Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AWUGxceWiyXbSwBbgnv5vDnS7pm4HhCnGJwf3b2eKze1/0/3137372e3232312e3132302e302f32312d3234203d3e20323639353733.roa
File:                     3137372e3232312e3132302e302f32312d3234203d3e20323639353733.roa (raw, json)
Hash identifier:          eoJzhZQ04JVURSljR2tp2XStLfqGFxdqjFf7bBUwH5k=
Subject key identifier:   A8:13:AE:CE:D3:84:1B:F1:22:F1:8C:30:5E:DB:77:38:18:58:8E:E6
Certificate issuer:       /CN=29A3D0D0AC255182E4AEA9CA17963370CD63B2CE
Certificate serial:       131C41AFB37ED5AD65B31D4297F951B0089069F3
Authority key identifier: 29:A3:D0:D0:AC:25:51:82:E4:AE:A9:CA:17:96:33:70:CD:63:B2:CE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/29A3D0D0AC255182E4AEA9CA17963370CD63B2CE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AWUGxceWiyXbSwBbgnv5vDnS7pm4HhCnGJwf3b2eKze1/0/3137372e3232312e3132302e302f32312d3234203d3e20323639353733.roa
Signing time:             Wed 28 Aug 2024 11:34:07 +0000
ROA not before:           Wed 28 Aug 2024 11:29:07 +0000
ROA not after:            Wed 27 Aug 2025 11:34:07 +0000
asID:                     269573
IP address blocks:        177.221.120.0/21 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:1c:41:af:b3:7e:d5:ad:65:b3:1d:42:97:f9:51:b0:08:90:69:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29A3D0D0AC255182E4AEA9CA17963370CD63B2CE
        Validity
            Not Before: Aug 28 11:29:07 2024 GMT
            Not After : Aug 27 11:34:07 2025 GMT
        Subject: CN=A813AECED3841BF122F18C305EDB773818588EE6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:50:8a:3a:c3:3e:72:7c:a3:71:e9:c4:f4:a3:
                    0c:83:ec:af:17:69:eb:24:72:63:74:23:0a:d3:75:
                    4a:9d:7c:77:8d:a5:cc:2d:40:b9:65:04:f0:99:bc:
                    d5:cb:70:51:04:4e:f9:a2:e9:c6:f2:57:96:b3:25:
                    1d:ca:69:87:09:32:4f:b2:97:01:b1:3b:00:45:d7:
                    f5:26:14:08:4f:bf:9a:83:19:ce:e9:76:71:34:e0:
                    2e:2d:50:20:19:41:00:6e:7e:ef:77:88:e1:bf:84:
                    88:5b:d9:d6:f9:8c:e0:10:0d:3b:d7:52:31:15:e4:
                    e8:f2:ed:61:90:63:af:1f:f8:31:76:ba:c3:b6:b0:
                    16:2e:c5:fd:4d:ad:52:61:80:30:94:bd:50:3b:cb:
                    8f:d3:55:22:b0:5d:20:bf:b4:c7:e1:27:dc:af:60:
                    ad:dc:24:14:77:53:a6:2b:0a:3f:3a:c8:0d:b5:48:
                    40:db:f2:6f:c3:0c:71:9b:97:8f:e6:6d:41:98:b4:
                    cd:1b:cc:f8:6f:be:74:a5:0f:15:ce:5b:3a:6a:ce:
                    65:f0:5e:bb:29:cc:af:74:27:29:89:33:e4:75:1b:
                    ed:9c:6c:03:7d:27:c0:a8:05:5e:1c:64:5d:89:76:
                    b0:98:8f:a9:8c:d7:f4:cf:db:e2:b2:79:86:65:f5:
                    18:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:13:AE:CE:D3:84:1B:F1:22:F1:8C:30:5E:DB:77:38:18:58:8E:E6
            X509v3 Authority Key Identifier:
                keyid:29:A3:D0:D0:AC:25:51:82:E4:AE:A9:CA:17:96:33:70:CD:63:B2:CE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AWUGxceWiyXbSwBbgnv5vDnS7pm4HhCnGJwf3b2eKze1/0/29A3D0D0AC255182E4AEA9CA17963370CD63B2CE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/29A3D0D0AC255182E4AEA9CA17963370CD63B2CE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AWUGxceWiyXbSwBbgnv5vDnS7pm4HhCnGJwf3b2eKze1/0/3137372e3232312e3132302e302f32312d3234203d3e20323639353733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.221.120.0/21

    Signature Algorithm: sha256WithRSAEncryption
         87:5e:91:ba:76:f9:fa:2f:4d:5a:b5:fa:72:8f:a1:4f:29:14:
         6f:68:af:1c:2d:94:57:bf:9f:7a:61:c4:9d:52:fa:dc:27:ad:
         34:c2:07:5b:4f:31:0c:8e:a1:24:87:78:1b:78:f4:d5:1f:73:
         dd:58:84:d6:22:c9:ef:90:73:7f:c1:e4:34:f9:e8:fa:1f:54:
         e4:da:62:e4:7a:88:0e:9a:c9:30:2f:5f:e9:fd:ee:1d:8a:30:
         90:c1:97:39:40:54:4b:17:e1:6f:b2:04:3b:27:56:52:13:55:
         3d:6e:5c:e5:0a:7d:85:a1:0a:69:1f:70:0f:9e:b5:2a:b0:f8:
         97:79:61:59:7d:3c:22:ef:61:fa:2c:9e:85:da:a4:b4:bc:88:
         dd:95:cc:f3:75:31:4e:f1:01:ad:d1:4f:da:8b:ef:83:4e:c4:
         e5:01:a7:7f:58:2d:7c:ed:65:d2:96:6a:5e:45:61:1b:a8:35:
         c9:3a:0c:ce:31:73:7e:32:94:5c:ee:9f:14:3f:95:ed:eb:c0:
         67:37:84:41:ba:c6:a0:b6:aa:57:b3:a8:63:af:70:ad:13:f3:
         28:48:4c:a7:a3:d5:07:e8:47:3f:33:25:80:5c:ff:73:47:a9:
         d9:7b:8e:48:e1:14:4e:cc:5f:8b:00:eb:f9:a9:bd:20:10:a5:
         33:ff:0c:e6
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUExxBr7N+1a1lsx1Cl/lRsAiQafMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjlBM0QwRDBBQzI1NTE4MkU0QUVBOUNBMTc5NjMzNzBD
RDYzQjJDRTAeFw0yNDA4MjgxMTI5MDdaFw0yNTA4MjcxMTM0MDdaMDMxMTAvBgNV
BAMTKEE4MTNBRUNFRDM4NDFCRjEyMkYxOEMzMDVFREI3NzM4MTg1ODhFRTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8UIo6wz5yfKNx6cT0owyD7K8X
aeskcmN0IwrTdUqdfHeNpcwtQLllBPCZvNXLcFEETvmi6cbyV5azJR3KaYcJMk+y
lwGxOwBF1/UmFAhPv5qDGc7pdnE04C4tUCAZQQBufu93iOG/hIhb2db5jOAQDTvX
UjEV5Ojy7WGQY68f+DF2usO2sBYuxf1NrVJhgDCUvVA7y4/TVSKwXSC/tMfhJ9yv
YK3cJBR3U6YrCj86yA21SEDb8m/DDHGbl4/mbUGYtM0bzPhvvnSlDxXOWzpqzmXw
XrspzK90JymJM+R1G+2cbAN9J8CoBV4cZF2JdrCYj6mM1/TP2+KyeYZl9RiXAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUqBOuztOEG/Ei8YwwXtt3OBhYjuYwHwYDVR0j
BBgwFoAUKaPQ0KwlUYLkrqnKF5YzcM1jss4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQVdVR3hjZVdpeVhiU3dCYmdudjV2RG5TN3BtNEhoQ25HSndmM2IyZUt6
ZTEvMC8yOUEzRDBEMEFDMjU1MTgyRTRBRUE5Q0ExNzk2MzM3MENENjNCMkNFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzI5QTNEMEQwQUMyNTUxODJF
NEFFQTlDQTE3OTYzMzcwQ0Q2M0IyQ0UuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0FXVUd4Y2VXaXlYYlN3QmJnbnY1dkRuUzdwbTRIaENuR0p3ZjNiMmVLemUxLzAv
MzEzNzM3MmUzMjMyMzEyZTMxMzIzMDJlMzAyZjMyMzEyZDMyMzQyMDNkM2UyMDMy
MzYzOTM1MzczMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEA7HdeDANBgkqhkiG9w0BAQsFAAOCAQEAh16R
unb5+i9NWrX6co+hTykUb2ivHC2UV7+femHEnVL63CetNMIHW08xDI6hJId4G3j0
1R9z3ViE1iLJ75Bzf8HkNPno+h9U5Npi5HqIDprJMC9f6f3uHYowkMGXOUBUSxfh
b7IEOydWUhNVPW5c5Qp9haEKaR9wD561KrD4l3lhWX08Iu9h+iyehdqktLyI3ZXM
83UxTvEBrdFP2ovvg07E5QGnf1gtfO1l0pZqXkVhG6g1yToMzjFzfjKUXO6fFD+V
7evAZzeEQbrGoLaqV7OoY69wrRPzKEhMp6PVB+hHPzMlgFz/c0ep2XuOSOEUTsxf
iwDr+am9IBClM/8M5g==
-----END CERTIFICATE-----
Generated at Sun Feb 16 21:54:53 2025 by rpki-client