Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3tiTeGW5HGXv8EvyLZd1UN9ytCb5AC5uHfLecuoKCSKN/0/3139322e3134312e3137322e302f32342d3234203d3e20323637343930.roa
File:                     3139322e3134312e3137322e302f32342d3234203d3e20323637343930.roa (raw, json)
Hash identifier:          wZtCyNhsPYyyuzVXr+kf8pjNhE0p8U/pG2CYwUOGOms=
Subject key identifier:   1F:DB:FF:3A:B7:A1:FB:E1:DB:70:33:02:82:A2:0E:8D:FE:F3:E2:28
Certificate issuer:       /CN=43BEC321D6E1EF3DFD15CA67C170ECF9A94425B6
Certificate serial:       188D98BCCC94476EF1972738D45169604B8D1E50
Authority key identifier: 43:BE:C3:21:D6:E1:EF:3D:FD:15:CA:67:C1:70:EC:F9:A9:44:25:B6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/43BEC321D6E1EF3DFD15CA67C170ECF9A94425B6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3tiTeGW5HGXv8EvyLZd1UN9ytCb5AC5uHfLecuoKCSKN/0/3139322e3134312e3137322e302f32342d3234203d3e20323637343930.roa
Signing time:             Sat 04 May 2024 04:52:30 +0000
ROA not before:           Sat 04 May 2024 04:47:30 +0000
ROA not after:            Sat 03 May 2025 04:52:30 +0000
asID:                     267490
IP address blocks:        192.141.172.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:8d:98:bc:cc:94:47:6e:f1:97:27:38:d4:51:69:60:4b:8d:1e:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43BEC321D6E1EF3DFD15CA67C170ECF9A94425B6
        Validity
            Not Before: May  4 04:47:30 2024 GMT
            Not After : May  3 04:52:30 2025 GMT
        Subject: CN=1FDBFF3AB7A1FBE1DB70330282A20E8DFEF3E228
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:78:cf:97:fb:3b:42:67:5b:5f:0b:08:44:1f:
                    2b:01:97:98:5c:28:5a:3b:7e:27:33:6d:52:a1:8a:
                    76:cd:c2:58:06:04:df:6b:85:e0:2d:ba:7d:33:ff:
                    08:af:d9:e7:0d:ea:44:94:63:45:66:e6:04:6b:e9:
                    78:1e:9d:ff:b5:61:7f:66:83:5d:eb:8b:9e:0e:87:
                    0f:f2:06:3d:ab:3c:1f:40:14:27:e3:3f:55:13:2e:
                    ee:fd:fe:81:fd:81:26:c3:6b:1c:6e:fd:8e:54:6d:
                    33:4a:c4:3d:ce:c9:c0:e4:8e:69:c3:15:e1:2e:23:
                    7d:64:5b:81:d6:76:66:fa:e7:a3:32:75:dd:c5:4d:
                    b1:58:3f:6b:ac:f0:a7:66:2b:c8:3d:9b:dd:42:bd:
                    3d:8a:39:0f:72:0a:1b:a1:03:63:aa:5c:16:32:f0:
                    b6:f3:ae:61:72:e3:70:cd:8d:3a:f3:d8:d3:4a:84:
                    c0:1c:87:aa:f0:10:3f:ff:31:6e:94:28:6e:cd:f1:
                    ea:e3:02:d2:2e:a8:81:b3:4d:4d:c4:fb:bd:23:4d:
                    5c:d6:7b:50:b2:38:51:1e:d1:01:e5:e7:4f:4e:95:
                    d9:1b:33:41:40:06:73:81:9c:b2:51:e4:fa:d6:50:
                    31:5e:c9:dc:4e:f0:aa:ff:20:d7:cf:6e:1c:ac:36:
                    27:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:DB:FF:3A:B7:A1:FB:E1:DB:70:33:02:82:A2:0E:8D:FE:F3:E2:28
            X509v3 Authority Key Identifier:
                keyid:43:BE:C3:21:D6:E1:EF:3D:FD:15:CA:67:C1:70:EC:F9:A9:44:25:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3tiTeGW5HGXv8EvyLZd1UN9ytCb5AC5uHfLecuoKCSKN/0/43BEC321D6E1EF3DFD15CA67C170ECF9A94425B6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/43BEC321D6E1EF3DFD15CA67C170ECF9A94425B6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3tiTeGW5HGXv8EvyLZd1UN9ytCb5AC5uHfLecuoKCSKN/0/3139322e3134312e3137322e302f32342d3234203d3e20323637343930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.141.172.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1a:61:b5:97:38:b8:80:38:d0:20:8d:86:34:1c:df:8b:64:de:
         75:e5:0d:84:da:af:29:84:c9:c6:fa:31:74:ce:ce:06:f6:8e:
         05:ff:3b:ad:7f:be:36:98:c0:0a:b7:76:3d:a1:1a:9f:f7:4f:
         d5:f3:45:f5:fe:c2:e3:96:6b:d9:40:5c:36:e2:c0:4d:c0:36:
         06:c2:f2:9e:1b:47:f9:84:e4:68:55:f3:5f:11:08:86:f8:22:
         05:16:b7:9b:ee:b6:30:91:4b:c9:55:d5:b4:09:43:c2:e0:70:
         cb:9e:7c:7a:58:37:14:01:48:a4:48:76:4d:3f:d4:de:c9:13:
         29:52:c1:88:c2:06:62:0c:45:cd:e4:26:26:ec:3d:9e:63:7d:
         a2:0f:7d:dd:64:ba:2a:6a:34:d2:70:b3:80:40:c2:07:a8:44:
         f6:dc:d7:bd:3f:46:1d:0e:27:6f:71:c8:66:c4:d2:34:66:cc:
         0c:62:9d:be:30:1f:1d:0e:10:a2:19:1a:ac:43:a7:ec:fb:a6:
         70:df:c7:9c:b3:bc:68:c3:4c:bb:9a:48:a5:fb:9f:0d:39:09:
         17:d4:5f:b9:49:70:30:2f:d3:db:04:86:9a:32:6a:3b:af:09:
         82:90:37:dd:8e:97:20:01:79:2c:88:af:61:af:d8:5d:ef:d3:
         f9:34:df:5c
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUGI2YvMyUR27xlyc41FFpYEuNHlAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDNCRUMzMjFENkUxRUYzREZEMTVDQTY3QzE3MEVDRjlB
OTQ0MjVCNjAeFw0yNDA1MDQwNDQ3MzBaFw0yNTA1MDMwNDUyMzBaMDMxMTAvBgNV
BAMTKDFGREJGRjNBQjdBMUZCRTFEQjcwMzMwMjgyQTIwRThERkVGM0UyMjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJeM+X+ztCZ1tfCwhEHysBl5hc
KFo7ficzbVKhinbNwlgGBN9rheAtun0z/wiv2ecN6kSUY0Vm5gRr6Xgenf+1YX9m
g13ri54Ohw/yBj2rPB9AFCfjP1UTLu79/oH9gSbDaxxu/Y5UbTNKxD3OycDkjmnD
FeEuI31kW4HWdmb656Mydd3FTbFYP2us8KdmK8g9m91CvT2KOQ9yChuhA2OqXBYy
8LbzrmFy43DNjTrz2NNKhMAch6rwED//MW6UKG7N8erjAtIuqIGzTU3E+70jTVzW
e1CyOFEe0QHl509OldkbM0FABnOBnLJR5PrWUDFeydxO8Kr/INfPbhysNiefAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUH9v/Oreh++HbcDMCgqIOjf7z4igwHwYDVR0j
BBgwFoAUQ77DIdbh7z39FcpnwXDs+alEJbYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM3RpVGVHVzVIR1h2OEV2eUxaZDFVTjl5dENiNUFDNXVIZkxlY3VvS0NT
S04vMC80M0JFQzMyMUQ2RTFFRjNERkQxNUNBNjdDMTcwRUNGOUE5NDQyNUI2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQzQkVDMzIxRDZFMUVGM0RG
RDE1Q0E2N0MxNzBFQ0Y5QTk0NDI1QjYuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzN0aVRlR1c1SEdYdjhFdnlMWmQxVU45eXRDYjVBQzV1SGZMZWN1b0tDU0tOLzAv
MzEzOTMyMmUzMTM0MzEyZTMxMzczMjJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzYzNzM0MzkzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAMCNrDANBgkqhkiG9w0BAQsFAAOCAQEAGmG1
lzi4gDjQII2GNBzfi2TedeUNhNqvKYTJxvoxdM7OBvaOBf87rX++NpjACrd2PaEa
n/dP1fNF9f7C45Zr2UBcNuLATcA2BsLynhtH+YTkaFXzXxEIhvgiBRa3m+62MJFL
yVXVtAlDwuBwy558elg3FAFIpEh2TT/U3skTKVLBiMIGYgxFzeQmJuw9nmN9og99
3WS6Kmo00nCzgEDCB6hE9tzXvT9GHQ4nb3HIZsTSNGbMDGKdvjAfHQ4QohkarEOn
7PumcN/HnLO8aMNMu5pIpfufDTkJF9RfuUlwMC/T2wSGmjJqO68JgpA33Y6XIAF5
LIivYa/YXe/T+TTfXA==
-----END CERTIFICATE-----
Generated at Fri Mar 14 04:14:21 2025 by rpki-client