Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9BtoatP68EdJygtSXhmGJ5APHRts9X45DMGJJSYWd8SL/0/3136382e3230352e35322e302f32322d3234203d3e20323634383631.roa
File:                     3136382e3230352e35322e302f32322d3234203d3e20323634383631.roa (raw, json)
Hash identifier:          Xdxb5DLil68Edp/iSDVbQX6snS5ETD0KafQXhhjm7vw=
Subject key identifier:   87:33:28:0B:C6:3D:CB:9B:8C:07:62:1F:D0:84:51:49:19:3F:7F:75
Certificate issuer:       /CN=C31F93F1F81C9519AD8D88CAF331D474F401D115
Certificate serial:       4979DD518C5D7F090654EEB9F2896B5D120C6A03
Authority key identifier: C3:1F:93:F1:F8:1C:95:19:AD:8D:88:CA:F3:31:D4:74:F4:01:D1:15
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C31F93F1F81C9519AD8D88CAF331D474F401D115.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9BtoatP68EdJygtSXhmGJ5APHRts9X45DMGJJSYWd8SL/0/3136382e3230352e35322e302f32322d3234203d3e20323634383631.roa
Signing time:             Fri 09 Feb 2024 19:32:27 +0000
ROA not before:           Fri 09 Feb 2024 19:27:27 +0000
ROA not after:            Fri 07 Feb 2025 19:32:27 +0000
asID:                     264861
IP address blocks:        168.205.52.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:79:dd:51:8c:5d:7f:09:06:54:ee:b9:f2:89:6b:5d:12:0c:6a:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C31F93F1F81C9519AD8D88CAF331D474F401D115
        Validity
            Not Before: Feb  9 19:27:27 2024 GMT
            Not After : Feb  7 19:32:27 2025 GMT
        Subject: CN=8733280BC63DCB9B8C07621FD0845149193F7F75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:ff:46:4e:e9:1d:d7:a5:bf:50:3e:2a:1d:6c:
                    99:e8:f4:ce:97:a4:f5:21:d3:e0:13:15:57:2c:c9:
                    8b:7a:16:ab:30:8a:c5:f0:d0:e6:2c:55:10:55:c6:
                    46:1c:e6:f7:93:60:32:9e:d0:8e:1e:93:1c:25:5a:
                    9d:62:bf:2a:b2:16:78:cb:40:5a:94:78:77:7f:0c:
                    40:99:0f:3c:04:0d:9c:d9:b7:34:22:a9:d7:c4:c5:
                    49:1c:4a:7a:07:d6:10:3c:5d:27:8c:19:c3:6a:c5:
                    66:0a:ca:85:ae:cd:e4:67:a7:02:48:09:43:03:7b:
                    3e:60:a7:20:41:e7:4c:38:5e:af:a0:50:c1:13:56:
                    51:10:41:a5:84:63:9c:23:89:cf:af:92:1c:bf:37:
                    e1:64:a1:60:2b:aa:da:f8:42:79:be:8a:d6:68:85:
                    bf:7b:9c:3e:9f:90:ba:40:5b:dc:92:bb:3d:b3:eb:
                    a7:3c:07:66:57:1f:80:93:11:ad:76:fc:84:e7:26:
                    79:40:bb:36:c4:7c:f3:a1:93:6d:32:28:ef:c0:59:
                    c2:a9:79:65:e8:0e:48:28:cc:5d:78:40:27:46:26:
                    d8:7a:4a:73:56:e6:a4:dc:22:47:9d:1e:63:1f:ba:
                    1e:74:d7:bd:80:78:54:a5:d7:ce:c0:48:7b:5a:4c:
                    6a:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:33:28:0B:C6:3D:CB:9B:8C:07:62:1F:D0:84:51:49:19:3F:7F:75
            X509v3 Authority Key Identifier:
                keyid:C3:1F:93:F1:F8:1C:95:19:AD:8D:88:CA:F3:31:D4:74:F4:01:D1:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9BtoatP68EdJygtSXhmGJ5APHRts9X45DMGJJSYWd8SL/0/C31F93F1F81C9519AD8D88CAF331D474F401D115.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C31F93F1F81C9519AD8D88CAF331D474F401D115.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9BtoatP68EdJygtSXhmGJ5APHRts9X45DMGJJSYWd8SL/0/3136382e3230352e35322e302f32322d3234203d3e20323634383631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.205.52.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8a:3b:cc:bc:9e:83:0c:79:9f:6c:c9:57:98:39:71:19:58:06:
         9a:0d:4f:aa:0e:f9:e0:44:2b:c9:7f:e4:84:f2:15:ae:bf:2b:
         24:90:5d:f5:8c:2a:5f:e1:11:3e:bc:a5:7d:1c:5c:56:63:59:
         ce:7f:e4:57:dd:55:f5:04:30:f6:77:0c:8b:60:13:02:fa:2c:
         75:97:72:a3:32:a5:30:3c:ca:bd:36:18:18:27:8b:0f:8e:8b:
         66:be:e0:f1:0b:51:0d:35:71:03:ac:50:d2:4e:ad:f9:4e:38:
         ca:a5:18:62:33:f0:26:0e:cd:39:d3:a3:8e:ff:2d:54:66:a4:
         ca:c3:71:e7:be:63:94:dd:84:1e:56:af:b6:8c:6c:06:0e:0a:
         e5:97:dc:71:3d:1a:d2:4d:29:12:f9:8b:56:69:b4:93:1a:20:
         1c:a6:51:42:d3:a0:38:2f:e5:b9:b7:0c:bc:41:8a:80:ba:ec:
         77:46:ed:94:e4:cf:c6:2c:70:46:ad:ae:e6:e6:3d:0d:29:20:
         c7:8e:95:db:58:ad:1d:66:b4:50:8a:21:5c:29:55:9d:68:e2:
         ed:24:8a:de:9f:b8:14:be:a9:02:bc:03:cc:14:fc:0b:32:ad:
         c9:c9:b6:3b:b6:8a:39:e2:b3:f9:14:cc:be:1b:20:6c:fc:d4:
         18:c0:37:8d
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUSXndUYxdfwkGVO658olrXRIMagMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzMxRjkzRjFGODFDOTUxOUFEOEQ4OENBRjMzMUQ0NzRG
NDAxRDExNTAeFw0yNDAyMDkxOTI3MjdaFw0yNTAyMDcxOTMyMjdaMDMxMTAvBgNV
BAMTKDg3MzMyODBCQzYzRENCOUI4QzA3NjIxRkQwODQ1MTQ5MTkzRjdGNzUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCQ/0ZO6R3Xpb9QPiodbJno9M6X
pPUh0+ATFVcsyYt6FqswisXw0OYsVRBVxkYc5veTYDKe0I4ekxwlWp1ivyqyFnjL
QFqUeHd/DECZDzwEDZzZtzQiqdfExUkcSnoH1hA8XSeMGcNqxWYKyoWuzeRnpwJI
CUMDez5gpyBB50w4Xq+gUMETVlEQQaWEY5wjic+vkhy/N+FkoWArqtr4Qnm+itZo
hb97nD6fkLpAW9ySuz2z66c8B2ZXH4CTEa12/ITnJnlAuzbEfPOhk20yKO/AWcKp
eWXoDkgozF14QCdGJth6SnNW5qTcIkedHmMfuh50172AeFSl187ASHtaTGoHAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUhzMoC8Y9y5uMB2If0IRRSRk/f3UwHwYDVR0j
BBgwFoAUwx+T8fgclRmtjYjK8zHUdPQB0RUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOUJ0b2F0UDY4RWRKeWd0U1hobUdKNUFQSFJ0czlYNDVETUdKSlNZV2Q4
U0wvMC9DMzFGOTNGMUY4MUM5NTE5QUQ4RDg4Q0FGMzMxRDQ3NEY0MDFEMTE1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0MzMUY5M0YxRjgxQzk1MTlB
RDhEODhDQUYzMzFENDc0RjQwMUQxMTUuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzlCdG9hdFA2OEVkSnlndFNYaG1HSjVBUEhSdHM5WDQ1RE1HSkpTWVdkOFNMLzAv
MzEzNjM4MmUzMjMwMzUyZTM1MzIyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM2
MzQzODM2MzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAKozTQwDQYJKoZIhvcNAQELBQADggEBAIo7zLye
gwx5n2zJV5g5cRlYBpoNT6oO+eBEK8l/5ITyFa6/KySQXfWMKl/hET68pX0cXFZj
Wc5/5FfdVfUEMPZ3DItgEwL6LHWXcqMypTA8yr02GBgniw+Oi2a+4PELUQ01cQOs
UNJOrflOOMqlGGIz8CYOzTnTo47/LVRmpMrDcee+Y5TdhB5Wr7aMbAYOCuWX3HE9
GtJNKRL5i1ZptJMaIBymUULToDgv5bm3DLxBioC67HdG7ZTkz8YscEatrubmPQ0p
IMeOldtYrR1mtFCKIVwpVZ1o4u0kit6fuBS+qQK8A8wU/AsyrcnJtju2ijnis/kU
zL4bIGz81BjAN40=
-----END CERTIFICATE-----
Generated at Sun Feb 16 21:49:43 2025 by rpki-client