Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8kUmK7JT6oTdEnZFhHK18LpnpKYuHM8q1GhbTrMJb8pd/0/3137392e3139312e3132382e302f31392d3230203d3e20323731373234.roa
File:                     3137392e3139312e3132382e302f31392d3230203d3e20323731373234.roa (raw, json)
Hash identifier:          7bKOeT5kPssrb6jXu1pIHWNGe5DIoUKF529ZDIuDb2U=
Subject key identifier:   32:92:9C:B2:D2:FA:81:61:C4:A9:52:94:E5:1D:27:A4:5E:AA:D9:A7
Certificate issuer:       /CN=2665C5CDE8A42C9F8B1032308AEC6CF95990FC6F
Certificate serial:       28B13BAF8DD20461CD92A01AD85E02992AC83FBD
Authority key identifier: 26:65:C5:CD:E8:A4:2C:9F:8B:10:32:30:8A:EC:6C:F9:59:90:FC:6F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2665C5CDE8A42C9F8B1032308AEC6CF95990FC6F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8kUmK7JT6oTdEnZFhHK18LpnpKYuHM8q1GhbTrMJb8pd/0/3137392e3139312e3132382e302f31392d3230203d3e20323731373234.roa
Signing time:             Thu 06 Oct 2022 17:40:03 +0000
ROA not before:           Thu 06 Oct 2022 17:35:03 +0000
ROA not after:            Thu 05 Oct 2023 17:40:03 +0000
asID:                     271724
IP address blocks:        179.191.128.0/19 maxlen: 20
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:b1:3b:af:8d:d2:04:61:cd:92:a0:1a:d8:5e:02:99:2a:c8:3f:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2665C5CDE8A42C9F8B1032308AEC6CF95990FC6F
        Validity
            Not Before: Oct  6 17:35:03 2022 GMT
            Not After : Oct  5 17:40:03 2023 GMT
        Subject: CN=32929CB2D2FA8161C4A95294E51D27A45EAAD9A7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:0c:f8:e4:f8:ca:0c:8d:95:be:a2:bb:dd:09:
                    46:fa:ee:7d:37:c5:44:b1:d0:9f:c0:b0:ac:3c:12:
                    cd:ba:d6:7e:93:28:ad:f2:0a:df:d1:ae:ae:96:2b:
                    7e:da:43:16:c5:97:aa:0c:3b:54:54:a0:c2:6d:22:
                    8b:48:dd:5f:7c:70:86:cc:ea:7e:49:23:1b:cd:e3:
                    ef:77:14:63:64:29:3e:93:2f:14:9c:e2:7f:07:17:
                    97:22:79:fe:9f:73:45:03:e1:7c:7f:e7:ad:7f:16:
                    49:5d:41:e7:53:e1:48:30:9b:17:e6:e5:9a:42:ae:
                    76:3c:ca:ac:02:3b:35:aa:cc:b5:c1:62:c1:e9:41:
                    1c:e6:09:9e:6e:ac:d8:36:99:ac:0e:b4:b7:eb:ee:
                    de:ff:84:43:b2:fb:b6:74:fe:64:f4:14:08:1a:55:
                    29:49:82:09:40:13:3d:13:06:be:d7:48:e0:35:cf:
                    3d:7d:4a:d5:00:70:44:94:df:9e:e6:22:75:1b:00:
                    05:70:70:ad:4e:87:4f:98:5b:89:94:2a:f7:0b:79:
                    ae:db:9d:97:2d:3e:fa:78:80:a4:bd:a3:e6:ba:42:
                    41:8c:44:4f:59:6c:2e:d2:d7:b7:4a:bf:ab:91:69:
                    30:08:ee:8e:b6:cf:a7:d2:4d:b7:39:e7:cc:1f:06:
                    b0:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:92:9C:B2:D2:FA:81:61:C4:A9:52:94:E5:1D:27:A4:5E:AA:D9:A7
            X509v3 Authority Key Identifier:
                keyid:26:65:C5:CD:E8:A4:2C:9F:8B:10:32:30:8A:EC:6C:F9:59:90:FC:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8kUmK7JT6oTdEnZFhHK18LpnpKYuHM8q1GhbTrMJb8pd/0/2665C5CDE8A42C9F8B1032308AEC6CF95990FC6F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2665C5CDE8A42C9F8B1032308AEC6CF95990FC6F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8kUmK7JT6oTdEnZFhHK18LpnpKYuHM8q1GhbTrMJb8pd/0/3137392e3139312e3132382e302f31392d3230203d3e20323731373234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.191.128.0/19

    Signature Algorithm: sha256WithRSAEncryption
         6d:56:61:b1:e5:52:bb:3d:c1:ba:b8:47:53:51:70:f6:b2:47:
         77:0b:f8:c6:64:7a:14:61:10:66:c2:e7:5b:f3:04:31:93:30:
         bb:2c:d8:69:df:05:9b:4b:5f:c0:bb:7b:3e:80:d7:58:11:b9:
         56:e2:c4:e4:04:b5:60:2d:fe:25:34:7f:fb:fd:ee:81:22:56:
         8f:33:74:5d:be:dc:c3:06:e1:43:f5:09:18:72:49:8e:92:61:
         30:ee:ad:e2:14:c4:b8:68:c1:74:1e:10:0a:56:50:9a:3f:0f:
         ca:87:b3:11:e2:32:3a:b4:99:76:c6:6c:26:25:5d:14:0b:b7:
         7a:a2:70:6e:f5:40:67:b5:e3:72:bc:6e:87:a0:e4:9a:ab:f2:
         09:90:9d:a8:34:0c:fb:84:70:8a:d5:30:d4:d3:66:77:dd:45:
         45:62:77:1b:4d:f2:d4:7e:93:d8:b8:52:74:d3:03:34:b4:3e:
         35:e1:b4:77:42:cb:c0:86:6f:16:b3:e4:cf:aa:9a:02:97:28:
         19:dc:3c:f7:f6:66:cb:f8:26:b7:cf:f1:94:6c:cb:34:65:55:
         0f:7a:fd:a1:8f:05:38:f7:1a:27:3c:16:31:46:68:88:7c:64:
         98:db:da:70:b0:6a:7c:2f:ce:40:0f:2c:52:37:d4:fa:b1:f6:
         b9:6f:c0:9e
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUKLE7r43SBGHNkqAa2F4CmSrIP70wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjY2NUM1Q0RFOEE0MkM5RjhCMTAzMjMwOEFFQzZDRjk1
OTkwRkM2RjAeFw0yMjEwMDYxNzM1MDNaFw0yMzEwMDUxNzQwMDNaMDMxMTAvBgNV
BAMTKDMyOTI5Q0IyRDJGQTgxNjFDNEE5NTI5NEU1MUQyN0E0NUVBQUQ5QTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzDPjk+MoMjZW+orvdCUb67n03
xUSx0J/AsKw8Es261n6TKK3yCt/Rrq6WK37aQxbFl6oMO1RUoMJtIotI3V98cIbM
6n5JIxvN4+93FGNkKT6TLxSc4n8HF5cief6fc0UD4Xx/561/FkldQedT4Ugwmxfm
5ZpCrnY8yqwCOzWqzLXBYsHpQRzmCZ5urNg2mawOtLfr7t7/hEOy+7Z0/mT0FAga
VSlJgglAEz0TBr7XSOA1zz19StUAcESU357mInUbAAVwcK1Oh0+YW4mUKvcLea7b
nZctPvp4gKS9o+a6QkGMRE9ZbC7S17dKv6uRaTAI7o62z6fSTbc558wfBrDHAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUMpKcstL6gWHEqVKU5R0npF6q2acwHwYDVR0j
BBgwFoAUJmXFzeikLJ+LEDIwiuxs+VmQ/G8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOGtVbUs3SlQ2b1RkRW5aRmhISzE4THBucEtZdUhNOHExR2hiVHJNSmI4
cGQvMC8yNjY1QzVDREU4QTQyQzlGOEIxMDMyMzA4QUVDNkNGOTU5OTBGQzZGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzI2NjVDNUNERThBNDJDOUY4
QjEwMzIzMDhBRUM2Q0Y5NTk5MEZDNkYuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzhrVW1LN0pUNm9UZEVuWkZoSEsxOExwbnBLWXVITThxMUdoYlRyTUpiOHBkLzAv
MzEzNzM5MmUzMTM5MzEyZTMxMzIzODJlMzAyZjMxMzkyZDMyMzAyMDNkM2UyMDMy
MzczMTM3MzIzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEBbO/gDANBgkqhkiG9w0BAQsFAAOCAQEAbVZh
seVSuz3BurhHU1Fw9rJHdwv4xmR6FGEQZsLnW/MEMZMwuyzYad8Fm0tfwLt7PoDX
WBG5VuLE5AS1YC3+JTR/+/3ugSJWjzN0Xb7cwwbhQ/UJGHJJjpJhMO6t4hTEuGjB
dB4QClZQmj8PyoezEeIyOrSZdsZsJiVdFAu3eqJwbvVAZ7Xjcrxuh6DkmqvyCZCd
qDQM+4RwitUw1NNmd91FRWJ3G03y1H6T2LhSdNMDNLQ+NeG0d0LLwIZvFrPkz6qa
ApcoGdw89/Zmy/gmt8/xlGzLNGVVD3r9oY8FOPcaJzwWMUZoiHxkmNvacLBqfC/O
QA8sUjfU+rH2uW/Ang==
-----END CERTIFICATE-----
Generated at Tue Feb 18 13:29:39 2025 by rpki-client