Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AVLKoSw76WP7FhwxiBvMHFxMRYYK4Z7VwjoRrpyfkq4i/0/3138312e3233332e34342e302f32342d3234203d3e20323731343230.roa
File:                     3138312e3233332e34342e302f32342d3234203d3e20323731343230.roa (raw, json)
Hash identifier:          QHSGOiWdpwyaWK7sNZWa6/LT/fznq+55zMjTGvL+3jI=
Subject key identifier:   7F:FD:13:32:3B:56:31:E4:2B:59:81:31:9C:FE:51:B1:18:A1:1F:62
Certificate issuer:       /CN=F6397E133797ED687FF9A8E595030DA0DFE5B7CE
Certificate serial:       2751CFD053D93DF41CF2F9B63A8988A00D134252
Authority key identifier: F6:39:7E:13:37:97:ED:68:7F:F9:A8:E5:95:03:0D:A0:DF:E5:B7:CE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F6397E133797ED687FF9A8E595030DA0DFE5B7CE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AVLKoSw76WP7FhwxiBvMHFxMRYYK4Z7VwjoRrpyfkq4i/0/3138312e3233332e34342e302f32342d3234203d3e20323731343230.roa
Signing time:             Thu 11 May 2023 11:46:44 +0000
ROA not before:           Thu 11 May 2023 11:41:44 +0000
ROA not after:            Thu 09 May 2024 11:46:44 +0000
asID:                     271420
IP address blocks:        181.233.44.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:51:cf:d0:53:d9:3d:f4:1c:f2:f9:b6:3a:89:88:a0:0d:13:42:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F6397E133797ED687FF9A8E595030DA0DFE5B7CE
        Validity
            Not Before: May 11 11:41:44 2023 GMT
            Not After : May  9 11:46:44 2024 GMT
        Subject: CN=7FFD13323B5631E42B5981319CFE51B118A11F62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:c8:4d:0a:6b:b3:dc:eb:b0:47:ab:61:df:83:
                    b8:2e:a1:59:04:fa:45:5e:61:27:61:39:a6:a1:f4:
                    e5:99:f4:8c:ee:46:96:ae:7f:39:4e:86:47:59:8b:
                    13:22:d3:a2:0e:8a:1f:69:9d:72:ef:10:87:d9:95:
                    42:d7:bd:87:5c:99:6a:bf:3f:27:a1:eb:75:3a:ac:
                    8b:9a:d0:97:a9:e9:68:b9:45:f8:48:8a:aa:13:38:
                    eb:3e:e2:83:80:8e:29:60:98:30:92:72:b8:b6:98:
                    6b:a1:6f:86:35:17:57:82:96:b1:d6:72:5c:74:3a:
                    23:fc:66:b8:07:ab:8c:27:ba:f3:32:8e:b2:76:aa:
                    33:85:09:e4:85:60:a4:eb:94:43:32:1e:64:10:61:
                    68:35:80:91:41:e1:d8:84:e0:92:b1:8b:75:f2:c5:
                    14:3c:76:a9:81:e8:b7:e7:99:cf:dc:ed:ad:3e:00:
                    f7:cb:57:21:1c:b3:50:4e:39:56:07:17:83:ac:11:
                    f8:d2:8b:d3:9e:9a:80:04:26:86:1c:56:d1:fd:03:
                    56:38:25:25:0b:56:20:ba:3b:f7:a6:9c:b1:d3:45:
                    b2:f8:4b:9e:6c:84:85:d9:c8:cb:40:35:de:5b:98:
                    7a:30:f8:47:0f:c1:ef:04:0b:66:a6:63:3a:68:5a:
                    77:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:FD:13:32:3B:56:31:E4:2B:59:81:31:9C:FE:51:B1:18:A1:1F:62
            X509v3 Authority Key Identifier:
                keyid:F6:39:7E:13:37:97:ED:68:7F:F9:A8:E5:95:03:0D:A0:DF:E5:B7:CE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AVLKoSw76WP7FhwxiBvMHFxMRYYK4Z7VwjoRrpyfkq4i/0/F6397E133797ED687FF9A8E595030DA0DFE5B7CE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F6397E133797ED687FF9A8E595030DA0DFE5B7CE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AVLKoSw76WP7FhwxiBvMHFxMRYYK4Z7VwjoRrpyfkq4i/0/3138312e3233332e34342e302f32342d3234203d3e20323731343230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.233.44.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5d:bb:2f:89:4c:bf:a6:1b:72:90:0b:3b:cc:ac:0d:b7:95:8b:
         70:c2:9b:98:3a:30:1e:f8:77:8e:63:6f:75:3e:94:92:86:8b:
         35:50:d0:c1:34:d0:b6:40:80:31:35:26:6d:71:06:b4:ee:50:
         f1:e4:58:a7:84:61:e2:bc:e1:51:3d:ed:e5:9b:86:c1:94:3f:
         ef:8d:24:2c:a5:c9:22:a9:a8:d6:62:c4:8b:b6:00:f1:1e:71:
         07:b2:29:da:32:43:1a:9a:19:e7:14:16:3b:8a:6b:fb:97:58:
         07:56:33:e2:a7:53:0a:39:d8:32:7b:fb:54:bb:dc:cc:5b:05:
         94:b0:29:0e:b0:96:ea:93:b2:57:ea:9c:aa:5b:42:97:31:c8:
         9a:28:fb:8b:60:97:f9:49:2b:85:89:e2:f5:4c:d5:72:29:de:
         06:45:4d:ec:92:5f:43:d4:0a:12:2b:6f:1d:bd:23:ee:23:87:
         8f:c2:c3:29:54:17:e4:79:df:bb:a5:c8:26:0c:be:fb:c4:e1:
         08:0b:47:3d:5d:65:11:e5:ba:f5:53:99:eb:ff:d8:a0:15:56:
         34:9e:63:b9:17:b6:ed:ee:76:0d:e6:ca:83:26:93:74:25:e3:
         f6:70:10:73:d1:0a:20:1b:d2:f0:bb:d4:dc:1d:9e:bc:65:3b:
         6b:41:bf:a3
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUJ1HP0FPZPfQc8vm2OomIoA0TQlIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjYzOTdFMTMzNzk3RUQ2ODdGRjlBOEU1OTUwMzBEQTBE
RkU1QjdDRTAeFw0yMzA1MTExMTQxNDRaFw0yNDA1MDkxMTQ2NDRaMDMxMTAvBgNV
BAMTKDdGRkQxMzMyM0I1NjMxRTQyQjU5ODEzMTlDRkU1MUIxMThBMTFGNjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbyE0Ka7Pc67BHq2Hfg7guoVkE
+kVeYSdhOaah9OWZ9IzuRpaufzlOhkdZixMi06IOih9pnXLvEIfZlULXvYdcmWq/
Pyeh63U6rIua0Jep6Wi5RfhIiqoTOOs+4oOAjilgmDCScri2mGuhb4Y1F1eClrHW
clx0OiP8ZrgHq4wnuvMyjrJ2qjOFCeSFYKTrlEMyHmQQYWg1gJFB4diE4JKxi3Xy
xRQ8dqmB6Lfnmc/c7a0+APfLVyEcs1BOOVYHF4OsEfjSi9OemoAEJoYcVtH9A1Y4
JSULViC6O/emnLHTRbL4S55shIXZyMtANd5bmHow+EcPwe8EC2amYzpoWnfzAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUf/0TMjtWMeQrWYExnP5RsRihH2IwHwYDVR0j
BBgwFoAU9jl+EzeX7Wh/+ajllQMNoN/lt84wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQVZMS29Tdzc2V1A3Rmh3eGlCdk1IRnhNUllZSzRaN1Z3am9ScnB5Zmtx
NGkvMC9GNjM5N0UxMzM3OTdFRDY4N0ZGOUE4RTU5NTAzMERBMERGRTVCN0NFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0Y2Mzk3RTEzMzc5N0VENjg3
RkY5QThFNTk1MDMwREEwREZFNUI3Q0UuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0FWTEtvU3c3NldQN0Zod3hpQnZNSEZ4TVJZWUs0WjdWd2pvUnJweWZrcTRpLzAv
MzEzODMxMmUzMjMzMzMyZTM0MzQyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM3
MzEzNDMyMzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAC16SwwDQYJKoZIhvcNAQELBQADggEBAF27L4lM
v6YbcpALO8ysDbeVi3DCm5g6MB74d45jb3U+lJKGizVQ0ME00LZAgDE1Jm1xBrTu
UPHkWKeEYeK84VE97eWbhsGUP++NJCylySKpqNZixIu2APEecQeyKdoyQxqaGecU
FjuKa/uXWAdWM+KnUwo52DJ7+1S73MxbBZSwKQ6wluqTslfqnKpbQpcxyJoo+4tg
l/lJK4WJ4vVM1XIp3gZFTeySX0PUChIrbx29I+4jh4/CwylUF+R537ulyCYMvvvE
4QgLRz1dZRHluvVTmev/2KAVVjSeY7kXtu3udg3myoMmk3Ql4/ZwEHPRCiAb0vC7
1NwdnrxlO2tBv6M=
-----END CERTIFICATE-----
Generated at Fri Mar 14 02:48:39 2025 by rpki-client