Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/C8b1tGNorjL4JdCG33g3GoqWGTnBU7bA7yTTBMxeh9Uf/0/3133312e3130382e3235322e302f32322d3332203d3e20323636343333.roa
File:                     3133312e3130382e3235322e302f32322d3332203d3e20323636343333.roa (raw, json)
Hash identifier:          Z83uvBegDGBKIJap625btUGsXiHi8GzapsC+iUCqT0k=
Subject key identifier:   65:CB:DC:DE:BC:AB:65:BD:66:A9:1A:9C:7A:E9:48:27:86:3D:44:0E
Certificate issuer:       /CN=C3AFF141530D91097156CCAECCDD429D2C9F5738
Certificate serial:       56987FE09E51D7BEA96CA56BAFD4ABF10F92EE
Authority key identifier: C3:AF:F1:41:53:0D:91:09:71:56:CC:AE:CC:DD:42:9D:2C:9F:57:38
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C3AFF141530D91097156CCAECCDD429D2C9F5738.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C8b1tGNorjL4JdCG33g3GoqWGTnBU7bA7yTTBMxeh9Uf/0/3133312e3130382e3235322e302f32322d3332203d3e20323636343333.roa
Signing time:             Thu 04 Jul 2024 22:03:50 +0000
ROA not before:           Thu 04 Jul 2024 21:58:50 +0000
ROA not after:            Thu 03 Jul 2025 22:03:50 +0000
asID:                     266433
IP address blocks:        131.108.252.0/22 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:98:7f:e0:9e:51:d7:be:a9:6c:a5:6b:af:d4:ab:f1:0f:92:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C3AFF141530D91097156CCAECCDD429D2C9F5738
        Validity
            Not Before: Jul  4 21:58:50 2024 GMT
            Not After : Jul  3 22:03:50 2025 GMT
        Subject: CN=65CBDCDEBCAB65BD66A91A9C7AE94827863D440E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:5f:49:9c:f3:66:26:95:aa:8d:f2:2f:d7:97:
                    17:62:3d:b6:d9:b9:80:12:e8:3d:b5:a1:90:3b:2a:
                    38:82:fe:12:e7:54:37:47:06:35:1e:9b:32:7b:bc:
                    e9:c3:c1:ef:3b:86:4c:cb:b0:a1:2c:76:8e:48:48:
                    39:bf:21:67:90:b7:a8:d0:dd:7d:48:d1:74:cf:d9:
                    44:87:2c:ab:d2:1b:35:c6:30:72:45:06:00:b1:15:
                    f5:b3:02:fc:14:9e:2c:12:9a:dd:29:d9:4b:95:95:
                    c2:ba:1a:0b:c0:17:8a:54:0b:88:5c:1c:1f:35:4a:
                    5c:80:4e:89:81:07:2d:25:40:c1:40:30:19:f8:8d:
                    89:a8:c1:12:c6:9b:44:67:53:f9:de:7e:77:ea:f7:
                    9c:45:b5:a6:17:9b:05:53:14:a2:6b:d4:ca:d9:5b:
                    a3:5e:18:e7:bf:ec:a8:e8:f4:bd:70:ba:a3:8b:92:
                    31:4e:15:bf:c1:21:69:93:07:5e:87:01:53:dc:f7:
                    c3:ac:6e:b9:75:a7:d3:f3:84:21:a9:e1:1d:0c:97:
                    79:08:94:b7:cf:ca:fd:39:32:9f:07:f9:5d:e5:5b:
                    3c:18:97:66:13:25:0c:2b:17:1e:c8:be:3d:1f:2c:
                    13:58:55:ee:23:56:e0:00:5b:9c:9c:cf:bd:94:74:
                    2b:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:CB:DC:DE:BC:AB:65:BD:66:A9:1A:9C:7A:E9:48:27:86:3D:44:0E
            X509v3 Authority Key Identifier:
                keyid:C3:AF:F1:41:53:0D:91:09:71:56:CC:AE:CC:DD:42:9D:2C:9F:57:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C8b1tGNorjL4JdCG33g3GoqWGTnBU7bA7yTTBMxeh9Uf/0/C3AFF141530D91097156CCAECCDD429D2C9F5738.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C3AFF141530D91097156CCAECCDD429D2C9F5738.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C8b1tGNorjL4JdCG33g3GoqWGTnBU7bA7yTTBMxeh9Uf/0/3133312e3130382e3235322e302f32322d3332203d3e20323636343333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.108.252.0/22

    Signature Algorithm: sha256WithRSAEncryption
         05:4b:55:38:85:33:9f:30:cd:54:84:30:4c:04:57:03:69:3c:
         92:52:9c:15:db:ff:ca:83:b8:d6:8b:c7:38:f1:61:ce:f9:89:
         cc:6f:7d:cd:5c:74:8e:8f:8f:67:b4:6d:32:dc:de:7b:fb:ba:
         89:ca:a5:ca:fc:e2:90:00:35:19:ff:28:5c:ee:c0:40:40:39:
         25:cb:8b:87:43:30:12:e4:de:36:29:62:4f:c8:38:ac:ca:1a:
         8d:ba:95:cc:03:47:45:ad:88:52:11:9e:63:ca:ad:58:16:61:
         36:eb:aa:41:16:9c:d3:97:7e:76:27:2d:42:fb:d7:f6:36:5a:
         bd:25:19:8f:90:04:d0:41:68:e7:3d:c0:67:16:30:5d:82:12:
         ef:53:f7:6f:51:50:a8:e7:95:af:51:3a:dd:43:69:62:65:8d:
         23:b2:08:ad:64:ff:5e:35:a2:a9:78:66:5d:48:f4:e9:9e:fd:
         bb:bd:86:38:28:15:38:e6:a3:2f:38:a1:21:72:9d:6f:8e:c8:
         ff:d3:c9:26:cf:67:0f:bf:6a:21:f2:ce:e6:bb:20:21:62:13:
         84:a1:d6:73:e6:e1:68:1f:e9:e0:13:22:05:35:9e:aa:92:2e:
         7a:c9:d8:b5:12:31:30:6e:0c:d6:8c:a4:81:b5:f7:3e:77:96:
         41:27:4a:7f
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgITVph/4J5R176pbKVrr9Sr8Q+S7jANBgkqhkiG9w0BAQsF
ADAzMTEwLwYDVQQDEyhDM0FGRjE0MTUzMEQ5MTA5NzE1NkNDQUVDQ0RENDI5RDJD
OUY1NzM4MB4XDTI0MDcwNDIxNTg1MFoXDTI1MDcwMzIyMDM1MFowMzExMC8GA1UE
AxMoNjVDQkRDREVCQ0FCNjVCRDY2QTkxQTlDN0FFOTQ4Mjc4NjNENDQwRTCCASIw
DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALVfSZzzZiaVqo3yL9eXF2I9ttm5
gBLoPbWhkDsqOIL+EudUN0cGNR6bMnu86cPB7zuGTMuwoSx2jkhIOb8hZ5C3qNDd
fUjRdM/ZRIcsq9IbNcYwckUGALEV9bMC/BSeLBKa3SnZS5WVwroaC8AXilQLiFwc
HzVKXIBOiYEHLSVAwUAwGfiNiajBEsabRGdT+d5+d+r3nEW1phebBVMUomvUytlb
o14Y57/sqOj0vXC6o4uSMU4Vv8EhaZMHXocBU9z3w6xuuXWn0/OEIanhHQyXeQiU
t8/K/Tkynwf5XeVbPBiXZhMlDCsXHsi+PR8sE1hV7iNW4ABbnJzPvZR0Ky0CAwEA
AaOCAlMwggJPMB0GA1UdDgQWBBRly9zevKtlvWapGpx66Ugnhj1EDjAfBgNVHSME
GDAWgBTDr/FBUw2RCXFWzK7M3UKdLJ9XODAOBgNVHQ8BAf8EBAMCB4AwgZQGA1Ud
HwSBjDCBiTCBhqCBg6CBgIZ+cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9DOGIxdEdOb3JqTDRKZENHMzNnM0dvcVdHVG5CVTdiQTd5VFRCTXhlaDlV
Zi8wL0MzQUZGMTQxNTMwRDkxMDk3MTU2Q0NBRUNDREQ0MjlEMkM5RjU3MzguY3Js
MHgGCCsGAQUFBwEBBGwwajBoBggrBgEFBQcwAoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvQzNBRkYxNDE1MzBEOTEwOTcx
NTZDQ0FFQ0NERDQyOUQyQzlGNTczOC5jZXIwgbAGCCsGAQUFBwELBIGjMIGgMIGd
BggrBgEFBQcwC4aBkHJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
QzhiMXRHTm9yakw0SmRDRzMzZzNHb3FXR1RuQlU3YkE3eVRUQk14ZWg5VWYvMC8z
MTMzMzEyZTMxMzAzODJlMzIzNTMyMmUzMDJmMzIzMjJkMzMzMjIwM2QzZTIwMzIz
NjM2MzQzMzMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQCg2z8MA0GCSqGSIb3DQEBCwUAA4IBAQAFS1U4
hTOfMM1UhDBMBFcDaTySUpwV2//Kg7jWi8c48WHO+YnMb33NXHSOj49ntG0y3N57
+7qJyqXK/OKQADUZ/yhc7sBAQDkly4uHQzAS5N42KWJPyDisyhqNupXMA0dFrYhS
EZ5jyq1YFmE266pBFpzTl352Jy1C+9f2Nlq9JRmPkATQQWjnPcBnFjBdghLvU/dv
UVCo55WvUTrdQ2liZY0jsgitZP9eNaKpeGZdSPTpnv27vYY4KBU45qMvOKEhcp1v
jsj/08kmz2cPv2oh8s7muyAhYhOEodZz5uFoH+ngEyIFNZ6qki56ydi1EjEwbgzW
jKSBtfc+d5ZBJ0p/
-----END CERTIFICATE-----
Generated at Tue Feb 18 07:05:59 2025 by rpki-client