Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BS21UxSGv7KLBmmXWi9pdJkroZVQzaLrzYXtBJzJMrAg/0/3136372e3235302e36392e302f32342d3234203d3e20323635323035.roa
File:                     3136372e3235302e36392e302f32342d3234203d3e20323635323035.roa (raw, json)
Hash identifier:          7DVNGUdhmjtKze0mnFbK8Po6r3EEp0OKiu0czul+HS4=
Subject key identifier:   DB:84:09:74:E4:F4:EE:5D:5F:FF:B5:05:F2:62:53:02:5F:4E:96:16
Certificate issuer:       /CN=E6884DDE2F5B2C7B995B400D56CF93DB81460987
Certificate serial:       35E976E6754CCE5E58B1EB2B942A3E693ECFD1DD
Authority key identifier: E6:88:4D:DE:2F:5B:2C:7B:99:5B:40:0D:56:CF:93:DB:81:46:09:87
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E6884DDE2F5B2C7B995B400D56CF93DB81460987.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BS21UxSGv7KLBmmXWi9pdJkroZVQzaLrzYXtBJzJMrAg/0/3136372e3235302e36392e302f32342d3234203d3e20323635323035.roa
Signing time:             Wed 11 Jan 2023 18:13:57 +0000
ROA not before:           Wed 11 Jan 2023 18:08:57 +0000
ROA not after:            Wed 10 Jan 2024 18:13:57 +0000
asID:                     265205
IP address blocks:        167.250.69.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:e9:76:e6:75:4c:ce:5e:58:b1:eb:2b:94:2a:3e:69:3e:cf:d1:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E6884DDE2F5B2C7B995B400D56CF93DB81460987
        Validity
            Not Before: Jan 11 18:08:57 2023 GMT
            Not After : Jan 10 18:13:57 2024 GMT
        Subject: CN=DB840974E4F4EE5D5FFFB505F26253025F4E9616
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:a8:95:a5:a4:6f:81:d2:d5:aa:4d:a5:58:40:
                    a7:f9:20:d4:9e:12:82:85:6a:bd:d0:9a:7e:eb:ec:
                    7f:0c:a0:67:83:55:df:03:b1:12:5f:52:ec:4f:4c:
                    88:0e:92:d8:09:f9:92:ac:b7:2e:dc:d6:62:a5:5b:
                    8f:15:ef:4f:c7:e4:d2:e3:f2:81:0d:00:e8:32:91:
                    49:17:31:45:35:ed:f0:5d:1b:81:53:ff:0c:d2:bc:
                    8b:a7:41:98:56:0c:a5:d6:84:5a:0e:5a:93:23:36:
                    bd:7b:f0:f4:81:cb:39:e9:7c:3d:6e:f7:4d:b1:8a:
                    40:ef:4d:b6:b3:07:df:bd:9c:f4:53:66:cc:72:83:
                    aa:30:ee:0b:8a:da:e3:e2:f5:a9:d1:fd:7e:ab:02:
                    8e:06:8c:be:e0:4b:fa:0e:df:9d:d1:7a:e6:5e:d6:
                    1e:c5:95:48:29:39:cf:38:39:d8:99:fa:fe:49:5c:
                    a1:3e:b1:b4:b2:ad:59:26:17:c9:ed:17:c4:89:db:
                    62:0d:87:39:27:b7:0d:c6:26:2a:f0:5c:52:d0:34:
                    30:da:bc:04:30:b2:d9:28:c6:a6:54:6c:f2:fd:db:
                    46:38:24:49:45:34:ed:b2:41:da:0e:19:1b:cb:7b:
                    22:23:c7:09:ae:85:cf:1c:af:f8:33:1f:94:fc:a8:
                    9d:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:84:09:74:E4:F4:EE:5D:5F:FF:B5:05:F2:62:53:02:5F:4E:96:16
            X509v3 Authority Key Identifier:
                keyid:E6:88:4D:DE:2F:5B:2C:7B:99:5B:40:0D:56:CF:93:DB:81:46:09:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BS21UxSGv7KLBmmXWi9pdJkroZVQzaLrzYXtBJzJMrAg/0/E6884DDE2F5B2C7B995B400D56CF93DB81460987.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E6884DDE2F5B2C7B995B400D56CF93DB81460987.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BS21UxSGv7KLBmmXWi9pdJkroZVQzaLrzYXtBJzJMrAg/0/3136372e3235302e36392e302f32342d3234203d3e20323635323035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.250.69.0/24

    Signature Algorithm: sha256WithRSAEncryption
         28:d7:14:4e:f2:e9:24:5b:31:05:51:bd:4b:2a:f9:0c:38:58:
         88:0d:1a:54:a0:92:61:66:4a:7e:84:17:22:5b:44:5e:2d:75:
         22:df:d9:f0:7c:90:fc:87:71:4f:14:2a:ab:92:2c:73:e7:66:
         35:8b:54:02:05:9e:bc:a6:db:fb:9b:85:f7:91:53:8d:1b:53:
         5b:5a:3b:88:37:57:95:69:13:dc:9a:e3:60:ad:f1:d1:bd:96:
         c8:ff:21:90:fd:44:eb:4e:49:78:09:e7:e0:4a:c8:08:06:a9:
         b5:f3:2e:d6:17:e8:66:b1:66:24:b2:09:52:85:0e:2a:1c:df:
         00:f3:9d:1e:c4:7f:92:da:86:0a:9b:15:d3:8f:8c:b0:20:3d:
         07:a2:d7:7b:c4:38:3e:39:44:c5:52:c9:b6:93:dd:24:88:7a:
         9b:80:08:dd:d1:15:c2:ee:af:19:e2:e8:3b:3b:76:e3:06:a0:
         d6:7e:e0:d8:fb:24:c9:d5:ef:d3:3f:92:54:29:18:b3:1b:2e:
         df:ac:e4:cb:13:aa:8e:af:13:70:cc:e0:34:9f:81:bd:f6:3b:
         2a:0a:27:e1:30:1e:97:b3:00:21:e8:31:a2:5f:80:7b:f8:b9:
         59:10:13:db:47:bb:ce:d9:0c:d6:2c:1a:f6:71:dd:15:8d:f7:
         2d:c1:8c:a0
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUNel25nVMzl5YsesrlCo+aT7P0d0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTY4ODREREUyRjVCMkM3Qjk5NUI0MDBENTZDRjkzREI4
MTQ2MDk4NzAeFw0yMzAxMTExODA4NTdaFw0yNDAxMTAxODEzNTdaMDMxMTAvBgNV
BAMTKERCODQwOTc0RTRGNEVFNUQ1RkZGQjUwNUYyNjI1MzAyNUY0RTk2MTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqqJWlpG+B0tWqTaVYQKf5INSe
EoKFar3Qmn7r7H8MoGeDVd8DsRJfUuxPTIgOktgJ+ZKsty7c1mKlW48V70/H5NLj
8oENAOgykUkXMUU17fBdG4FT/wzSvIunQZhWDKXWhFoOWpMjNr178PSByznpfD1u
902xikDvTbazB9+9nPRTZsxyg6ow7guK2uPi9anR/X6rAo4GjL7gS/oO353ReuZe
1h7FlUgpOc84OdiZ+v5JXKE+sbSyrVkmF8ntF8SJ22INhzkntw3GJirwXFLQNDDa
vAQwstkoxqZUbPL920Y4JElFNO2yQdoOGRvLeyIjxwmuhc8cr/gzH5T8qJ31AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU24QJdOT07l1f/7UF8mJTAl9OlhYwHwYDVR0j
BBgwFoAU5ohN3i9bLHuZW0ANVs+T24FGCYcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQlMyMVV4U0d2N0tMQm1tWFdpOXBkSmtyb1pWUXphTHJ6WVh0Qkp6Sk1y
QWcvMC9FNjg4NERERTJGNUIyQzdCOTk1QjQwMEQ1NkNGOTNEQjgxNDYwOTg3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0U2ODg0RERFMkY1QjJDN0I5
OTVCNDAwRDU2Q0Y5M0RCODE0NjA5ODcuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0JTMjFVeFNHdjdLTEJtbVhXaTlwZEprcm9aVlF6YUxyellYdEJKekpNckFnLzAv
MzEzNjM3MmUzMjM1MzAyZTM2MzkyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzUzMjMwMzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBACn+kUwDQYJKoZIhvcNAQELBQADggEBACjXFE7y
6SRbMQVRvUsq+Qw4WIgNGlSgkmFmSn6EFyJbRF4tdSLf2fB8kPyHcU8UKquSLHPn
ZjWLVAIFnrym2/ubhfeRU40bU1taO4g3V5VpE9ya42Ct8dG9lsj/IZD9ROtOSXgJ
5+BKyAgGqbXzLtYX6GaxZiSyCVKFDioc3wDznR7Ef5LahgqbFdOPjLAgPQei13vE
OD45RMVSybaT3SSIepuACN3RFcLurxni6Ds7duMGoNZ+4Nj7JMnV79M/klQpGLMb
Lt+s5MsTqo6vE3DM4DSfgb32OyoKJ+EwHpezACHoMaJfgHv4uVkQE9tHu87ZDNYs
GvZx3RWN9y3BjKA=
-----END CERTIFICATE-----
Generated at Fri Mar 14 14:24:13 2025 by rpki-client