Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H6zTo4nPv99zZemCHbVirduLWcfy6dfcn2SvDqw8toes/0/3136382e3132312e37332e302f32342d3234203d3e20323635333032.roa
File:                     3136382e3132312e37332e302f32342d3234203d3e20323635333032.roa (raw, json)
Hash identifier:          tZHZIBYhIWEF9z0fTRNsST9CmKtPaaGcnOujPgFXouw=
Subject key identifier:   59:12:5E:23:C1:7E:A2:06:E2:27:CC:5D:B7:BB:8E:B0:34:6F:61:44
Certificate issuer:       /CN=C54586D44647014E47C52F3A3F2184006D2B17C3
Certificate serial:       0E5CACD5407EC7DDB9E7A83D05FD51F8CFD72EBD
Authority key identifier: C5:45:86:D4:46:47:01:4E:47:C5:2F:3A:3F:21:84:00:6D:2B:17:C3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C54586D44647014E47C52F3A3F2184006D2B17C3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H6zTo4nPv99zZemCHbVirduLWcfy6dfcn2SvDqw8toes/0/3136382e3132312e37332e302f32342d3234203d3e20323635333032.roa
Signing time:             Mon 04 Jul 2022 13:30:31 +0000
ROA not before:           Mon 04 Jul 2022 13:25:31 +0000
ROA not after:            Mon 03 Jul 2023 13:30:31 +0000
asID:                     265302
IP address blocks:        168.121.73.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:5c:ac:d5:40:7e:c7:dd:b9:e7:a8:3d:05:fd:51:f8:cf:d7:2e:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C54586D44647014E47C52F3A3F2184006D2B17C3
        Validity
            Not Before: Jul  4 13:25:31 2022 GMT
            Not After : Jul  3 13:30:31 2023 GMT
        Subject: CN=59125E23C17EA206E227CC5DB7BB8EB0346F6144
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:1d:fe:94:84:90:98:f1:94:1f:ab:68:05:58:
                    48:5d:c8:d4:00:a0:43:bb:fa:50:b4:46:86:e1:66:
                    1c:a3:bd:c5:d9:21:70:01:fe:1c:27:c5:47:cf:d6:
                    72:60:b1:12:30:3a:84:5c:33:a5:5b:4a:fe:f9:94:
                    eb:93:72:99:24:11:5d:bd:47:47:15:e8:e8:92:7b:
                    7d:64:1c:1f:33:4b:66:cb:b3:b8:07:7b:f8:b1:5c:
                    b0:33:5b:9e:8c:92:15:ad:f3:6d:6c:f8:c4:d4:88:
                    ee:52:20:c8:1a:a5:85:6a:19:08:e3:e4:cd:a3:61:
                    42:8a:aa:14:07:19:22:00:23:0e:8c:f4:88:ca:9f:
                    c9:5e:78:40:cd:95:68:b1:69:f0:9d:83:86:13:58:
                    cd:fe:57:3e:47:1d:32:41:44:b7:7d:c7:97:cc:eb:
                    d2:8c:ba:2e:5c:75:21:b8:5b:e1:d2:b1:a0:b5:a4:
                    c3:57:21:ac:d0:c8:dd:0c:b4:b2:a7:ab:da:e8:aa:
                    95:28:8c:97:22:5b:b9:55:1f:d3:96:5b:93:a9:76:
                    b5:41:61:14:39:08:60:31:22:70:60:fb:5c:34:22:
                    07:2f:76:b2:c3:a7:08:dd:fd:71:16:dd:24:48:68:
                    8a:88:71:db:68:94:52:17:07:58:0a:09:2a:3d:b8:
                    b9:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:12:5E:23:C1:7E:A2:06:E2:27:CC:5D:B7:BB:8E:B0:34:6F:61:44
            X509v3 Authority Key Identifier:
                keyid:C5:45:86:D4:46:47:01:4E:47:C5:2F:3A:3F:21:84:00:6D:2B:17:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H6zTo4nPv99zZemCHbVirduLWcfy6dfcn2SvDqw8toes/0/C54586D44647014E47C52F3A3F2184006D2B17C3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C54586D44647014E47C52F3A3F2184006D2B17C3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H6zTo4nPv99zZemCHbVirduLWcfy6dfcn2SvDqw8toes/0/3136382e3132312e37332e302f32342d3234203d3e20323635333032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.121.73.0/24

    Signature Algorithm: sha256WithRSAEncryption
         51:2f:69:ce:51:00:60:c8:97:91:cf:67:b9:3f:76:7a:44:2c:
         7c:42:bc:9f:87:43:a6:34:06:be:a4:fd:f0:00:bd:22:74:fe:
         1f:b0:55:ab:7e:62:d8:36:f8:9a:d9:1c:07:79:85:ba:e2:36:
         a1:bc:d6:a7:d0:87:8e:51:10:6d:a4:87:fe:8c:63:45:61:6c:
         44:e7:cb:68:54:ee:1a:4b:34:f2:aa:47:6c:79:85:3e:42:8b:
         e6:94:1a:20:67:e8:dd:63:9c:0b:3b:c2:bc:dd:e0:92:3e:c1:
         fd:7a:62:b8:ad:01:61:51:b8:be:42:7f:0a:68:d4:60:bb:67:
         52:3a:99:bd:e0:0b:bf:e4:73:64:d0:ce:f1:06:cc:f3:c9:e0:
         6f:37:a9:d2:cd:a0:db:29:f3:d1:5b:f3:80:79:6f:21:35:ff:
         6d:5b:5b:57:dc:6d:c4:07:29:5f:f3:b4:80:9c:14:c4:79:88:
         a2:c7:92:21:7d:2a:f9:8e:a3:b7:04:e0:05:d7:4d:ed:fd:de:
         4a:cd:3c:94:b2:c1:39:01:4d:30:1e:f7:77:dd:06:e2:63:31:
         a1:81:da:a3:17:2a:d6:b2:e7:8b:52:00:cd:72:ac:b1:e8:cd:
         c0:39:d5:ad:4b:6d:e3:a4:e9:3b:87:25:a5:05:46:46:99:ea:
         a2:89:67:67
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUDlys1UB+x92556g9Bf1R+M/XLr0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzU0NTg2RDQ0NjQ3MDE0RTQ3QzUyRjNBM0YyMTg0MDA2
RDJCMTdDMzAeFw0yMjA3MDQxMzI1MzFaFw0yMzA3MDMxMzMwMzFaMDMxMTAvBgNV
BAMTKDU5MTI1RTIzQzE3RUEyMDZFMjI3Q0M1REI3QkI4RUIwMzQ2RjYxNDQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPHf6UhJCY8ZQfq2gFWEhdyNQA
oEO7+lC0RobhZhyjvcXZIXAB/hwnxUfP1nJgsRIwOoRcM6VbSv75lOuTcpkkEV29
R0cV6OiSe31kHB8zS2bLs7gHe/ixXLAzW56MkhWt821s+MTUiO5SIMgapYVqGQjj
5M2jYUKKqhQHGSIAIw6M9IjKn8leeEDNlWixafCdg4YTWM3+Vz5HHTJBRLd9x5fM
69KMui5cdSG4W+HSsaC1pMNXIazQyN0MtLKnq9roqpUojJciW7lVH9OWW5OpdrVB
YRQ5CGAxInBg+1w0IgcvdrLDpwjd/XEW3SRIaIqIcdtolFIXB1gKCSo9uLknAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUWRJeI8F+ogbiJ8xdt7uOsDRvYUQwHwYDVR0j
BBgwFoAUxUWG1EZHAU5HxS86PyGEAG0rF8MwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSDZ6VG80blB2OTl6WmVtQ0hiVmlyZHVMV2NmeTZkZmNuMlN2RHF3OHRv
ZXMvMC9DNTQ1ODZENDQ2NDcwMTRFNDdDNTJGM0EzRjIxODQwMDZEMkIxN0MzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0M1NDU4NkQ0NDY0NzAxNEU0
N0M1MkYzQTNGMjE4NDAwNkQyQjE3QzMuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0g2elRvNG5Qdjk5elplbUNIYlZpcmR1TFdjZnk2ZGZjbjJTdkRxdzh0b2VzLzAv
MzEzNjM4MmUzMTMyMzEyZTM3MzMyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzUzMzMwMzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBACoeUkwDQYJKoZIhvcNAQELBQADggEBAFEvac5R
AGDIl5HPZ7k/dnpELHxCvJ+HQ6Y0Br6k/fAAvSJ0/h+wVat+Ytg2+JrZHAd5hbri
NqG81qfQh45REG2kh/6MY0VhbETny2hU7hpLNPKqR2x5hT5Ci+aUGiBn6N1jnAs7
wrzd4JI+wf16YritAWFRuL5Cfwpo1GC7Z1I6mb3gC7/kc2TQzvEGzPPJ4G83qdLN
oNsp89Fb84B5byE1/21bW1fcbcQHKV/ztICcFMR5iKLHkiF9KvmOo7cE4AXXTe39
3krNPJSywTkBTTAe93fdBuJjMaGB2qMXKtay54tSAM1yrLHozcA51a1LbeOk6TuH
JaUFRkaZ6qKJZ2c=
-----END CERTIFICATE-----
Generated at Mon Apr 21 10:49:57 2025 by rpki-client