Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Hyvr8kdMTNrgG9XbP7xo4k35WAdCcZP6D31eKCbPyq1c/0/3137302e3235342e38362e302f32332d3233203d3e20323635313132.roa
File:                     3137302e3235342e38362e302f32332d3233203d3e20323635313132.roa (raw, json)
Hash identifier:          oRGHecXQljCTCNJ/f+BGkVg6RpyML2VrHPbbmoEyL9U=
Subject key identifier:   0E:5C:CC:26:2D:76:FE:DA:B5:2A:0C:42:8F:DE:6A:4F:3B:CF:B6:40
Certificate issuer:       /CN=B7326415BE734D8A751207ED27CE3E324C6FA9BE
Certificate serial:       66365D8E33AC1F7EE29CCB2A427FD11BD47736BC
Authority key identifier: B7:32:64:15:BE:73:4D:8A:75:12:07:ED:27:CE:3E:32:4C:6F:A9:BE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B7326415BE734D8A751207ED27CE3E324C6FA9BE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Hyvr8kdMTNrgG9XbP7xo4k35WAdCcZP6D31eKCbPyq1c/0/3137302e3235342e38362e302f32332d3233203d3e20323635313132.roa
Signing time:             Tue 19 Dec 2023 18:49:26 +0000
ROA not before:           Tue 19 Dec 2023 18:44:26 +0000
ROA not after:            Tue 17 Dec 2024 18:49:26 +0000
asID:                     265112
IP address blocks:        170.254.86.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:36:5d:8e:33:ac:1f:7e:e2:9c:cb:2a:42:7f:d1:1b:d4:77:36:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B7326415BE734D8A751207ED27CE3E324C6FA9BE
        Validity
            Not Before: Dec 19 18:44:26 2023 GMT
            Not After : Dec 17 18:49:26 2024 GMT
        Subject: CN=0E5CCC262D76FEDAB52A0C428FDE6A4F3BCFB640
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:dc:aa:70:a4:65:df:2d:0b:1b:a6:5b:6c:f1:
                    67:f8:dc:f7:4a:93:37:74:b9:c4:93:17:db:86:18:
                    a0:8a:ff:ea:d5:c8:1c:09:ae:3a:81:2c:25:72:75:
                    2c:a2:b2:10:c8:ee:4b:31:39:4c:7b:c9:09:5d:60:
                    e1:08:72:41:18:be:e9:2d:32:32:29:ef:52:30:e3:
                    60:bb:c9:65:90:fd:a0:f9:41:dd:a3:a4:a6:59:37:
                    f8:82:42:be:93:1c:b9:91:8a:9a:64:22:4e:c5:bb:
                    79:fe:e8:5d:8a:b4:06:cd:d5:0f:83:4f:a6:3b:ab:
                    c1:b2:4b:87:12:f2:75:4d:3b:66:7d:6f:41:2d:8f:
                    3d:14:49:bc:4c:ce:df:59:09:84:c5:d4:0c:66:fa:
                    c8:20:a6:87:ef:68:38:95:12:16:a2:6f:b9:3b:56:
                    cf:1c:10:76:0f:c9:2d:40:7b:b7:92:a3:87:bd:0a:
                    8c:53:29:2d:24:c5:14:f3:d7:cf:18:aa:13:d2:c9:
                    ea:d2:b1:48:22:47:3d:52:75:57:f0:9d:f1:25:61:
                    66:cd:7e:90:1f:37:9e:2f:72:cc:00:5d:5c:b2:b9:
                    58:6e:12:1a:18:db:59:22:fc:22:4b:46:9c:51:b2:
                    67:be:c0:61:73:44:e8:f5:07:06:7e:a5:b8:1b:22:
                    b4:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:5C:CC:26:2D:76:FE:DA:B5:2A:0C:42:8F:DE:6A:4F:3B:CF:B6:40
            X509v3 Authority Key Identifier:
                keyid:B7:32:64:15:BE:73:4D:8A:75:12:07:ED:27:CE:3E:32:4C:6F:A9:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Hyvr8kdMTNrgG9XbP7xo4k35WAdCcZP6D31eKCbPyq1c/0/B7326415BE734D8A751207ED27CE3E324C6FA9BE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B7326415BE734D8A751207ED27CE3E324C6FA9BE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Hyvr8kdMTNrgG9XbP7xo4k35WAdCcZP6D31eKCbPyq1c/0/3137302e3235342e38362e302f32332d3233203d3e20323635313132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.254.86.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b6:e7:67:0f:e2:6e:58:8b:bc:23:33:7c:f0:78:17:0a:bc:37:
         19:b9:10:d1:00:e8:72:24:43:1b:ce:c6:8a:18:c3:26:b7:54:
         3a:f1:62:30:37:b1:de:55:4c:e6:8f:76:a9:fb:c6:f2:f9:24:
         ca:a4:b9:45:b4:74:a5:76:4c:25:7d:a0:70:ff:00:f6:88:d5:
         26:50:28:31:8e:6a:40:45:8d:a3:ed:ed:61:62:6d:aa:86:da:
         b9:61:52:6b:e3:db:1a:cf:19:fc:8d:3f:ae:08:e4:db:61:8b:
         67:d5:78:bc:0c:a3:23:1f:79:47:8d:d1:ad:3c:ec:33:68:bf:
         82:60:b6:c0:91:e9:2a:ab:ab:a1:0e:97:50:e5:9c:89:d4:00:
         36:d7:21:19:54:97:38:51:9a:72:13:12:66:00:2e:f1:d6:a7:
         2c:6b:d9:f2:12:c4:75:2f:cd:ef:26:11:82:e7:12:84:21:f9:
         d3:68:0f:a6:c8:15:f5:64:a7:cc:a8:90:04:e8:05:a8:51:89:
         e3:ab:b9:bb:04:6c:1b:2d:a0:55:65:2b:fb:c4:97:c1:a8:5a:
         40:7d:25:e8:cb:17:77:51:2a:7f:67:fb:a5:be:35:a1:52:ab:
         99:03:1b:d9:f3:04:d4:a8:13:81:b3:15:98:9a:7a:26:b3:3e:
         42:f5:a6:38
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUZjZdjjOsH37inMsqQn/RG9R3NrwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjczMjY0MTVCRTczNEQ4QTc1MTIwN0VEMjdDRTNFMzI0
QzZGQTlCRTAeFw0yMzEyMTkxODQ0MjZaFw0yNDEyMTcxODQ5MjZaMDMxMTAvBgNV
BAMTKDBFNUNDQzI2MkQ3NkZFREFCNTJBMEM0MjhGREU2QTRGM0JDRkI2NDAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+3KpwpGXfLQsbplts8Wf43PdK
kzd0ucSTF9uGGKCK/+rVyBwJrjqBLCVydSyishDI7ksxOUx7yQldYOEIckEYvukt
MjIp71Iw42C7yWWQ/aD5Qd2jpKZZN/iCQr6THLmRippkIk7Fu3n+6F2KtAbN1Q+D
T6Y7q8GyS4cS8nVNO2Z9b0Etjz0USbxMzt9ZCYTF1Axm+sggpofvaDiVEhaib7k7
Vs8cEHYPyS1Ae7eSo4e9CoxTKS0kxRTz188YqhPSyerSsUgiRz1SdVfwnfElYWbN
fpAfN54vcswAXVyyuVhuEhoY21ki/CJLRpxRsme+wGFzROj1BwZ+pbgbIrRpAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUDlzMJi12/tq1KgxCj95qTzvPtkAwHwYDVR0j
BBgwFoAUtzJkFb5zTYp1EgftJ84+Mkxvqb4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSHl2cjhrZE1UTnJnRzlYYlA3eG80azM1V0FkQ2NaUDZEMzFlS0NiUHlx
MWMvMC9CNzMyNjQxNUJFNzM0RDhBNzUxMjA3RUQyN0NFM0UzMjRDNkZBOUJFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0I3MzI2NDE1QkU3MzREOEE3
NTEyMDdFRDI3Q0UzRTMyNEM2RkE5QkUuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0h5dnI4a2RNVE5yZ0c5WGJQN3hvNGszNVdBZENjWlA2RDMxZUtDYlB5cTFjLzAv
MzEzNzMwMmUzMjM1MzQyZTM4MzYyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzMjM2
MzUzMTMxMzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAGq/lYwDQYJKoZIhvcNAQELBQADggEBALbnZw/i
bliLvCMzfPB4Fwq8Nxm5ENEA6HIkQxvOxooYwya3VDrxYjA3sd5VTOaPdqn7xvL5
JMqkuUW0dKV2TCV9oHD/APaI1SZQKDGOakBFjaPt7WFibaqG2rlhUmvj2xrPGfyN
P64I5Nthi2fVeLwMoyMfeUeN0a087DNov4JgtsCR6Sqrq6EOl1DlnInUADbXIRlU
lzhRmnITEmYALvHWpyxr2fISxHUvze8mEYLnEoQh+dNoD6bIFfVkp8yokAToBahR
ieOrubsEbBstoFVlK/vEl8GoWkB9JejLF3dRKn9n+6W+NaFSq5kDG9nzBNSoE4Gz
FZiaeiazPkL1pjg=
-----END CERTIFICATE-----
Generated at Mon Feb 17 02:13:34 2025 by rpki-client