Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HXniMnv8y9EmJCjx2uu9BWC91L6TdynFHG8UgNZow7aZ/0/3137372e34362e36342e302f32312d3231203d3e203238313335.roa
File:                     3137372e34362e36342e302f32312d3231203d3e203238313335.roa (raw, json)
Hash identifier:          cUo2qR4EbKelvH8kJVVMdQdeHBtmdEMizwEc2PBTjgY=
Subject key identifier:   81:C5:EC:C4:1F:79:AB:92:E3:41:95:11:24:C1:20:C6:E4:5A:A5:10
Certificate issuer:       /CN=106C0018EAEC97B226036E9F42E3D4795FCBC714
Certificate serial:       5BDFB4BE398BE898ED0A3378252AD6AC9FF39414
Authority key identifier: 10:6C:00:18:EA:EC:97:B2:26:03:6E:9F:42:E3:D4:79:5F:CB:C7:14
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/106C0018EAEC97B226036E9F42E3D4795FCBC714.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HXniMnv8y9EmJCjx2uu9BWC91L6TdynFHG8UgNZow7aZ/0/3137372e34362e36342e302f32312d3231203d3e203238313335.roa
Signing time:             Mon 15 May 2023 22:51:33 +0000
ROA not before:           Mon 15 May 2023 22:46:33 +0000
ROA not after:            Mon 13 May 2024 22:51:33 +0000
asID:                     28135
IP address blocks:        177.46.64.0/21 maxlen: 21
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:df:b4:be:39:8b:e8:98:ed:0a:33:78:25:2a:d6:ac:9f:f3:94:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=106C0018EAEC97B226036E9F42E3D4795FCBC714
        Validity
            Not Before: May 15 22:46:33 2023 GMT
            Not After : May 13 22:51:33 2024 GMT
        Subject: CN=81C5ECC41F79AB92E341951124C120C6E45AA510
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:3b:ce:6c:16:91:0e:3b:45:7b:94:75:34:fa:
                    89:9f:5d:c0:57:15:0e:f5:b8:16:74:43:d3:c6:01:
                    b2:9f:f4:22:cc:2a:77:47:53:90:4b:af:06:b3:49:
                    04:21:bf:6b:29:61:2c:a7:83:91:7d:ac:50:f3:c5:
                    7b:d0:af:a1:09:62:e2:40:e1:6b:07:18:70:71:b9:
                    b0:c5:9d:6f:05:e0:de:6e:d3:ea:c5:0f:4f:01:9a:
                    0b:68:60:d7:1f:7e:1a:25:d1:99:44:50:41:8f:4f:
                    0c:c6:db:f4:53:c4:da:a3:76:53:d8:1b:f8:60:26:
                    a5:37:7a:09:e9:3c:28:4e:34:17:bb:d7:33:f4:4b:
                    4d:c1:48:43:ba:91:99:e4:9b:64:fd:e2:1d:34:71:
                    f8:41:ec:09:f0:21:20:b4:f0:24:77:4e:76:fe:89:
                    14:6e:f7:18:0a:87:28:fa:c4:92:66:71:23:52:c0:
                    fc:b2:3a:c2:f1:72:5b:a4:ac:c7:bb:7a:fc:13:21:
                    1f:8f:6b:0e:f5:e5:54:2f:5a:f6:4c:5e:3c:55:c1:
                    25:ad:54:17:01:5c:c1:36:3f:f4:81:07:49:cc:fc:
                    c2:ea:e0:5d:d1:14:e4:af:3a:0d:e1:f5:a1:d1:4c:
                    1b:26:87:63:b8:29:7d:5e:e6:78:9f:84:16:5e:fc:
                    44:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:C5:EC:C4:1F:79:AB:92:E3:41:95:11:24:C1:20:C6:E4:5A:A5:10
            X509v3 Authority Key Identifier:
                keyid:10:6C:00:18:EA:EC:97:B2:26:03:6E:9F:42:E3:D4:79:5F:CB:C7:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HXniMnv8y9EmJCjx2uu9BWC91L6TdynFHG8UgNZow7aZ/0/106C0018EAEC97B226036E9F42E3D4795FCBC714.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/106C0018EAEC97B226036E9F42E3D4795FCBC714.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HXniMnv8y9EmJCjx2uu9BWC91L6TdynFHG8UgNZow7aZ/0/3137372e34362e36342e302f32312d3231203d3e203238313335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.46.64.0/21

    Signature Algorithm: sha256WithRSAEncryption
         9c:e4:a7:04:25:b6:59:00:76:22:af:7c:c1:78:67:ed:e5:15:
         3d:3e:56:36:d7:8b:b9:f8:e3:77:50:7a:09:ae:6f:23:3b:dc:
         ce:fa:2e:e4:f2:c9:b1:36:16:fb:94:64:44:5c:a3:ed:e3:1d:
         9c:81:59:53:26:2c:d8:95:07:26:91:05:d8:24:37:a7:f8:ec:
         36:6e:c2:bb:e8:9a:3f:06:33:8d:f1:6e:db:54:0c:51:c8:41:
         01:04:5e:d2:00:7a:2d:6d:d6:46:89:4b:ec:d6:0f:13:d8:60:
         a6:ae:80:3d:68:71:e2:76:65:5b:a0:92:2c:01:e6:b3:29:a2:
         9b:c6:91:31:58:68:8a:49:bf:f2:a3:f3:ba:14:f0:7b:ae:03:
         18:d7:35:4c:0c:46:ed:9b:35:2a:f7:dc:97:c3:34:db:e8:83:
         8c:3b:a5:86:94:50:ed:46:5a:a9:04:fa:75:02:77:a0:db:16:
         4b:02:09:9f:1f:89:d3:3b:6b:c2:9a:01:7b:cf:5e:09:15:b7:
         b9:24:a3:fa:10:c1:5f:80:28:7b:65:1b:95:2b:69:88:f9:f6:
         11:54:2d:66:d4:6b:74:d7:58:9a:0b:35:12:eb:60:19:2b:40:
         9b:b8:ed:49:57:06:bc:b2:ce:14:1b:2b:88:4d:2e:6c:9d:72:
         99:fd:90:4f
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUW9+0vjmL6JjtCjN4JSrWrJ/zlBQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTA2QzAwMThFQUVDOTdCMjI2MDM2RTlGNDJFM0Q0Nzk1
RkNCQzcxNDAeFw0yMzA1MTUyMjQ2MzNaFw0yNDA1MTMyMjUxMzNaMDMxMTAvBgNV
BAMTKDgxQzVFQ0M0MUY3OUFCOTJFMzQxOTUxMTI0QzEyMEM2RTQ1QUE1MTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcO85sFpEOO0V7lHU0+omfXcBX
FQ71uBZ0Q9PGAbKf9CLMKndHU5BLrwazSQQhv2spYSyng5F9rFDzxXvQr6EJYuJA
4WsHGHBxubDFnW8F4N5u0+rFD08BmgtoYNcffhol0ZlEUEGPTwzG2/RTxNqjdlPY
G/hgJqU3egnpPChONBe71zP0S03BSEO6kZnkm2T94h00cfhB7AnwISC08CR3Tnb+
iRRu9xgKhyj6xJJmcSNSwPyyOsLxclukrMe7evwTIR+Paw715VQvWvZMXjxVwSWt
VBcBXME2P/SBB0nM/MLq4F3RFOSvOg3h9aHRTBsmh2O4KX1e5nifhBZe/ETDAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUgcXsxB95q5LjQZURJMEgxuRapRAwHwYDVR0j
BBgwFoAUEGwAGOrsl7ImA26fQuPUeV/LxxQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSFhuaU1udjh5OUVtSkNqeDJ1dTlCV0M5MUw2VGR5bkZIRzhVZ05ab3c3
YVovMC8xMDZDMDAxOEVBRUM5N0IyMjYwMzZFOUY0MkUzRDQ3OTVGQ0JDNzE0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzEwNkMwMDE4RUFFQzk3QjIy
NjAzNkU5RjQyRTNENDc5NUZDQkM3MTQuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0hYbmlNbnY4eTlFbUpDangydXU5QldDOTFMNlRkeW5GSEc4VWdOWm93N2FaLzAv
MzEzNzM3MmUzNDM2MmUzNjM0MmUzMDJmMzIzMTJkMzIzMTIwM2QzZTIwMzIzODMx
MzMzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEA7EuQDANBgkqhkiG9w0BAQsFAAOCAQEAnOSnBCW2WQB2
Iq98wXhn7eUVPT5WNteLufjjd1B6Ca5vIzvczvou5PLJsTYW+5RkRFyj7eMdnIFZ
UyYs2JUHJpEF2CQ3p/jsNm7Cu+iaPwYzjfFu21QMUchBAQRe0gB6LW3WRolL7NYP
E9hgpq6APWhx4nZlW6CSLAHmsymim8aRMVhoikm/8qPzuhTwe64DGNc1TAxG7Zs1
Kvfcl8M02+iDjDulhpRQ7UZaqQT6dQJ3oNsWSwIJnx+J0ztrwpoBe89eCRW3uSSj
+hDBX4Aoe2UblStpiPn2EVQtZtRrdNdYmgs1EutgGStAm7jtSVcGvLLOFBsriE0u
bJ1ymf2QTw==
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:21:20 2025 by rpki-client