Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9vUHcD7GhxGkrcJ85X6Uix3PhoPgQZppgZL2TVYmZrkA/0/3139302e382e3137342e302f32342d3234203d3e20323731303131.roa
File:                     3139302e382e3137342e302f32342d3234203d3e20323731303131.roa (raw, json)
Hash identifier:          EPytjFHlpYU65uKheWTcLCx9opQJTK4R8xhY9G9Vjr4=
Subject key identifier:   27:5B:47:A4:E7:83:6E:8D:AD:C0:38:D6:98:6E:E7:C1:09:53:E3:7C
Certificate issuer:       /CN=F633EC1D984126CD6BD3A7EF2F04BC6E15F261D9
Certificate serial:       4805ACD9586129FD7F56DF4FC0A382858A295013
Authority key identifier: F6:33:EC:1D:98:41:26:CD:6B:D3:A7:EF:2F:04:BC:6E:15:F2:61:D9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F633EC1D984126CD6BD3A7EF2F04BC6E15F261D9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9vUHcD7GhxGkrcJ85X6Uix3PhoPgQZppgZL2TVYmZrkA/0/3139302e382e3137342e302f32342d3234203d3e20323731303131.roa
Signing time:             Sat 28 Oct 2023 18:00:00 +0000
ROA not before:           Sat 28 Oct 2023 17:55:00 +0000
ROA not after:            Sat 26 Oct 2024 18:00:00 +0000
asID:                     271011
IP address blocks:        190.8.174.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:05:ac:d9:58:61:29:fd:7f:56:df:4f:c0:a3:82:85:8a:29:50:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F633EC1D984126CD6BD3A7EF2F04BC6E15F261D9
        Validity
            Not Before: Oct 28 17:55:00 2023 GMT
            Not After : Oct 26 18:00:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:c6:5a:e8:a0:0d:e4:1c:1d:67:ed:13:fb:f4:
                    f4:4e:a6:b6:46:4f:a4:6b:c0:83:03:83:3d:9d:74:
                    9a:16:94:f4:a4:9a:42:75:66:05:55:66:a7:6d:ab:
                    81:52:b2:20:63:50:dd:6c:d4:34:b8:0a:83:54:bf:
                    56:73:f4:2e:26:27:26:ea:9e:6d:b8:8c:0a:55:d9:
                    4b:c5:9d:04:c5:df:9f:71:96:e9:42:54:8d:22:4e:
                    ce:86:bd:aa:ac:4a:c9:13:c5:f9:f0:1a:7a:35:c3:
                    33:77:c0:31:c1:4c:e6:e5:7f:8e:68:6b:5a:f9:61:
                    ae:02:21:9d:3a:ad:21:06:0a:54:67:19:48:d1:55:
                    fa:fa:fa:0c:97:f4:ba:f6:c6:48:ae:e6:0c:16:21:
                    b0:0d:49:41:d7:3d:57:31:31:b4:e1:94:67:df:81:
                    6d:3c:ca:df:cb:a8:14:08:55:77:c7:a5:e8:f1:df:
                    a7:ec:cb:78:d4:f3:ca:53:ed:81:6d:d9:97:e5:e1:
                    97:94:9f:d9:21:09:2a:f1:0f:fd:96:84:cc:90:77:
                    6d:77:af:1c:da:3f:80:ae:ca:51:9a:a5:a5:1c:91:
                    d4:24:76:c5:98:61:6e:e2:ee:ca:91:e2:62:51:0a:
                    b5:38:31:cc:4e:c8:7b:ef:1a:da:67:19:a6:1e:61:
                    ea:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:5B:47:A4:E7:83:6E:8D:AD:C0:38:D6:98:6E:E7:C1:09:53:E3:7C
            X509v3 Authority Key Identifier:
                keyid:F6:33:EC:1D:98:41:26:CD:6B:D3:A7:EF:2F:04:BC:6E:15:F2:61:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9vUHcD7GhxGkrcJ85X6Uix3PhoPgQZppgZL2TVYmZrkA/0/F633EC1D984126CD6BD3A7EF2F04BC6E15F261D9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F633EC1D984126CD6BD3A7EF2F04BC6E15F261D9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9vUHcD7GhxGkrcJ85X6Uix3PhoPgQZppgZL2TVYmZrkA/0/3139302e382e3137342e302f32342d3234203d3e20323731303131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.8.174.0/24

    Signature Algorithm: sha256WithRSAEncryption
         47:81:12:df:33:42:7e:80:eb:f4:c5:ba:6c:59:43:00:ec:0e:
         e0:ab:6b:36:8d:74:0d:ee:75:9c:22:58:c5:e3:cf:bc:12:75:
         ba:c3:2a:e1:b5:77:61:c8:5d:79:fc:ba:12:5d:e9:1a:94:46:
         74:ef:b9:bc:d1:6a:4f:c5:9c:5c:8c:a2:89:0b:d9:7e:19:eb:
         25:e8:3a:9e:9a:71:2a:e2:c4:03:81:b9:ab:f9:6f:d0:39:84:
         ef:da:8e:a3:08:fb:fd:d6:8b:ee:1b:40:dd:c3:11:f0:e6:fd:
         b8:9d:55:c7:98:11:df:a0:2a:bf:f1:d8:df:5c:00:a3:ef:b4:
         68:3c:90:78:84:fe:5b:ba:43:35:d3:0c:62:2a:7c:9f:6a:7e:
         69:f5:99:e8:93:76:ef:b1:38:51:2c:c7:b0:2f:53:53:bc:65:
         88:a1:db:b7:d2:83:e7:ab:9a:7f:b9:7a:08:f0:ed:0b:fa:89:
         32:82:b2:53:ba:c7:db:23:93:6a:05:a3:a1:33:2a:c6:aa:6c:
         2d:e7:06:55:11:a8:9c:d5:ea:bc:44:13:31:de:f5:99:ac:c2:
         3c:76:3b:7e:80:e6:97:82:91:c5:01:17:c3:26:85:40:89:e9:
         a3:45:52:e2:4c:73:be:bf:3f:3a:50:ef:ec:ab:7a:0d:35:04:
         e1:6a:fc:60
-----BEGIN CERTIFICATE-----
MIIHQTCCBimgAwIBAgIUSAWs2VhhKf1/Vt9PwKOChYopUBMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjYzM0VDMUQ5ODQxMjZDRDZCRDNBN0VGMkYwNEJDNkUx
NUYyNjFEOTAeFw0yMzEwMjgxNzU1MDBaFw0yNDEwMjYxODAwMDBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwRTFDNjVBRThBMDBERTQxQzFE
NjdFRDEzRkJGNEY0NEVBNkI2NDY0RkE0NkJDMDgzMDM4MzNEOUQ3NDlBMTY5NEY0
QTQ5QTQyNzU2NjA1NTU2NkE3NkRBQjgxNTJCMjIwNjM1MERENkNENDM0QjgwQTgz
NTRCRjU2NzNGNDJFMjYyNzI2RUE5RTZEQjg4QzBBNTVEOTRCQzU5RDA0QzVERjlG
NzE5NkU5NDI1NDhEMjI0RUNFODZCREFBQUM0QUM5MTNDNUY5RjAxQTdBMzVDMzMz
NzdDMDMxQzE0Q0U2RTU3RjhFNjg2QjVBRjk2MUFFMDIyMTlEM0FBRDIxMDYwQTU0
NjcxOTQ4RDE1NUZBRkFGQTBDOTdGNEJBRjZDNjQ4QUVFNjBDMTYyMUIwMEQ0OTQx
RDczRDU3MzEzMUI0RTE5NDY3REY4MTZEM0NDQURGQ0JBODE0MDg1NTc3QzdBNUU4
RjFERkE3RUNDQjc4RDRGM0NBNTNFRDgxNkREOTk3RTVFMTk3OTQ5RkQ5MjEwOTJB
RjEwRkZEOTY4NENDOTA3NzZENzdBRjFDREEzRjgwQUVDQTUxOUFBNUE1MUM5MUQ0
MjQ3NkM1OTg2MTZFRTJFRUNBOTFFMjYyNTEwQUI1MzgzMUNDNEVDODdCRUYxQURB
NjcxOUE2MUU2MUVBMzMwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEA4cZa6KAN5BwdZ+0T+/T0Tqa2Rk+ka8CDA4M9nXSaFpT0pJpCdWYF
VWanbauBUrIgY1DdbNQ0uAqDVL9Wc/QuJicm6p5tuIwKVdlLxZ0Exd+fcZbpQlSN
Ik7Ohr2qrErJE8X58Bp6NcMzd8AxwUzm5X+OaGta+WGuAiGdOq0hBgpUZxlI0VX6
+voMl/S69sZIruYMFiGwDUlB1z1XMTG04ZRn34FtPMrfy6gUCFV3x6Xo8d+n7Mt4
1PPKU+2BbdmX5eGXlJ/ZIQkq8Q/9loTMkHdtd68c2j+ArspRmqWlHJHUJHbFmGFu
4u7KkeJiUQq1ODHMTsh77xraZxmmHmHqMwIDAQABo4ICTzCCAkswHQYDVR0OBBYE
FCdbR6Tng26NrcA41phu58EJU+N8MB8GA1UdIwQYMBaAFPYz7B2YQSbNa9On7y8E
vG4V8mHZMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzl2VUhjRDdHaHhHa3Jj
Sjg1WDZVaXgzUGhvUGdRWnBwZ1pMMlRWWW1acmtBLzAvRjYzM0VDMUQ5ODQxMjZD
RDZCRDNBN0VGMkYwNEJDNkUxNUYyNjFEOS5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC9GNjMzRUMxRDk4NDEyNkNENkJEM0E3RUYyRjA0QkM2RTE1RjI2
MUQ5LmNlcjCBrAYIKwYBBQUHAQsEgZ8wgZwwgZkGCCsGAQUFBzALhoGMcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby85dlVIY0Q3R2h4R2tyY0o4NVg2
VWl4M1Bob1BnUVpwcGdaTDJUVlltWnJrQS8wLzMxMzkzMDJlMzgyZTMxMzczNDJl
MzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzczMTMwMzEzMS5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAL4I
rjANBgkqhkiG9w0BAQsFAAOCAQEAR4ES3zNCfoDr9MW6bFlDAOwO4KtrNo10De51
nCJYxePPvBJ1usMq4bV3Ychdefy6El3pGpRGdO+5vNFqT8WcXIyiiQvZfhnrJeg6
nppxKuLEA4G5q/lv0DmE79qOowj7/daL7htA3cMR8Ob9uJ1Vx5gR36Aqv/HY31wA
o++0aDyQeIT+W7pDNdMMYip8n2p+afWZ6JN277E4USzHsC9TU7xliKHbt9KD56ua
f7l6CPDtC/qJMoKyU7rH2yOTagWjoTMqxqpsLecGVRGonNXqvEQTMd71mazCPHY7
foDml4KRxQEXwyaFQInpo0VS4kxzvr8/OlDv7Kt6DTUE4Wr8YA==
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:09:48 2025 by rpki-client