Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DSYKkKJHK2jBaQQMdVdW9rn3rvVx9fsN1i2smfeXLbEw/0/3136382e3139362e38342e302f32332d3233203d3e20323635343437.roa
File:                     3136382e3139362e38342e302f32332d3233203d3e20323635343437.roa (raw, json)
Hash identifier:          FShiQUFY007TVlQrGh6o56L33W2r+kMw0ieQAQm5HPg=
Subject key identifier:   2E:B8:87:B5:51:62:D0:33:20:1D:29:10:62:0F:DD:23:87:8B:C6:90
Certificate issuer:       /CN=66EC78F47EAA40A6ABC0E1EE29D03B4D906904A3
Certificate serial:       272834A4337FF86BDEC59FED708E3914543E9B60
Authority key identifier: 66:EC:78:F4:7E:AA:40:A6:AB:C0:E1:EE:29:D0:3B:4D:90:69:04:A3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/66EC78F47EAA40A6ABC0E1EE29D03B4D906904A3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DSYKkKJHK2jBaQQMdVdW9rn3rvVx9fsN1i2smfeXLbEw/0/3136382e3139362e38342e302f32332d3233203d3e20323635343437.roa
Signing time:             Mon 23 Oct 2023 18:25:23 +0000
ROA not before:           Mon 23 Oct 2023 18:20:23 +0000
ROA not after:            Mon 21 Oct 2024 18:25:23 +0000
asID:                     265447
IP address blocks:        168.196.84.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:28:34:a4:33:7f:f8:6b:de:c5:9f:ed:70:8e:39:14:54:3e:9b:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66EC78F47EAA40A6ABC0E1EE29D03B4D906904A3
        Validity
            Not Before: Oct 23 18:20:23 2023 GMT
            Not After : Oct 21 18:25:23 2024 GMT
        Subject: CN=2EB887B55162D033201D2910620FDD23878BC690
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:20:3a:d3:75:ab:24:bc:aa:39:cd:5c:60:72:
                    f7:91:e1:92:30:e3:be:b3:fc:cf:ee:7c:b4:4b:26:
                    91:17:c5:a5:e1:4e:d1:07:d3:33:16:a9:03:87:09:
                    50:80:cf:4a:b9:66:b6:be:93:87:94:d4:45:05:a0:
                    9a:98:83:f3:21:d6:35:70:6c:da:e7:26:1f:ee:a7:
                    a1:a7:01:b1:95:06:c8:77:0e:a5:63:07:4d:14:0e:
                    e4:86:cd:bb:fa:a2:2a:8c:35:ea:99:44:b0:37:65:
                    82:65:07:92:32:ce:e3:68:e6:c8:93:9b:e1:3b:5e:
                    f0:94:d0:cb:a6:cf:4d:7c:2f:17:1b:b2:eb:38:fc:
                    18:b7:23:8c:79:d2:e8:a4:56:6c:b0:3b:0c:16:6b:
                    6f:ec:ee:aa:ea:2d:d5:5c:ab:2f:33:6b:c0:55:9e:
                    f6:bb:52:db:9e:f3:77:ca:81:7b:94:35:1c:4a:d5:
                    bb:8e:d5:75:eb:24:81:69:c7:83:dd:f7:22:ab:3d:
                    32:f5:b3:4c:0e:fa:eb:f6:ca:81:d3:a8:d5:38:00:
                    1b:76:c9:d1:34:4d:b4:4b:0e:2b:12:92:54:fb:ba:
                    49:3f:e9:97:27:ee:e1:c8:31:08:7f:75:bb:25:35:
                    5e:d5:3d:6c:29:a0:c1:41:1e:ef:a7:d6:87:bb:39:
                    13:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:B8:87:B5:51:62:D0:33:20:1D:29:10:62:0F:DD:23:87:8B:C6:90
            X509v3 Authority Key Identifier:
                keyid:66:EC:78:F4:7E:AA:40:A6:AB:C0:E1:EE:29:D0:3B:4D:90:69:04:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DSYKkKJHK2jBaQQMdVdW9rn3rvVx9fsN1i2smfeXLbEw/0/66EC78F47EAA40A6ABC0E1EE29D03B4D906904A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/66EC78F47EAA40A6ABC0E1EE29D03B4D906904A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DSYKkKJHK2jBaQQMdVdW9rn3rvVx9fsN1i2smfeXLbEw/0/3136382e3139362e38342e302f32332d3233203d3e20323635343437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.196.84.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4b:f4:ae:60:54:24:41:6d:01:02:3f:3b:f9:29:a1:d4:14:57:
         45:f6:b6:65:f0:a9:e9:f7:d8:73:a7:f5:14:63:30:96:3b:ba:
         26:e7:ab:ba:c2:11:dc:96:9f:59:07:1e:7b:e8:13:66:d1:a7:
         10:a9:ed:7e:6c:0b:39:41:98:bc:8d:22:95:05:9d:b9:43:e6:
         69:d5:ef:68:2d:87:fa:20:e6:1b:d0:25:97:e5:8e:47:25:39:
         e7:a9:19:72:d3:80:0d:30:fa:db:f7:01:cc:85:75:89:ca:b4:
         f8:17:16:a6:e5:b1:0d:d4:3f:fd:b7:b7:d4:4a:37:a2:a5:20:
         a2:15:4c:39:c7:6c:d7:76:ae:d2:6b:c1:5a:44:72:7c:32:f2:
         a7:f0:f0:b4:d8:9a:3e:2f:36:68:a5:94:3e:16:b8:ac:9c:7b:
         1a:bf:f3:6f:be:19:e6:20:19:eb:ef:fb:c7:fa:0b:09:f4:a8:
         21:c8:f4:97:14:e3:fb:f6:6f:c6:c5:98:b7:18:fb:ca:51:39:
         f2:e4:60:4b:d4:10:a0:d0:e7:9a:99:c1:41:ad:4e:84:64:98:
         63:80:bc:d0:25:4d:35:5d:b3:cf:2a:f6:99:91:d1:14:0c:a7:
         09:67:07:98:7a:56:56:47:09:dd:ff:eb:d0:09:db:ef:4c:82:
         7a:5f:68:05
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUJyg0pDN/+GvexZ/tcI45FFQ+m2AwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjZFQzc4RjQ3RUFBNDBBNkFCQzBFMUVFMjlEMDNCNEQ5
MDY5MDRBMzAeFw0yMzEwMjMxODIwMjNaFw0yNDEwMjExODI1MjNaMDMxMTAvBgNV
BAMTKDJFQjg4N0I1NTE2MkQwMzMyMDFEMjkxMDYyMEZERDIzODc4QkM2OTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHIDrTdaskvKo5zVxgcveR4ZIw
476z/M/ufLRLJpEXxaXhTtEH0zMWqQOHCVCAz0q5Zra+k4eU1EUFoJqYg/Mh1jVw
bNrnJh/up6GnAbGVBsh3DqVjB00UDuSGzbv6oiqMNeqZRLA3ZYJlB5IyzuNo5siT
m+E7XvCU0Mumz018Lxcbsus4/Bi3I4x50uikVmywOwwWa2/s7qrqLdVcqy8za8BV
nva7Utue83fKgXuUNRxK1buO1XXrJIFpx4Pd9yKrPTL1s0wO+uv2yoHTqNU4ABt2
ydE0TbRLDisSklT7ukk/6Zcn7uHIMQh/dbslNV7VPWwpoMFBHu+n1oe7ORNnAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQULriHtVFi0DMgHSkQYg/dI4eLxpAwHwYDVR0j
BBgwFoAUZux49H6qQKarwOHuKdA7TZBpBKMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRFNZS2tLSkhLMmpCYVFRTWRWZFc5cm4zcnZWeDlmc04xaTJzbWZlWExi
RXcvMC82NkVDNzhGNDdFQUE0MEE2QUJDMEUxRUUyOUQwM0I0RDkwNjkwNEEzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzY2RUM3OEY0N0VBQTQwQTZB
QkMwRTFFRTI5RDAzQjREOTA2OTA0QTMuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0RTWUtrS0pISzJqQmFRUU1kVmRXOXJuM3J2Vng5ZnNOMWkyc21mZVhMYkV3LzAv
MzEzNjM4MmUzMTM5MzYyZTM4MzQyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzMjM2
MzUzNDM0Mzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAGoxFQwDQYJKoZIhvcNAQELBQADggEBAEv0rmBU
JEFtAQI/O/kpodQUV0X2tmXwqen32HOn9RRjMJY7uibnq7rCEdyWn1kHHnvoE2bR
pxCp7X5sCzlBmLyNIpUFnblD5mnV72gth/og5hvQJZfljkclOeepGXLTgA0w+tv3
AcyFdYnKtPgXFqblsQ3UP/23t9RKN6KlIKIVTDnHbNd2rtJrwVpEcnwy8qfw8LTY
mj4vNmillD4WuKycexq/82++GeYgGevv+8f6Cwn0qCHI9JcU4/v2b8bFmLcY+8pR
OfLkYEvUEKDQ55qZwUGtToRkmGOAvNAlTTVds88q9pmR0RQMpwlnB5h6VlZHCd3/
69AJ2+9MgnpfaAU=
-----END CERTIFICATE-----
Generated at Sun Feb 16 21:38:07 2025 by rpki-client