Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HXniMnv8y9EmJCjx2uu9BWC91L6TdynFHG8UgNZow7aZ/0/3137372e34362e32322e302f32342d3234203d3e203238313335.roa
File:                     3137372e34362e32322e302f32342d3234203d3e203238313335.roa (raw, json)
Hash identifier:          JVX2/d0CzgN3TdG1RaN1jhid78PtKSRQI4zRVbgNdIY=
Subject key identifier:   86:99:30:FE:E0:18:11:B9:10:E0:48:CF:BF:44:FF:4D:8D:FD:A5:9F
Certificate issuer:       /CN=106C0018EAEC97B226036E9F42E3D4795FCBC714
Certificate serial:       319BDAA6C8B62DDAF07F9DFE9405F759E3689686
Authority key identifier: 10:6C:00:18:EA:EC:97:B2:26:03:6E:9F:42:E3:D4:79:5F:CB:C7:14
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/106C0018EAEC97B226036E9F42E3D4795FCBC714.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HXniMnv8y9EmJCjx2uu9BWC91L6TdynFHG8UgNZow7aZ/0/3137372e34362e32322e302f32342d3234203d3e203238313335.roa
Signing time:             Wed 12 Apr 2023 11:07:18 +0000
ROA not before:           Wed 12 Apr 2023 11:02:18 +0000
ROA not after:            Wed 10 Apr 2024 11:07:18 +0000
asID:                     28135
IP address blocks:        177.46.22.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:9b:da:a6:c8:b6:2d:da:f0:7f:9d:fe:94:05:f7:59:e3:68:96:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=106C0018EAEC97B226036E9F42E3D4795FCBC714
        Validity
            Not Before: Apr 12 11:02:18 2023 GMT
            Not After : Apr 10 11:07:18 2024 GMT
        Subject: CN=869930FEE01811B910E048CFBF44FF4D8DFDA59F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:72:91:a6:51:25:d3:34:fa:51:e9:17:bf:96:
                    fc:18:0b:b7:8f:b4:2d:b3:ad:b0:70:78:24:04:e3:
                    15:34:b7:bb:d8:79:05:34:ae:67:9a:26:a0:1d:e7:
                    f4:55:20:31:6d:4f:af:15:50:8b:35:06:db:fd:7c:
                    a4:26:04:52:9a:b2:5c:90:37:a0:01:cf:30:6c:82:
                    e1:64:8e:aa:cd:c8:76:cd:7d:11:d5:21:57:29:b0:
                    01:52:69:2a:26:6c:e5:7e:92:39:8b:59:d7:ba:64:
                    59:10:78:92:ea:07:ca:4d:3a:55:eb:61:ae:14:2b:
                    e7:ae:ec:ff:a4:52:80:de:a4:dd:80:24:d5:2b:02:
                    01:9b:ba:22:a0:50:10:78:3d:30:1f:c4:a0:bd:a5:
                    15:aa:aa:aa:87:d9:f8:50:6b:f4:c5:74:3b:c0:ec:
                    c4:12:ab:be:01:19:6f:17:07:5d:c8:2c:fb:d9:76:
                    12:af:f7:88:41:6c:43:0b:a4:88:9d:9b:52:97:96:
                    ce:e5:72:d7:a5:ac:4b:4b:29:c6:e1:b6:d8:67:1d:
                    21:cf:6b:3c:1c:f8:a6:d2:f4:6e:cf:4f:52:fa:d3:
                    da:c8:38:bd:8f:7a:82:6f:8e:38:02:d2:7e:a5:46:
                    a3:8e:10:b5:41:f9:db:c2:94:06:1b:49:fb:7c:4a:
                    ab:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:99:30:FE:E0:18:11:B9:10:E0:48:CF:BF:44:FF:4D:8D:FD:A5:9F
            X509v3 Authority Key Identifier:
                keyid:10:6C:00:18:EA:EC:97:B2:26:03:6E:9F:42:E3:D4:79:5F:CB:C7:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HXniMnv8y9EmJCjx2uu9BWC91L6TdynFHG8UgNZow7aZ/0/106C0018EAEC97B226036E9F42E3D4795FCBC714.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/106C0018EAEC97B226036E9F42E3D4795FCBC714.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HXniMnv8y9EmJCjx2uu9BWC91L6TdynFHG8UgNZow7aZ/0/3137372e34362e32322e302f32342d3234203d3e203238313335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.46.22.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5f:f1:08:cc:2b:af:c7:69:f7:d9:f6:ea:2e:e1:52:b3:c1:04:
         ed:55:5a:fa:37:6b:53:70:06:80:bb:ed:8a:c8:5a:79:32:dc:
         2e:26:0c:a9:8b:e0:ce:3d:11:fd:d8:b8:85:c8:26:6c:c7:bb:
         0c:4f:a0:d6:9b:f0:b2:44:d2:d3:0d:83:27:e2:d7:45:cf:24:
         9a:75:ed:cc:86:12:d4:36:75:8a:1f:c7:84:2e:05:b2:eb:f8:
         af:63:c9:0b:aa:26:f1:f8:cc:fb:73:7f:75:b1:9f:19:b9:1c:
         79:01:31:2a:d6:21:dd:91:07:48:f2:17:53:ec:11:e1:5d:93:
         5a:91:cf:f4:5e:e4:a3:08:29:58:96:9c:7b:7f:f9:ee:ea:93:
         68:99:ed:17:e4:e2:e1:1c:12:d9:60:45:91:46:46:48:35:84:
         17:46:f2:08:2b:b6:13:c5:14:d1:1c:63:0c:36:2a:95:e3:24:
         84:d7:58:75:97:78:aa:c3:86:8f:3e:e7:72:b6:3b:5a:8d:79:
         c5:8a:88:20:0f:88:c3:f8:35:5d:b7:98:77:f3:60:4b:dd:39:
         6e:e7:92:b2:9a:ee:c9:1d:14:f4:18:70:58:3b:8e:a8:a7:7c:
         74:66:71:c0:c7:b3:9f:ca:5e:05:c9:fe:1c:fe:38:87:30:3d:
         14:1b:1b:e9
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUMZvapsi2Ldrwf53+lAX3WeNoloYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTA2QzAwMThFQUVDOTdCMjI2MDM2RTlGNDJFM0Q0Nzk1
RkNCQzcxNDAeFw0yMzA0MTIxMTAyMThaFw0yNDA0MTAxMTA3MThaMDMxMTAvBgNV
BAMTKDg2OTkzMEZFRTAxODExQjkxMEUwNDhDRkJGNDRGRjREOERGREE1OUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDccpGmUSXTNPpR6Re/lvwYC7eP
tC2zrbBweCQE4xU0t7vYeQU0rmeaJqAd5/RVIDFtT68VUIs1Btv9fKQmBFKaslyQ
N6ABzzBsguFkjqrNyHbNfRHVIVcpsAFSaSombOV+kjmLWde6ZFkQeJLqB8pNOlXr
Ya4UK+eu7P+kUoDepN2AJNUrAgGbuiKgUBB4PTAfxKC9pRWqqqqH2fhQa/TFdDvA
7MQSq74BGW8XB13ILPvZdhKv94hBbEMLpIidm1KXls7lctelrEtLKcbhtthnHSHP
azwc+KbS9G7PT1L609rIOL2PeoJvjjgC0n6lRqOOELVB+dvClAYbSft8SqszAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUhpkw/uAYEbkQ4EjPv0T/TY39pZ8wHwYDVR0j
BBgwFoAUEGwAGOrsl7ImA26fQuPUeV/LxxQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSFhuaU1udjh5OUVtSkNqeDJ1dTlCV0M5MUw2VGR5bkZIRzhVZ05ab3c3
YVovMC8xMDZDMDAxOEVBRUM5N0IyMjYwMzZFOUY0MkUzRDQ3OTVGQ0JDNzE0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzEwNkMwMDE4RUFFQzk3QjIy
NjAzNkU5RjQyRTNENDc5NUZDQkM3MTQuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0hYbmlNbnY4eTlFbUpDangydXU5QldDOTFMNlRkeW5GSEc4VWdOWm93N2FaLzAv
MzEzNzM3MmUzNDM2MmUzMjMyMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzODMx
MzMzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEALEuFjANBgkqhkiG9w0BAQsFAAOCAQEAX/EIzCuvx2n3
2fbqLuFSs8EE7VVa+jdrU3AGgLvtishaeTLcLiYMqYvgzj0R/di4hcgmbMe7DE+g
1pvwskTS0w2DJ+LXRc8kmnXtzIYS1DZ1ih/HhC4Fsuv4r2PJC6om8fjM+3N/dbGf
GbkceQExKtYh3ZEHSPIXU+wR4V2TWpHP9F7kowgpWJace3/57uqTaJntF+Ti4RwS
2WBFkUZGSDWEF0byCCu2E8UU0RxjDDYqleMkhNdYdZd4qsOGjz7ncrY7Wo15xYqI
IA+Iw/g1XbeYd/NgS905bueSspruyR0U9BhwWDuOqKd8dGZxwMezn8peBcn+HP44
hzA9FBsb6Q==
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:34:06 2025 by rpki-client