Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3Hj6k2YeCvuLHxX9YyC6Afk5dgHiwP6fyKYwjFxLAtgN/0/3139322e31322e3131322e302f32322d3234203d3e20323636313434.roa
File:                     3139322e31322e3131322e302f32322d3234203d3e20323636313434.roa (raw, json)
Hash identifier:          DNO0FMIzS9oLCLaISEF1HZHlP6Xy9hctKGiLdjPmrdA=
Subject key identifier:   DB:CC:39:5B:70:06:53:28:5E:0C:C7:00:5B:23:1D:B6:E5:BE:D7:E1
Certificate issuer:       /CN=F11C1CC2AC17600695F88B435DCA3A62798480D8
Certificate serial:       645CCE1D08BCE5A2105BC3E01B10652BB5D35D52
Authority key identifier: F1:1C:1C:C2:AC:17:60:06:95:F8:8B:43:5D:CA:3A:62:79:84:80:D8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F11C1CC2AC17600695F88B435DCA3A62798480D8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3Hj6k2YeCvuLHxX9YyC6Afk5dgHiwP6fyKYwjFxLAtgN/0/3139322e31322e3131322e302f32322d3234203d3e20323636313434.roa
Signing time:             Thu 20 Apr 2023 14:01:43 +0000
ROA not before:           Thu 20 Apr 2023 13:56:43 +0000
ROA not after:            Thu 18 Apr 2024 14:01:43 +0000
asID:                     266144
IP address blocks:        192.12.112.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:5c:ce:1d:08:bc:e5:a2:10:5b:c3:e0:1b:10:65:2b:b5:d3:5d:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F11C1CC2AC17600695F88B435DCA3A62798480D8
        Validity
            Not Before: Apr 20 13:56:43 2023 GMT
            Not After : Apr 18 14:01:43 2024 GMT
        Subject: CN=DBCC395B700653285E0CC7005B231DB6E5BED7E1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:0b:ea:c4:bb:a1:5f:5f:af:88:45:4f:bb:69:
                    4c:cd:35:9d:c4:e7:84:b2:c6:6e:3f:9d:34:a2:f2:
                    88:4f:90:89:1a:87:72:41:0b:76:f3:b2:29:71:09:
                    04:a5:12:e7:d4:03:74:d5:0b:ea:82:1f:05:03:8a:
                    76:99:8d:bf:10:3a:cf:03:8f:5c:84:b1:8e:e1:74:
                    46:60:dd:78:e1:64:87:8b:3a:be:68:d7:71:c7:a6:
                    b9:a7:c6:aa:fe:26:f0:08:e3:0b:8e:4a:a9:4d:bf:
                    dd:17:ae:bd:4d:ac:78:14:62:e5:29:8d:53:53:0f:
                    04:b8:77:eb:89:e3:15:d7:de:82:d4:9d:76:05:af:
                    7e:75:5c:eb:03:be:7e:ef:e4:ae:43:4c:f3:18:aa:
                    ad:d5:a3:a6:60:2b:de:95:aa:7c:af:54:0b:29:81:
                    47:44:44:c8:5f:b8:18:2d:f5:65:ac:ed:d5:4f:60:
                    c7:4e:2c:fc:5f:d8:c6:d6:96:22:38:e5:28:cd:ce:
                    02:0a:d3:55:9d:93:5a:65:be:c2:e7:8a:99:f1:3a:
                    3a:5c:f9:9f:f0:43:0a:8b:da:82:9e:7d:7a:05:71:
                    7a:65:6d:15:27:ca:9d:08:6f:3b:95:4b:d9:c2:b7:
                    75:69:04:bd:2f:86:e7:1b:55:f5:76:9a:ce:fa:ce:
                    f1:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:CC:39:5B:70:06:53:28:5E:0C:C7:00:5B:23:1D:B6:E5:BE:D7:E1
            X509v3 Authority Key Identifier:
                keyid:F1:1C:1C:C2:AC:17:60:06:95:F8:8B:43:5D:CA:3A:62:79:84:80:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3Hj6k2YeCvuLHxX9YyC6Afk5dgHiwP6fyKYwjFxLAtgN/0/F11C1CC2AC17600695F88B435DCA3A62798480D8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F11C1CC2AC17600695F88B435DCA3A62798480D8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Hj6k2YeCvuLHxX9YyC6Afk5dgHiwP6fyKYwjFxLAtgN/0/3139322e31322e3131322e302f32322d3234203d3e20323636313434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.12.112.0/22

    Signature Algorithm: sha256WithRSAEncryption
         bb:f8:4f:b7:cf:28:5e:06:18:bc:31:96:c3:06:57:9b:c6:a2:
         1f:6c:ce:b2:de:55:f7:86:4d:1f:53:1c:82:e9:8f:e3:c0:3f:
         35:ae:d5:64:45:27:c2:0f:70:c1:81:c1:8a:d6:62:bb:3e:3b:
         8d:96:78:17:47:2f:86:80:2d:aa:ee:c9:cb:1d:22:ca:af:24:
         59:ec:dd:8e:23:2a:27:23:3d:f9:e0:e0:7b:07:3e:fb:de:95:
         bd:ef:5d:54:45:8a:b8:2d:7f:9a:19:72:b1:6b:53:8c:0e:d3:
         9c:d6:be:d2:4f:ec:b6:7b:b2:65:b0:ce:45:28:55:57:5f:2a:
         fa:97:50:da:20:65:18:bc:48:d5:19:07:43:59:a1:5f:19:04:
         3b:ba:df:83:53:a2:c6:78:b4:65:a4:c6:37:55:21:6e:89:70:
         c3:3b:f6:45:0a:c2:9c:08:df:3a:e6:42:89:6e:10:17:32:82:
         f8:3f:1b:c5:17:e2:4b:ab:2d:09:10:fa:a9:62:0d:8e:49:17:
         0f:d0:10:40:9c:94:e8:c5:c1:a5:37:49:96:ca:b7:a4:5f:51:
         42:c3:63:f0:68:ce:a0:4f:ec:48:28:3e:0e:dd:42:13:6a:b8:
         42:94:34:b0:76:d3:6f:e7:c6:77:f4:06:75:be:ef:35:ef:4c:
         e6:a5:0e:bb
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUZFzOHQi85aIQW8PgGxBlK7XTXVIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjExQzFDQzJBQzE3NjAwNjk1Rjg4QjQzNURDQTNBNjI3
OTg0ODBEODAeFw0yMzA0MjAxMzU2NDNaFw0yNDA0MTgxNDAxNDNaMDMxMTAvBgNV
BAMTKERCQ0MzOTVCNzAwNjUzMjg1RTBDQzcwMDVCMjMxREI2RTVCRUQ3RTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUC+rEu6FfX6+IRU+7aUzNNZ3E
54Syxm4/nTSi8ohPkIkah3JBC3bzsilxCQSlEufUA3TVC+qCHwUDinaZjb8QOs8D
j1yEsY7hdEZg3XjhZIeLOr5o13HHprmnxqr+JvAI4wuOSqlNv90Xrr1NrHgUYuUp
jVNTDwS4d+uJ4xXX3oLUnXYFr351XOsDvn7v5K5DTPMYqq3Vo6ZgK96VqnyvVAsp
gUdERMhfuBgt9WWs7dVPYMdOLPxf2MbWliI45SjNzgIK01Wdk1plvsLnipnxOjpc
+Z/wQwqL2oKefXoFcXplbRUnyp0IbzuVS9nCt3VpBL0vhucbVfV2ms76zvHHAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU28w5W3AGUyheDMcAWyMdtuW+1+EwHwYDVR0j
BBgwFoAU8RwcwqwXYAaV+ItDXco6YnmEgNgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM0hqNmsyWWVDdnVMSHhYOVl5QzZBZms1ZGdIaXdQNmZ5S1l3akZ4TEF0
Z04vMC9GMTFDMUNDMkFDMTc2MDA2OTVGODhCNDM1RENBM0E2Mjc5ODQ4MEQ4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0YxMUMxQ0MyQUMxNzYwMDY5
NUY4OEI0MzVEQ0EzQTYyNzk4NDgwRDguY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNIajZrMlllQ3Z1TEh4WDlZeUM2QWZrNWRnSGl3UDZmeUtZd2pGeExBdGdOLzAv
MzEzOTMyMmUzMTMyMmUzMTMxMzIyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM2
MzYzMTM0MzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBALADHAwDQYJKoZIhvcNAQELBQADggEBALv4T7fP
KF4GGLwxlsMGV5vGoh9szrLeVfeGTR9THILpj+PAPzWu1WRFJ8IPcMGBwYrWYrs+
O42WeBdHL4aALaruycsdIsqvJFns3Y4jKicjPfng4HsHPvvelb3vXVRFirgtf5oZ
crFrU4wO05zWvtJP7LZ7smWwzkUoVVdfKvqXUNogZRi8SNUZB0NZoV8ZBDu634NT
osZ4tGWkxjdVIW6JcMM79kUKwpwI3zrmQoluEBcygvg/G8UX4kurLQkQ+qliDY5J
Fw/QEECclOjFwaU3SZbKt6RfUULDY/BozqBP7EgoPg7dQhNquEKUNLB202/nxnf0
BnW+7zXvTOalDrs=
-----END CERTIFICATE-----
Generated at Fri Apr 18 13:20:05 2025 by rpki-client