Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9bLGAbFywNFJ56BSECDGY1Dcs8pL6S6nyRRnAvKmJVLf/0/3137372e3133362e3130302e302f32322d3232203d3e20323633363038.roa
File:                     3137372e3133362e3130302e302f32322d3232203d3e20323633363038.roa (raw, json)
Hash identifier:          I7P/3C56dYHoJMcLg1+iDwbAyutQPfFETUa7KyCllHI=
Subject key identifier:   A8:C7:59:FD:04:FC:C2:DE:DD:6E:47:D2:6B:04:38:7C:45:50:0B:D6
Certificate issuer:       /CN=F19D655ABFCCFC8CB566935B71AA7D94D2905E48
Certificate serial:       406FA84F53087B0D99A2B4E9D2F3CE277002D878
Authority key identifier: F1:9D:65:5A:BF:CC:FC:8C:B5:66:93:5B:71:AA:7D:94:D2:90:5E:48
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F19D655ABFCCFC8CB566935B71AA7D94D2905E48.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9bLGAbFywNFJ56BSECDGY1Dcs8pL6S6nyRRnAvKmJVLf/0/3137372e3133362e3130302e302f32322d3232203d3e20323633363038.roa
Signing time:             Mon 23 Dec 2024 13:19:14 +0000
ROA not before:           Mon 23 Dec 2024 13:14:14 +0000
ROA not after:            Mon 22 Dec 2025 13:19:14 +0000
asID:                     263608
IP address blocks:        177.136.100.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:6f:a8:4f:53:08:7b:0d:99:a2:b4:e9:d2:f3:ce:27:70:02:d8:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F19D655ABFCCFC8CB566935B71AA7D94D2905E48
        Validity
            Not Before: Dec 23 13:14:14 2024 GMT
            Not After : Dec 22 13:19:14 2025 GMT
        Subject: CN=A8C759FD04FCC2DEDD6E47D26B04387C45500BD6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:b7:36:21:9a:ea:fb:72:b2:93:ae:5c:82:ea:
                    4d:b1:a1:99:97:0a:e4:3e:63:38:57:8a:d4:18:73:
                    62:a5:a1:82:d8:ed:49:17:a3:82:8e:20:78:7e:29:
                    d3:09:24:eb:9e:02:72:cd:d1:99:b0:66:44:ce:6e:
                    96:76:d5:2c:53:b0:fd:af:e9:e7:90:a4:78:ff:04:
                    ac:a1:85:bd:ff:1a:f0:6f:7c:ed:a0:cc:69:32:a1:
                    f8:9a:56:46:a0:b1:f7:ad:e5:85:4e:dc:c6:53:32:
                    39:c0:89:4c:a9:56:73:d1:e9:c7:e7:eb:83:1f:1d:
                    d1:70:22:12:15:90:44:56:05:67:3f:3e:92:d1:af:
                    af:2b:7d:a9:30:a0:90:54:7e:52:00:2b:ec:f2:3d:
                    a0:fc:4c:eb:ca:9d:d5:55:4d:67:93:8a:f6:67:72:
                    20:31:8d:7b:98:f6:5b:7b:78:d3:95:c0:43:67:fa:
                    d2:c9:03:cc:06:4a:fd:09:42:67:8d:e0:7e:31:01:
                    cf:89:0f:f4:e6:ec:3b:b4:90:c5:23:b1:92:5f:41:
                    9f:cc:8a:4b:5d:3d:bc:ac:f2:42:c5:6b:1f:0f:8d:
                    50:46:ef:0f:f7:8a:9a:69:46:0e:ce:74:78:81:cf:
                    c7:a6:1d:7e:a5:37:b4:fd:35:fa:bb:97:ae:b7:eb:
                    3b:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:C7:59:FD:04:FC:C2:DE:DD:6E:47:D2:6B:04:38:7C:45:50:0B:D6
            X509v3 Authority Key Identifier:
                keyid:F1:9D:65:5A:BF:CC:FC:8C:B5:66:93:5B:71:AA:7D:94:D2:90:5E:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9bLGAbFywNFJ56BSECDGY1Dcs8pL6S6nyRRnAvKmJVLf/0/F19D655ABFCCFC8CB566935B71AA7D94D2905E48.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F19D655ABFCCFC8CB566935B71AA7D94D2905E48.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9bLGAbFywNFJ56BSECDGY1Dcs8pL6S6nyRRnAvKmJVLf/0/3137372e3133362e3130302e302f32322d3232203d3e20323633363038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.136.100.0/22

    Signature Algorithm: sha256WithRSAEncryption
         18:32:87:b0:49:00:c6:49:f3:c2:d1:47:2d:c3:6b:c1:df:ab:
         d0:b0:3c:71:1c:67:d0:1c:94:59:8f:b8:2f:a9:b9:0d:d1:39:
         a9:95:50:85:84:3d:36:ac:94:35:3a:81:10:27:8c:38:2e:0b:
         c6:af:65:a4:6a:40:9a:b1:df:85:21:8a:d5:09:a6:8e:b0:06:
         0b:69:ff:7e:9d:a0:c0:28:f0:db:85:42:62:5a:48:23:3f:c0:
         3b:07:16:87:cc:77:dd:a6:75:16:23:07:09:dd:3c:d7:d9:c8:
         db:c1:72:98:2b:cf:10:a3:9a:d9:71:a8:5f:3c:74:85:d8:22:
         49:f6:fb:81:e4:10:db:43:a1:99:41:c0:b0:f1:a9:02:4b:e9:
         52:d2:d2:3d:05:d3:58:2c:0c:ec:d4:5a:e3:79:7d:aa:71:0a:
         95:bd:06:aa:c3:34:ff:dc:17:c5:9f:7e:eb:87:2c:78:0c:b0:
         0e:ca:e8:96:b1:b3:2d:14:2b:d4:2e:13:ed:41:ba:3c:7d:83:
         73:e6:8d:56:8d:05:b2:cc:95:15:d3:2f:66:79:75:b4:e0:b0:
         75:96:1e:a8:f1:e0:51:60:af:3f:c2:d4:0b:bb:cf:3d:96:79:
         7a:ec:9e:6c:84:5f:dd:1e:ae:ac:8d:1c:7e:af:6c:23:e0:07:
         8e:08:a8:33
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUQG+oT1MIew2ZorTp0vPOJ3AC2HgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjE5RDY1NUFCRkNDRkM4Q0I1NjY5MzVCNzFBQTdEOTRE
MjkwNUU0ODAeFw0yNDEyMjMxMzE0MTRaFw0yNTEyMjIxMzE5MTRaMDMxMTAvBgNV
BAMTKEE4Qzc1OUZEMDRGQ0MyREVERDZFNDdEMjZCMDQzODdDNDU1MDBCRDYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqtzYhmur7crKTrlyC6k2xoZmX
CuQ+YzhXitQYc2KloYLY7UkXo4KOIHh+KdMJJOueAnLN0ZmwZkTObpZ21SxTsP2v
6eeQpHj/BKyhhb3/GvBvfO2gzGkyofiaVkagsfet5YVO3MZTMjnAiUypVnPR6cfn
64MfHdFwIhIVkERWBWc/PpLRr68rfakwoJBUflIAK+zyPaD8TOvKndVVTWeTivZn
ciAxjXuY9lt7eNOVwENn+tLJA8wGSv0JQmeN4H4xAc+JD/Tm7Du0kMUjsZJfQZ/M
iktdPbys8kLFax8PjVBG7w/3ipppRg7OdHiBz8emHX6lN7T9Nfq7l6636zvrAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUqMdZ/QT8wt7dbkfSawQ4fEVQC9YwHwYDVR0j
BBgwFoAU8Z1lWr/M/Iy1ZpNbcap9lNKQXkgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOWJMR0FiRnl3TkZKNTZCU0VDREdZMURjczhwTDZTNm55UlJuQXZLbUpW
TGYvMC9GMTlENjU1QUJGQ0NGQzhDQjU2NjkzNUI3MUFBN0Q5NEQyOTA1RTQ4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0YxOUQ2NTVBQkZDQ0ZDOENC
NTY2OTM1QjcxQUE3RDk0RDI5MDVFNDguY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzliTEdBYkZ5d05GSjU2QlNFQ0RHWTFEY3M4cEw2UzZueVJSbkF2S21KVkxmLzAv
MzEzNzM3MmUzMTMzMzYyZTMxMzAzMDJlMzAyZjMyMzIyZDMyMzIyMDNkM2UyMDMy
MzYzMzM2MzAzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEArGIZDANBgkqhkiG9w0BAQsFAAOCAQEAGDKH
sEkAxknzwtFHLcNrwd+r0LA8cRxn0ByUWY+4L6m5DdE5qZVQhYQ9NqyUNTqBECeM
OC4Lxq9lpGpAmrHfhSGK1QmmjrAGC2n/fp2gwCjw24VCYlpIIz/AOwcWh8x33aZ1
FiMHCd0819nI28FymCvPEKOa2XGoXzx0hdgiSfb7geQQ20OhmUHAsPGpAkvpUtLS
PQXTWCwM7NRa43l9qnEKlb0GqsM0/9wXxZ9+64cseAywDsrolrGzLRQr1C4T7UG6
PH2Dc+aNVo0FssyVFdMvZnl1tOCwdZYeqPHgUWCvP8LUC7vPPZZ5euyebIRf3R6u
rI0cfq9sI+AHjgioMw==
-----END CERTIFICATE-----
Generated at Sat Apr 5 22:53:23 2025 by rpki-client