Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BzXN43uF6HQuFHbqHMinDSniVFh9PHx9Awn5DAmUxS29/0/3137392e3130362e34322e302f32342d3234203d3e20323632373630.roa
File:                     3137392e3130362e34322e302f32342d3234203d3e20323632373630.roa (raw, json)
Hash identifier:          JevRODXc17GE7ywtQrEgw/eBm6qsqnDD08D9mg6oUMw=
Subject key identifier:   B1:97:C3:9C:7A:F7:5A:54:87:09:17:07:BA:9F:ED:9E:E3:A3:3C:63
Certificate issuer:       /CN=C8FEA1816231EA2BDEE7FFAF19A0EC92B34A66C3
Certificate serial:       0A9F94CB295112A0308FD8342476C546134C9E38
Authority key identifier: C8:FE:A1:81:62:31:EA:2B:DE:E7:FF:AF:19:A0:EC:92:B3:4A:66:C3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C8FEA1816231EA2BDEE7FFAF19A0EC92B34A66C3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BzXN43uF6HQuFHbqHMinDSniVFh9PHx9Awn5DAmUxS29/0/3137392e3130362e34322e302f32342d3234203d3e20323632373630.roa
Signing time:             Wed 22 Mar 2023 22:00:03 +0000
ROA not before:           Wed 22 Mar 2023 21:55:03 +0000
ROA not after:            Wed 20 Mar 2024 22:00:03 +0000
asID:                     262760
IP address blocks:        179.106.42.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:9f:94:cb:29:51:12:a0:30:8f:d8:34:24:76:c5:46:13:4c:9e:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C8FEA1816231EA2BDEE7FFAF19A0EC92B34A66C3
        Validity
            Not Before: Mar 22 21:55:03 2023 GMT
            Not After : Mar 20 22:00:03 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:01:4e:44:d1:c5:ef:bf:22:4e:4d:fa:ce:3b:
                    cc:93:d2:17:87:1b:6c:25:3c:05:27:14:cf:a8:e5:
                    66:a6:17:8a:0c:69:8b:6f:e1:80:e2:1d:13:ca:3a:
                    85:9e:74:63:03:1d:59:7b:94:07:cc:cd:54:40:2c:
                    94:8a:f1:d4:d6:54:1e:16:59:41:84:7d:ba:87:b6:
                    9a:01:36:81:c8:8d:83:c5:30:4c:f4:8e:49:9e:9c:
                    2c:35:84:76:d9:c1:48:d3:d7:c2:39:32:3a:f9:db:
                    6c:ac:b9:1a:53:3d:cb:c1:94:29:00:62:b3:3c:c2:
                    fc:2e:07:a1:a5:a8:50:2c:a9:8a:68:8f:ed:26:a1:
                    1d:64:44:40:37:ec:4c:2d:65:0c:be:94:a0:94:39:
                    cd:0b:4c:6f:ca:6d:ce:df:cd:1c:e4:4a:69:82:5e:
                    31:2a:5d:62:41:dd:0a:f6:6e:3b:3c:80:c6:9c:51:
                    6c:8f:94:1d:6c:9e:79:25:3d:49:3a:61:a3:cb:f5:
                    5e:60:0c:b4:92:e1:a4:45:36:47:28:1a:33:b9:4e:
                    8e:26:d3:f9:b0:ad:f5:57:1d:41:e7:47:f9:00:b9:
                    5d:8c:96:3f:ce:be:d8:71:94:8f:05:4c:0c:66:89:
                    63:65:a4:66:a8:88:c9:d8:48:68:06:44:a0:4e:02:
                    4e:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:97:C3:9C:7A:F7:5A:54:87:09:17:07:BA:9F:ED:9E:E3:A3:3C:63
            X509v3 Authority Key Identifier:
                keyid:C8:FE:A1:81:62:31:EA:2B:DE:E7:FF:AF:19:A0:EC:92:B3:4A:66:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BzXN43uF6HQuFHbqHMinDSniVFh9PHx9Awn5DAmUxS29/0/C8FEA1816231EA2BDEE7FFAF19A0EC92B34A66C3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C8FEA1816231EA2BDEE7FFAF19A0EC92B34A66C3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BzXN43uF6HQuFHbqHMinDSniVFh9PHx9Awn5DAmUxS29/0/3137392e3130362e34322e302f32342d3234203d3e20323632373630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.106.42.0/24

    Signature Algorithm: sha256WithRSAEncryption
         44:8f:c3:94:fd:1b:91:5e:d8:22:4b:67:85:e2:47:3e:35:40:
         03:8f:f4:88:22:48:76:ce:25:1d:da:cc:fd:3e:e8:35:40:3e:
         b2:27:c0:b1:db:11:7f:4c:02:8b:77:11:25:19:b6:44:32:fa:
         7d:5d:51:5f:eb:92:fa:d0:dd:f0:07:21:58:86:36:4d:bd:70:
         38:40:3e:bd:13:24:a3:76:29:fa:54:1f:be:2b:af:b9:c1:1e:
         3a:9f:1c:47:53:57:59:73:ec:4e:f8:b3:58:8a:0d:1c:b2:62:
         9f:e2:a2:28:b3:0e:18:b8:19:f6:83:e9:b8:02:8b:f2:1c:3a:
         bc:70:ba:76:4a:35:63:e6:62:bf:b3:92:78:c1:0f:8c:df:69:
         ef:91:2b:4f:2f:bf:c1:01:ba:f0:19:ce:76:da:bf:e2:60:de:
         59:69:b7:fb:47:5d:86:c6:8b:62:88:e3:1d:c7:9c:3a:d5:e7:
         6e:ce:4a:6f:c4:5f:a1:14:a0:91:bb:6e:a2:78:26:43:ca:7f:
         d8:c0:a8:35:a5:93:1e:53:67:2e:70:73:61:f6:f2:af:19:ab:
         d6:de:f6:da:6c:f4:da:41:8f:e9:34:a0:a8:72:ff:f3:43:e9:
         a2:19:6b:53:11:7b:a8:6e:38:ba:7a:bd:24:8d:ad:91:41:56:
         a4:6e:0e:e4
-----BEGIN CERTIFICATE-----
MIIHQzCCBiugAwIBAgIUCp+UyylREqAwj9g0JHbFRhNMnjgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzhGRUExODE2MjMxRUEyQkRFRTdGRkFGMTlBMEVDOTJC
MzRBNjZDMzAeFw0yMzAzMjIyMTU1MDNaFw0yNDAzMjAyMjAwMDNaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQjgwMTRFNDREMUM1RUZCRjIy
NEU0REZBQ0UzQkNDOTNEMjE3ODcxQjZDMjUzQzA1MjcxNENGQThFNTY2QTYxNzhB
MEM2OThCNkZFMTgwRTIxRDEzQ0EzQTg1OUU3NDYzMDMxRDU5N0I5NDA3Q0NDRDU0
NDAyQzk0OEFGMUQ0RDY1NDFFMTY1OTQxODQ3REJBODdCNjlBMDEzNjgxQzg4RDgz
QzUzMDRDRjQ4RTQ5OUU5QzJDMzU4NDc2RDlDMTQ4RDNEN0MyMzkzMjNBRjlEQjZD
QUNCOTFBNTMzRENCQzE5NDI5MDA2MkIzM0NDMkZDMkUwN0ExQTVBODUwMkNBOThB
Njg4RkVEMjZBMTFENjQ0NDQwMzdFQzRDMkQ2NTBDQkU5NEEwOTQzOUNEMEI0QzZG
Q0E2RENFREZDRDFDRTQ0QTY5ODI1RTMxMkE1RDYyNDFERDBBRjY2RTNCM0M4MEM2
OUM1MTZDOEY5NDFENkM5RTc5MjUzRDQ5M0E2MUEzQ0JGNTVFNjAwQ0I0OTJFMUE0
NDUzNjQ3MjgxQTMzQjk0RThFMjZEM0Y5QjBBREY1NTcxRDQxRTc0N0Y5MDBCOTVE
OEM5NjNGQ0VCRUQ4NzE5NDhGMDU0QzBDNjY4OTYzNjVBNDY2QTg4OEM5RDg0ODY4
MDY0NEEwNEUwMjRFODMwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAuAFORNHF778iTk36zjvMk9IXhxtsJTwFJxTPqOVmpheKDGmLb+GA
4h0TyjqFnnRjAx1Ze5QHzM1UQCyUivHU1lQeFllBhH26h7aaATaByI2DxTBM9I5J
npwsNYR22cFI09fCOTI6+dtsrLkaUz3LwZQpAGKzPML8LgehpahQLKmKaI/tJqEd
ZERAN+xMLWUMvpSglDnNC0xvym3O380c5Eppgl4xKl1iQd0K9m47PIDGnFFsj5Qd
bJ55JT1JOmGjy/VeYAy0kuGkRTZHKBozuU6OJtP5sK31Vx1B50f5ALldjJY/zr7Y
cZSPBUwMZoljZaRmqIjJ2EhoBkSgTgJOgwIDAQABo4ICUTCCAk0wHQYDVR0OBBYE
FLGXw5x691pUhwkXB7qf7Z7jozxjMB8GA1UdIwQYMBaAFMj+oYFiMeor3uf/rxmg
7JKzSmbDMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0J6WE40M3VGNkhRdUZI
YnFITWluRFNuaVZGaDlQSHg5QXduNURBbVV4UzI5LzAvQzhGRUExODE2MjMxRUEy
QkRFRTdGRkFGMTlBMEVDOTJCMzRBNjZDMy5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC9DOEZFQTE4MTYyMzFFQTJCREVFN0ZGQUYxOUEwRUM5MkIzNEE2
NkMzLmNlcjCBrgYIKwYBBQUHAQsEgaEwgZ4wgZsGCCsGAQUFBzALhoGOcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9CelhONDN1RjZIUXVGSGJxSE1p
bkRTbmlWRmg5UEh4OUF3bjVEQW1VeFMyOS8wLzMxMzczOTJlMzEzMDM2MmUzNDMy
MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjMyMzczNjMwLnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA
s2oqMA0GCSqGSIb3DQEBCwUAA4IBAQBEj8OU/RuRXtgiS2eF4kc+NUADj/SIIkh2
ziUd2sz9Pug1QD6yJ8Cx2xF/TAKLdxElGbZEMvp9XVFf65L60N3wByFYhjZNvXA4
QD69EySjdin6VB++K6+5wR46nxxHU1dZc+xO+LNYig0csmKf4qIosw4YuBn2g+m4
AovyHDq8cLp2SjVj5mK/s5J4wQ+M32nvkStPL7/BAbrwGc522r/iYN5Zabf7R12G
xotiiOMdx5w61eduzkpvxF+hFKCRu26ieCZDyn/YwKg1pZMeU2cucHNh9vKvGavW
3vbabPTaQY/pNKCocv/zQ+miGWtTEXuobji6er0kja2RQVakbg7k
-----END CERTIFICATE-----
Generated at Fri Mar 14 02:30:36 2025 by rpki-client