Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D22S2fFD3vBiGgDajdav7YNXyxUqjZgW3xexjkVpu2Nm/0/3137372e3132382e35332e302f32342d3234203d3e20323730363932.roa
File:                     3137372e3132382e35332e302f32342d3234203d3e20323730363932.roa (raw, json)
Hash identifier:          D3z3iOOp9FUA65IQJS41hDj1vbe8yUKEevOfSpaVE+4=
Subject key identifier:   DF:C1:A1:BF:DC:12:1E:A6:EB:0C:2D:21:6B:5F:1E:42:34:2E:12:1C
Certificate issuer:       /CN=B83FD2EEC7F4248445174F78D9E930FB53682236
Certificate serial:       5213AD4B0AB549E3CDF9F7248E9CC80EC2554023
Authority key identifier: B8:3F:D2:EE:C7:F4:24:84:45:17:4F:78:D9:E9:30:FB:53:68:22:36
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B83FD2EEC7F4248445174F78D9E930FB53682236.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D22S2fFD3vBiGgDajdav7YNXyxUqjZgW3xexjkVpu2Nm/0/3137372e3132382e35332e302f32342d3234203d3e20323730363932.roa
Signing time:             Thu 21 Jul 2022 13:22:06 +0000
ROA not before:           Thu 21 Jul 2022 13:17:06 +0000
ROA not after:            Thu 20 Jul 2023 13:22:06 +0000
asID:                     270692
IP address blocks:        177.128.53.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:13:ad:4b:0a:b5:49:e3:cd:f9:f7:24:8e:9c:c8:0e:c2:55:40:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B83FD2EEC7F4248445174F78D9E930FB53682236
        Validity
            Not Before: Jul 21 13:17:06 2022 GMT
            Not After : Jul 20 13:22:06 2023 GMT
        Subject: CN=DFC1A1BFDC121EA6EB0C2D216B5F1E42342E121C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:68:7d:b4:45:4a:78:fb:f6:3c:f3:1c:1c:af:
                    92:a2:07:88:5a:e4:69:5b:aa:a4:48:ce:74:86:7d:
                    be:a2:4c:fc:ca:83:6e:90:3a:68:d5:48:9e:2a:b4:
                    6f:b6:ec:c7:77:31:4a:d6:59:6e:76:8a:49:3b:47:
                    ce:c2:d1:e1:30:7d:47:2f:c4:be:93:5c:2f:3a:c8:
                    15:dc:62:dc:23:cd:cd:f6:75:b2:d8:b8:dc:1f:27:
                    ff:06:2d:17:c9:3b:1a:41:84:92:12:db:c5:a7:32:
                    cb:c8:d1:2c:c2:c8:3d:25:ea:22:18:ad:52:6f:e0:
                    06:4d:7c:1d:f6:ec:e0:98:fb:8b:50:90:9f:b6:db:
                    4e:cf:4f:70:a4:42:00:7a:75:9f:8b:11:fd:29:a6:
                    28:70:a1:23:0d:4f:af:1d:12:40:d7:ab:3b:9d:b5:
                    6a:ed:39:26:ab:53:3b:f1:a9:de:62:57:e0:94:d3:
                    ad:62:18:35:58:8b:82:c4:68:00:39:78:54:96:4a:
                    24:57:c2:65:27:6d:20:48:3e:18:c1:59:b6:ce:07:
                    3c:94:a2:4e:bc:18:26:e3:b7:97:6f:b4:a9:d1:57:
                    dd:67:59:e6:cc:73:a0:77:8c:77:84:6d:5e:be:50:
                    39:05:2b:99:9e:5b:fb:f1:bc:3f:cf:e3:44:dd:e0:
                    45:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:C1:A1:BF:DC:12:1E:A6:EB:0C:2D:21:6B:5F:1E:42:34:2E:12:1C
            X509v3 Authority Key Identifier:
                keyid:B8:3F:D2:EE:C7:F4:24:84:45:17:4F:78:D9:E9:30:FB:53:68:22:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D22S2fFD3vBiGgDajdav7YNXyxUqjZgW3xexjkVpu2Nm/0/B83FD2EEC7F4248445174F78D9E930FB53682236.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B83FD2EEC7F4248445174F78D9E930FB53682236.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D22S2fFD3vBiGgDajdav7YNXyxUqjZgW3xexjkVpu2Nm/0/3137372e3132382e35332e302f32342d3234203d3e20323730363932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.128.53.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3a:b4:9f:69:44:55:c3:80:bd:1e:c9:f6:03:5a:23:c7:ca:30:
         8f:75:65:45:04:d3:b3:7a:36:25:82:f9:8a:af:f4:cd:7b:22:
         09:45:ca:cb:03:03:eb:cb:e8:72:fc:ff:87:3a:af:97:22:c4:
         73:67:9a:23:29:24:9b:23:6b:27:fe:b5:c9:91:99:f4:f5:be:
         b4:c3:0d:9d:8c:4e:41:28:83:7f:da:e2:31:73:95:18:b8:e7:
         c3:bc:97:77:4d:7f:c0:bf:5a:7d:2a:3e:91:28:9a:c9:e9:a8:
         7c:22:da:09:83:09:c7:ab:c1:7a:0a:ba:c5:e2:e0:1d:af:90:
         35:24:40:46:c6:3e:a8:91:0a:4e:af:a6:34:70:1b:17:29:71:
         14:e9:15:8a:dd:87:26:a8:70:e2:cf:4e:31:f5:30:27:82:86:
         79:13:db:b5:20:2d:5d:33:96:b6:35:91:a1:45:dd:24:59:f8:
         be:c1:1d:13:ae:23:f0:a9:c7:83:1d:fb:22:13:55:11:a3:bd:
         33:b2:a2:ab:7a:a7:7a:19:c8:b0:30:cf:9b:f5:ec:9a:b9:23:
         a7:62:84:c6:d7:77:35:e7:f0:36:b3:f1:44:9f:11:d1:7f:5f:
         06:0d:f2:e4:34:ff:41:71:51:9c:a3:1e:61:21:fd:ea:72:31:
         48:a9:a9:fd
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUUhOtSwq1SePN+fckjpzIDsJVQCMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjgzRkQyRUVDN0Y0MjQ4NDQ1MTc0Rjc4RDlFOTMwRkI1
MzY4MjIzNjAeFw0yMjA3MjExMzE3MDZaFw0yMzA3MjAxMzIyMDZaMDMxMTAvBgNV
BAMTKERGQzFBMUJGREMxMjFFQTZFQjBDMkQyMTZCNUYxRTQyMzQyRTEyMUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpaH20RUp4+/Y88xwcr5KiB4ha
5GlbqqRIznSGfb6iTPzKg26QOmjVSJ4qtG+27Md3MUrWWW52ikk7R87C0eEwfUcv
xL6TXC86yBXcYtwjzc32dbLYuNwfJ/8GLRfJOxpBhJIS28WnMsvI0SzCyD0l6iIY
rVJv4AZNfB327OCY+4tQkJ+2207PT3CkQgB6dZ+LEf0ppihwoSMNT68dEkDXqzud
tWrtOSarUzvxqd5iV+CU061iGDVYi4LEaAA5eFSWSiRXwmUnbSBIPhjBWbbOBzyU
ok68GCbjt5dvtKnRV91nWebMc6B3jHeEbV6+UDkFK5meW/vxvD/P40Td4EXBAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU38Ghv9wSHqbrDC0ha18eQjQuEhwwHwYDVR0j
BBgwFoAUuD/S7sf0JIRFF0942ekw+1NoIjYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRDIyUzJmRkQzdkJpR2dEYWpkYXY3WU5YeXhVcWpaZ1czeGV4amtWcHUy
Tm0vMC9CODNGRDJFRUM3RjQyNDg0NDUxNzRGNzhEOUU5MzBGQjUzNjgyMjM2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0I4M0ZEMkVFQzdGNDI0ODQ0
NTE3NEY3OEQ5RTkzMEZCNTM2ODIyMzYuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0QyMlMyZkZEM3ZCaUdnRGFqZGF2N1lOWHl4VXFqWmdXM3hleGprVnB1Mk5tLzAv
MzEzNzM3MmUzMTMyMzgyZTM1MzMyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM3
MzAzNjM5MzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBACxgDUwDQYJKoZIhvcNAQELBQADggEBADq0n2lE
VcOAvR7J9gNaI8fKMI91ZUUE07N6NiWC+Yqv9M17IglFyssDA+vL6HL8/4c6r5ci
xHNnmiMpJJsjayf+tcmRmfT1vrTDDZ2MTkEog3/a4jFzlRi458O8l3dNf8C/Wn0q
PpEomsnpqHwi2gmDCcerwXoKusXi4B2vkDUkQEbGPqiRCk6vpjRwGxcpcRTpFYrd
hyaocOLPTjH1MCeChnkT27UgLV0zlrY1kaFF3SRZ+L7BHROuI/Cpx4Md+yITVRGj
vTOyoqt6p3oZyLAwz5v17Jq5I6dihMbXdzXn8Daz8USfEdF/XwYN8uQ0/0FxUZyj
HmEh/epyMUipqf0=
-----END CERTIFICATE-----
Generated at Tue Apr 8 13:31:27 2025 by rpki-client