Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CRWxwqj9KkCUjUrQa61c8Zo1DHmHmpTkT9nUfjafQfuq/0/3137372e33392e35362e302f32322d3232203d3e20323638303138.roa
File:                     3137372e33392e35362e302f32322d3232203d3e20323638303138.roa (raw, json)
Hash identifier:          W8B66cwSphp9D+XqHLprdwRhIOLu2OTRHAc/KRXBqCo=
Subject key identifier:   7D:CC:5A:0F:E2:77:7D:67:FD:B0:0A:94:CB:63:9B:80:99:0F:FE:E2
Certificate issuer:       /CN=D2ADA57D8601634394F4D09E2D0517E3029FE940
Certificate serial:       7FCD90D72B9CD6371345FC4826C1F24CBA637508
Authority key identifier: D2:AD:A5:7D:86:01:63:43:94:F4:D0:9E:2D:05:17:E3:02:9F:E9:40
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D2ADA57D8601634394F4D09E2D0517E3029FE940.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CRWxwqj9KkCUjUrQa61c8Zo1DHmHmpTkT9nUfjafQfuq/0/3137372e33392e35362e302f32322d3232203d3e20323638303138.roa
Signing time:             Tue 04 Oct 2022 12:02:38 +0000
ROA not before:           Tue 04 Oct 2022 11:57:38 +0000
ROA not after:            Tue 03 Oct 2023 12:02:38 +0000
asID:                     268018
IP address blocks:        177.39.56.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:cd:90:d7:2b:9c:d6:37:13:45:fc:48:26:c1:f2:4c:ba:63:75:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D2ADA57D8601634394F4D09E2D0517E3029FE940
        Validity
            Not Before: Oct  4 11:57:38 2022 GMT
            Not After : Oct  3 12:02:38 2023 GMT
        Subject: CN=7DCC5A0FE2777D67FDB00A94CB639B80990FFEE2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:01:78:2f:48:9b:7f:ae:9e:00:18:8c:35:28:
                    ae:d7:bd:89:dd:ff:b2:fd:61:50:3b:d6:e0:a4:39:
                    b3:99:f9:8e:8c:b0:dd:ad:d0:88:f8:0d:f0:ac:8d:
                    25:e6:e1:aa:85:29:d4:20:84:9f:03:1e:1d:a0:52:
                    d1:22:45:4c:92:a8:20:96:bb:d3:51:74:27:6e:c3:
                    e7:51:a5:86:25:de:57:5d:cf:18:c4:6e:6a:5a:7c:
                    df:16:9b:84:3f:f8:d8:d9:4f:89:2e:9f:a0:60:e2:
                    a4:c4:7a:1c:1f:9e:63:29:94:45:b6:96:b9:20:3c:
                    c2:34:fa:ae:0d:45:22:64:dc:4e:fb:f0:f0:c6:05:
                    eb:22:52:f4:fb:20:3e:68:ac:00:31:e6:6c:5e:10:
                    ba:aa:07:4b:fd:95:54:5c:09:f3:77:52:f3:1e:d5:
                    5e:cd:82:d9:bb:8a:4c:ea:6d:29:5c:b0:19:c1:53:
                    f5:d5:fa:2f:1e:99:d8:fe:0b:0c:6f:d8:d5:3c:0b:
                    b9:90:9e:6a:c9:f5:5d:dc:c3:d0:7d:dd:7b:fe:ab:
                    28:12:40:5a:80:09:ce:82:b1:55:7c:d5:bf:b5:cd:
                    fc:4b:08:0c:c4:a6:0a:dd:49:78:84:37:11:22:5d:
                    29:ed:a8:4e:bc:60:37:83:f4:73:27:c8:bc:f7:5d:
                    71:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:CC:5A:0F:E2:77:7D:67:FD:B0:0A:94:CB:63:9B:80:99:0F:FE:E2
            X509v3 Authority Key Identifier:
                keyid:D2:AD:A5:7D:86:01:63:43:94:F4:D0:9E:2D:05:17:E3:02:9F:E9:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CRWxwqj9KkCUjUrQa61c8Zo1DHmHmpTkT9nUfjafQfuq/0/D2ADA57D8601634394F4D09E2D0517E3029FE940.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D2ADA57D8601634394F4D09E2D0517E3029FE940.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CRWxwqj9KkCUjUrQa61c8Zo1DHmHmpTkT9nUfjafQfuq/0/3137372e33392e35362e302f32322d3232203d3e20323638303138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.39.56.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a4:c3:40:53:a2:02:3e:a6:2e:67:01:30:48:c7:24:3f:03:2a:
         a9:57:8f:a4:5a:c3:2d:99:54:92:ca:fa:60:c8:b5:17:a8:64:
         77:2b:a6:f4:96:67:96:d6:68:41:68:3c:fe:49:58:a5:ee:a3:
         a4:4e:22:2a:0b:f5:2c:bd:d6:a8:17:33:af:c8:40:73:89:1b:
         c2:a5:0a:2a:5a:c7:72:5a:a3:93:9d:e4:03:bf:26:b7:9d:de:
         22:33:b8:49:f6:98:51:35:8e:c1:3d:c9:12:0c:dc:c1:f0:14:
         db:7d:8e:a3:23:fe:91:1b:de:42:7f:8d:91:55:02:2f:98:f7:
         43:e0:b8:86:c2:bb:5c:76:5e:a1:cb:68:5d:b4:74:08:b2:2a:
         8c:4a:19:81:ea:65:d2:05:65:64:09:71:6d:d9:fd:bb:eb:a1:
         c1:0e:83:fd:02:08:d7:2f:3d:4d:16:dd:61:9d:91:40:95:ac:
         31:14:7e:53:e9:83:ba:f4:8e:25:b8:1d:a8:68:31:57:f1:62:
         bf:42:23:0b:55:17:33:2a:53:cf:f2:6b:38:02:6e:7a:5c:70:
         18:e6:4a:3f:3f:84:2b:2a:dc:ae:b6:19:38:82:e4:5c:8d:c2:
         41:35:d6:27:be:06:20:86:76:bf:14:57:5f:e5:6a:e5:8a:51:
         2b:e1:76:fa
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUf82Q1yuc1jcTRfxIJsHyTLpjdQgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDJBREE1N0Q4NjAxNjM0Mzk0RjREMDlFMkQwNTE3RTMw
MjlGRTk0MDAeFw0yMjEwMDQxMTU3MzhaFw0yMzEwMDMxMjAyMzhaMDMxMTAvBgNV
BAMTKDdEQ0M1QTBGRTI3NzdENjdGREIwMEE5NENCNjM5QjgwOTkwRkZFRTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLAXgvSJt/rp4AGIw1KK7XvYnd
/7L9YVA71uCkObOZ+Y6MsN2t0Ij4DfCsjSXm4aqFKdQghJ8DHh2gUtEiRUySqCCW
u9NRdCduw+dRpYYl3lddzxjEbmpafN8Wm4Q/+NjZT4kun6Bg4qTEehwfnmMplEW2
lrkgPMI0+q4NRSJk3E778PDGBesiUvT7ID5orAAx5mxeELqqB0v9lVRcCfN3UvMe
1V7Ngtm7ikzqbSlcsBnBU/XV+i8emdj+Cwxv2NU8C7mQnmrJ9V3cw9B93Xv+qygS
QFqACc6CsVV81b+1zfxLCAzEpgrdSXiENxEiXSntqE68YDeD9HMnyLz3XXEhAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUfcxaD+J3fWf9sAqUy2ObgJkP/uIwHwYDVR0j
BBgwFoAU0q2lfYYBY0OU9NCeLQUX4wKf6UAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ1JXeHdxajlLa0NValVyUWE2MWM4Wm8xREhtSG1wVGtUOW5VZmphZlFm
dXEvMC9EMkFEQTU3RDg2MDE2MzQzOTRGNEQwOUUyRDA1MTdFMzAyOUZFOTQwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0QyQURBNTdEODYwMTYzNDM5
NEY0RDA5RTJEMDUxN0UzMDI5RkU5NDAuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0NSV3h3cWo5S2tDVWpVclFhNjFjOFpvMURIbUhtcFRrVDluVWZqYWZRZnVxLzAv
MzEzNzM3MmUzMzM5MmUzNTM2MmUzMDJmMzIzMjJkMzIzMjIwM2QzZTIwMzIzNjM4
MzAzMTM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCsSc4MA0GCSqGSIb3DQEBCwUAA4IBAQCkw0BTogI+
pi5nATBIxyQ/AyqpV4+kWsMtmVSSyvpgyLUXqGR3K6b0lmeW1mhBaDz+SVil7qOk
TiIqC/UsvdaoFzOvyEBziRvCpQoqWsdyWqOTneQDvya3nd4iM7hJ9phRNY7BPckS
DNzB8BTbfY6jI/6RG95Cf42RVQIvmPdD4LiGwrtcdl6hy2hdtHQIsiqMShmB6mXS
BWVkCXFt2f2766HBDoP9AgjXLz1NFt1hnZFAlawxFH5T6YO69I4luB2oaDFX8WK/
QiMLVRczKlPP8ms4Am56XHAY5ko/P4QrKtyuthk4guRcjcJBNdYnvgYghna/FFdf
5WrlilEr4Xb6
-----END CERTIFICATE-----
Generated at Fri Mar 14 01:54:27 2025 by rpki-client