Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FzpF7W4wJTvayV2BuPMUFzqqbq1NojMTFbAXkyLDQcto/0/3138312e3138392e3132342e302f32332d3233203d3e20323731353032.roa
File:                     3138312e3138392e3132342e302f32332d3233203d3e20323731353032.roa (raw, json)
Hash identifier:          nBwUcE5usD6bFJ6i2rjG3zTnk3s/n8aBvYB8QM5DLpo=
Subject key identifier:   71:CF:60:6D:67:42:35:A4:B1:B8:B9:EB:C5:7A:14:70:62:52:1B:A1
Certificate issuer:       /CN=F6DBA753A519A4A6CD975E1903824CB4B06730FD
Certificate serial:       2AA0232EA998CACEBE1E41CB1AFA7D3AE88E7156
Authority key identifier: F6:DB:A7:53:A5:19:A4:A6:CD:97:5E:19:03:82:4C:B4:B0:67:30:FD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F6DBA753A519A4A6CD975E1903824CB4B06730FD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FzpF7W4wJTvayV2BuPMUFzqqbq1NojMTFbAXkyLDQcto/0/3138312e3138392e3132342e302f32332d3233203d3e20323731353032.roa
Signing time:             Mon 01 Jan 2024 17:20:23 +0000
ROA not before:           Mon 01 Jan 2024 17:15:23 +0000
ROA not after:            Mon 30 Dec 2024 17:20:23 +0000
asID:                     271502
IP address blocks:        181.189.124.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:a0:23:2e:a9:98:ca:ce:be:1e:41:cb:1a:fa:7d:3a:e8:8e:71:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F6DBA753A519A4A6CD975E1903824CB4B06730FD
        Validity
            Not Before: Jan  1 17:15:23 2024 GMT
            Not After : Dec 30 17:20:23 2024 GMT
        Subject: CN=71CF606D674235A4B1B8B9EBC57A147062521BA1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:65:7c:97:4f:57:d6:d2:00:d6:46:d0:e7:c2:
                    07:39:27:e3:ad:7a:a7:4d:37:b3:f2:d4:3c:18:9b:
                    27:32:b2:24:ce:2a:5a:40:9c:ec:59:89:b1:be:6d:
                    82:1a:e6:3e:6d:64:b6:25:fc:79:a5:32:da:1d:01:
                    27:6b:07:1e:ce:4d:ac:78:7f:96:61:28:f2:2c:8e:
                    c6:db:f9:9c:3f:1f:30:3f:75:f1:97:9a:96:49:32:
                    e9:f1:26:07:90:79:0a:1d:ee:15:29:bf:2a:a8:73:
                    2c:5c:26:ba:46:72:5c:46:fa:fc:24:25:94:37:df:
                    05:7b:f5:6c:4d:d6:ac:48:a3:e4:3e:8f:a7:c6:26:
                    22:29:f9:00:2c:cd:bd:7d:d8:e0:90:98:0f:08:09:
                    0f:16:d9:2a:7f:c6:9b:c2:e1:5a:f2:fd:7a:0a:74:
                    84:1b:d2:04:38:66:d8:55:4f:71:4c:17:40:ec:39:
                    0c:5c:10:9f:8b:ec:11:f8:92:5a:fe:15:4a:8b:c9:
                    6b:79:cf:0b:b4:14:c6:84:39:62:ab:76:4e:f1:e6:
                    97:87:4d:b8:b1:a7:76:03:45:6f:4d:37:4d:46:4d:
                    52:32:00:1f:3c:67:64:fa:92:46:5b:c4:84:ce:7a:
                    28:cb:d9:c1:a8:d2:d5:4c:84:e7:e7:d3:78:db:3c:
                    8f:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:CF:60:6D:67:42:35:A4:B1:B8:B9:EB:C5:7A:14:70:62:52:1B:A1
            X509v3 Authority Key Identifier:
                keyid:F6:DB:A7:53:A5:19:A4:A6:CD:97:5E:19:03:82:4C:B4:B0:67:30:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FzpF7W4wJTvayV2BuPMUFzqqbq1NojMTFbAXkyLDQcto/0/F6DBA753A519A4A6CD975E1903824CB4B06730FD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F6DBA753A519A4A6CD975E1903824CB4B06730FD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FzpF7W4wJTvayV2BuPMUFzqqbq1NojMTFbAXkyLDQcto/0/3138312e3138392e3132342e302f32332d3233203d3e20323731353032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.189.124.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a0:d9:d4:81:a3:4d:cf:d5:d1:70:35:b5:09:2a:fa:4b:c8:ff:
         d7:9d:dd:37:cc:aa:46:84:07:1e:ef:a3:bd:4c:cd:c8:0b:8f:
         ad:75:a0:0e:ba:37:56:e8:d5:b4:9f:af:a4:9e:72:01:19:1a:
         75:fa:2b:86:b7:81:b3:bd:9b:8b:d4:c7:b4:8c:2a:91:4a:54:
         41:45:93:62:b6:1a:53:9b:78:ea:bc:fc:9b:fa:e1:81:ed:63:
         4d:9f:da:0e:05:47:4b:86:18:43:8f:e6:7b:c3:a8:a4:5f:f6:
         a4:dd:b8:d0:ee:77:f4:8a:af:cd:74:6d:3f:31:1b:ee:8e:20:
         6d:7d:45:be:b6:4e:e7:ba:79:5c:da:be:c1:66:18:26:17:ca:
         df:8c:78:43:38:c7:10:95:21:1a:9b:e9:e4:a5:5f:d9:10:61:
         b2:e0:09:23:37:51:c6:59:bc:a4:98:e9:ec:8d:7b:af:b0:75:
         70:c4:5f:36:e0:61:b5:bb:1c:6c:91:41:9c:0a:1b:c6:3e:de:
         37:a1:a6:47:e6:7e:0a:fc:b2:ac:5a:a5:49:21:23:43:9d:00:
         73:e6:ac:1d:38:f9:71:4d:d4:eb:14:35:9f:46:d0:c0:f1:8f:
         03:52:1a:aa:30:f2:93:7b:84:c7:58:8e:88:b4:be:f9:67:ed:
         01:e1:36:94
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUKqAjLqmYys6+HkHLGvp9OuiOcVYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjZEQkE3NTNBNTE5QTRBNkNEOTc1RTE5MDM4MjRDQjRC
MDY3MzBGRDAeFw0yNDAxMDExNzE1MjNaFw0yNDEyMzAxNzIwMjNaMDMxMTAvBgNV
BAMTKDcxQ0Y2MDZENjc0MjM1QTRCMUI4QjlFQkM1N0ExNDcwNjI1MjFCQTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkZXyXT1fW0gDWRtDnwgc5J+Ot
eqdNN7Py1DwYmycysiTOKlpAnOxZibG+bYIa5j5tZLYl/HmlMtodASdrBx7OTax4
f5ZhKPIsjsbb+Zw/HzA/dfGXmpZJMunxJgeQeQod7hUpvyqocyxcJrpGclxG+vwk
JZQ33wV79WxN1qxIo+Q+j6fGJiIp+QAszb192OCQmA8ICQ8W2Sp/xpvC4Vry/XoK
dIQb0gQ4ZthVT3FMF0DsOQxcEJ+L7BH4klr+FUqLyWt5zwu0FMaEOWKrdk7x5peH
Tbixp3YDRW9NN01GTVIyAB88Z2T6kkZbxITOeijL2cGo0tVMhOfn03jbPI+fAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUcc9gbWdCNaSxuLnrxXoUcGJSG6EwHwYDVR0j
BBgwFoAU9tunU6UZpKbNl14ZA4JMtLBnMP0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRnpwRjdXNHdKVHZheVYyQnVQTVVGenFxYnExTm9qTVRGYkFYa3lMRFFj
dG8vMC9GNkRCQTc1M0E1MTlBNEE2Q0Q5NzVFMTkwMzgyNENCNEIwNjczMEZELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0Y2REJBNzUzQTUxOUE0QTZD
RDk3NUUxOTAzODI0Q0I0QjA2NzMwRkQuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0Z6cEY3VzR3SlR2YXlWMkJ1UE1VRnpxcWJxMU5vak1URmJBWGt5TERRY3RvLzAv
MzEzODMxMmUzMTM4MzkyZTMxMzIzNDJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDMy
MzczMTM1MzAzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAbW9fDANBgkqhkiG9w0BAQsFAAOCAQEAoNnU
gaNNz9XRcDW1CSr6S8j/153dN8yqRoQHHu+jvUzNyAuPrXWgDro3VujVtJ+vpJ5y
ARkadforhreBs72bi9THtIwqkUpUQUWTYrYaU5t46rz8m/rhge1jTZ/aDgVHS4YY
Q4/me8OopF/2pN240O539IqvzXRtPzEb7o4gbX1FvrZO57p5XNq+wWYYJhfK34x4
QzjHEJUhGpvp5KVf2RBhsuAJIzdRxlm8pJjp7I17r7B1cMRfNuBhtbscbJFBnAob
xj7eN6GmR+Z+CvyyrFqlSSEjQ50Ac+asHTj5cU3U6xQ1n0bQwPGPA1IaqjDyk3uE
x1iOiLS++WftAeE2lA==
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:25:25 2025 by rpki-client