Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8kUmK7JT6oTdEnZFhHK18LpnpKYuHM8q1GhbTrMJb8pd/0/3138392e35302e3134342e302f32302d3230203d3e20323731373234.roa
File:                     3138392e35302e3134342e302f32302d3230203d3e20323731373234.roa (raw, json)
Hash identifier:          6/uNkeWZpmgo2R+r433q0eXyvTplJ97lVqXzXse0lGA=
Subject key identifier:   21:7C:64:C5:61:F2:FC:EE:63:C8:96:82:23:17:E6:ED:F0:D2:A9:4C
Certificate issuer:       /CN=2665C5CDE8A42C9F8B1032308AEC6CF95990FC6F
Certificate serial:       39B234677B4FD63B2969FB67008C7782E2F8D6D1
Authority key identifier: 26:65:C5:CD:E8:A4:2C:9F:8B:10:32:30:8A:EC:6C:F9:59:90:FC:6F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2665C5CDE8A42C9F8B1032308AEC6CF95990FC6F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8kUmK7JT6oTdEnZFhHK18LpnpKYuHM8q1GhbTrMJb8pd/0/3138392e35302e3134342e302f32302d3230203d3e20323731373234.roa
Signing time:             Thu 06 Oct 2022 17:40:03 +0000
ROA not before:           Thu 06 Oct 2022 17:35:03 +0000
ROA not after:            Thu 05 Oct 2023 17:40:03 +0000
asID:                     271724
IP address blocks:        189.50.144.0/20 maxlen: 20
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:b2:34:67:7b:4f:d6:3b:29:69:fb:67:00:8c:77:82:e2:f8:d6:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2665C5CDE8A42C9F8B1032308AEC6CF95990FC6F
        Validity
            Not Before: Oct  6 17:35:03 2022 GMT
            Not After : Oct  5 17:40:03 2023 GMT
        Subject: CN=217C64C561F2FCEE63C896822317E6EDF0D2A94C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:97:31:ed:d7:c2:f9:25:af:74:bf:a2:1b:9e:
                    b9:a1:c2:06:2a:b5:19:07:08:ca:95:75:7a:57:1b:
                    09:30:d4:dd:83:56:b5:92:5f:17:70:97:8d:e3:d1:
                    05:69:c4:a1:10:f9:42:d2:aa:3d:57:e4:15:76:99:
                    09:04:f5:4d:1c:92:4b:da:19:b1:48:da:a9:ea:d2:
                    e2:57:43:dc:93:62:9c:7f:52:9b:7a:3a:2e:27:74:
                    77:eb:e1:a3:e4:d1:fa:98:64:41:10:64:41:6d:f7:
                    b7:ae:16:19:11:42:a3:1c:8c:23:0c:bf:bc:7e:46:
                    37:90:12:5f:b5:6b:74:90:4e:a0:ee:ed:7b:91:e2:
                    27:19:54:2e:78:a8:88:c2:97:e9:e0:e8:d1:9b:fc:
                    51:98:3f:b1:6e:b2:c0:d2:03:5a:7f:41:80:2c:c5:
                    01:ff:b4:ef:df:c3:21:a6:53:0e:33:31:ce:81:9f:
                    4c:0d:c7:1b:d9:c5:55:0d:e9:de:46:35:f5:17:3a:
                    67:89:db:40:e7:41:35:ce:32:4e:58:9f:ab:38:e6:
                    fe:03:64:02:ff:d8:e0:47:eb:8f:54:74:46:49:6e:
                    22:d9:21:6f:9c:1e:c8:c1:6c:b7:62:be:6e:a9:77:
                    7c:70:f5:07:e5:ba:39:ae:0f:27:49:3f:62:5f:ac:
                    06:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:7C:64:C5:61:F2:FC:EE:63:C8:96:82:23:17:E6:ED:F0:D2:A9:4C
            X509v3 Authority Key Identifier:
                keyid:26:65:C5:CD:E8:A4:2C:9F:8B:10:32:30:8A:EC:6C:F9:59:90:FC:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8kUmK7JT6oTdEnZFhHK18LpnpKYuHM8q1GhbTrMJb8pd/0/2665C5CDE8A42C9F8B1032308AEC6CF95990FC6F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2665C5CDE8A42C9F8B1032308AEC6CF95990FC6F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8kUmK7JT6oTdEnZFhHK18LpnpKYuHM8q1GhbTrMJb8pd/0/3138392e35302e3134342e302f32302d3230203d3e20323731373234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.50.144.0/20

    Signature Algorithm: sha256WithRSAEncryption
         a1:ef:14:65:73:f7:62:f0:24:69:fb:61:18:f6:42:8f:da:cb:
         9e:79:86:f9:74:63:e9:36:06:1b:31:26:41:19:6d:49:33:fc:
         bf:e8:5e:61:a1:6d:12:9f:4f:d5:b6:ea:cc:3e:d1:d4:6c:c6:
         7a:d6:23:d3:30:6d:f9:34:64:43:af:62:8c:d2:a1:b7:57:78:
         ef:fd:1f:f4:64:5e:84:9d:a8:b9:ec:a5:10:ad:b2:e7:5f:37:
         20:95:83:59:eb:fd:74:23:21:e2:89:5f:85:45:ac:2c:bc:f2:
         ec:39:9c:5f:8f:2e:72:13:f4:a9:09:26:a5:f1:3a:0b:af:8d:
         a1:63:22:bd:57:50:52:52:02:21:eb:d5:08:81:97:08:3b:06:
         70:96:16:ca:34:69:bd:44:ce:d9:68:2b:34:9c:33:6f:80:65:
         68:e4:50:09:01:16:be:bd:b7:25:02:85:98:51:e3:54:a1:55:
         4f:8c:8d:0c:bf:a2:f2:ae:92:3f:d5:9b:a3:0b:b5:0f:b4:7c:
         d6:45:bc:78:1a:95:d0:a5:04:83:f6:c8:10:d2:1c:6e:dd:de:
         fa:1a:e5:ff:37:18:73:98:7b:dd:4e:c5:28:e5:b1:e2:d2:b8:
         ca:42:2a:d8:8f:ed:33:93:68:87:a4:18:c5:60:aa:67:ed:1c:
         82:40:26:f9
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUObI0Z3tP1jspaftnAIx3guL41tEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjY2NUM1Q0RFOEE0MkM5RjhCMTAzMjMwOEFFQzZDRjk1
OTkwRkM2RjAeFw0yMjEwMDYxNzM1MDNaFw0yMzEwMDUxNzQwMDNaMDMxMTAvBgNV
BAMTKDIxN0M2NEM1NjFGMkZDRUU2M0M4OTY4MjIzMTdFNkVERjBEMkE5NEMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwlzHt18L5Ja90v6IbnrmhwgYq
tRkHCMqVdXpXGwkw1N2DVrWSXxdwl43j0QVpxKEQ+ULSqj1X5BV2mQkE9U0ckkva
GbFI2qnq0uJXQ9yTYpx/Upt6Oi4ndHfr4aPk0fqYZEEQZEFt97euFhkRQqMcjCMM
v7x+RjeQEl+1a3SQTqDu7XuR4icZVC54qIjCl+ng6NGb/FGYP7FussDSA1p/QYAs
xQH/tO/fwyGmUw4zMc6Bn0wNxxvZxVUN6d5GNfUXOmeJ20DnQTXOMk5Yn6s45v4D
ZAL/2OBH649UdEZJbiLZIW+cHsjBbLdivm6pd3xw9QflujmuDydJP2JfrAavAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUIXxkxWHy/O5jyJaCIxfm7fDSqUwwHwYDVR0j
BBgwFoAUJmXFzeikLJ+LEDIwiuxs+VmQ/G8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOGtVbUs3SlQ2b1RkRW5aRmhISzE4THBucEtZdUhNOHExR2hiVHJNSmI4
cGQvMC8yNjY1QzVDREU4QTQyQzlGOEIxMDMyMzA4QUVDNkNGOTU5OTBGQzZGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzI2NjVDNUNERThBNDJDOUY4
QjEwMzIzMDhBRUM2Q0Y5NTk5MEZDNkYuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzhrVW1LN0pUNm9UZEVuWkZoSEsxOExwbnBLWXVITThxMUdoYlRyTUpiOHBkLzAv
MzEzODM5MmUzNTMwMmUzMTM0MzQyZTMwMmYzMjMwMmQzMjMwMjAzZDNlMjAzMjM3
MzEzNzMyMzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAS9MpAwDQYJKoZIhvcNAQELBQADggEBAKHvFGVz
92LwJGn7YRj2Qo/ay555hvl0Y+k2BhsxJkEZbUkz/L/oXmGhbRKfT9W26sw+0dRs
xnrWI9Mwbfk0ZEOvYozSobdXeO/9H/RkXoSdqLnspRCtsudfNyCVg1nr/XQjIeKJ
X4VFrCy88uw5nF+PLnIT9KkJJqXxOguvjaFjIr1XUFJSAiHr1QiBlwg7BnCWFso0
ab1EztloKzScM2+AZWjkUAkBFr69tyUChZhR41ShVU+MjQy/ovKukj/Vm6MLtQ+0
fNZFvHgaldClBIP2yBDSHG7d3voa5f83GHOYe91OxSjlseLSuMpCKtiP7TOTaIek
GMVgqmftHIJAJvk=
-----END CERTIFICATE-----
Generated at Fri Mar 14 02:47:00 2025 by rpki-client