After : Oct  5 17:56:28 2023 GMT
        Subject: CN=CED36BE31ABCDD3A516DD608C6F5005A8EEE7CE7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:13:28:39:fd:3f:16:e4:c4:d2:46:c8:8c:20:
                    70:a7:5c:5c:c1:b3:e8:91:8e:8c:26:14:1a:8f:18:
                    6d:f3:d9:e9:94:49:c5:4b:81:0c:e3:6e:e5:1a:d3:
                    99:f9:0d:81:dd:20:c5:8e:09:ef:14:fd:0b:2e:9d:
                    8f:50:70:47:24:1d:a9:76:03:fb:09:b3:6b:b4:b1:
                    f7:25:98:a9:1a:d6:26:8d:be:cf:3e:10:20:8b:cc:
                    5a:29:75:29:a0:6a:f1:64:cc:12:d2:5e:db:bd:4d:
                    98:ea:4e:11:7d:4a:b6:fb:ea:df:9b:bb:86:71:18:
                    f0:bd:5d:c4:2f:de:8a:ec:62:e8:eb:4b:33:b4:e2:
                    3e:f6:b2:42:da:8c:e6:f9:24:fd:ea:ea:ab:d0:31:
                    91:49:92:54:be:01:08:96:0c:04:68:8f:7b:97:b1:
                    ef:85:2a:75:75:b3:a8:2a:5e:27:20:30:e8:dd:74:
                    32:a5:f1:76:9c:d2:1b:86:e7:ae:ac:fd:0d:6a:00:
                    5a:74:d4:c6:c8:78:dd:54:26:6c:2c:3c:d4:15:c2:
                    52:08:2a:9a:25:29:65:ba:da:c9:14:4c:45:c0:d9:
                    45:89:7e:64:0b:81:df:9d:04:c4:68:18:50:a9:ea:
                    0c:16:bb:36:f5:b2:ac:ba:67:db:48:e3:a5:eb:d0:
                    64:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:D3:6B:E3:1A:BC:DD:3A:51:6D:D6:08:C6:F5:00:5A:8E:EE:7C:E7
            X509v3 Authority Key Identifier:
                keyid:26:65:C5:CD:E8:A4:2C:9F:8B:10:32:30:8A:EC:6C:F9:59:90:FC:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8kUmK7JT6oTdEnZFhHK18LpnpKYuHM8q1GhbTrMJb8pd/0/2665C5CDE8A42C9F8B1032308AEC6CF95990FC6F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2665C5CDE8A42C9F8B1032308AEC6CF95990FC6F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8kUmK7JT6oTdEnZFhHK18LpnpKYuHM8q1GhbTrMJb8pd/0/3137302e3234352e3130302e302f32322d3232203d3e203238323230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.245.100.0/22

    Signature Algorithm: sha256WithRSAEncryption
         73:78:3e:13:91:66:19:0b:56:c8:58:17:3a:97:19:2c:c2:a1:
         86:3c:22:17:fc:90:09:e2:db:ac:e6:37:59:3f:51:f4:25:64:
         5f:64:c8:ce:39:2a:64:f0:15:05:a9:7a:3a:a5:4f:ef:49:88:
         64:ee:d3:28:83:b0:45:f5:91:8b:8c:26:60:a9:d7:0c:64:96:
         ef:24:00:2d:03:84:2d:bf:31:5d:f1:7b:92:82:69:00:a8:3f:
         d3:a2:d4:2f:4b:03:18:79:9a:a2:5d:fc:42:3d:cf:30:48:b7:
         3a:fc:7c:3c:be:83:af:ba:19:fc:29:05:69:5f:b5:58:05:3c:
         4e:65:2c:26:7e:cd:b6:58:5d:8c:68:17:30:03:8c:21:67:9f:
         02:0b:d2:fc:ee:a9:7d:c5:7a:56:2f:ed:5c:5c:16:e7:10:78:
         3c:42:ea:0f:c9:bb:8b:c3:6c:e3:5e:ca:a6:26:57:74:6c:2b:
         78:ea:a4:bf:0b:3f:63:e1:1a:ff:4f:43:81:de:b9:38:68:b9:
         ae:ec:06:0a:79:13:08:3c:36:44:5c:fb:94:09:c8:29:fa:4b:
         b9:19:2f:a6:fa:50:db:43:5b:63:64:88:38:36:f1:a7:3d:4e:
         f1:46:18:77:ee:10:e3:1c:b5:fa:9b:87:ee:92:d2:a9:ea:13:
         67:25:c5:c6
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUFL2ZDpMrRkru6AUc7Le7aPV01aUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjY2NUM1Q0RFOEE0MkM5RjhCMTAzMjMwOEFFQzZDRjk1
OTkwRkM2RjAeFw0yMjEwMDYxNzUxMjhaFw0yMzEwMDUxNzU2MjhaMDMxMTAvBgNV
BAMTKENFRDM2QkUzMUFCQ0REM0E1MTZERDYwOEM2RjUwMDVBOEVFRTdDRTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnEyg5/T8W5MTSRsiMIHCnXFzB
s+iRjowmFBqPGG3z2emUScVLgQzjbuUa05n5DYHdIMWOCe8U/QsunY9QcEckHal2
A/sJs2u0sfclmKka1iaNvs8+ECCLzFopdSmgavFkzBLSXtu9TZjqThF9Srb76t+b
u4ZxGPC9XcQv3orsYujrSzO04j72skLajOb5JP3q6qvQMZFJklS+AQiWDARoj3uX
se+FKnV1s6gqXicgMOjddDKl8Xac0huG566s/Q1qAFp01MbIeN1UJmwsPNQVwlII
KpolKWW62skUTEXA2UWJfmQLgd+dBMRoGFCp6gwWuzb1sqy6Z9tI46Xr0GT5AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUztNr4xq83TpRbdYIxvUAWo7ufOcwHwYDVR0j
BBgwFoAUJmXFzeikLJ+LEDIwiuxs+VmQ/G8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOGtVbUs3SlQ2b1RkRW5aRmhISzE4THBucEtZdUhNOHExR2hiVHJNSmI4
cGQvMC8yNjY1QzVDREU4QTQyQzlGOEIxMDMyMzA4QUVDNkNGOTU5OTBGQzZGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzI2NjVDNUNERThBNDJDOUY4
QjEwMzIzMDhBRUM2Q0Y5NTk5MEZDNkYuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzhrVW1LN0pUNm9UZEVuWkZoSEsxOExwbnBLWXVITThxMUdoYlRyTUpiOHBkLzAv
MzEzNzMwMmUzMjM0MzUyZTMxMzAzMDJlMzAyZjMyMzIyZDMyMzIyMDNkM2UyMDMy
MzgzMjMyMzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAKq9WQwDQYJKoZIhvcNAQELBQADggEBAHN4PhOR
ZhkLVshYFzqXGSzCoYY8Ihf8kAni26zmN1k/UfQlZF9kyM45KmTwFQWpejqlT+9J
iGTu0yiDsEX1kYuMJmCp1wxklu8kAC0DhC2/MV3xe5KCaQCoP9Oi1C9LAxh5mqJd
/EI9zzBItzr8fDy+g6+6GfwpBWlftVgFPE5lLCZ+zbZYXYxoFzADjCFnnwIL0vzu
qX3FelYv7VxcFucQeDxC6g/Ju4vDbONeyqYmV3RsK3jqpL8LP2PhGv9PQ4HeuTho
ua7sBgp5Ewg8NkRc+5QJyCn6S7kZL6b6UNtDW2NkiDg28ac9TvFGGHfuEOMctfqb
h+6S0qnqE2clxcY=
-----END CERTIFICATE-----
Generated at Mon Feb 17 02:14:11 2025 by rpki-client