Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3x89Kq9jL1Wodh8sHSBGiPeYgmXTWjRXHwCMNcAGyfDg/0/3137302e38312e3130302e302f32322d3232203d3e20323636343133.roa
File:                     3137302e38312e3130302e302f32322d3232203d3e20323636343133.roa (raw, json)
Hash identifier:          72vlDeMqQv8733dtsN3N2uWVXu7zHqTZubkjxACkSTw=
Subject key identifier:   CA:CA:48:5C:13:2F:BD:5D:66:23:E9:7A:CD:43:18:AC:AE:15:C7:BA
Certificate issuer:       /CN=76BC8672B6C71CBFC423D1106E72877D60284FD6
Certificate serial:       0E36DE964402A1B693F8830553A52AE347FA38E7
Authority key identifier: 76:BC:86:72:B6:C7:1C:BF:C4:23:D1:10:6E:72:87:7D:60:28:4F:D6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/76BC8672B6C71CBFC423D1106E72877D60284FD6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3x89Kq9jL1Wodh8sHSBGiPeYgmXTWjRXHwCMNcAGyfDg/0/3137302e38312e3130302e302f32322d3232203d3e20323636343133.roa
Signing time:             Thu 04 Jul 2024 02:17:21 +0000
ROA not before:           Thu 04 Jul 2024 02:12:21 +0000
ROA not after:            Thu 03 Jul 2025 02:17:21 +0000
asID:                     266413
IP address blocks:        170.81.100.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:36:de:96:44:02:a1:b6:93:f8:83:05:53:a5:2a:e3:47:fa:38:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76BC8672B6C71CBFC423D1106E72877D60284FD6
        Validity
            Not Before: Jul  4 02:12:21 2024 GMT
            Not After : Jul  3 02:17:21 2025 GMT
        Subject: CN=CACA485C132FBD5D6623E97ACD4318ACAE15C7BA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:a0:0f:cd:92:dd:94:02:85:f7:e2:16:7e:67:
                    25:33:07:65:7d:bc:86:9b:7a:a0:38:87:0e:03:2e:
                    d7:6e:89:4d:31:9e:44:3a:6b:43:ef:7d:ca:29:9e:
                    9c:79:78:cf:f3:36:1d:1d:73:66:8c:0d:72:d5:e2:
                    78:9b:9e:97:8b:37:c4:36:24:64:75:86:4a:6f:06:
                    97:f7:9a:69:92:e9:a1:91:23:ed:db:73:f1:41:96:
                    ee:ac:f2:6f:ad:1b:6b:a8:cb:11:0a:b7:67:e5:53:
                    72:ee:bf:b1:76:90:d9:bd:b5:c8:55:2a:0f:79:ca:
                    4d:01:1b:d8:bc:9b:92:8f:ed:be:ff:cf:3e:a2:ab:
                    d1:59:c7:45:41:3b:34:89:65:04:d3:d8:41:ee:59:
                    e2:78:fa:21:13:fb:34:85:ed:ad:53:9a:b8:4b:e9:
                    9d:82:1c:98:1f:a6:63:34:a8:d0:07:b7:d0:ac:38:
                    57:6d:37:88:9f:54:8e:c7:aa:f5:50:08:75:cb:df:
                    95:cb:a9:49:ff:c9:e4:40:6d:cc:e3:0e:d8:c8:d3:
                    35:65:34:2d:b2:b2:5b:a0:b1:c9:e8:4e:39:ac:51:
                    79:b1:05:71:0b:53:e9:c5:7e:bc:24:e6:8c:18:29:
                    05:47:c1:85:e9:d9:b9:f2:51:7d:27:d7:9d:2f:d5:
                    86:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:CA:48:5C:13:2F:BD:5D:66:23:E9:7A:CD:43:18:AC:AE:15:C7:BA
            X509v3 Authority Key Identifier:
                keyid:76:BC:86:72:B6:C7:1C:BF:C4:23:D1:10:6E:72:87:7D:60:28:4F:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3x89Kq9jL1Wodh8sHSBGiPeYgmXTWjRXHwCMNcAGyfDg/0/76BC8672B6C71CBFC423D1106E72877D60284FD6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/76BC8672B6C71CBFC423D1106E72877D60284FD6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3x89Kq9jL1Wodh8sHSBGiPeYgmXTWjRXHwCMNcAGyfDg/0/3137302e38312e3130302e302f32322d3232203d3e20323636343133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.81.100.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7b:ff:0f:35:e7:d7:a5:2c:12:1b:e7:28:37:1b:e8:8c:b0:87:
         d9:30:e0:34:35:6b:d8:14:4b:38:88:77:dc:58:7d:53:09:6d:
         f9:20:fc:88:ed:1f:6e:02:aa:8e:5b:45:97:01:ab:90:be:76:
         7f:dd:74:4d:95:9e:06:71:0d:68:98:5d:68:74:23:21:f6:e1:
         7a:b8:9c:dc:05:c0:63:7d:99:30:4f:e4:4b:d0:7d:c3:3e:d2:
         38:45:e1:e1:e0:3d:76:c3:30:09:ed:40:63:37:a8:4a:09:e0:
         4f:43:c0:11:02:20:e0:6b:2c:57:68:76:df:cb:53:b5:2a:39:
         bc:28:5f:cc:5d:cf:42:f6:78:e6:2a:b6:0f:b2:26:18:b0:d4:
         0b:d2:0d:09:2f:d4:fd:4a:c4:8c:6f:42:88:64:6c:ca:88:81:
         87:4a:96:f7:4a:69:18:b8:66:2f:8a:d5:36:3f:ea:60:dc:54:
         13:d3:aa:a7:46:44:42:36:f9:1d:ed:33:de:2d:30:26:fd:24:
         23:f2:f9:51:e8:68:2a:6c:40:9e:dc:bb:d0:f1:34:0f:a6:5f:
         ab:aa:b1:d9:23:a3:7f:06:a6:78:75:f7:81:7a:69:e5:85:38:
         64:74:6f:39:c0:74:63:b9:29:42:f6:37:b9:80:41:5e:71:68:
         0f:90:23:2e
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUDjbelkQCobaT+IMFU6Uq40f6OOcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzZCQzg2NzJCNkM3MUNCRkM0MjNEMTEwNkU3Mjg3N0Q2
MDI4NEZENjAeFw0yNDA3MDQwMjEyMjFaFw0yNTA3MDMwMjE3MjFaMDMxMTAvBgNV
BAMTKENBQ0E0ODVDMTMyRkJENUQ2NjIzRTk3QUNENDMxOEFDQUUxNUM3QkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjoA/Nkt2UAoX34hZ+ZyUzB2V9
vIabeqA4hw4DLtduiU0xnkQ6a0Pvfcopnpx5eM/zNh0dc2aMDXLV4nibnpeLN8Q2
JGR1hkpvBpf3mmmS6aGRI+3bc/FBlu6s8m+tG2uoyxEKt2flU3Luv7F2kNm9tchV
Kg95yk0BG9i8m5KP7b7/zz6iq9FZx0VBOzSJZQTT2EHuWeJ4+iET+zSF7a1TmrhL
6Z2CHJgfpmM0qNAHt9CsOFdtN4ifVI7HqvVQCHXL35XLqUn/yeRAbczjDtjI0zVl
NC2yslugscnoTjmsUXmxBXELU+nFfrwk5owYKQVHwYXp2bnyUX0n150v1YbBAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUyspIXBMvvV1mI+l6zUMYrK4Vx7owHwYDVR0j
BBgwFoAUdryGcrbHHL/EI9EQbnKHfWAoT9YwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM3g4OUtxOWpMMVdvZGg4c0hTQkdpUGVZZ21YVFdqUlhId0NNTmNBR3lm
RGcvMC83NkJDODY3MkI2QzcxQ0JGQzQyM0QxMTA2RTcyODc3RDYwMjg0RkQ2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzc2QkM4NjcyQjZDNzFDQkZD
NDIzRDExMDZFNzI4NzdENjAyODRGRDYuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzN4ODlLcTlqTDFXb2RoOHNIU0JHaVBlWWdtWFRXalJYSHdDTU5jQUd5ZkRnLzAv
MzEzNzMwMmUzODMxMmUzMTMwMzAyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzMjM2
MzYzNDMxMzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAKqUWQwDQYJKoZIhvcNAQELBQADggEBAHv/DzXn
16UsEhvnKDcb6Iywh9kw4DQ1a9gUSziId9xYfVMJbfkg/IjtH24Cqo5bRZcBq5C+
dn/ddE2VngZxDWiYXWh0IyH24Xq4nNwFwGN9mTBP5EvQfcM+0jhF4eHgPXbDMAnt
QGM3qEoJ4E9DwBECIOBrLFdodt/LU7UqObwoX8xdz0L2eOYqtg+yJhiw1AvSDQkv
1P1KxIxvQohkbMqIgYdKlvdKaRi4Zi+K1TY/6mDcVBPTqqdGREI2+R3tM94tMCb9
JCPy+VHoaCpsQJ7cu9DxNA+mX6uqsdkjo38Gpnh194F6aeWFOGR0bznAdGO5KUL2
N7mAQV5xaA+QIy4=
-----END CERTIFICATE-----
Generated at Tue Jun 17 08:06:17 2025 by rpki-client