Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9iMKA5kriC56yZbkoNZdnfUqqmkNvkS9MmZtJnw4F2Wy/0/3137372e382e3230382e302f32312d3231203d3e20323632383139.roa
File:                     3137372e382e3230382e302f32312d3231203d3e20323632383139.roa (raw, json)
Hash identifier:          +W0poi1cRu/WOMgUZSbQpdInxjGxhPK/OLi0UovK9O4=
Subject key identifier:   5D:86:A4:E7:F3:E1:C8:91:D4:BE:75:BA:68:E7:35:9E:D2:0B:AA:33
Certificate issuer:       /CN=CF608992965DC7DE08820B93FC270DCED15124BC
Certificate serial:       25ABD3409652717BB3744CECC6AD875CA9E14487
Authority key identifier: CF:60:89:92:96:5D:C7:DE:08:82:0B:93:FC:27:0D:CE:D1:51:24:BC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CF608992965DC7DE08820B93FC270DCED15124BC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9iMKA5kriC56yZbkoNZdnfUqqmkNvkS9MmZtJnw4F2Wy/0/3137372e382e3230382e302f32312d3231203d3e20323632383139.roa
Signing time:             Wed 09 Nov 2022 20:11:02 +0000
ROA not before:           Wed 09 Nov 2022 20:06:02 +0000
ROA not after:            Wed 08 Nov 2023 20:11:02 +0000
asID:                     262819
IP address blocks:        177.8.208.0/21 maxlen: 21
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:ab:d3:40:96:52:71:7b:b3:74:4c:ec:c6:ad:87:5c:a9:e1:44:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CF608992965DC7DE08820B93FC270DCED15124BC
        Validity
            Not Before: Nov  9 20:06:02 2022 GMT
            Not After : Nov  8 20:11:02 2023 GMT
        Subject: CN=5D86A4E7F3E1C891D4BE75BA68E7359ED20BAA33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:74:c3:ec:a4:b6:03:8e:25:80:f7:f9:d8:28:
                    a3:0e:0e:d6:5c:b8:28:86:4e:48:67:e8:45:92:40:
                    5f:6d:95:eb:2e:4f:c5:b8:3f:5c:83:30:54:5d:da:
                    86:62:96:ce:e1:7c:fd:c5:eb:0c:a6:08:5a:86:8f:
                    bb:aa:dd:de:44:b6:2c:b8:26:b9:c8:f4:3c:da:69:
                    24:2c:63:a1:6e:5d:3f:e6:b5:8a:70:7c:6c:30:6d:
                    8d:76:a9:c6:78:7e:13:32:70:04:a8:55:a6:1d:58:
                    2d:7d:42:1e:07:0d:d4:6d:0a:58:42:0c:d0:9f:49:
                    26:a2:91:6f:4b:93:85:0e:7c:03:36:dc:98:36:28:
                    40:90:22:a6:f4:19:06:01:ce:3f:91:ee:08:2b:2c:
                    e1:6b:10:d0:4b:05:85:2a:f4:e2:ca:b0:81:a9:4c:
                    e4:00:99:0d:f7:d3:c6:27:ab:0d:e1:d7:ca:33:e3:
                    17:e9:8e:e8:a8:84:98:b9:7e:f8:1f:d7:a7:c2:99:
                    93:cc:70:0f:91:cd:c0:7a:60:e2:58:c8:91:65:f2:
                    6a:4f:b4:43:ed:c2:a0:64:e2:38:bc:a7:f8:61:40:
                    00:7b:a0:0f:c3:3b:dd:54:cb:99:22:6a:ed:0d:16:
                    09:1a:00:dd:48:9b:72:e3:ad:32:4d:d1:7d:e5:f6:
                    30:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:86:A4:E7:F3:E1:C8:91:D4:BE:75:BA:68:E7:35:9E:D2:0B:AA:33
            X509v3 Authority Key Identifier:
                keyid:CF:60:89:92:96:5D:C7:DE:08:82:0B:93:FC:27:0D:CE:D1:51:24:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9iMKA5kriC56yZbkoNZdnfUqqmkNvkS9MmZtJnw4F2Wy/0/CF608992965DC7DE08820B93FC270DCED15124BC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CF608992965DC7DE08820B93FC270DCED15124BC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9iMKA5kriC56yZbkoNZdnfUqqmkNvkS9MmZtJnw4F2Wy/0/3137372e382e3230382e302f32312d3231203d3e20323632383139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.8.208.0/21

    Signature Algorithm: sha256WithRSAEncryption
         55:2a:4f:87:98:d6:57:f1:20:bf:52:68:f5:b6:dd:f4:04:22:
         5f:95:c9:57:3b:d2:da:5c:29:ca:79:17:6b:97:17:93:76:bf:
         c5:dc:c3:99:d3:32:f7:ba:a6:10:bb:c4:3b:7d:3c:ea:da:d9:
         e5:f3:ed:15:e7:75:40:8f:45:ce:d9:31:9c:a8:82:27:29:83:
         3d:66:33:dc:f1:76:41:32:73:98:5e:dc:c4:d1:14:e4:4f:03:
         19:e9:23:d9:aa:87:a6:89:06:39:44:e2:7d:22:df:d8:2c:bf:
         63:7e:ba:3f:76:ec:01:94:f1:06:f7:69:9c:a0:a7:35:09:0f:
         f6:7d:75:09:a1:c5:38:97:02:de:78:84:79:b9:ba:99:e1:fb:
         7c:3b:55:47:33:1b:ab:23:e3:e8:dc:4d:c9:2c:6c:a2:53:f1:
         3f:b5:38:e7:73:a2:10:86:28:28:68:e3:b0:1d:42:cf:f9:c7:
         97:e0:59:b0:ce:55:08:ff:87:74:67:92:99:49:f5:d0:68:97:
         bb:53:5f:80:59:b3:9f:e6:35:ce:c0:88:6e:64:81:8b:b5:c2:
         1d:f4:9c:d8:78:b8:73:2c:4f:3a:24:2a:9c:7c:8d:40:65:68:
         21:57:ac:0d:07:06:3a:86:00:9a:68:61:f7:c5:48:7d:54:6b:
         c3:ac:53:d8
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUJavTQJZScXuzdEzsxq2HXKnhRIcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0Y2MDg5OTI5NjVEQzdERTA4ODIwQjkzRkMyNzBEQ0VE
MTUxMjRCQzAeFw0yMjExMDkyMDA2MDJaFw0yMzExMDgyMDExMDJaMDMxMTAvBgNV
BAMTKDVEODZBNEU3RjNFMUM4OTFENEJFNzVCQTY4RTczNTlFRDIwQkFBMzMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDddMPspLYDjiWA9/nYKKMODtZc
uCiGTkhn6EWSQF9tlesuT8W4P1yDMFRd2oZils7hfP3F6wymCFqGj7uq3d5Etiy4
JrnI9DzaaSQsY6FuXT/mtYpwfGwwbY12qcZ4fhMycASoVaYdWC19Qh4HDdRtClhC
DNCfSSaikW9Lk4UOfAM23Jg2KECQIqb0GQYBzj+R7ggrLOFrENBLBYUq9OLKsIGp
TOQAmQ3308Ynqw3h18oz4xfpjuiohJi5fvgf16fCmZPMcA+RzcB6YOJYyJFl8mpP
tEPtwqBk4ji8p/hhQAB7oA/DO91Uy5kiau0NFgkaAN1Im3LjrTJN0X3l9jCbAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUXYak5/PhyJHUvnW6aOc1ntILqjMwHwYDVR0j
BBgwFoAUz2CJkpZdx94IgguT/CcNztFRJLwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOWlNS0E1a3JpQzU2eVpia29OWmRuZlVxcW1rTnZrUzlNbVp0Sm53NEYy
V3kvMC9DRjYwODk5Mjk2NURDN0RFMDg4MjBCOTNGQzI3MERDRUQxNTEyNEJDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0NGNjA4OTkyOTY1REM3REUw
ODgyMEI5M0ZDMjcwRENFRDE1MTI0QkMuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzlpTUtBNWtyaUM1NnlaYmtvTlpkbmZVcXFta052a1M5TW1adEpudzRGMld5LzAv
MzEzNzM3MmUzODJlMzIzMDM4MmUzMDJmMzIzMTJkMzIzMTIwM2QzZTIwMzIzNjMy
MzgzMTM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQDsQjQMA0GCSqGSIb3DQEBCwUAA4IBAQBVKk+HmNZX
8SC/Umj1tt30BCJflclXO9LaXCnKeRdrlxeTdr/F3MOZ0zL3uqYQu8Q7fTzq2tnl
8+0V53VAj0XO2TGcqIInKYM9ZjPc8XZBMnOYXtzE0RTkTwMZ6SPZqoemiQY5ROJ9
It/YLL9jfro/duwBlPEG92mcoKc1CQ/2fXUJocU4lwLeeIR5ubqZ4ft8O1VHMxur
I+Po3E3JLGyiU/E/tTjnc6IQhigoaOOwHULP+ceX4FmwzlUI/4d0Z5KZSfXQaJe7
U1+AWbOf5jXOwIhuZIGLtcId9JzYeLhzLE86JCqcfI1AZWghV6wNBwY6hgCaaGH3
xUh9VGvDrFPY
-----END CERTIFICATE-----
Generated at Sun Apr 20 22:42:09 2025 by rpki-client