Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2NsC1oQWTv29eS8bGpZqEAjQB7yevpd1ocRuhqaeSPJm/0/3136382e302e342e302f32322d3232203d3e20323635323431.roa
File:                     3136382e302e342e302f32322d3232203d3e20323635323431.roa (raw, json)
Hash identifier:          LeRmX49e8AXIpbuEOa+no3hTxAR8xesDYvgIOF4W/GY=
Subject key identifier:   19:62:FA:BC:DA:C4:5D:DE:0B:3B:19:9D:57:44:D7:40:9A:FB:BD:F4
Certificate issuer:       /CN=59B08A61D0AC559F86B98780FBFB3EEB7699B2EB
Certificate serial:       655DA2763E0CAD2F8A27F849F97B2ACBDE6E979C
Authority key identifier: 59:B0:8A:61:D0:AC:55:9F:86:B9:87:80:FB:FB:3E:EB:76:99:B2:EB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/59B08A61D0AC559F86B98780FBFB3EEB7699B2EB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2NsC1oQWTv29eS8bGpZqEAjQB7yevpd1ocRuhqaeSPJm/0/3136382e302e342e302f32322d3232203d3e20323635323431.roa
Signing time:             Tue 17 May 2022 23:48:07 +0000
ROA not before:           Tue 17 May 2022 23:43:07 +0000
ROA not after:            Tue 16 May 2023 23:48:07 +0000
asID:                     265241
IP address blocks:        168.0.4.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:5d:a2:76:3e:0c:ad:2f:8a:27:f8:49:f9:7b:2a:cb:de:6e:97:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59B08A61D0AC559F86B98780FBFB3EEB7699B2EB
        Validity
            Not Before: May 17 23:43:07 2022 GMT
            Not After : May 16 23:48:07 2023 GMT
        Subject: CN=1962FABCDAC45DDE0B3B199D5744D7409AFBBDF4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:a6:fe:55:4b:99:30:97:d0:5b:a7:90:96:b0:
                    48:97:24:a5:82:67:1b:0e:03:ff:e5:c7:62:f4:01:
                    34:48:fd:96:4f:cd:bd:55:b7:8d:39:bb:a6:66:9b:
                    91:2e:5b:ae:7e:d7:c2:9f:3d:86:67:c2:54:c1:7a:
                    93:4e:77:4c:20:40:5a:32:9d:2f:45:28:a5:8b:b4:
                    61:e3:a6:a8:b7:38:32:1d:12:b5:84:d3:e1:07:d2:
                    3f:8d:e8:d0:d5:26:45:27:ea:bc:08:82:3d:15:24:
                    45:3a:c5:cb:01:15:fa:5d:bf:e1:5a:bd:a7:0e:07:
                    d8:b4:37:1b:1f:89:5d:74:e1:87:25:ca:51:75:7a:
                    ca:7e:54:8b:fd:82:df:e7:26:63:c8:2a:9f:f2:7f:
                    95:ba:51:4c:6c:c6:c3:9e:19:92:9e:b1:03:2f:c1:
                    0a:a9:73:c3:37:4e:e6:6d:d6:7a:f8:51:b9:ed:4e:
                    29:8b:83:db:43:89:65:da:53:cb:a7:b6:bc:ea:68:
                    24:90:35:a4:9a:41:73:7b:c9:08:06:78:12:d4:82:
                    6d:bb:c3:a5:c9:b8:58:d1:6b:8a:4e:0b:15:53:31:
                    12:2d:ca:ac:fc:ad:06:93:c3:41:94:57:f0:80:db:
                    8a:93:8c:de:d4:ac:80:66:bb:22:ae:bc:85:a3:3b:
                    fa:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:62:FA:BC:DA:C4:5D:DE:0B:3B:19:9D:57:44:D7:40:9A:FB:BD:F4
            X509v3 Authority Key Identifier:
                keyid:59:B0:8A:61:D0:AC:55:9F:86:B9:87:80:FB:FB:3E:EB:76:99:B2:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2NsC1oQWTv29eS8bGpZqEAjQB7yevpd1ocRuhqaeSPJm/0/59B08A61D0AC559F86B98780FBFB3EEB7699B2EB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/59B08A61D0AC559F86B98780FBFB3EEB7699B2EB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2NsC1oQWTv29eS8bGpZqEAjQB7yevpd1ocRuhqaeSPJm/0/3136382e302e342e302f32322d3232203d3e20323635323431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.0.4.0/22

    Signature Algorithm: sha256WithRSAEncryption
         41:1a:79:57:1e:9a:f1:0e:76:a2:03:c6:41:64:34:f7:d5:58:
         11:b4:21:c6:f5:19:ca:70:cc:b5:90:9d:e9:6d:9e:99:dd:ec:
         c4:5f:16:3b:9e:d8:f6:16:87:67:58:e6:52:5b:29:73:de:00:
         ee:7d:ff:0f:0f:5b:c7:97:e1:d6:7a:87:c2:1d:da:76:46:38:
         ed:2f:1b:16:a3:43:4a:65:51:ca:8d:71:ad:29:67:10:17:b8:
         68:c9:a0:98:27:ab:0c:78:db:4a:9a:23:71:9c:47:69:e1:40:
         0d:cd:ed:9d:9d:9a:02:ae:c4:d2:b7:86:02:1e:c6:22:e6:31:
         69:3b:97:21:2b:e3:f5:84:ab:86:34:28:72:8d:6c:fe:6d:10:
         d0:e9:96:07:1d:7c:f4:e4:04:6c:27:d1:ee:88:ff:b5:e0:19:
         d3:af:7e:7e:d0:2a:5f:3e:7a:a0:a8:69:94:8b:3f:9d:76:21:
         7b:41:2c:e4:25:11:5c:c7:63:22:91:57:77:aa:7e:e4:71:ff:
         73:43:f5:3b:e2:25:54:07:eb:09:7f:a5:97:aa:55:0c:d7:68:
         8d:4d:e4:8b:ee:d1:04:31:90:b1:a6:c3:03:41:ab:3e:8a:ad:
         62:18:35:01:a1:55:cc:8b:a5:ac:29:ff:f8:c3:21:e0:ad:1a:
         ac:1f:34:0f
-----BEGIN CERTIFICATE-----
MIIFQTCCBCmgAwIBAgIUZV2idj4MrS+KJ/hJ+Xsqy95ul5wwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTlCMDhBNjFEMEFDNTU5Rjg2Qjk4NzgwRkJGQjNFRUI3
Njk5QjJFQjAeFw0yMjA1MTcyMzQzMDdaFw0yMzA1MTYyMzQ4MDdaMDMxMTAvBgNV
BAMTKDE5NjJGQUJDREFDNDVEREUwQjNCMTk5RDU3NDRENzQwOUFGQkJERjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJpv5VS5kwl9Bbp5CWsEiXJKWC
ZxsOA//lx2L0ATRI/ZZPzb1Vt405u6Zmm5EuW65+18KfPYZnwlTBepNOd0wgQFoy
nS9FKKWLtGHjpqi3ODIdErWE0+EH0j+N6NDVJkUn6rwIgj0VJEU6xcsBFfpdv+Fa
vacOB9i0NxsfiV104YclylF1esp+VIv9gt/nJmPIKp/yf5W6UUxsxsOeGZKesQMv
wQqpc8M3TuZt1nr4UbntTimLg9tDiWXaU8untrzqaCSQNaSaQXN7yQgGeBLUgm27
w6XJuFjRa4pOCxVTMRItyqz8rQaTw0GUV/CA24qTjN7UrIBmuyKuvIWjO/r1AgMB
AAGjggJLMIICRzAdBgNVHQ4EFgQUGWL6vNrEXd4LOxmdV0TXQJr7vfQwHwYDVR0j
BBgwFoAUWbCKYdCsVZ+GuYeA+/s+63aZsuswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMk5zQzFvUVdUdjI5ZVM4YkdwWnFFQWpRQjd5ZXZwZDFvY1J1aHFhZVNQ
Sm0vMC81OUIwOEE2MUQwQUM1NTlGODZCOTg3ODBGQkZCM0VFQjc2OTlCMkVCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzU5QjA4QTYxRDBBQzU1OUY4
NkI5ODc4MEZCRkIzRUVCNzY5OUIyRUIuY2VyMIGoBggrBgEFBQcBCwSBmzCBmDCB
lQYIKwYBBQUHMAuGgYhyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJOc0Mxb1FXVHYyOWVTOGJHcFpxRUFqUUI3eWV2cGQxb2NSdWhxYWVTUEptLzAv
MzEzNjM4MmUzMDJlMzQyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzMjM2MzUzMjM0
MzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAKoAAQwDQYJKoZIhvcNAQELBQADggEBAEEaeVcemvEOdqID
xkFkNPfVWBG0Icb1GcpwzLWQneltnpnd7MRfFjue2PYWh2dY5lJbKXPeAO59/w8P
W8eX4dZ6h8Id2nZGOO0vGxajQ0plUcqNca0pZxAXuGjJoJgnqwx420qaI3GcR2nh
QA3N7Z2dmgKuxNK3hgIexiLmMWk7lyEr4/WEq4Y0KHKNbP5tENDplgcdfPTkBGwn
0e6I/7XgGdOvfn7QKl8+eqCoaZSLP512IXtBLOQlEVzHYyKRV3eqfuRx/3ND9Tvi
JVQH6wl/pZeqVQzXaI1N5Ivu0QQxkLGmwwNBqz6KrWIYNQGhVcyLpawp//jDIeCt
GqwfNA8=
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:17:23 2025 by rpki-client