Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ALWTLnGpYaeebsAD581c6tRi2LpPr8AXSjuAYgUT92Ce/0/3137302e3233382e3130342e302f32322d3234203d3e20323636333135.roa
File:                     3137302e3233382e3130342e302f32322d3234203d3e20323636333135.roa (raw, json)
Hash identifier:          amPORiT7/Dbv+HKhfKGR2YgTdnamZMBi+YBE6CCNK/Q=
Subject key identifier:   1A:3C:55:66:E9:6A:EA:B8:A7:1D:72:AA:3D:3A:1D:E2:E8:5E:F4:51
Certificate issuer:       /CN=E467076E65373F2A15851FC95937F6C354997308
Certificate serial:       6C026C48B24D994ED52B3CCCB4D1F9C983C8F1E2
Authority key identifier: E4:67:07:6E:65:37:3F:2A:15:85:1F:C9:59:37:F6:C3:54:99:73:08
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E467076E65373F2A15851FC95937F6C354997308.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ALWTLnGpYaeebsAD581c6tRi2LpPr8AXSjuAYgUT92Ce/0/3137302e3233382e3130342e302f32322d3234203d3e20323636333135.roa
Signing time:             Tue 16 May 2023 14:00:00 +0000
ROA not before:           Tue 16 May 2023 13:55:00 +0000
ROA not after:            Tue 14 May 2024 14:00:00 +0000
asID:                     266315
IP address blocks:        170.238.104.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:02:6c:48:b2:4d:99:4e:d5:2b:3c:cc:b4:d1:f9:c9:83:c8:f1:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E467076E65373F2A15851FC95937F6C354997308
        Validity
            Not Before: May 16 13:55:00 2023 GMT
            Not After : May 14 14:00:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:6d:97:b3:28:56:05:d6:22:7f:ff:06:8d:1b:
                    6c:23:1c:01:d1:a9:06:ec:78:dd:4a:63:2b:fe:b4:
                    78:8d:03:08:3c:87:7d:30:cc:5e:54:5d:7d:db:c6:
                    32:e9:80:8e:85:7f:dc:c3:1a:06:8c:f1:18:ff:58:
                    d9:93:47:93:6d:62:b1:1c:f2:c3:72:bf:80:f9:01:
                    27:60:1f:45:56:67:30:6a:a3:37:88:79:cf:f5:4b:
                    39:ea:41:40:ba:a8:84:a8:87:fd:13:36:b5:fa:dd:
                    3d:fa:aa:e2:26:fb:7e:92:c4:b8:11:79:d8:99:f8:
                    fa:bb:68:26:bb:dc:12:74:c6:93:22:85:ad:4a:35:
                    50:7e:2b:3d:de:ad:31:6f:36:b5:7d:96:0d:e9:dd:
                    51:12:0f:d8:0a:70:45:c6:89:ee:78:78:42:d5:3c:
                    52:a9:65:71:97:66:a9:bd:a1:18:b7:6a:4a:7c:8f:
                    1c:88:0d:14:c7:3f:72:f3:77:6a:62:4e:cb:49:64:
                    c1:71:52:c8:d6:9d:b9:d7:25:84:fd:cb:be:62:c0:
                    b0:ac:0a:06:fe:bc:6c:c4:b2:ac:90:9e:87:b5:99:
                    14:20:4e:7e:79:38:ef:7a:0a:8a:50:b4:3a:60:00:
                    74:8f:a7:fc:8e:0d:ad:22:d8:30:83:a6:ca:15:f0:
                    00:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:3C:55:66:E9:6A:EA:B8:A7:1D:72:AA:3D:3A:1D:E2:E8:5E:F4:51
            X509v3 Authority Key Identifier:
                keyid:E4:67:07:6E:65:37:3F:2A:15:85:1F:C9:59:37:F6:C3:54:99:73:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ALWTLnGpYaeebsAD581c6tRi2LpPr8AXSjuAYgUT92Ce/0/E467076E65373F2A15851FC95937F6C354997308.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E467076E65373F2A15851FC95937F6C354997308.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ALWTLnGpYaeebsAD581c6tRi2LpPr8AXSjuAYgUT92Ce/0/3137302e3233382e3130342e302f32322d3234203d3e20323636333135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.238.104.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2f:4f:17:47:87:c6:de:8e:8f:10:67:fd:ed:aa:72:1a:97:85:
         a3:b2:9b:6c:5d:5d:89:69:7a:27:a7:2c:ea:a9:f7:4a:59:8d:
         2b:8d:f6:9d:4b:06:64:c7:ed:8c:3d:a0:f8:24:a4:10:2b:2b:
         e9:37:e4:a4:32:7d:b6:06:71:7a:13:68:31:dd:6d:48:b7:b6:
         1b:75:1c:d4:b4:af:bc:ba:a8:eb:6e:c4:38:97:57:2f:a7:d1:
         95:92:58:4b:63:82:05:12:ea:95:98:9d:50:69:ad:ac:96:84:
         65:45:00:10:18:a7:00:bb:85:bd:29:e2:02:f2:ed:03:36:44:
         c3:bc:4c:cb:cd:30:e3:5a:e4:69:5d:db:7a:ed:81:5c:dd:c9:
         d3:78:6e:eb:bf:d6:8c:9c:b0:1f:56:ff:47:fd:bd:67:5b:7c:
         a8:e8:40:d0:68:f6:c1:f8:eb:e4:4f:74:2a:48:d9:cc:8f:91:
         f0:5f:56:34:0b:65:13:d3:52:44:45:ce:af:4d:60:2e:8d:3a:
         b6:b2:7a:00:7b:03:f8:77:d7:79:34:d3:56:32:22:9b:d7:36:
         aa:f7:33:26:47:6c:a3:d7:9c:2c:ca:e2:87:35:8b:61:55:d1:
         be:d6:24:7c:75:41:47:87:f0:76:6a:f5:0b:6e:57:58:d0:f0:
         90:78:6d:fd
-----BEGIN CERTIFICATE-----
MIIHRTCCBi2gAwIBAgIUbAJsSLJNmU7VKzzMtNH5yYPI8eIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTQ2NzA3NkU2NTM3M0YyQTE1ODUxRkM5NTkzN0Y2QzM1
NDk5NzMwODAeFw0yMzA1MTYxMzU1MDBaFw0yNDA1MTQxNDAwMDBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQjA2RDk3QjMyODU2MDVENjIy
N0ZGRjA2OEQxQjZDMjMxQzAxRDFBOTA2RUM3OERENEE2MzJCRkVCNDc4OEQwMzA4
M0M4NzdEMzBDQzVFNTQ1RDdEREJDNjMyRTk4MDhFODU3RkRDQzMxQTA2OENGMTE4
RkY1OEQ5OTM0NzkzNkQ2MkIxMUNGMkMzNzJCRjgwRjkwMTI3NjAxRjQ1NTY2NzMw
NkFBMzM3ODg3OUNGRjU0QjM5RUE0MTQwQkFBODg0QTg4N0ZEMTMzNkI1RkFERDNE
RkFBQUUyMjZGQjdFOTJDNEI4MTE3OUQ4OTlGOEZBQkI2ODI2QkJEQzEyNzRDNjkz
MjI4NUFENEEzNTUwN0UyQjNEREVBRDMxNkYzNkI1N0Q5NjBERTlERDUxMTIwRkQ4
MEE3MDQ1QzY4OUVFNzg3ODQyRDUzQzUyQTk2NTcxOTc2NkE5QkRBMTE4Qjc2QTRB
N0M4RjFDODgwRDE0QzczRjcyRjM3NzZBNjI0RUNCNDk2NEMxNzE1MkM4RDY5REI5
RDcyNTg0RkRDQkJFNjJDMEIwQUMwQTA2RkVCQzZDQzRCMkFDOTA5RTg3QjU5OTE0
MjA0RTdFNzkzOEVGN0EwQThBNTBCNDNBNjAwMDc0OEZBN0ZDOEUwREFEMjJEODMw
ODNBNkNBMTVGMDAwMzcwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAsG2XsyhWBdYif/8GjRtsIxwB0akG7HjdSmMr/rR4jQMIPId9MMxe
VF1928Yy6YCOhX/cwxoGjPEY/1jZk0eTbWKxHPLDcr+A+QEnYB9FVmcwaqM3iHnP
9Us56kFAuqiEqIf9Eza1+t09+qriJvt+ksS4EXnYmfj6u2gmu9wSdMaTIoWtSjVQ
fis93q0xbza1fZYN6d1REg/YCnBFxonueHhC1TxSqWVxl2apvaEYt2pKfI8ciA0U
xz9y83dqYk7LSWTBcVLI1p251yWE/cu+YsCwrAoG/rxsxLKskJ6HtZkUIE5+eTjv
egqKULQ6YAB0j6f8jg2tItgwg6bKFfAANwIDAQABo4ICUzCCAk8wHQYDVR0OBBYE
FBo8VWbpauq4px1yqj06HeLoXvRRMB8GA1UdIwQYMBaAFORnB25lNz8qFYUfyVk3
9sNUmXMIMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0FMV1RMbkdwWWFlZWJz
QUQ1ODFjNnRSaTJMcFByOEFYU2p1QVlnVVQ5MkNlLzAvRTQ2NzA3NkU2NTM3M0Yy
QTE1ODUxRkM5NTkzN0Y2QzM1NDk5NzMwOC5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC9FNDY3MDc2RTY1MzczRjJBMTU4NTFGQzk1OTM3RjZDMzU0OTk3
MzA4LmNlcjCBsAYIKwYBBQUHAQsEgaMwgaAwgZ0GCCsGAQUFBzALhoGQcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9BTFdUTG5HcFlhZWVic0FENTgx
YzZ0UmkyTHBQcjhBWFNqdUFZZ1VUOTJDZS8wLzMxMzczMDJlMzIzMzM4MmUzMTMw
MzQyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM2MzYzMzMxMzUucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAKq7mgwDQYJKoZIhvcNAQELBQADggEBAC9PF0eHxt6OjxBn/e2qchqXhaOym2xd
XYlpeienLOqp90pZjSuN9p1LBmTH7Yw9oPgkpBArK+k35KQyfbYGcXoTaDHdbUi3
tht1HNS0r7y6qOtuxDiXVy+n0ZWSWEtjggUS6pWYnVBprayWhGVFABAYpwC7hb0p
4gLy7QM2RMO8TMvNMONa5Gld23rtgVzdydN4buu/1oycsB9W/0f9vWdbfKjoQNBo
9sH46+RPdCpI2cyPkfBfVjQLZRPTUkRFzq9NYC6NOrayegB7A/h313k001YyIpvX
Nqr3MyZHbKPXnCzK4oc1i2FV0b7WJHx1QUeH8HZq9QtuV1jQ8JB4bf0=
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:06:53 2025 by rpki-client