Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9bBg1vrFNZEZAkqpceeU7eYWt2f2DP7Xoj74EKhD5rTx/0/3230312e38372e3135312e302f32342d3332203d3e203232333831.roa
File:                     3230312e38372e3135312e302f32342d3332203d3e203232333831.roa (raw, json)
Hash identifier:          N4y1DykPvaA0OWP0+DLvJfdajdi5q7a65NtpnOSfPrA=
Subject key identifier:   37:CF:22:B4:35:68:FC:11:10:FD:3F:CF:1A:85:3B:66:62:16:52:3F
Certificate issuer:       /CN=193432167D7CBAFA4E5DDE04019A8E57DEFE0AAC
Certificate serial:       2336C0DEE5FCFCF092A657C0536357E601242B55
Authority key identifier: 19:34:32:16:7D:7C:BA:FA:4E:5D:DE:04:01:9A:8E:57:DE:FE:0A:AC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/193432167D7CBAFA4E5DDE04019A8E57DEFE0AAC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9bBg1vrFNZEZAkqpceeU7eYWt2f2DP7Xoj74EKhD5rTx/0/3230312e38372e3135312e302f32342d3332203d3e203232333831.roa
Signing time:             Fri 07 Mar 2025 19:07:31 +0000
ROA not before:           Fri 07 Mar 2025 19:02:31 +0000
ROA not after:            Fri 06 Mar 2026 19:07:31 +0000
asID:                     22381
IP address blocks:        201.87.151.0/24 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:36:c0:de:e5:fc:fc:f0:92:a6:57:c0:53:63:57:e6:01:24:2b:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=193432167D7CBAFA4E5DDE04019A8E57DEFE0AAC
        Validity
            Not Before: Mar  7 19:02:31 2025 GMT
            Not After : Mar  6 19:07:31 2026 GMT
        Subject: CN=37CF22B43568FC1110FD3FCF1A853B666216523F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:c3:22:d7:e1:af:44:19:e2:88:53:0b:5a:bb:
                    b6:90:11:38:04:43:42:82:02:84:39:f5:b7:cb:40:
                    11:a5:eb:5b:52:89:c4:e3:ca:06:81:ce:5b:bb:16:
                    c0:9a:1a:16:fe:91:b4:50:99:a7:8a:57:95:79:24:
                    ea:83:c1:c5:35:29:16:c4:68:fe:70:ab:2d:7a:dc:
                    33:6d:b7:be:4a:43:ca:c5:99:0e:a7:fa:e6:56:a3:
                    c6:e0:95:36:8b:be:69:bf:2d:cb:c8:7f:fe:c9:43:
                    64:35:d4:d1:ad:19:48:ac:71:b7:df:fc:69:ed:ae:
                    8c:17:1f:cf:ef:99:94:27:63:56:22:a0:62:a8:a5:
                    8a:25:ab:8e:b7:2e:03:b9:5f:1f:84:3f:37:d4:2f:
                    2c:25:04:d1:6e:65:93:83:90:0d:14:1d:1a:8e:5e:
                    6c:ac:4f:4e:39:40:18:03:87:8e:32:8a:cf:02:f3:
                    bf:a9:e4:92:4c:1c:27:ec:f2:0d:3b:ca:ff:91:71:
                    51:c9:07:fd:16:cb:a6:26:24:31:a2:24:0c:70:9b:
                    a4:31:58:65:28:f5:58:29:a6:0a:b3:e8:6e:f4:b6:
                    fd:ef:f5:aa:b6:31:4f:6e:2e:fd:27:6c:73:e4:65:
                    c0:67:6a:34:e7:5c:8e:d0:53:8b:3f:c9:69:3e:d8:
                    c9:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:CF:22:B4:35:68:FC:11:10:FD:3F:CF:1A:85:3B:66:62:16:52:3F
            X509v3 Authority Key Identifier:
                keyid:19:34:32:16:7D:7C:BA:FA:4E:5D:DE:04:01:9A:8E:57:DE:FE:0A:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9bBg1vrFNZEZAkqpceeU7eYWt2f2DP7Xoj74EKhD5rTx/0/193432167D7CBAFA4E5DDE04019A8E57DEFE0AAC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/193432167D7CBAFA4E5DDE04019A8E57DEFE0AAC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9bBg1vrFNZEZAkqpceeU7eYWt2f2DP7Xoj74EKhD5rTx/0/3230312e38372e3135312e302f32342d3332203d3e203232333831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.87.151.0/24

    Signature Algorithm: sha256WithRSAEncryption
         17:95:fc:4d:45:fb:0b:52:00:78:e5:37:4e:6f:0e:bc:80:3e:
         ac:dd:b4:5c:83:39:f1:06:56:62:bb:27:42:81:d8:69:63:e9:
         59:20:fb:44:31:6e:91:f5:93:66:b8:1b:bf:f2:5b:ff:ed:0a:
         c5:19:53:1d:43:b0:bd:5b:c2:ec:99:92:16:eb:2b:6f:c5:ae:
         bf:02:25:f7:fb:05:a0:91:19:55:4b:1b:f0:d7:92:ce:1a:3d:
         55:c4:29:71:75:98:e2:df:1b:47:5b:e6:47:b4:55:82:95:e7:
         1f:e0:a3:34:59:1a:8e:95:32:d7:9f:57:43:2b:25:63:24:56:
         d1:90:57:3c:a8:ab:76:c3:46:ea:ae:61:86:12:8b:c9:9c:7a:
         f5:81:37:ed:c2:b9:8e:ce:c1:37:7b:26:74:92:78:20:34:6e:
         7f:7c:4e:b3:4e:5a:db:38:23:a9:9a:30:11:e2:e3:70:92:d5:
         dd:d1:e5:14:ae:91:48:d4:ba:01:b8:41:cd:5b:d4:8c:72:61:
         eb:94:8e:0c:30:2a:31:a8:3a:a0:e2:d3:7b:0a:88:88:6f:37:
         2d:2c:91:0f:fe:0f:99:1e:6d:d0:f9:7e:e4:4a:0f:d9:da:ab:
         8c:47:5d:d1:36:da:8a:f6:56:e0:9e:67:2b:00:32:57:5b:8f:
         95:b5:b8:28
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUIzbA3uX8/PCSplfAU2NX5gEkK1UwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTkzNDMyMTY3RDdDQkFGQTRFNURERTA0MDE5QThFNTdE
RUZFMEFBQzAeFw0yNTAzMDcxOTAyMzFaFw0yNjAzMDYxOTA3MzFaMDMxMTAvBgNV
BAMTKDM3Q0YyMkI0MzU2OEZDMTExMEZEM0ZDRjFBODUzQjY2NjIxNjUyM0YwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdwyLX4a9EGeKIUwtau7aQETgE
Q0KCAoQ59bfLQBGl61tSicTjygaBzlu7FsCaGhb+kbRQmaeKV5V5JOqDwcU1KRbE
aP5wqy163DNtt75KQ8rFmQ6n+uZWo8bglTaLvmm/LcvIf/7JQ2Q11NGtGUiscbff
/GntrowXH8/vmZQnY1YioGKopYolq463LgO5Xx+EPzfULywlBNFuZZODkA0UHRqO
XmysT045QBgDh44yis8C87+p5JJMHCfs8g07yv+RcVHJB/0Wy6YmJDGiJAxwm6Qx
WGUo9Vgppgqz6G70tv3v9aq2MU9uLv0nbHPkZcBnajTnXI7QU4s/yWk+2MlNAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUN88itDVo/BEQ/T/PGoU7ZmIWUj8wHwYDVR0j
BBgwFoAUGTQyFn18uvpOXd4EAZqOV97+CqwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOWJCZzF2ckZOWkVaQWtxcGNlZVU3ZVlXdDJmMkRQN1hvajc0RUtoRDVy
VHgvMC8xOTM0MzIxNjdEN0NCQUZBNEU1RERFMDQwMTlBOEU1N0RFRkUwQUFDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzE5MzQzMjE2N0Q3Q0JBRkE0
RTVEREUwNDAxOUE4RTU3REVGRTBBQUMuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzliQmcxdnJGTlpFWkFrcXBjZWVVN2VZV3QyZjJEUDdYb2o3NEVLaEQ1clR4LzAv
MzIzMDMxMmUzODM3MmUzMTM1MzEyZTMwMmYzMjM0MmQzMzMyMjAzZDNlMjAzMjMy
MzMzODMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAyVeXMA0GCSqGSIb3DQEBCwUAA4IBAQAXlfxNRfsL
UgB45TdObw68gD6s3bRcgznxBlZiuydCgdhpY+lZIPtEMW6R9ZNmuBu/8lv/7QrF
GVMdQ7C9W8LsmZIW6ytvxa6/AiX3+wWgkRlVSxvw15LOGj1VxClxdZji3xtHW+ZH
tFWClecf4KM0WRqOlTLXn1dDKyVjJFbRkFc8qKt2w0bqrmGGEovJnHr1gTftwrmO
zsE3eyZ0knggNG5/fE6zTlrbOCOpmjAR4uNwktXd0eUUrpFI1LoBuEHNW9SMcmHr
lI4MMCoxqDqg4tN7CoiIbzctLJEP/g+ZHm3Q+X7kSg/Z2quMR13RNtqK9lbgnmcr
ADJXW4+Vtbgo
-----END CERTIFICATE-----
Generated at Sat Apr 5 11:43:21 2025 by rpki-client