Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CU9wAiVouiMVuWoaDp5fEvdLPTrKtVbNwAg2rKpwaQAA/1/3137392e3130382e3138342e302f32342d3234203d3e20323633323731.roa
File:                     3137392e3130382e3138342e302f32342d3234203d3e20323633323731.roa (raw, json)
Hash identifier:          kIFenCVvWjJ32/t6k1u+EtWRyzfGZyGI4V1ASVgAuqI=
Subject key identifier:   76:23:AF:05:86:B3:4A:36:77:C0:70:0F:03:85:10:BB:25:CF:03:A8
Certificate issuer:       /CN=E9281FA54614FD8BB470EDB763D8A5F9F741E5F7
Certificate serial:       1194462712C21A442B9AD74C7E5B3118D6A9725B
Authority key identifier: E9:28:1F:A5:46:14:FD:8B:B4:70:ED:B7:63:D8:A5:F9:F7:41:E5:F7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E9281FA54614FD8BB470EDB763D8A5F9F741E5F7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CU9wAiVouiMVuWoaDp5fEvdLPTrKtVbNwAg2rKpwaQAA/1/3137392e3130382e3138342e302f32342d3234203d3e20323633323731.roa
Signing time:             Sat 22 Apr 2023 11:26:25 +0000
ROA not before:           Sat 22 Apr 2023 11:21:25 +0000
ROA not after:            Sat 20 Apr 2024 11:26:25 +0000
asID:                     263271
IP address blocks:        179.108.184.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:94:46:27:12:c2:1a:44:2b:9a:d7:4c:7e:5b:31:18:d6:a9:72:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E9281FA54614FD8BB470EDB763D8A5F9F741E5F7
        Validity
            Not Before: Apr 22 11:21:25 2023 GMT
            Not After : Apr 20 11:26:25 2024 GMT
        Subject: CN=7623AF0586B34A3677C0700F038510BB25CF03A8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:e9:5a:8f:1f:8a:15:0d:0b:4c:10:a4:63:de:
                    a1:b1:02:9e:66:a4:a9:32:e8:ad:71:5a:05:32:0a:
                    d3:98:65:b7:34:ff:3a:ad:5e:22:2b:d8:57:da:91:
                    4f:fb:00:77:b2:d8:f2:ef:d1:e8:a2:16:09:d4:fa:
                    07:d0:c7:ec:e7:47:77:80:ad:8a:0c:c6:6f:6a:ea:
                    e2:d2:2a:5d:96:0c:07:50:52:92:ad:bb:bb:5c:ce:
                    0f:72:bd:9e:2e:8f:2e:8c:e6:3c:2c:45:b5:a7:5f:
                    65:3f:92:78:47:c1:55:8b:b6:35:6c:09:98:42:3f:
                    08:24:49:be:df:4f:e9:29:fe:44:23:8a:66:44:fa:
                    fb:8f:c4:a6:0f:06:b6:82:d7:ce:ee:a5:19:5a:70:
                    b6:88:10:eb:ba:51:74:59:f3:7d:28:9d:f9:08:6d:
                    a5:5f:b3:ed:d7:c2:65:be:67:57:7e:a7:21:5b:f7:
                    17:ab:c5:c8:e7:b9:d5:75:34:4c:c0:1a:05:00:6b:
                    ae:a9:a5:53:ff:0a:e2:03:b2:e7:18:d8:ed:64:a1:
                    dc:af:29:bf:59:fa:06:5f:50:18:b5:ce:72:68:43:
                    57:f4:78:91:8b:04:4b:6d:57:88:bb:99:fa:e9:0c:
                    b7:cf:76:ac:72:03:8e:e8:e3:25:fc:f6:70:f0:65:
                    91:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:23:AF:05:86:B3:4A:36:77:C0:70:0F:03:85:10:BB:25:CF:03:A8
            X509v3 Authority Key Identifier:
                keyid:E9:28:1F:A5:46:14:FD:8B:B4:70:ED:B7:63:D8:A5:F9:F7:41:E5:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CU9wAiVouiMVuWoaDp5fEvdLPTrKtVbNwAg2rKpwaQAA/1/E9281FA54614FD8BB470EDB763D8A5F9F741E5F7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E9281FA54614FD8BB470EDB763D8A5F9F741E5F7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CU9wAiVouiMVuWoaDp5fEvdLPTrKtVbNwAg2rKpwaQAA/1/3137392e3130382e3138342e302f32342d3234203d3e20323633323731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.108.184.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2c:6c:42:eb:10:c0:a0:94:2e:db:50:1b:de:0d:ce:8e:66:84:
         b5:93:0c:78:46:e1:f8:49:5a:d9:da:39:29:a5:45:55:ef:64:
         03:b4:37:23:88:4c:26:a4:ed:99:f9:73:2e:3c:c1:69:30:a2:
         ac:81:ba:d9:8f:49:f7:a7:36:70:95:9f:81:23:b8:63:c5:66:
         f3:4a:e2:db:17:57:1b:d4:3d:88:fd:71:24:56:73:d1:b8:48:
         5c:35:12:75:46:52:8e:ad:e6:0c:b2:58:aa:b4:3f:b5:7c:d8:
         bc:8b:0d:3b:72:b7:b3:b1:e7:e1:21:5f:84:b0:08:40:90:82:
         a0:41:c8:b0:6e:6a:1e:9a:05:d9:28:29:fc:69:64:74:e6:c6:
         4c:b4:21:05:21:de:03:7e:4e:4d:ca:96:03:7c:7a:d4:ec:90:
         6e:ad:00:bc:14:48:f4:c7:47:8a:e6:d9:b2:03:08:f7:c8:aa:
         a8:13:f3:bc:49:d5:fb:97:cc:a0:2b:06:a8:d7:70:45:4f:56:
         c8:b2:0b:63:aa:95:b8:68:1c:b3:f3:0b:99:11:fe:e0:a3:41:
         ec:69:5f:4a:7f:9f:29:eb:98:1f:2e:b2:85:7b:83:9e:09:b4:
         ae:a0:79:51:8a:4c:cd:58:b3:1e:84:64:ed:b2:99:91:2b:64:
         9b:7a:e9:c7
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUEZRGJxLCGkQrmtdMflsxGNapclswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTkyODFGQTU0NjE0RkQ4QkI0NzBFREI3NjNEOEE1RjlG
NzQxRTVGNzAeFw0yMzA0MjIxMTIxMjVaFw0yNDA0MjAxMTI2MjVaMDMxMTAvBgNV
BAMTKDc2MjNBRjA1ODZCMzRBMzY3N0MwNzAwRjAzODUxMEJCMjVDRjAzQTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDD6VqPH4oVDQtMEKRj3qGxAp5m
pKky6K1xWgUyCtOYZbc0/zqtXiIr2FfakU/7AHey2PLv0eiiFgnU+gfQx+znR3eA
rYoMxm9q6uLSKl2WDAdQUpKtu7tczg9yvZ4ujy6M5jwsRbWnX2U/knhHwVWLtjVs
CZhCPwgkSb7fT+kp/kQjimZE+vuPxKYPBraC187upRlacLaIEOu6UXRZ830onfkI
baVfs+3XwmW+Z1d+pyFb9xerxcjnudV1NEzAGgUAa66ppVP/CuIDsucY2O1kodyv
Kb9Z+gZfUBi1znJoQ1f0eJGLBEttV4i7mfrpDLfPdqxyA47o4yX89nDwZZENAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUdiOvBYazSjZ3wHAPA4UQuyXPA6gwHwYDVR0j
BBgwFoAU6SgfpUYU/Yu0cO23Y9il+fdB5fcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ1U5d0FpVm91aU1WdVdvYURwNWZFdmRMUFRyS3RWYk53QWcycktwd2FR
QUEvMS9FOTI4MUZBNTQ2MTRGRDhCQjQ3MEVEQjc2M0Q4QTVGOUY3NDFFNUY3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0U5MjgxRkE1NDYxNEZEOEJC
NDcwRURCNzYzRDhBNUY5Rjc0MUU1RjcuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0NVOXdBaVZvdWlNVnVXb2FEcDVmRXZkTFBUckt0VmJOd0FnMnJLcHdhUUFBLzEv
MzEzNzM5MmUzMTMwMzgyZTMxMzgzNDJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzYzMzMyMzczMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEALNsuDANBgkqhkiG9w0BAQsFAAOCAQEALGxC
6xDAoJQu21Ab3g3OjmaEtZMMeEbh+Ela2do5KaVFVe9kA7Q3I4hMJqTtmflzLjzB
aTCirIG62Y9J96c2cJWfgSO4Y8Vm80ri2xdXG9Q9iP1xJFZz0bhIXDUSdUZSjq3m
DLJYqrQ/tXzYvIsNO3K3s7Hn4SFfhLAIQJCCoEHIsG5qHpoF2Sgp/GlkdObGTLQh
BSHeA35OTcqWA3x61OyQbq0AvBRI9MdHiubZsgMI98iqqBPzvEnV+5fMoCsGqNdw
RU9WyLILY6qVuGgcs/MLmRH+4KNB7GlfSn+fKeuYHy6yhXuDngm0rqB5UYpMzViz
HoRk7bKZkStkm3rpxw==
-----END CERTIFICATE-----
Generated at Mon Apr 21 07:16:21 2025 by rpki-client