Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BN7qJxmo7eGC1j358Q8RB3nXCJX32EYM4Bx4Ca6BKypU/2/3137302e3135302e342e302f32322d3234203d3e203533303830.roa
File:                     3137302e3135302e342e302f32322d3234203d3e203533303830.roa (raw, json)
Hash identifier:          Ji2JzsdWrkkMnPP3PXCGBqVc/ySkElpsfQ3WiZOnI5I=
Subject key identifier:   7C:27:10:26:8A:49:6E:9C:11:BE:66:3D:1B:D8:1B:3D:D2:30:DF:32
Certificate issuer:       /CN=F4CCBF55AA1D25CBA20BD8CE85D9CD6D0008CAFE
Certificate serial:       69B83F9BED0C8C6693D5CA1009E8AF21DED1246D
Authority key identifier: F4:CC:BF:55:AA:1D:25:CB:A2:0B:D8:CE:85:D9:CD:6D:00:08:CA:FE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F4CCBF55AA1D25CBA20BD8CE85D9CD6D0008CAFE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BN7qJxmo7eGC1j358Q8RB3nXCJX32EYM4Bx4Ca6BKypU/2/3137302e3135302e342e302f32322d3234203d3e203533303830.roa
Signing time:             Tue 23 Jul 2024 11:55:44 +0000
ROA not before:           Tue 23 Jul 2024 11:50:44 +0000
ROA not after:            Tue 22 Jul 2025 11:55:44 +0000
asID:                     53080
IP address blocks:        170.150.4.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:b8:3f:9b:ed:0c:8c:66:93:d5:ca:10:09:e8:af:21:de:d1:24:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F4CCBF55AA1D25CBA20BD8CE85D9CD6D0008CAFE
        Validity
            Not Before: Jul 23 11:50:44 2024 GMT
            Not After : Jul 22 11:55:44 2025 GMT
        Subject: CN=7C2710268A496E9C11BE663D1BD81B3DD230DF32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:45:ec:32:1c:18:31:55:17:71:91:eb:59:49:
                    cb:4e:74:7f:42:f0:33:00:df:c9:57:f7:db:19:c2:
                    51:24:f6:0a:3a:4f:6c:90:ba:8e:5e:1f:7f:e4:c0:
                    03:77:f9:b6:97:08:91:94:17:ec:f5:06:68:8d:38:
                    14:e5:a9:a4:07:81:b4:b1:1b:c9:a7:2d:4c:03:15:
                    6b:2d:5d:a6:c3:9d:a8:09:3a:9f:ad:4f:e0:f6:46:
                    26:ec:1d:86:ea:c3:98:ce:c9:b1:71:97:5a:2e:42:
                    1a:5c:b4:45:c8:7d:86:91:c5:e7:b7:17:1d:4c:d8:
                    07:7e:36:2d:44:08:82:9d:78:aa:85:61:dd:3f:a8:
                    82:1f:2f:63:c1:d5:0f:ec:a7:21:b6:a9:68:d9:61:
                    99:f8:9b:5f:7b:d2:12:c4:37:3b:18:d3:49:00:3e:
                    3f:f8:a9:5a:71:96:1c:04:36:0c:7e:b0:d0:3a:a2:
                    ae:58:73:a7:4e:7b:aa:b2:2f:53:9f:39:f8:e0:93:
                    bf:3e:20:64:b8:94:c4:d3:b9:1e:98:e2:88:2b:f2:
                    4a:7c:d7:ac:a6:e2:15:3c:02:f4:2a:4f:dd:ae:e3:
                    4e:82:07:fc:65:be:0c:0a:b4:22:28:58:ee:85:af:
                    b5:45:30:e7:45:79:ec:7e:dd:5a:b8:3e:c9:18:0c:
                    2d:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:27:10:26:8A:49:6E:9C:11:BE:66:3D:1B:D8:1B:3D:D2:30:DF:32
            X509v3 Authority Key Identifier:
                keyid:F4:CC:BF:55:AA:1D:25:CB:A2:0B:D8:CE:85:D9:CD:6D:00:08:CA:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BN7qJxmo7eGC1j358Q8RB3nXCJX32EYM4Bx4Ca6BKypU/2/F4CCBF55AA1D25CBA20BD8CE85D9CD6D0008CAFE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F4CCBF55AA1D25CBA20BD8CE85D9CD6D0008CAFE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BN7qJxmo7eGC1j358Q8RB3nXCJX32EYM4Bx4Ca6BKypU/2/3137302e3135302e342e302f32322d3234203d3e203533303830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.150.4.0/22

    Signature Algorithm: sha256WithRSAEncryption
         92:90:81:af:5f:48:10:8c:73:bd:db:35:4c:8e:81:96:b2:67:
         cc:04:c4:c2:3d:d3:2c:be:2b:4a:cd:1d:1d:33:1f:4d:25:67:
         e8:20:73:d7:6d:34:90:5a:30:4f:cc:de:9c:82:28:e0:3e:07:
         06:b1:d4:b2:7f:78:38:d4:a8:9a:da:45:71:65:38:d1:75:03:
         d0:25:5b:95:3b:66:f4:9f:10:e4:aa:03:7d:b8:5e:6f:01:92:
         81:a1:ec:bf:9e:79:f5:de:df:db:c9:46:eb:91:90:71:57:9c:
         a4:dd:1b:01:b5:97:97:ff:73:32:96:be:a0:0d:30:4d:1c:fb:
         08:68:f0:c2:5f:b4:f5:15:b4:4f:2a:8b:26:99:78:97:9b:9d:
         61:fa:89:24:ca:ff:d3:b8:50:ab:7d:ab:cf:4a:52:ae:24:8e:
         2c:f4:c6:e4:65:f7:54:3c:9a:c3:a0:e0:1b:61:6e:65:5c:aa:
         fb:e2:40:06:ca:e2:9a:88:aa:00:0e:37:85:60:5d:90:06:96:
         90:00:78:43:7d:bb:cf:26:53:60:92:7d:0b:4c:66:92:d0:8b:
         c2:10:cd:28:48:88:2a:08:90:0d:2b:2b:32:37:7b:24:33:c2:
         2b:f5:85:56:b4:25:86:93:17:7d:7d:9b:ca:c5:e5:a6:70:88:
         54:69:2d:0c
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUabg/m+0MjGaT1coQCeivId7RJG0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjRDQ0JGNTVBQTFEMjVDQkEyMEJEOENFODVEOUNENkQw
MDA4Q0FGRTAeFw0yNDA3MjMxMTUwNDRaFw0yNTA3MjIxMTU1NDRaMDMxMTAvBgNV
BAMTKDdDMjcxMDI2OEE0OTZFOUMxMUJFNjYzRDFCRDgxQjNERDIzMERGMzIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxRewyHBgxVRdxketZSctOdH9C
8DMA38lX99sZwlEk9go6T2yQuo5eH3/kwAN3+baXCJGUF+z1BmiNOBTlqaQHgbSx
G8mnLUwDFWstXabDnagJOp+tT+D2RibsHYbqw5jOybFxl1ouQhpctEXIfYaRxee3
Fx1M2Ad+Ni1ECIKdeKqFYd0/qIIfL2PB1Q/spyG2qWjZYZn4m1970hLENzsY00kA
Pj/4qVpxlhwENgx+sNA6oq5Yc6dOe6qyL1OfOfjgk78+IGS4lMTTuR6Y4ogr8kp8
16ym4hU8AvQqT92u406CB/xlvgwKtCIoWO6Fr7VFMOdFeex+3Vq4PskYDC3dAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUfCcQJopJbpwRvmY9G9gbPdIw3zIwHwYDVR0j
BBgwFoAU9My/VaodJcuiC9jOhdnNbQAIyv4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQk43cUp4bW83ZUdDMWozNThROFJCM25YQ0pYMzJFWU00Qng0Q2E2Qkt5
cFUvMi9GNENDQkY1NUFBMUQyNUNCQTIwQkQ4Q0U4NUQ5Q0Q2RDAwMDhDQUZFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Y0Q0NCRjU1QUExRDI1Q0JB
MjBCRDhDRTg1RDlDRDZEMDAwOENBRkUuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0JON3FKeG1vN2VHQzFqMzU4UThSQjNuWENKWDMyRVlNNEJ4NENhNkJLeXBVLzIv
MzEzNzMwMmUzMTM1MzAyZTM0MmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzUzMzMw
MzgzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEAqqWBDANBgkqhkiG9w0BAQsFAAOCAQEAkpCBr19IEIxz
vds1TI6BlrJnzATEwj3TLL4rSs0dHTMfTSVn6CBz1200kFowT8zenIIo4D4HBrHU
sn94ONSomtpFcWU40XUD0CVblTtm9J8Q5KoDfbhebwGSgaHsv5559d7f28lG65GQ
cVecpN0bAbWXl/9zMpa+oA0wTRz7CGjwwl+09RW0TyqLJpl4l5udYfqJJMr/07hQ
q32rz0pSriSOLPTG5GX3VDyaw6DgG2FuZVyq++JABsrimoiqAA43hWBdkAaWkAB4
Q327zyZTYJJ9C0xmktCLwhDNKEiIKgiQDSsrMjd7JDPCK/WFVrQlhpMXfX2bysXl
pnCIVGktDA==
-----END CERTIFICATE-----
Generated at Fri Mar 14 00:50:07 2025 by rpki-client