Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A5qNovLNMMSNQckTiyzSHiRUh9GeaQC2zzq1duKqFdSS/0/3137302e38302e34392e302f32342d3234203d3e20323636333734.roa
File:                     3137302e38302e34392e302f32342d3234203d3e20323636333734.roa (raw, json)
Hash identifier:          DkBSv3vnslZW4JePoBhBSXFoZCDbFX86RGViW6kLtho=
Subject key identifier:   1C:C2:3D:3C:A0:4B:8E:99:AC:48:DE:86:95:A9:64:9A:BF:25:2C:9F
Certificate issuer:       /CN=BF8A4AE4CCFB516D07A1A24039C662A1F86B89DD
Certificate serial:       59836F8C71C1DECBA176538A54E55731AE40C13D
Authority key identifier: BF:8A:4A:E4:CC:FB:51:6D:07:A1:A2:40:39:C6:62:A1:F8:6B:89:DD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BF8A4AE4CCFB516D07A1A24039C662A1F86B89DD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A5qNovLNMMSNQckTiyzSHiRUh9GeaQC2zzq1duKqFdSS/0/3137302e38302e34392e302f32342d3234203d3e20323636333734.roa
Signing time:             Tue 26 Jul 2022 13:35:40 +0000
ROA not before:           Tue 26 Jul 2022 13:30:40 +0000
ROA not after:            Tue 25 Jul 2023 13:35:40 +0000
asID:                     266374
IP address blocks:        170.80.49.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:83:6f:8c:71:c1:de:cb:a1:76:53:8a:54:e5:57:31:ae:40:c1:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BF8A4AE4CCFB516D07A1A24039C662A1F86B89DD
        Validity
            Not Before: Jul 26 13:30:40 2022 GMT
            Not After : Jul 25 13:35:40 2023 GMT
        Subject: CN=1CC23D3CA04B8E99AC48DE8695A9649ABF252C9F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:75:0e:eb:bc:da:c1:3c:af:bd:d6:85:74:5e:
                    e3:c5:d8:da:62:01:1f:73:1f:67:94:b3:af:a8:f5:
                    ca:83:17:75:d6:de:24:bc:86:53:e7:f2:4a:1d:0b:
                    5d:51:f5:64:c4:d1:52:ed:3f:d7:58:c1:f5:85:23:
                    5b:01:e3:34:98:c9:9c:4b:84:6b:2d:90:c1:22:54:
                    23:f8:38:01:98:2c:b5:84:f7:67:30:cb:fe:42:25:
                    b0:1e:cf:1d:c2:22:3e:e7:1c:10:ac:9f:47:b4:4a:
                    3e:77:79:6e:2f:0f:3b:c9:97:aa:f0:b4:a0:dd:95:
                    b0:35:0a:71:ed:12:5a:ea:69:69:39:70:ec:60:15:
                    0d:89:8d:23:c5:57:a6:31:5b:86:43:77:42:22:7a:
                    97:16:01:e1:62:f7:9f:a8:e6:b3:bf:ef:d1:aa:98:
                    af:66:f6:03:9b:3d:5c:0f:e3:db:76:85:17:eb:2b:
                    7f:65:79:16:4d:56:aa:a7:c3:29:f4:50:e9:6c:91:
                    3d:57:2e:fe:63:59:0a:06:09:2a:01:57:94:c7:47:
                    15:47:ad:de:0d:49:3c:e3:e2:cf:b3:88:97:32:0c:
                    1d:70:65:77:0b:f2:5e:be:4b:08:cd:1e:95:f8:81:
                    35:44:2f:aa:73:30:e0:2d:b6:1f:73:e4:4d:b8:c4:
                    c7:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:C2:3D:3C:A0:4B:8E:99:AC:48:DE:86:95:A9:64:9A:BF:25:2C:9F
            X509v3 Authority Key Identifier:
                keyid:BF:8A:4A:E4:CC:FB:51:6D:07:A1:A2:40:39:C6:62:A1:F8:6B:89:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A5qNovLNMMSNQckTiyzSHiRUh9GeaQC2zzq1duKqFdSS/0/BF8A4AE4CCFB516D07A1A24039C662A1F86B89DD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BF8A4AE4CCFB516D07A1A24039C662A1F86B89DD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A5qNovLNMMSNQckTiyzSHiRUh9GeaQC2zzq1duKqFdSS/0/3137302e38302e34392e302f32342d3234203d3e20323636333734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.80.49.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ac:ec:56:46:28:fa:40:5e:6e:aa:ac:d1:94:b3:53:30:8d:87:
         1b:82:10:79:9d:22:f9:80:f8:14:07:f5:8d:0f:df:12:07:1e:
         a3:67:38:07:5b:cf:3c:c5:7f:a3:2e:a5:3d:a7:c9:b1:02:7b:
         eb:bf:d5:40:df:0e:41:81:e9:91:75:44:3a:82:b3:59:05:3a:
         7d:63:81:ce:70:ae:29:db:0c:08:de:17:bc:f4:a0:13:a5:c0:
         10:94:2c:98:62:75:68:4b:4e:f5:08:85:fb:25:6d:68:30:fb:
         24:5d:2d:2c:38:98:73:4a:1d:51:4d:a3:93:93:ec:d8:69:e1:
         84:69:2d:2e:53:27:6e:9e:9c:e9:b1:95:dc:50:3e:7f:2a:93:
         0e:17:46:5f:08:74:19:63:8c:9e:b1:d9:dc:54:db:34:22:da:
         85:81:c1:e3:39:86:37:a3:1f:33:7a:f5:aa:b5:6f:76:93:fe:
         99:64:6f:03:e3:d6:e0:52:5a:60:51:a8:f5:a3:26:34:72:5a:
         13:1f:ca:c0:60:78:08:10:de:68:9c:4c:e3:f9:47:02:db:55:
         b3:8d:da:b0:fa:0e:12:51:11:5a:9b:c8:1a:ed:b0:e7:45:0d:
         99:78:53:6e:86:77:ab:49:12:9d:c8:e7:56:44:57:dc:00:22:
         d3:9f:da:1c
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUWYNvjHHB3suhdlOKVOVXMa5AwT0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkY4QTRBRTRDQ0ZCNTE2RDA3QTFBMjQwMzlDNjYyQTFG
ODZCODlERDAeFw0yMjA3MjYxMzMwNDBaFw0yMzA3MjUxMzM1NDBaMDMxMTAvBgNV
BAMTKDFDQzIzRDNDQTA0QjhFOTlBQzQ4REU4Njk1QTk2NDlBQkYyNTJDOUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwdQ7rvNrBPK+91oV0XuPF2Npi
AR9zH2eUs6+o9cqDF3XW3iS8hlPn8kodC11R9WTE0VLtP9dYwfWFI1sB4zSYyZxL
hGstkMEiVCP4OAGYLLWE92cwy/5CJbAezx3CIj7nHBCsn0e0Sj53eW4vDzvJl6rw
tKDdlbA1CnHtElrqaWk5cOxgFQ2JjSPFV6YxW4ZDd0IiepcWAeFi95+o5rO/79Gq
mK9m9gObPVwP49t2hRfrK39leRZNVqqnwyn0UOlskT1XLv5jWQoGCSoBV5THRxVH
rd4NSTzj4s+ziJcyDB1wZXcL8l6+SwjNHpX4gTVEL6pzMOAtth9z5E24xMcVAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUHMI9PKBLjpmsSN6Glalkmr8lLJ8wHwYDVR0j
BBgwFoAUv4pK5Mz7UW0HoaJAOcZiofhrid0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQTVxTm92TE5NTVNOUWNrVGl5elNIaVJVaDlHZWFRQzJ6enExZHVLcUZk
U1MvMC9CRjhBNEFFNENDRkI1MTZEMDdBMUEyNDAzOUM2NjJBMUY4NkI4OURELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0JGOEE0QUU0Q0NGQjUxNkQw
N0ExQTI0MDM5QzY2MkExRjg2Qjg5REQuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0E1cU5vdkxOTU1TTlFja1RpeXpTSGlSVWg5R2VhUUMyenpxMWR1S3FGZFNTLzAv
MzEzNzMwMmUzODMwMmUzNDM5MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM2
MzMzNzM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAqlAxMA0GCSqGSIb3DQEBCwUAA4IBAQCs7FZGKPpA
Xm6qrNGUs1MwjYcbghB5nSL5gPgUB/WND98SBx6jZzgHW888xX+jLqU9p8mxAnvr
v9VA3w5BgemRdUQ6grNZBTp9Y4HOcK4p2wwI3he89KATpcAQlCyYYnVoS071CIX7
JW1oMPskXS0sOJhzSh1RTaOTk+zYaeGEaS0uUydunpzpsZXcUD5/KpMOF0ZfCHQZ
Y4yesdncVNs0ItqFgcHjOYY3ox8zevWqtW92k/6ZZG8D49bgUlpgUaj1oyY0cloT
H8rAYHgIEN5onEzj+UcC21Wzjdqw+g4SURFam8ga7bDnRQ2ZeFNuhnerSRKdyOdW
RFfcACLTn9oc
-----END CERTIFICATE-----
Generated at Sun Feb 16 21:45:23 2025 by rpki-client