Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AGS4xfD5qP5JBXbKKTkeJZp9V4NDJuKTr53B8dJYjtA/0/3137302e38332e3133342e302f32342d3234203d3e20323632353838.roa
File:                     3137302e38332e3133342e302f32342d3234203d3e20323632353838.roa (raw, json)
Hash identifier:          QYXQhw5jhEpEPg0xir/12ty56WCphDBnMIhd2PVISrw=
Subject key identifier:   A9:BB:FE:1F:DD:0D:06:60:61:0C:05:77:C1:98:53:D2:EF:24:5D:8F
Certificate issuer:       /CN=5CC02E8E2938AFADEA467289D4C793583546A57D
Certificate serial:       6F547F81E0ED681FC4FA746EA514A53097A0ACF9
Authority key identifier: 5C:C0:2E:8E:29:38:AF:AD:EA:46:72:89:D4:C7:93:58:35:46:A5:7D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5CC02E8E2938AFADEA467289D4C793583546A57D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AGS4xfD5qP5JBXbKKTkeJZp9V4NDJuKTr53B8dJYjtA/0/3137302e38332e3133342e302f32342d3234203d3e20323632353838.roa
Signing time:             Sat 09 Apr 2022 14:18:29 +0000
ROA not before:           Sat 09 Apr 2022 14:13:29 +0000
ROA not after:            Sat 08 Apr 2023 14:18:29 +0000
asID:                     262588
IP address blocks:        170.83.134.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:54:7f:81:e0:ed:68:1f:c4:fa:74:6e:a5:14:a5:30:97:a0:ac:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5CC02E8E2938AFADEA467289D4C793583546A57D
        Validity
            Not Before: Apr  9 14:13:29 2022 GMT
            Not After : Apr  8 14:18:29 2023 GMT
        Subject: CN=A9BBFE1FDD0D0660610C0577C19853D2EF245D8F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:a7:6c:96:9f:3e:83:c8:d1:08:fe:dc:e8:0e:
                    9c:7b:21:96:16:51:03:a4:71:78:b3:e3:52:1c:8f:
                    28:a0:0e:12:35:3b:d6:24:35:b2:7f:d0:db:97:7e:
                    5e:92:12:a0:a4:2c:f7:ab:17:43:3c:a9:00:75:a4:
                    0b:e1:3d:2a:a0:71:9c:c3:db:ab:63:ca:ed:30:d6:
                    c4:0b:c5:ab:1d:4e:da:af:95:4c:79:43:25:0a:41:
                    30:f6:53:34:60:ea:c7:9d:ad:78:00:a9:15:19:e5:
                    6d:05:43:87:c4:7a:97:24:91:23:05:02:5a:79:e8:
                    52:73:0f:94:b0:e9:ac:2d:2f:74:44:1e:f3:dc:29:
                    cd:28:59:a6:f9:ce:17:b8:93:58:37:78:6c:b9:f2:
                    7e:19:e5:59:1e:0f:43:e8:40:e2:89:dd:fb:c7:4a:
                    1d:24:49:c4:3e:fd:1a:d0:b6:b7:d0:88:20:14:3a:
                    76:b6:ed:40:17:33:85:2a:eb:08:40:32:1c:49:cf:
                    ad:5c:4e:26:12:63:c4:84:f1:ca:88:bf:3c:16:73:
                    16:9d:91:61:39:58:a0:98:4f:04:fa:f7:a7:ff:d5:
                    23:7b:d2:6b:0c:1f:8a:79:e9:e6:48:dd:14:cf:f4:
                    2d:c4:a2:f6:66:cc:64:e1:7c:dc:d0:1e:ad:11:4a:
                    eb:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:BB:FE:1F:DD:0D:06:60:61:0C:05:77:C1:98:53:D2:EF:24:5D:8F
            X509v3 Authority Key Identifier:
                keyid:5C:C0:2E:8E:29:38:AF:AD:EA:46:72:89:D4:C7:93:58:35:46:A5:7D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AGS4xfD5qP5JBXbKKTkeJZp9V4NDJuKTr53B8dJYjtA/0/5CC02E8E2938AFADEA467289D4C793583546A57D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5CC02E8E2938AFADEA467289D4C793583546A57D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AGS4xfD5qP5JBXbKKTkeJZp9V4NDJuKTr53B8dJYjtA/0/3137302e38332e3133342e302f32342d3234203d3e20323632353838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.83.134.0/24

    Signature Algorithm: sha256WithRSAEncryption
         72:a7:9e:4b:d1:7c:c9:c2:39:a9:05:3a:45:bb:63:31:af:3b:
         f2:b1:c4:dd:5c:8b:f9:c3:98:1f:ae:da:9a:ae:c4:dd:6f:34:
         b3:f2:8b:a4:e5:34:e6:b4:67:a0:9f:00:07:f2:c0:e0:25:eb:
         92:7d:43:09:e8:a9:14:5d:63:00:61:a8:3a:a4:b9:9e:74:0f:
         20:fb:c6:43:83:73:37:d8:33:a6:12:b4:e1:42:5f:41:02:45:
         aa:5a:4c:fd:30:ec:59:e5:a5:dc:61:8d:bb:58:c4:99:34:c5:
         63:e0:17:29:7a:67:59:38:af:63:6b:58:fb:de:9f:35:69:a2:
         3e:20:ca:eb:79:b3:2c:d7:8a:a4:6d:e9:9c:b6:b7:79:d8:f3:
         37:57:31:8a:dd:40:79:95:9a:22:9a:89:a2:00:10:e9:e1:20:
         7e:7c:d6:95:9e:fe:80:ac:70:1e:2b:55:c2:b4:24:1f:08:79:
         83:da:e6:08:38:19:31:28:06:a0:a6:1f:d4:ee:b7:93:14:04:
         38:ea:d9:b3:d3:72:c3:66:40:48:2f:79:15:8e:80:53:4f:b2:
         6a:74:59:77:a4:05:03:c4:b4:f7:3f:3b:d9:b5:a4:39:5e:e0:
         81:18:a5:15:19:93:fe:0e:37:76:81:ae:d6:91:fe:e5:64:03:
         8c:94:fb:b1
-----BEGIN CERTIFICATE-----
MIIFRDCCBCygAwIBAgIUb1R/geDtaB/E+nRupRSlMJegrPkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUNDMDJFOEUyOTM4QUZBREVBNDY3Mjg5RDRDNzkzNTgz
NTQ2QTU3RDAeFw0yMjA0MDkxNDEzMjlaFw0yMzA0MDgxNDE4MjlaMDMxMTAvBgNV
BAMTKEE5QkJGRTFGREQwRDA2NjA2MTBDMDU3N0MxOTg1M0QyRUYyNDVEOEYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWp2yWnz6DyNEI/tzoDpx7IZYW
UQOkcXiz41IcjyigDhI1O9YkNbJ/0NuXfl6SEqCkLPerF0M8qQB1pAvhPSqgcZzD
26tjyu0w1sQLxasdTtqvlUx5QyUKQTD2UzRg6sedrXgAqRUZ5W0FQ4fEepckkSMF
Alp56FJzD5Sw6awtL3REHvPcKc0oWab5zhe4k1g3eGy58n4Z5VkeD0PoQOKJ3fvH
Sh0kScQ+/RrQtrfQiCAUOna27UAXM4Uq6whAMhxJz61cTiYSY8SE8cqIvzwWcxad
kWE5WKCYTwT696f/1SN70msMH4p56eZI3RTP9C3EovZmzGThfNzQHq0RSut/AgMB
AAGjggJOMIICSjAdBgNVHQ4EFgQUqbv+H90NBmBhDAV3wZhT0u8kXY8wHwYDVR0j
BBgwFoAUXMAujik4r63qRnKJ1MeTWDVGpX0wDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9BR1M0eGZENXFQNUpCWGJLS1RrZUpacDlWNE5ESnVLVHI1M0I4ZEpZanRB
LzAvNUNDMDJFOEUyOTM4QUZBREVBNDY3Mjg5RDRDNzkzNTgzNTQ2QTU3RC5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMC81Q0MwMkU4RTI5MzhBRkFERUE0
NjcyODlENEM3OTM1ODM1NDZBNTdELmNlcjCBrQYIKwYBBQUHAQsEgaAwgZ0wgZoG
CCsGAQUFBzALhoGNcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9B
R1M0eGZENXFQNUpCWGJLS1RrZUpacDlWNE5ESnVLVHI1M0I4ZEpZanRBLzAvMzEz
NzMwMmUzODMzMmUzMTMzMzQyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2MzIz
NTM4Mzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcB
Af8EEDAOMAwEAgABMAYDBACqU4YwDQYJKoZIhvcNAQELBQADggEBAHKnnkvRfMnC
OakFOkW7YzGvO/KxxN1ci/nDmB+u2pquxN1vNLPyi6TlNOa0Z6CfAAfywOAl65J9
QwnoqRRdYwBhqDqkuZ50DyD7xkODczfYM6YStOFCX0ECRapaTP0w7FnlpdxhjbtY
xJk0xWPgFyl6Z1k4r2NrWPvenzVpoj4gyut5syzXiqRt6Zy2t3nY8zdXMYrdQHmV
miKaiaIAEOnhIH581pWe/oCscB4rVcK0JB8IeYPa5gg4GTEoBqCmH9Tut5MUBDjq
2bPTcsNmQEgveRWOgFNPsmp0WXekBQPEtPc/O9m1pDle4IEYpRUZk/4ON3aBrtaR
/uVkA4yU+7E=
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:25:53 2025 by rpki-client