Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9iMKA5kriC56yZbkoNZdnfUqqmkNvkS9MmZtJnw4F2Wy/0/3134332e3230322e36382e302f32322d3232203d3e20323632383139.roa
File:                     3134332e3230322e36382e302f32322d3232203d3e20323632383139.roa (raw, json)
Hash identifier:          3JzT3UsYg1tOX5xc5Zz3wL/RCK3eVONVeuaDY1ty3Pc=
Subject key identifier:   F8:22:56:1D:EE:87:21:78:60:B0:74:61:23:FF:40:89:32:86:7E:5F
Certificate issuer:       /CN=CF608992965DC7DE08820B93FC270DCED15124BC
Certificate serial:       078BBD3AFB4ECD8CF815F6202FA3FAA30009BC0B
Authority key identifier: CF:60:89:92:96:5D:C7:DE:08:82:0B:93:FC:27:0D:CE:D1:51:24:BC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CF608992965DC7DE08820B93FC270DCED15124BC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9iMKA5kriC56yZbkoNZdnfUqqmkNvkS9MmZtJnw4F2Wy/0/3134332e3230322e36382e302f32322d3232203d3e20323632383139.roa
Signing time:             Wed 09 Nov 2022 20:11:01 +0000
ROA not before:           Wed 09 Nov 2022 20:06:01 +0000
ROA not after:            Wed 08 Nov 2023 20:11:01 +0000
asID:                     262819
IP address blocks:        143.202.68.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:8b:bd:3a:fb:4e:cd:8c:f8:15:f6:20:2f:a3:fa:a3:00:09:bc:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CF608992965DC7DE08820B93FC270DCED15124BC
        Validity
            Not Before: Nov  9 20:06:01 2022 GMT
            Not After : Nov  8 20:11:01 2023 GMT
        Subject: CN=F822561DEE87217860B0746123FF408932867E5F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:7b:67:de:08:f0:ca:17:4b:75:cb:03:52:4e:
                    12:97:1e:48:6f:69:8d:0a:8c:71:b1:d5:d3:67:d3:
                    65:11:ed:0e:de:96:bd:8b:72:d9:f1:d2:79:c2:94:
                    52:01:0c:42:d1:e1:96:33:c8:12:04:0e:eb:42:b6:
                    cd:13:42:22:96:61:a1:4d:c9:cf:65:98:b0:7e:f7:
                    23:08:13:d3:7d:87:f7:e7:b8:bd:df:e7:4a:e5:cc:
                    87:42:8c:2e:a0:01:f8:8c:e8:3f:f2:13:da:00:31:
                    a0:39:b6:9d:70:33:a9:33:02:ec:a2:69:88:68:05:
                    52:8a:57:75:0f:aa:bc:64:56:fe:18:c7:b7:8d:46:
                    a9:2b:2d:fb:26:a1:79:2f:0a:0e:e3:6a:91:4a:6a:
                    fb:99:88:56:e2:e5:81:ec:41:2a:82:41:00:9b:b5:
                    87:bf:31:cd:fa:3d:12:88:fc:a9:91:04:28:66:c7:
                    21:63:6f:d7:d7:c2:d0:01:cd:ba:78:85:6b:df:93:
                    06:64:7b:f2:02:17:78:0d:fe:f9:c1:35:4c:ab:ea:
                    cf:2e:54:86:c7:ce:d5:bb:ed:05:88:87:ef:16:d3:
                    b9:7d:f5:75:2a:48:02:ac:0c:73:55:f1:ed:b5:88:
                    79:36:04:75:8c:d5:ce:7c:a1:5c:40:3c:0d:28:68:
                    a6:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:22:56:1D:EE:87:21:78:60:B0:74:61:23:FF:40:89:32:86:7E:5F
            X509v3 Authority Key Identifier:
                keyid:CF:60:89:92:96:5D:C7:DE:08:82:0B:93:FC:27:0D:CE:D1:51:24:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9iMKA5kriC56yZbkoNZdnfUqqmkNvkS9MmZtJnw4F2Wy/0/CF608992965DC7DE08820B93FC270DCED15124BC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CF608992965DC7DE08820B93FC270DCED15124BC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9iMKA5kriC56yZbkoNZdnfUqqmkNvkS9MmZtJnw4F2Wy/0/3134332e3230322e36382e302f32322d3232203d3e20323632383139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.202.68.0/22

    Signature Algorithm: sha256WithRSAEncryption
         05:56:22:9e:a3:a7:b8:f2:26:4f:0a:bc:50:cd:9e:21:73:45:
         10:ab:63:03:9a:58:4e:62:54:77:f8:c5:67:a7:35:b6:92:03:
         a5:0e:09:d0:7b:89:f7:a9:68:44:79:6d:73:f8:5e:6f:9f:98:
         fa:9d:d3:c4:84:28:a9:71:c1:7b:54:90:23:f7:91:e6:7d:3d:
         35:02:1a:77:db:2b:de:0d:b9:fd:a7:b9:18:6e:8c:0b:87:75:
         00:22:fb:e6:ea:92:cb:ee:7e:75:21:b2:2c:f1:9b:41:c3:fc:
         72:78:a6:2c:66:c3:9f:51:6a:5f:fd:33:12:50:07:31:ff:51:
         79:0a:f8:bb:4f:5e:fa:a2:03:31:fa:fb:86:c8:ab:4f:4c:3c:
         96:5f:2f:b7:69:22:96:e3:22:55:7f:60:a9:7e:a1:41:0f:38:
         e7:6d:61:6b:78:5a:e7:b8:b1:23:46:45:ef:f2:ce:54:94:05:
         48:dc:cd:99:c6:45:c0:da:6d:63:5b:39:6f:36:98:1f:e3:fd:
         95:9e:66:45:17:91:9c:a2:ba:d2:af:74:20:59:d7:78:d1:7d:
         22:ca:fa:e6:61:d6:8a:5a:6a:eb:46:81:fd:4f:5a:1b:99:a7:
         27:80:bb:9d:dd:cf:50:6b:dd:bb:7b:4a:86:39:02:ef:85:8c:
         5c:84:76:6f
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUB4u9OvtOzYz4FfYgL6P6owAJvAswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0Y2MDg5OTI5NjVEQzdERTA4ODIwQjkzRkMyNzBEQ0VE
MTUxMjRCQzAeFw0yMjExMDkyMDA2MDFaFw0yMzExMDgyMDExMDFaMDMxMTAvBgNV
BAMTKEY4MjI1NjFERUU4NzIxNzg2MEIwNzQ2MTIzRkY0MDg5MzI4NjdFNUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4e2feCPDKF0t1ywNSThKXHkhv
aY0KjHGx1dNn02UR7Q7elr2Lctnx0nnClFIBDELR4ZYzyBIEDutCts0TQiKWYaFN
yc9lmLB+9yMIE9N9h/fnuL3f50rlzIdCjC6gAfiM6D/yE9oAMaA5tp1wM6kzAuyi
aYhoBVKKV3UPqrxkVv4Yx7eNRqkrLfsmoXkvCg7japFKavuZiFbi5YHsQSqCQQCb
tYe/Mc36PRKI/KmRBChmxyFjb9fXwtABzbp4hWvfkwZke/ICF3gN/vnBNUyr6s8u
VIbHztW77QWIh+8W07l99XUqSAKsDHNV8e21iHk2BHWM1c58oVxAPA0oaKYxAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU+CJWHe6HIXhgsHRhI/9AiTKGfl8wHwYDVR0j
BBgwFoAUz2CJkpZdx94IgguT/CcNztFRJLwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOWlNS0E1a3JpQzU2eVpia29OWmRuZlVxcW1rTnZrUzlNbVp0Sm53NEYy
V3kvMC9DRjYwODk5Mjk2NURDN0RFMDg4MjBCOTNGQzI3MERDRUQxNTEyNEJDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0NGNjA4OTkyOTY1REM3REUw
ODgyMEI5M0ZDMjcwRENFRDE1MTI0QkMuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzlpTUtBNWtyaUM1NnlaYmtvTlpkbmZVcXFta052a1M5TW1adEpudzRGMld5LzAv
MzEzNDMzMmUzMjMwMzIyZTM2MzgyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzMjM2
MzIzODMxMzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAKPykQwDQYJKoZIhvcNAQELBQADggEBAAVWIp6j
p7jyJk8KvFDNniFzRRCrYwOaWE5iVHf4xWenNbaSA6UOCdB7ifepaER5bXP4Xm+f
mPqd08SEKKlxwXtUkCP3keZ9PTUCGnfbK94Nuf2nuRhujAuHdQAi++bqksvufnUh
sizxm0HD/HJ4pixmw59Ral/9MxJQBzH/UXkK+LtPXvqiAzH6+4bIq09MPJZfL7dp
IpbjIlV/YKl+oUEPOOdtYWt4Wue4sSNGRe/yzlSUBUjczZnGRcDabWNbOW82mB/j
/ZWeZkUXkZyiutKvdCBZ13jRfSLK+uZh1opaautGgf1PWhuZpyeAu53dz1Br3bt7
SoY5Au+FjFyEdm8=
-----END CERTIFICATE-----
Generated at Fri Mar 14 02:50:53 2025 by rpki-client