Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/92WQsWGc8KjEy1tFBFZQRjU6rTLE44c9G17Ddi7sHcmf/0/3230312e3134382e3232342e302f32342d3234203d3e203631383338.roa
File:                     3230312e3134382e3232342e302f32342d3234203d3e203631383338.roa (raw, json)
Hash identifier:          wr/vrJVugqSAO20rk3X34SonzoRdhLIEp5JLH606V6U=
Subject key identifier:   C4:1D:F2:BE:D5:B2:30:AC:91:ED:64:60:69:6C:58:86:45:DC:E8:AE
Certificate issuer:       /CN=C108B118ADDDA1AF1790F4DD709AD61290012461
Certificate serial:       5290C94322E5B8F87CC4A1186124AC9D412E5D36
Authority key identifier: C1:08:B1:18:AD:DD:A1:AF:17:90:F4:DD:70:9A:D6:12:90:01:24:61
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C108B118ADDDA1AF1790F4DD709AD61290012461.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/92WQsWGc8KjEy1tFBFZQRjU6rTLE44c9G17Ddi7sHcmf/0/3230312e3134382e3232342e302f32342d3234203d3e203631383338.roa
Signing time:             Tue 18 Jan 2022 19:07:15 +0000
ROA not before:           Tue 18 Jan 2022 19:02:15 +0000
ROA not after:            Tue 17 Jan 2023 19:07:15 +0000
asID:                     61838
IP address blocks:        201.148.224.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:90:c9:43:22:e5:b8:f8:7c:c4:a1:18:61:24:ac:9d:41:2e:5d:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C108B118ADDDA1AF1790F4DD709AD61290012461
        Validity
            Not Before: Jan 18 19:02:15 2022 GMT
            Not After : Jan 17 19:07:15 2023 GMT
        Subject: CN=C41DF2BED5B230AC91ED6460696C588645DCE8AE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:6c:d7:cb:4f:aa:f1:eb:d9:47:32:7b:be:79:
                    8d:c4:ef:f5:96:b2:ab:3e:ca:89:1e:2d:88:a9:8b:
                    5e:28:b2:b1:e0:eb:ce:5b:59:37:6a:f9:b7:30:3e:
                    78:b2:0d:12:97:fe:b5:8a:81:50:5a:df:3c:db:39:
                    99:b3:e2:25:fa:07:bd:46:85:11:61:dc:35:02:c6:
                    3d:1e:b8:c6:9a:0d:8f:42:02:49:e4:94:de:77:07:
                    cd:3f:e4:e9:77:22:ff:24:e4:a6:3f:bd:06:a5:86:
                    62:6e:cf:b4:1f:ff:bb:69:c3:08:35:0a:f4:b1:9a:
                    75:ea:0b:2f:c7:e7:18:69:33:0a:80:cf:66:3c:98:
                    43:62:0b:53:13:50:a4:3d:8e:bf:2c:cc:7f:af:e5:
                    ba:af:33:e5:45:1b:f4:dd:fe:35:a4:f8:9f:96:1a:
                    08:d3:6f:95:d6:77:2f:88:22:19:21:cc:54:c9:1e:
                    3e:51:a9:40:05:38:92:9e:89:38:f1:a4:16:0a:9c:
                    49:73:fd:66:3e:91:89:8b:78:61:eb:21:2b:55:24:
                    b9:3d:97:2b:d3:86:85:89:48:40:1a:dc:80:a5:6f:
                    50:ed:6d:f7:ea:30:72:08:0d:db:52:1a:ee:61:d2:
                    3a:17:5a:b9:9d:5d:1c:91:32:53:27:e5:7f:52:97:
                    f3:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:1D:F2:BE:D5:B2:30:AC:91:ED:64:60:69:6C:58:86:45:DC:E8:AE
            X509v3 Authority Key Identifier:
                keyid:C1:08:B1:18:AD:DD:A1:AF:17:90:F4:DD:70:9A:D6:12:90:01:24:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/92WQsWGc8KjEy1tFBFZQRjU6rTLE44c9G17Ddi7sHcmf/0/C108B118ADDDA1AF1790F4DD709AD61290012461.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C108B118ADDDA1AF1790F4DD709AD61290012461.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/92WQsWGc8KjEy1tFBFZQRjU6rTLE44c9G17Ddi7sHcmf/0/3230312e3134382e3232342e302f32342d3234203d3e203631383338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.148.224.0/24

    Signature Algorithm: sha256WithRSAEncryption
         14:f3:8f:ca:8a:da:0c:ea:cd:84:36:48:a4:e6:cc:0a:37:5f:
         c3:6f:90:1a:e9:67:44:40:4f:58:04:b7:a1:74:d6:e4:c3:e3:
         c6:06:77:54:ed:f6:c4:58:76:b3:87:a2:89:87:e6:7c:6e:1e:
         ad:78:06:2e:d4:77:19:66:fe:29:66:f3:72:5f:35:9b:3b:42:
         49:c6:a4:ac:bf:43:55:81:00:1d:4c:24:ff:39:6a:7e:67:c9:
         03:43:0c:83:8a:c3:92:79:53:15:a1:d7:b7:17:a4:fa:02:49:
         1d:b9:7e:d0:d7:47:ae:c6:49:26:88:27:51:89:01:72:41:0a:
         d6:bb:85:fa:7b:ac:7b:8d:b8:ed:fe:f2:99:2b:28:88:63:9c:
         f6:3b:fe:3e:44:f9:4c:96:fd:82:4b:ae:3e:d7:63:36:3f:29:
         ba:02:05:ce:e6:67:6f:6d:86:95:35:75:93:6d:6c:f2:33:eb:
         d3:a1:e0:c1:23:ed:fe:ee:4d:f7:c6:79:4d:1a:3e:95:50:e7:
         d1:4b:c5:36:ca:89:57:de:40:d3:69:39:9d:2f:48:db:81:7b:
         02:79:96:13:e8:d0:54:ed:88:cf:44:8f:c6:0f:b9:9e:d8:ee:
         db:cc:23:70:c8:f8:6b:33:6a:f4:f7:f5:e5:75:f0:e1:f9:d9:
         aa:5b:96:07
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUUpDJQyLluPh8xKEYYSSsnUEuXTYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzEwOEIxMThBREREQTFBRjE3OTBGNERENzA5QUQ2MTI5
MDAxMjQ2MTAeFw0yMjAxMTgxOTAyMTVaFw0yMzAxMTcxOTA3MTVaMDMxMTAvBgNV
BAMTKEM0MURGMkJFRDVCMjMwQUM5MUVENjQ2MDY5NkM1ODg2NDVEQ0U4QUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAbNfLT6rx69lHMnu+eY3E7/WW
sqs+yokeLYipi14osrHg685bWTdq+bcwPniyDRKX/rWKgVBa3zzbOZmz4iX6B71G
hRFh3DUCxj0euMaaDY9CAknklN53B80/5Ol3Iv8k5KY/vQalhmJuz7Qf/7tpwwg1
CvSxmnXqCy/H5xhpMwqAz2Y8mENiC1MTUKQ9jr8szH+v5bqvM+VFG/Td/jWk+J+W
GgjTb5XWdy+IIhkhzFTJHj5RqUAFOJKeiTjxpBYKnElz/WY+kYmLeGHrIStVJLk9
lyvThoWJSEAa3IClb1DtbffqMHIIDdtSGu5h0joXWrmdXRyRMlMn5X9Sl/PNAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUxB3yvtWyMKyR7WRgaWxYhkXc6K4wHwYDVR0j
BBgwFoAUwQixGK3doa8XkPTdcJrWEpABJGEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOTJXUXNXR2M4S2pFeTF0RkJGWlFSalU2clRMRTQ0YzlHMTdEZGk3c0hj
bWYvMC9DMTA4QjExOEFERERBMUFGMTc5MEY0REQ3MDlBRDYxMjkwMDEyNDYxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0MxMDhCMTE4QUREREExQUYx
NzkwRjRERDcwOUFENjEyOTAwMTI0NjEuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzkyV1FzV0djOEtqRXkxdEZCRlpRUmpVNnJUTEU0NGM5RzE3RGRpN3NIY21mLzAv
MzIzMDMxMmUzMTM0MzgyZTMyMzIzNDJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM2
MzEzODMzMzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBADJlOAwDQYJKoZIhvcNAQELBQADggEBABTzj8qK
2gzqzYQ2SKTmzAo3X8NvkBrpZ0RAT1gEt6F01uTD48YGd1Tt9sRYdrOHoomH5nxu
Hq14Bi7Udxlm/ilm83JfNZs7QknGpKy/Q1WBAB1MJP85an5nyQNDDIOKw5J5UxWh
17cXpPoCSR25ftDXR67GSSaIJ1GJAXJBCta7hfp7rHuNuO3+8pkrKIhjnPY7/j5E
+UyW/YJLrj7XYzY/KboCBc7mZ29thpU1dZNtbPIz69Oh4MEj7f7uTffGeU0aPpVQ
59FLxTbKiVfeQNNpOZ0vSNuBewJ5lhPo0FTtiM9Ej8YPuZ7Y7tvMI3DI+GszavT3
9eV18OH52apblgc=
-----END CERTIFICATE-----
Generated at Tue Feb 18 13:23:35 2025 by rpki-client