Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BS21UxSGv7KLBmmXWi9pdJkroZVQzaLrzYXtBJzJMrAg/1/3136372e3235302e36382e302f32332d3233203d3e20323635323035.roa
File:                     3136372e3235302e36382e302f32332d3233203d3e20323635323035.roa (raw, json)
Hash identifier:          xdg561sjX2cqqHkHTAMjmvb8w6oLkGSMzwEWVcyohrs=
Subject key identifier:   41:29:53:6E:1D:07:76:18:FF:87:44:E9:D0:D3:77:6D:4B:74:21:CD
Certificate issuer:       /CN=766B3041B29318AB99A3A0468D318CA1E0E24276
Certificate serial:       6A444938EC66672660E75112DF52AC8389896781
Authority key identifier: 76:6B:30:41:B2:93:18:AB:99:A3:A0:46:8D:31:8C:A1:E0:E2:42:76
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/766B3041B29318AB99A3A0468D318CA1E0E24276.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BS21UxSGv7KLBmmXWi9pdJkroZVQzaLrzYXtBJzJMrAg/1/3136372e3235302e36382e302f32332d3233203d3e20323635323035.roa
Signing time:             Mon 22 Jan 2024 19:31:10 +0000
ROA not before:           Mon 22 Jan 2024 19:26:10 +0000
ROA not after:            Mon 20 Jan 2025 19:31:10 +0000
asID:                     265205
IP address blocks:        167.250.68.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:44:49:38:ec:66:67:26:60:e7:51:12:df:52:ac:83:89:89:67:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=766B3041B29318AB99A3A0468D318CA1E0E24276
        Validity
            Not Before: Jan 22 19:26:10 2024 GMT
            Not After : Jan 20 19:31:10 2025 GMT
        Subject: CN=4129536E1D077618FF8744E9D0D3776D4B7421CD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:33:8d:2d:fd:a3:38:2f:dd:01:5c:66:c1:7c:
                    fb:4b:eb:8c:ed:39:b0:89:99:06:0e:c9:91:6d:bc:
                    29:2b:1c:01:16:a4:de:1a:a6:6a:44:17:ef:1d:6f:
                    6f:eb:c0:08:6f:92:c9:43:25:81:dd:1f:ef:1a:af:
                    a9:1e:5e:ab:04:97:2a:dc:ef:ff:a8:c0:65:3c:21:
                    0d:af:b3:15:2a:4e:20:d4:6f:ec:21:88:93:9e:b6:
                    b6:ff:c9:f4:4c:a8:84:1c:6e:9e:6d:28:da:d4:e8:
                    fa:65:dc:c2:44:b1:57:3d:b4:e2:92:34:89:f2:1c:
                    1c:2a:11:61:3f:08:84:c4:60:d2:f9:7d:c9:87:f0:
                    09:44:de:bf:b1:a1:1f:eb:2e:72:ec:0e:f5:7b:1e:
                    07:cd:f3:8d:d8:4a:eb:e7:67:2e:a9:a9:f8:26:bf:
                    b0:0b:47:07:39:a0:d3:37:3c:56:5d:af:22:cf:e0:
                    dc:11:05:0f:9b:f9:50:81:aa:bb:93:38:48:0a:8e:
                    d2:81:e7:2f:24:c0:ac:7d:1f:c7:f8:c4:6d:93:e3:
                    b4:1b:ff:5f:6a:93:24:8f:b2:dd:18:66:43:86:e1:
                    f3:f1:6a:7e:32:76:1f:90:d8:c0:46:1d:bc:a2:a4:
                    80:09:84:f9:82:bc:ea:0a:07:11:64:67:78:77:7c:
                    f3:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:29:53:6E:1D:07:76:18:FF:87:44:E9:D0:D3:77:6D:4B:74:21:CD
            X509v3 Authority Key Identifier:
                keyid:76:6B:30:41:B2:93:18:AB:99:A3:A0:46:8D:31:8C:A1:E0:E2:42:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BS21UxSGv7KLBmmXWi9pdJkroZVQzaLrzYXtBJzJMrAg/1/766B3041B29318AB99A3A0468D318CA1E0E24276.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/766B3041B29318AB99A3A0468D318CA1E0E24276.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BS21UxSGv7KLBmmXWi9pdJkroZVQzaLrzYXtBJzJMrAg/1/3136372e3235302e36382e302f32332d3233203d3e20323635323035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.250.68.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a8:26:69:ff:61:e9:0b:ff:89:35:d3:03:4d:43:38:87:0a:a2:
         78:be:0e:7a:23:98:7e:cd:e5:82:0c:9a:b4:fd:2a:88:2e:ba:
         0c:2b:5d:37:73:c6:3b:69:50:47:2c:20:14:d1:d4:63:bb:45:
         f6:7e:67:8f:70:52:de:ea:68:09:06:07:59:ba:ef:d1:db:8e:
         e2:23:3e:09:2b:d8:1d:60:63:e8:ca:dd:18:f6:1a:82:6c:3f:
         d2:f1:16:78:0d:8a:0f:d5:03:0d:38:93:55:68:0a:74:ea:86:
         3b:56:70:6b:b8:d1:e4:18:f2:4f:38:a0:d6:f1:b5:f4:19:d7:
         dd:9e:58:89:0d:34:ff:1e:9c:b0:ec:ad:32:bc:47:b8:70:52:
         e2:31:b2:70:1e:75:eb:45:14:b8:c1:66:09:ba:93:2b:4e:98:
         e4:5f:d4:f2:01:29:20:4e:ed:3f:c3:6e:00:10:ce:c2:ad:ea:
         97:23:87:b3:bb:c3:aa:91:0e:80:94:24:eb:f3:5d:47:89:fc:
         86:2c:35:15:e5:bc:9c:e3:4c:04:a0:02:82:c9:ac:e0:ab:7b:
         a0:b9:b3:b7:61:c2:a0:9b:83:44:06:5b:f3:4a:e1:cc:56:11:
         b3:6a:42:94:68:72:12:08:32:9b:86:44:74:76:0a:a9:04:6b:
         25:89:5e:d9
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUakRJOOxmZyZg51ES31Ksg4mJZ4EwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzY2QjMwNDFCMjkzMThBQjk5QTNBMDQ2OEQzMThDQTFF
MEUyNDI3NjAeFw0yNDAxMjIxOTI2MTBaFw0yNTAxMjAxOTMxMTBaMDMxMTAvBgNV
BAMTKDQxMjk1MzZFMUQwNzc2MThGRjg3NDRFOUQwRDM3NzZENEI3NDIxQ0QwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDqM40t/aM4L90BXGbBfPtL64zt
ObCJmQYOyZFtvCkrHAEWpN4apmpEF+8db2/rwAhvkslDJYHdH+8ar6keXqsElyrc
7/+owGU8IQ2vsxUqTiDUb+whiJOetrb/yfRMqIQcbp5tKNrU6Ppl3MJEsVc9tOKS
NInyHBwqEWE/CITEYNL5fcmH8AlE3r+xoR/rLnLsDvV7HgfN843YSuvnZy6pqfgm
v7ALRwc5oNM3PFZdryLP4NwRBQ+b+VCBqruTOEgKjtKB5y8kwKx9H8f4xG2T47Qb
/19qkySPst0YZkOG4fPxan4ydh+Q2MBGHbyipIAJhPmCvOoKBxFkZ3h3fPOXAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUQSlTbh0Hdhj/h0Tp0NN3bUt0Ic0wHwYDVR0j
BBgwFoAUdmswQbKTGKuZo6BGjTGMoeDiQnYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQlMyMVV4U0d2N0tMQm1tWFdpOXBkSmtyb1pWUXphTHJ6WVh0Qkp6Sk1y
QWcvMS83NjZCMzA0MUIyOTMxOEFCOTlBM0EwNDY4RDMxOENBMUUwRTI0Mjc2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzc2NkIzMDQxQjI5MzE4QUI5
OUEzQTA0NjhEMzE4Q0ExRTBFMjQyNzYuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0JTMjFVeFNHdjdLTEJtbVhXaTlwZEprcm9aVlF6YUxyellYdEJKekpNckFnLzEv
MzEzNjM3MmUzMjM1MzAyZTM2MzgyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzMjM2
MzUzMjMwMzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAGn+kQwDQYJKoZIhvcNAQELBQADggEBAKgmaf9h
6Qv/iTXTA01DOIcKoni+DnojmH7N5YIMmrT9KoguugwrXTdzxjtpUEcsIBTR1GO7
RfZ+Z49wUt7qaAkGB1m679HbjuIjPgkr2B1gY+jK3Rj2GoJsP9LxFngNig/VAw04
k1VoCnTqhjtWcGu40eQY8k84oNbxtfQZ192eWIkNNP8enLDsrTK8R7hwUuIxsnAe
detFFLjBZgm6kytOmORf1PIBKSBO7T/DbgAQzsKt6pcjh7O7w6qRDoCUJOvzXUeJ
/IYsNRXlvJzjTASgAoLJrOCre6C5s7dhwqCbg0QGW/NK4cxWEbNqQpRochIIMpuG
RHR2CqkEayWJXtk=
-----END CERTIFICATE-----
Generated at Fri Mar 14 05:13:11 2025 by rpki-client