Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HwRtKBKxSP5bQFmnC58yZRBNt6G5XLMy1Awm2NQ6dnvN/0/3137302e38312e37322e302f32332d3233203d3e20323632343931.roa
File:                     3137302e38312e37322e302f32332d3233203d3e20323632343931.roa (raw, json)
Hash identifier:          yURYT9Ad1dAG7f+4oTqWRIt4fUx00lhjQcCWc8DS7cw=
Subject key identifier:   F2:CB:56:1D:3E:A2:8C:02:AA:BA:61:A7:96:87:62:D8:F4:7A:49:59
Certificate issuer:       /CN=FE2A6E1AF0847EA1A7D677E2DA0912A1ABF4B9AC
Certificate serial:       7FB41658F7A8398A9B1D68EB99E5F8E6CC832C7A
Authority key identifier: FE:2A:6E:1A:F0:84:7E:A1:A7:D6:77:E2:DA:09:12:A1:AB:F4:B9:AC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FE2A6E1AF0847EA1A7D677E2DA0912A1ABF4B9AC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HwRtKBKxSP5bQFmnC58yZRBNt6G5XLMy1Awm2NQ6dnvN/0/3137302e38312e37322e302f32332d3233203d3e20323632343931.roa
Signing time:             Sat 26 Nov 2022 02:46:03 +0000
ROA not before:           Sat 26 Nov 2022 02:41:03 +0000
ROA not after:            Sat 25 Nov 2023 02:46:03 +0000
asID:                     262491
IP address blocks:        170.81.72.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:b4:16:58:f7:a8:39:8a:9b:1d:68:eb:99:e5:f8:e6:cc:83:2c:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FE2A6E1AF0847EA1A7D677E2DA0912A1ABF4B9AC
        Validity
            Not Before: Nov 26 02:41:03 2022 GMT
            Not After : Nov 25 02:46:03 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:3c:87:d8:93:a5:60:7a:c1:f5:f4:72:9b:d4:
                    85:3e:aa:24:38:80:ae:d8:bb:0f:49:e0:90:2e:74:
                    34:3b:b8:37:20:70:f0:fc:08:5d:52:20:f3:01:01:
                    48:da:64:2e:fd:6d:71:03:fd:29:1c:7e:72:20:df:
                    c0:ee:ee:c6:da:13:98:8d:d0:6f:3b:bc:7f:a1:24:
                    55:25:e2:2f:11:ba:68:4b:69:ab:7d:17:40:28:1c:
                    49:b7:31:fe:f3:e5:21:ee:6c:60:ea:f7:df:74:b0:
                    b4:63:a8:70:04:9c:e1:bd:5e:86:65:bc:4b:41:57:
                    96:1e:6c:6f:f5:17:10:b8:67:ce:85:d4:b8:55:ab:
                    98:ba:27:68:66:86:2a:f9:24:e1:f2:1f:58:25:9e:
                    25:a1:e9:36:44:fb:74:84:7d:ad:f2:9b:93:6f:74:
                    97:a7:91:dd:3d:a4:d3:49:59:5b:7e:b2:fc:97:a8:
                    a1:ae:b1:8c:44:a8:e0:54:b7:7c:6a:c5:ea:9d:cf:
                    9f:f4:62:0b:cf:ce:f2:c6:ca:96:a6:93:e9:7f:fb:
                    23:64:97:27:cd:38:cf:8f:9a:ed:25:29:62:45:f8:
                    92:6d:ea:e5:f3:6f:dc:82:91:f4:3c:ec:ec:87:9a:
                    5b:c2:7c:66:a2:9b:34:1b:fe:37:a4:1d:b7:35:7a:
                    29:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:CB:56:1D:3E:A2:8C:02:AA:BA:61:A7:96:87:62:D8:F4:7A:49:59
            X509v3 Authority Key Identifier:
                keyid:FE:2A:6E:1A:F0:84:7E:A1:A7:D6:77:E2:DA:09:12:A1:AB:F4:B9:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HwRtKBKxSP5bQFmnC58yZRBNt6G5XLMy1Awm2NQ6dnvN/0/FE2A6E1AF0847EA1A7D677E2DA0912A1ABF4B9AC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FE2A6E1AF0847EA1A7D677E2DA0912A1ABF4B9AC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HwRtKBKxSP5bQFmnC58yZRBNt6G5XLMy1Awm2NQ6dnvN/0/3137302e38312e37322e302f32332d3233203d3e20323632343931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.81.72.0/23

    Signature Algorithm: sha256WithRSAEncryption
         12:75:ec:f4:28:85:f4:8d:4c:0c:2c:4c:d2:17:4f:70:c3:13:
         16:49:e5:71:d0:84:63:eb:11:92:8c:94:5f:e8:b7:19:48:cd:
         d1:c1:f8:8a:0e:5e:e2:41:37:a0:ff:e2:26:aa:c2:4c:ea:f4:
         dd:e1:51:89:0e:68:48:f6:0e:6f:1a:f2:2c:01:4e:15:0e:99:
         aa:8d:92:ed:ff:d2:49:a5:8f:32:9f:41:d3:97:2e:dc:89:20:
         53:ea:18:53:9e:04:52:72:92:1e:bf:5c:90:25:0f:92:38:cb:
         68:e3:a8:c9:39:cd:d3:de:24:5d:24:60:a6:7a:00:95:70:03:
         16:37:c5:2b:e7:75:61:fe:a4:79:5d:a0:d8:56:29:47:b9:09:
         11:84:69:1a:0d:ac:34:65:e8:f9:4f:e4:07:2a:4c:06:b6:91:
         ea:92:f9:01:6e:37:ed:8f:04:e8:14:48:ae:84:55:0e:4f:2e:
         1f:f6:30:9e:54:a1:98:7d:d1:20:c6:58:8f:ab:82:b1:18:fc:
         82:2e:10:c8:20:92:9d:1e:f3:52:e4:b3:44:29:4a:0a:c7:21:
         b3:bf:19:62:61:50:f5:67:90:3b:06:d3:cd:96:a3:71:ae:0b:
         76:5c:48:2e:09:16:4a:aa:28:6f:3a:a7:d1:fe:1f:3d:84:45:
         6f:87:b6:b9
-----BEGIN CERTIFICATE-----
MIIHQTCCBimgAwIBAgIUf7QWWPeoOYqbHWjrmeX45syDLHowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkUyQTZFMUFGMDg0N0VBMUE3RDY3N0UyREEwOTEyQTFB
QkY0QjlBQzAeFw0yMjExMjYwMjQxMDNaFw0yMzExMjUwMjQ2MDNaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQ0IzQzg3RDg5M0E1NjA3QUMx
RjVGNDcyOUJENDg1M0VBQTI0Mzg4MEFFRDhCQjBGNDlFMDkwMkU3NDM0M0JCODM3
MjA3MEYwRkMwODVENTIyMEYzMDEwMTQ4REE2NDJFRkQ2RDcxMDNGRDI5MUM3RTcy
MjBERkMwRUVFRUM2REExMzk4OEREMDZGM0JCQzdGQTEyNDU1MjVFMjJGMTFCQTY4
NEI2OUFCN0QxNzQwMjgxQzQ5QjczMUZFRjNFNTIxRUU2QzYwRUFGN0RGNzRCMEI0
NjNBODcwMDQ5Q0UxQkQ1RTg2NjVCQzRCNDE1Nzk2MUU2QzZGRjUxNzEwQjg2N0NF
ODVENEI4NTVBQjk4QkEyNzY4NjY4NjJBRjkyNEUxRjIxRjU4MjU5RTI1QTFFOTM2
NDRGQjc0ODQ3REFERjI5QjkzNkY3NDk3QTc5MUREM0RBNEQzNDk1OTVCN0VCMkZD
OTdBOEExQUVCMThDNDRBOEUwNTRCNzdDNkFDNUVBOURDRjlGRjQ2MjBCQ0ZDRUYy
QzZDQTk2QTY5M0U5N0ZGQjIzNjQ5NzI3Q0QzOENGOEY5QUVEMjUyOTYyNDVGODky
NkRFQUU1RjM2RkRDODI5MUY0M0NFQ0VDODc5QTVCQzI3QzY2QTI5QjM0MUJGRTM3
QTQxREI3MzU3QTI5RDMwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAyzyH2JOlYHrB9fRym9SFPqokOICu2LsPSeCQLnQ0O7g3IHDw/Ahd
UiDzAQFI2mQu/W1xA/0pHH5yIN/A7u7G2hOYjdBvO7x/oSRVJeIvEbpoS2mrfRdA
KBxJtzH+8+Uh7mxg6vffdLC0Y6hwBJzhvV6GZbxLQVeWHmxv9RcQuGfOhdS4VauY
uidoZoYq+STh8h9YJZ4loek2RPt0hH2t8puTb3SXp5HdPaTTSVlbfrL8l6ihrrGM
RKjgVLd8asXqnc+f9GILz87yxsqWppPpf/sjZJcnzTjPj5rtJSliRfiSberl82/c
gpH0POzsh5pbwnxmops0G/43pB23NXop0wIDAQABo4ICTzCCAkswHQYDVR0OBBYE
FPLLVh0+oowCqrphp5aHYtj0eklZMB8GA1UdIwQYMBaAFP4qbhrwhH6hp9Z34toJ
EqGr9LmsMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0h3UnRLQkt4U1A1YlFG
bW5DNTh5WlJCTnQ2RzVYTE15MUF3bTJOUTZkbnZOLzAvRkUyQTZFMUFGMDg0N0VB
MUE3RDY3N0UyREEwOTEyQTFBQkY0QjlBQy5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC9GRTJBNkUxQUYwODQ3RUExQTdENjc3RTJEQTA5MTJBMUFCRjRC
OUFDLmNlcjCBrAYIKwYBBQUHAQsEgZ8wgZwwgZkGCCsGAQUFBzALhoGMcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9Id1J0S0JLeFNQNWJRRm1uQzU4
eVpSQk50Nkc1WExNeTFBd20yTlE2ZG52Ti8wLzMxMzczMDJlMzgzMTJlMzczMjJl
MzAyZjMyMzMyZDMyMzMyMDNkM2UyMDMyMzYzMjM0MzkzMS5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAapR
SDANBgkqhkiG9w0BAQsFAAOCAQEAEnXs9CiF9I1MDCxM0hdPcMMTFknlcdCEY+sR
koyUX+i3GUjN0cH4ig5e4kE3oP/iJqrCTOr03eFRiQ5oSPYObxryLAFOFQ6Zqo2S
7f/SSaWPMp9B05cu3IkgU+oYU54EUnKSHr9ckCUPkjjLaOOoyTnN094kXSRgpnoA
lXADFjfFK+d1Yf6keV2g2FYpR7kJEYRpGg2sNGXo+U/kBypMBraR6pL5AW437Y8E
6BRIroRVDk8uH/YwnlShmH3RIMZYj6uCsRj8gi4QyCCSnR7zUuSzRClKCschs78Z
YmFQ9WeQOwbTzZajca4LdlxILgkWSqoobzqn0f4fPYRFb4e2uQ==
-----END CERTIFICATE-----
Generated at Fri Mar 14 03:51:40 2025 by rpki-client