Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BMUSYRu4t6eVwwmktEQjzGW4kjjXfFHnkTC1pTwZM7EF/0/3133312e3130382e3134382e302f32322d3232203d3e20323634333835.roa
File:                     3133312e3130382e3134382e302f32322d3232203d3e20323634333835.roa (raw, json)
Hash identifier:          Fq6IDaTqT6VHlseQkD3cFLyDLyJdiLTvfdQTjZewI4Y=
Subject key identifier:   83:17:87:D9:D6:18:75:F3:BC:C2:CE:AC:90:65:C6:73:28:E0:1B:2A
Certificate issuer:       /CN=C328371DF19EFB26034991794C7E5221EC5E5459
Certificate serial:       5E026D834EB78700A9E1B770638626A6ACD48907
Authority key identifier: C3:28:37:1D:F1:9E:FB:26:03:49:91:79:4C:7E:52:21:EC:5E:54:59
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C328371DF19EFB26034991794C7E5221EC5E5459.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BMUSYRu4t6eVwwmktEQjzGW4kjjXfFHnkTC1pTwZM7EF/0/3133312e3130382e3134382e302f32322d3232203d3e20323634333835.roa
Signing time:             Mon 13 Jun 2022 23:20:48 +0000
ROA not before:           Mon 13 Jun 2022 23:15:48 +0000
ROA not after:            Mon 12 Jun 2023 23:20:48 +0000
asID:                     264385
IP address blocks:        131.108.148.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:02:6d:83:4e:b7:87:00:a9:e1:b7:70:63:86:26:a6:ac:d4:89:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C328371DF19EFB26034991794C7E5221EC5E5459
        Validity
            Not Before: Jun 13 23:15:48 2022 GMT
            Not After : Jun 12 23:20:48 2023 GMT
        Subject: CN=831787D9D61875F3BCC2CEAC9065C67328E01B2A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:9a:59:d7:4c:5c:58:ec:28:5f:db:c8:9f:61:
                    b3:4e:d7:f3:86:f3:a6:bc:e4:2e:53:6d:02:92:8c:
                    f5:94:f9:ff:df:f5:a8:09:d5:5f:94:ce:73:f9:12:
                    33:f8:1c:50:b7:f5:01:73:1c:e7:5d:91:46:7c:12:
                    e3:62:57:e6:ad:47:96:b8:89:e2:ef:94:32:fd:aa:
                    08:47:64:5b:70:a7:a1:fa:a1:13:e6:e3:0f:43:11:
                    49:8a:40:15:93:4b:41:00:dd:2d:e7:40:6a:63:5e:
                    87:e1:c4:64:8f:48:dd:3d:aa:3a:f2:87:ad:9c:53:
                    16:da:e7:e1:cd:0d:fe:04:1f:73:87:10:cb:2d:48:
                    b4:60:72:b9:ef:87:9e:f3:bf:a5:61:d0:93:0e:63:
                    fb:06:f2:c4:71:74:29:89:47:9f:90:5e:58:9e:de:
                    3b:48:45:62:7e:d4:11:c4:dd:f6:12:fe:b2:95:e0:
                    ca:0f:a0:93:a0:56:23:0c:0c:06:eb:fc:de:24:ef:
                    ef:bd:88:e7:ff:99:70:ee:5d:07:2a:4a:a3:42:52:
                    af:2e:23:7c:2d:85:70:2e:eb:f7:1e:e5:48:da:30:
                    3c:95:07:35:a5:84:f2:f0:da:e0:07:27:83:cb:ca:
                    4a:8e:4c:7b:c5:c3:ff:93:6d:00:04:5e:25:c3:1e:
                    ea:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:17:87:D9:D6:18:75:F3:BC:C2:CE:AC:90:65:C6:73:28:E0:1B:2A
            X509v3 Authority Key Identifier:
                keyid:C3:28:37:1D:F1:9E:FB:26:03:49:91:79:4C:7E:52:21:EC:5E:54:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BMUSYRu4t6eVwwmktEQjzGW4kjjXfFHnkTC1pTwZM7EF/0/C328371DF19EFB26034991794C7E5221EC5E5459.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C328371DF19EFB26034991794C7E5221EC5E5459.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BMUSYRu4t6eVwwmktEQjzGW4kjjXfFHnkTC1pTwZM7EF/0/3133312e3130382e3134382e302f32322d3232203d3e20323634333835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.108.148.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3f:de:4b:83:56:1b:19:79:15:20:8d:24:d3:cf:0f:f3:b5:d5:
         75:93:7e:9b:da:06:17:31:4f:9c:0c:e3:ca:35:5f:66:b4:d9:
         e7:c7:43:73:32:43:9b:65:ef:95:6c:9b:5f:cb:d9:d7:a6:68:
         fe:c4:ce:1a:dc:94:ef:ad:95:6e:5f:0c:a8:67:59:b0:4b:d8:
         46:4e:42:41:5d:27:ba:fe:32:b2:41:b7:77:f0:38:82:84:7f:
         84:84:ec:e2:e5:bb:d7:40:a4:28:98:70:a3:8b:06:a0:ec:87:
         3e:7c:60:62:7c:44:15:0a:7b:41:fd:35:cc:72:88:27:31:92:
         a9:af:80:15:8f:41:77:2d:4e:2a:ac:4f:7c:87:7c:8e:8e:53:
         d4:a8:a8:77:c2:a5:8d:7d:a6:dd:fc:f7:4f:49:07:16:a9:2b:
         73:e7:e5:2b:22:7f:4a:32:f4:92:13:b5:dc:11:1c:91:03:3c:
         36:a8:56:77:d2:13:bc:4b:6e:00:2b:ef:9f:a0:eb:6b:60:ea:
         6e:c1:11:95:17:84:e3:9b:16:1a:8a:4f:5a:75:5c:a4:10:90:
         74:23:a0:84:82:c6:89:3c:62:be:c0:f8:0d:f2:e0:d5:c2:ba:
         59:b7:ee:19:77:97:7f:c1:c5:d2:f0:8f:52:b1:d0:ed:08:df:
         65:a6:ac:ff
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUXgJtg063hwCp4bdwY4YmpqzUiQcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzMyODM3MURGMTlFRkIyNjAzNDk5MTc5NEM3RTUyMjFF
QzVFNTQ1OTAeFw0yMjA2MTMyMzE1NDhaFw0yMzA2MTIyMzIwNDhaMDMxMTAvBgNV
BAMTKDgzMTc4N0Q5RDYxODc1RjNCQ0MyQ0VBQzkwNjVDNjczMjhFMDFCMkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEmlnXTFxY7Chf28ifYbNO1/OG
86a85C5TbQKSjPWU+f/f9agJ1V+UznP5EjP4HFC39QFzHOddkUZ8EuNiV+atR5a4
ieLvlDL9qghHZFtwp6H6oRPm4w9DEUmKQBWTS0EA3S3nQGpjXofhxGSPSN09qjry
h62cUxba5+HNDf4EH3OHEMstSLRgcrnvh57zv6Vh0JMOY/sG8sRxdCmJR5+QXlie
3jtIRWJ+1BHE3fYS/rKV4MoPoJOgViMMDAbr/N4k7++9iOf/mXDuXQcqSqNCUq8u
I3wthXAu6/ce5UjaMDyVBzWlhPLw2uAHJ4PLykqOTHvFw/+TbQAEXiXDHuq3AgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUgxeH2dYYdfO8ws6skGXGcyjgGyowHwYDVR0j
BBgwFoAUwyg3HfGe+yYDSZF5TH5SIexeVFkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQk1VU1lSdTR0NmVWd3dta3RFUWp6R1c0a2pqWGZGSG5rVEMxcFR3Wk03
RUYvMC9DMzI4MzcxREYxOUVGQjI2MDM0OTkxNzk0QzdFNTIyMUVDNUU1NDU5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0MzMjgzNzFERjE5RUZCMjYw
MzQ5OTE3OTRDN0U1MjIxRUM1RTU0NTkuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0JNVVNZUnU0dDZlVnd3bWt0RVFqekdXNGtqalhmRkhua1RDMXBUd1pNN0VGLzAv
MzEzMzMxMmUzMTMwMzgyZTMxMzQzODJlMzAyZjMyMzIyZDMyMzIyMDNkM2UyMDMy
MzYzNDMzMzgzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAoNslDANBgkqhkiG9w0BAQsFAAOCAQEAP95L
g1YbGXkVII0k088P87XVdZN+m9oGFzFPnAzjyjVfZrTZ58dDczJDm2XvlWybX8vZ
16Zo/sTOGtyU762Vbl8MqGdZsEvYRk5CQV0nuv4yskG3d/A4goR/hITs4uW710Ck
KJhwo4sGoOyHPnxgYnxEFQp7Qf01zHKIJzGSqa+AFY9Bdy1OKqxPfId8jo5T1Kio
d8KljX2m3fz3T0kHFqkrc+flKyJ/SjL0khO13BEckQM8NqhWd9ITvEtuACvvn6Dr
a2DqbsERlReE45sWGopPWnVcpBCQdCOghILGiTxivsD4DfLg1cK6WbfuGXeXf8HF
0vCPUrHQ7QjfZaas/w==
-----END CERTIFICATE-----
Generated at Tue Apr 22 16:38:50 2025 by rpki-client