Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/43f46SnqFL3KgVzUTFtPSrbcW8LPqd9UdPJQaTRR7tup/0/3136382e3139372e31322e302f32322d3232203d3e20323635343633.roa
File:                     3136382e3139372e31322e302f32322d3232203d3e20323635343633.roa (raw, json)
Hash identifier:          rhE6Jvar5mNijlQ2O5caJKd5RS4HlF5sEyErNtalVRw=
Subject key identifier:   75:D8:63:09:C8:C8:F9:8F:4D:E6:46:05:92:6D:EF:7F:26:62:57:77
Certificate issuer:       /CN=A4B23E7D1D8ABF94F67226995E004EA6114115AF
Certificate serial:       77767B5025A4BA5385DA838FA78E0F08189E67C3
Authority key identifier: A4:B2:3E:7D:1D:8A:BF:94:F6:72:26:99:5E:00:4E:A6:11:41:15:AF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A4B23E7D1D8ABF94F67226995E004EA6114115AF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/43f46SnqFL3KgVzUTFtPSrbcW8LPqd9UdPJQaTRR7tup/0/3136382e3139372e31322e302f32322d3232203d3e20323635343633.roa
Signing time:             Sun 28 Jan 2024 12:00:35 +0000
ROA not before:           Sun 28 Jan 2024 11:55:35 +0000
ROA not after:            Sun 26 Jan 2025 12:00:35 +0000
asID:                     265463
IP address blocks:        168.197.12.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:76:7b:50:25:a4:ba:53:85:da:83:8f:a7:8e:0f:08:18:9e:67:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A4B23E7D1D8ABF94F67226995E004EA6114115AF
        Validity
            Not Before: Jan 28 11:55:35 2024 GMT
            Not After : Jan 26 12:00:35 2025 GMT
        Subject: CN=75D86309C8C8F98F4DE64605926DEF7F26625777
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:88:fb:5f:55:d2:36:42:04:e7:f1:d9:04:ce:
                    66:6f:fe:ff:b5:76:20:f0:9e:20:3b:22:73:81:5f:
                    bc:1f:47:77:72:43:ce:2f:fe:6c:5f:76:c7:19:6d:
                    08:b3:18:28:a4:25:0c:86:69:45:df:e4:ca:b0:0b:
                    a1:45:18:e8:d5:fb:3d:1a:e2:7c:cc:48:cf:e6:bb:
                    53:7c:26:f4:16:20:15:25:fc:bb:30:0e:2e:7e:ae:
                    d5:f5:a8:f4:69:7d:09:7d:07:08:eb:cd:61:31:37:
                    99:78:40:94:39:d7:fd:a8:d1:7d:11:e0:d2:c1:6d:
                    31:4d:9a:19:b5:ef:38:3c:56:59:88:24:3d:41:3c:
                    3c:aa:a8:b8:bc:35:00:47:b5:70:3e:3f:53:37:3f:
                    6f:7b:2e:73:c2:6e:f7:85:5d:9d:c1:24:a4:b0:d5:
                    f7:ec:9f:a4:8c:15:40:1c:57:cd:f1:2b:b2:13:33:
                    a8:0a:51:ca:e0:73:6a:0b:81:ef:5d:97:f9:4d:c7:
                    cc:a9:db:58:bd:18:34:f5:93:11:3b:8c:07:d4:8d:
                    ad:86:fa:99:3c:f5:95:7b:f1:ee:e3:3f:37:ba:02:
                    29:0e:1d:f8:53:c5:ba:df:63:a3:39:10:69:77:f4:
                    14:17:6f:19:14:26:3c:04:ba:77:84:8f:3b:e0:a3:
                    d1:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:D8:63:09:C8:C8:F9:8F:4D:E6:46:05:92:6D:EF:7F:26:62:57:77
            X509v3 Authority Key Identifier:
                keyid:A4:B2:3E:7D:1D:8A:BF:94:F6:72:26:99:5E:00:4E:A6:11:41:15:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/43f46SnqFL3KgVzUTFtPSrbcW8LPqd9UdPJQaTRR7tup/0/A4B23E7D1D8ABF94F67226995E004EA6114115AF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A4B23E7D1D8ABF94F67226995E004EA6114115AF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/43f46SnqFL3KgVzUTFtPSrbcW8LPqd9UdPJQaTRR7tup/0/3136382e3139372e31322e302f32322d3232203d3e20323635343633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.197.12.0/22

    Signature Algorithm: sha256WithRSAEncryption
         30:8a:15:6f:4f:11:33:61:a3:8e:b7:09:8c:15:9a:a7:6a:72:
         2a:a9:ab:27:a2:e1:47:93:37:64:c6:24:a4:cb:8a:26:6d:08:
         a6:9c:04:b2:79:44:5d:90:17:35:3c:80:e3:b5:4e:5c:2a:97:
         ab:68:23:83:d8:4e:14:11:d4:6a:8d:a4:78:c7:aa:a4:ab:61:
         a7:76:a6:f5:af:6d:74:66:cb:17:0b:e1:28:21:64:62:c8:f2:
         a2:c8:f3:80:42:1f:26:61:f2:ae:14:52:4c:91:63:79:40:29:
         6c:a7:61:c4:c8:58:af:42:80:8a:90:07:da:d6:57:4e:72:72:
         da:5f:f7:45:b3:f0:47:9b:80:87:6c:e3:aa:e3:b9:89:2b:49:
         8c:58:77:6a:2e:69:43:aa:86:fb:50:d4:01:36:d8:da:e6:33:
         35:ea:83:ba:e5:99:e4:44:2c:46:41:e1:b2:a3:70:0f:e6:13:
         5e:9f:b5:68:1d:ec:15:a2:d8:97:7b:38:72:5e:a3:3f:b8:11:
         90:41:df:43:da:b4:10:5a:8b:ff:eb:c5:16:71:28:af:e4:0c:
         55:1a:98:25:ab:bd:ca:8f:4e:8d:ef:ff:29:d3:cf:aa:61:19:
         98:91:86:34:78:12:73:74:9d:8b:19:e5:a0:bc:ec:a4:6d:1b:
         e0:b5:f4:c2
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUd3Z7UCWkulOF2oOPp44PCBieZ8MwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTRCMjNFN0QxRDhBQkY5NEY2NzIyNjk5NUUwMDRFQTYx
MTQxMTVBRjAeFw0yNDAxMjgxMTU1MzVaFw0yNTAxMjYxMjAwMzVaMDMxMTAvBgNV
BAMTKDc1RDg2MzA5QzhDOEY5OEY0REU2NDYwNTkyNkRFRjdGMjY2MjU3NzcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJiPtfVdI2QgTn8dkEzmZv/v+1
diDwniA7InOBX7wfR3dyQ84v/mxfdscZbQizGCikJQyGaUXf5MqwC6FFGOjV+z0a
4nzMSM/mu1N8JvQWIBUl/LswDi5+rtX1qPRpfQl9BwjrzWExN5l4QJQ51/2o0X0R
4NLBbTFNmhm17zg8VlmIJD1BPDyqqLi8NQBHtXA+P1M3P297LnPCbveFXZ3BJKSw
1ffsn6SMFUAcV83xK7ITM6gKUcrgc2oLge9dl/lNx8yp21i9GDT1kxE7jAfUja2G
+pk89ZV78e7jPze6AikOHfhTxbrfY6M5EGl39BQXbxkUJjwEuneEjzvgo9HFAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUddhjCcjI+Y9N5kYFkm3vfyZiV3cwHwYDVR0j
BBgwFoAUpLI+fR2Kv5T2ciaZXgBOphFBFa8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNDNmNDZTbnFGTDNLZ1Z6VVRGdFBTcmJjVzhMUHFkOVVkUEpRYVRSUjd0
dXAvMC9BNEIyM0U3RDFEOEFCRjk0RjY3MjI2OTk1RTAwNEVBNjExNDExNUFGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0E0QjIzRTdEMUQ4QUJGOTRG
NjcyMjY5OTVFMDA0RUE2MTE0MTE1QUYuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzQzZjQ2U25xRkwzS2dWelVURnRQU3JiY1c4TFBxZDlVZFBKUWFUUlI3dHVwLzAv
MzEzNjM4MmUzMTM5MzcyZTMxMzIyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzMjM2
MzUzNDM2MzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAKoxQwwDQYJKoZIhvcNAQELBQADggEBADCKFW9P
ETNho463CYwVmqdqciqpqyei4UeTN2TGJKTLiiZtCKacBLJ5RF2QFzU8gOO1Tlwq
l6toI4PYThQR1GqNpHjHqqSrYad2pvWvbXRmyxcL4SghZGLI8qLI84BCHyZh8q4U
UkyRY3lAKWynYcTIWK9CgIqQB9rWV05yctpf90Wz8EebgIds46rjuYkrSYxYd2ou
aUOqhvtQ1AE22NrmMzXqg7rlmeRELEZB4bKjcA/mE16ftWgd7BWi2Jd7OHJeoz+4
EZBB30PatBBai//rxRZxKK/kDFUamCWrvcqPTo3v/ynTz6phGZiRhjR4EnN0nYsZ
5aC87KRtG+C19MI=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:29 2024 by rpki-client on console-fra.rpki-client.org