Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H6zTo4nPv99zZemCHbVirduLWcfy6dfcn2SvDqw8toes/0/3136382e3132312e37342e302f32342d3234203d3e20323635333032.roa
File:                     3136382e3132312e37342e302f32342d3234203d3e20323635333032.roa (raw, json)
Hash identifier:          bKMkgWNAy+HLF2LJw78LcU2ZCAdb8jAtqmomepWObNs=
Subject key identifier:   7D:F2:FB:E9:7B:75:9E:6C:F3:D0:6E:A3:1A:3D:2D:DC:E0:C7:EE:95
Certificate issuer:       /CN=C54586D44647014E47C52F3A3F2184006D2B17C3
Certificate serial:       7D26C20F781BF9BDB3C9EC0DADB9C5EAC0B61BC6
Authority key identifier: C5:45:86:D4:46:47:01:4E:47:C5:2F:3A:3F:21:84:00:6D:2B:17:C3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C54586D44647014E47C52F3A3F2184006D2B17C3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H6zTo4nPv99zZemCHbVirduLWcfy6dfcn2SvDqw8toes/0/3136382e3132312e37342e302f32342d3234203d3e20323635333032.roa
Signing time:             Mon 04 Jul 2022 13:30:30 +0000
ROA not before:           Mon 04 Jul 2022 13:25:30 +0000
ROA not after:            Mon 03 Jul 2023 13:30:30 +0000
asID:                     265302
IP address blocks:        168.121.74.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:26:c2:0f:78:1b:f9:bd:b3:c9:ec:0d:ad:b9:c5:ea:c0:b6:1b:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C54586D44647014E47C52F3A3F2184006D2B17C3
        Validity
            Not Before: Jul  4 13:25:30 2022 GMT
            Not After : Jul  3 13:30:30 2023 GMT
        Subject: CN=7DF2FBE97B759E6CF3D06EA31A3D2DDCE0C7EE95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:fd:4d:2c:f6:ea:bc:eb:8c:85:3f:68:19:7e:
                    44:67:62:56:67:ae:da:15:39:37:49:40:af:94:ac:
                    f5:8f:22:d9:3a:1d:92:50:13:c7:74:d7:83:75:c4:
                    68:88:45:6d:89:4a:4c:c1:73:c2:dc:ad:e5:23:4b:
                    fe:f1:66:c7:79:f0:94:06:de:c6:c4:e6:cb:ba:87:
                    87:cc:76:f9:af:47:9e:12:0d:27:91:76:c1:c8:c4:
                    c4:63:26:dc:31:e9:f3:fa:f1:40:f4:7f:6d:25:99:
                    1c:56:35:6b:d3:a1:b7:64:84:e5:7d:03:5a:4e:88:
                    e3:49:ee:3a:32:53:c4:0b:43:3e:7c:ea:ef:05:08:
                    e0:c9:0c:4f:4a:31:77:78:c4:37:0d:40:5b:ab:23:
                    17:37:05:0d:bd:e6:f4:74:9b:ff:b2:c9:81:eb:c6:
                    74:9e:d6:38:39:71:40:f4:fb:fd:b1:af:7e:d5:18:
                    c8:88:a8:fe:56:47:9d:b0:63:27:f3:dd:5c:d9:24:
                    8b:dd:cf:8e:68:57:f4:8f:6d:35:e3:9a:88:91:e9:
                    e8:8c:e9:3d:e9:54:d0:5b:9c:06:1a:fc:8e:b7:12:
                    54:6f:3e:6e:76:95:a7:a7:67:6b:f0:fa:fd:4b:e3:
                    c5:c5:a5:f2:ba:94:b7:76:50:3a:2a:8d:02:fc:9a:
                    55:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:F2:FB:E9:7B:75:9E:6C:F3:D0:6E:A3:1A:3D:2D:DC:E0:C7:EE:95
            X509v3 Authority Key Identifier:
                keyid:C5:45:86:D4:46:47:01:4E:47:C5:2F:3A:3F:21:84:00:6D:2B:17:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H6zTo4nPv99zZemCHbVirduLWcfy6dfcn2SvDqw8toes/0/C54586D44647014E47C52F3A3F2184006D2B17C3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C54586D44647014E47C52F3A3F2184006D2B17C3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H6zTo4nPv99zZemCHbVirduLWcfy6dfcn2SvDqw8toes/0/3136382e3132312e37342e302f32342d3234203d3e20323635333032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.121.74.0/24

    Signature Algorithm: sha256WithRSAEncryption
         34:63:e9:e3:6d:bd:87:37:6e:b2:86:2d:cc:c2:b3:1f:ea:1a:
         31:f2:01:f1:1e:62:57:12:fd:95:a9:4d:ec:ad:b0:8a:c3:b4:
         85:a4:94:c9:b7:39:d6:fd:06:ff:69:39:8f:81:86:2a:f0:68:
         25:16:a6:37:1b:f3:b7:43:aa:75:85:76:68:36:c6:05:29:df:
         d2:7e:4b:47:70:65:1b:9c:28:91:9f:b3:c7:79:74:a7:e1:c0:
         d5:b9:09:e6:25:5a:c2:d4:4f:3b:1d:d5:ff:5c:67:84:0b:7c:
         ff:7d:d0:e5:0c:16:af:47:89:2a:21:07:89:ab:c2:2f:9f:ec:
         84:b2:47:a2:f5:61:6f:21:49:62:e4:fc:da:f7:94:e7:c6:0d:
         47:45:45:d9:88:69:b1:52:07:1e:36:08:05:63:12:e5:b0:eb:
         e9:06:33:4e:57:62:a5:b5:60:e1:a8:0d:29:1e:d6:06:9c:b6:
         2d:46:5f:37:2d:2b:ff:2a:83:c1:3e:8f:27:27:73:4b:7b:3a:
         0d:5d:78:60:a0:3d:a0:7f:cd:90:cf:32:8f:a0:45:49:7a:53:
         44:12:dd:c9:c4:22:f1:d8:bf:ca:f2:c5:bf:eb:b1:61:0e:22:
         77:93:6f:52:06:f8:82:76:5a:ea:61:4f:ff:20:f8:2d:af:2e:
         e0:f1:6b:a4
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUfSbCD3gb+b2zyewNrbnF6sC2G8YwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzU0NTg2RDQ0NjQ3MDE0RTQ3QzUyRjNBM0YyMTg0MDA2
RDJCMTdDMzAeFw0yMjA3MDQxMzI1MzBaFw0yMzA3MDMxMzMwMzBaMDMxMTAvBgNV
BAMTKDdERjJGQkU5N0I3NTlFNkNGM0QwNkVBMzFBM0QyRERDRTBDN0VFOTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCt/U0s9uq864yFP2gZfkRnYlZn
rtoVOTdJQK+UrPWPItk6HZJQE8d014N1xGiIRW2JSkzBc8LcreUjS/7xZsd58JQG
3sbE5su6h4fMdvmvR54SDSeRdsHIxMRjJtwx6fP68UD0f20lmRxWNWvTobdkhOV9
A1pOiONJ7joyU8QLQz586u8FCODJDE9KMXd4xDcNQFurIxc3BQ295vR0m/+yyYHr
xnSe1jg5cUD0+/2xr37VGMiIqP5WR52wYyfz3VzZJIvdz45oV/SPbTXjmoiR6eiM
6T3pVNBbnAYa/I63ElRvPm52laenZ2vw+v1L48XFpfK6lLd2UDoqjQL8mlWrAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUffL76Xt1nmzz0G6jGj0t3ODH7pUwHwYDVR0j
BBgwFoAUxUWG1EZHAU5HxS86PyGEAG0rF8MwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSDZ6VG80blB2OTl6WmVtQ0hiVmlyZHVMV2NmeTZkZmNuMlN2RHF3OHRv
ZXMvMC9DNTQ1ODZENDQ2NDcwMTRFNDdDNTJGM0EzRjIxODQwMDZEMkIxN0MzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0M1NDU4NkQ0NDY0NzAxNEU0
N0M1MkYzQTNGMjE4NDAwNkQyQjE3QzMuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0g2elRvNG5Qdjk5elplbUNIYlZpcmR1TFdjZnk2ZGZjbjJTdkRxdzh0b2VzLzAv
MzEzNjM4MmUzMTMyMzEyZTM3MzQyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzUzMzMwMzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBACoeUowDQYJKoZIhvcNAQELBQADggEBADRj6eNt
vYc3brKGLczCsx/qGjHyAfEeYlcS/ZWpTeytsIrDtIWklMm3Odb9Bv9pOY+Bhirw
aCUWpjcb87dDqnWFdmg2xgUp39J+S0dwZRucKJGfs8d5dKfhwNW5CeYlWsLUTzsd
1f9cZ4QLfP990OUMFq9HiSohB4mrwi+f7ISyR6L1YW8hSWLk/Nr3lOfGDUdFRdmI
abFSBx42CAVjEuWw6+kGM05XYqW1YOGoDSke1gacti1GXzctK/8qg8E+jycnc0t7
Og1deGCgPaB/zZDPMo+gRUl6U0QS3cnEIvHYv8ryxb/rsWEOIneTb1IG+IJ2Wuph
T/8g+C2vLuDxa6Q=
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:32:10 2025 by rpki-client