Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/44L5mqFbmPQ4e5WPfNQEJUvK3QQZ9VZSJcm4mMHTAis3/0/3136382e3139352e3231302e302f32342d3234203d3e20323731353135.roa
File:                     3136382e3139352e3231302e302f32342d3234203d3e20323731353135.roa (raw, json)
Hash identifier:          DCUSQpmGu1z10XbIVwFwCAxzZGzbk/0VxvMpq0zvB98=
Subject key identifier:   AF:C3:79:28:0E:63:73:CB:CF:76:E9:4B:67:C4:DB:57:39:5D:4E:6C
Certificate issuer:       /CN=C966BFE75D740DECD5CC886F943F0FBC4390193F
Certificate serial:       0C74340D737F4290F3FE3FB8D07A7964CFDFC4DB
Authority key identifier: C9:66:BF:E7:5D:74:0D:EC:D5:CC:88:6F:94:3F:0F:BC:43:90:19:3F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C966BFE75D740DECD5CC886F943F0FBC4390193F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/44L5mqFbmPQ4e5WPfNQEJUvK3QQZ9VZSJcm4mMHTAis3/0/3136382e3139352e3231302e302f32342d3234203d3e20323731353135.roa
Signing time:             Tue 22 Aug 2023 15:25:43 +0000
ROA not before:           Tue 22 Aug 2023 15:20:43 +0000
ROA not after:            Tue 20 Aug 2024 15:25:43 +0000
asID:                     271515
IP address blocks:        168.195.210.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:74:34:0d:73:7f:42:90:f3:fe:3f:b8:d0:7a:79:64:cf:df:c4:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C966BFE75D740DECD5CC886F943F0FBC4390193F
        Validity
            Not Before: Aug 22 15:20:43 2023 GMT
            Not After : Aug 20 15:25:43 2024 GMT
        Subject: CN=AFC379280E6373CBCF76E94B67C4DB57395D4E6C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:1e:e2:47:5d:36:64:ed:1d:19:9f:9c:de:50:
                    b2:d4:f9:b9:4f:0b:c8:54:c2:54:16:75:30:58:fb:
                    ad:7c:2d:a6:a3:8a:47:09:95:b7:20:ca:b1:1b:63:
                    c7:f6:c0:ad:e8:a5:5c:1b:00:ae:3a:2f:58:06:ae:
                    5b:1e:23:20:81:41:0c:74:9d:fc:d9:f8:7a:96:51:
                    e9:70:4a:8a:9b:68:73:fb:e7:a3:c6:23:cb:28:3a:
                    34:e1:a3:5c:b8:03:26:d8:1e:c1:ab:88:1a:0f:b3:
                    b8:de:13:69:41:4f:06:3d:03:ad:c9:3a:d3:3c:59:
                    f1:04:29:8b:d9:0e:64:97:31:52:0c:c0:07:a3:cd:
                    7f:db:7f:87:49:b2:4d:e9:ab:37:29:0c:1d:07:6a:
                    77:32:6b:52:84:df:a8:01:37:a4:26:5f:0c:39:99:
                    e5:ec:37:8e:73:96:fe:56:75:30:bc:e4:c4:1a:62:
                    a6:f8:1f:cc:89:28:be:b0:3f:96:fd:33:c1:c6:e6:
                    a8:dd:73:2c:ff:c3:b0:ac:bd:2f:4c:52:f5:3b:de:
                    28:a9:f5:9f:d2:44:49:22:c8:6c:b4:cb:cc:32:71:
                    70:af:6c:92:dc:6e:49:06:a2:8d:9c:c7:13:67:bb:
                    25:59:3e:fd:17:9a:46:ca:13:d9:d8:a4:81:15:25:
                    7e:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:C3:79:28:0E:63:73:CB:CF:76:E9:4B:67:C4:DB:57:39:5D:4E:6C
            X509v3 Authority Key Identifier:
                keyid:C9:66:BF:E7:5D:74:0D:EC:D5:CC:88:6F:94:3F:0F:BC:43:90:19:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/44L5mqFbmPQ4e5WPfNQEJUvK3QQZ9VZSJcm4mMHTAis3/0/C966BFE75D740DECD5CC886F943F0FBC4390193F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C966BFE75D740DECD5CC886F943F0FBC4390193F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/44L5mqFbmPQ4e5WPfNQEJUvK3QQZ9VZSJcm4mMHTAis3/0/3136382e3139352e3231302e302f32342d3234203d3e20323731353135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.195.210.0/24

    Signature Algorithm: sha256WithRSAEncryption
         05:04:ce:e3:d3:5b:f2:a5:7c:9e:e4:bb:76:d6:2d:a1:bf:f6:
         6f:c6:8b:45:dc:5c:06:31:75:e3:c5:a7:b9:ff:9d:91:54:d1:
         6e:bf:4b:8b:ea:50:10:4c:5f:2c:c2:71:05:a9:f0:3d:6a:a0:
         d3:f1:71:65:d5:a9:de:3c:c7:de:bd:cc:27:9c:2d:7f:70:23:
         86:e8:78:85:c5:15:c8:df:2e:fb:b2:4d:5d:c6:eb:cf:54:c5:
         e6:e6:06:01:2b:26:1a:93:b6:b6:81:8c:d2:2b:86:c4:0c:30:
         10:7a:cf:61:a3:03:99:27:79:c6:b4:20:aa:f6:2b:97:9a:53:
         cd:8d:1a:85:97:84:62:96:c6:e4:ea:3a:12:33:f8:dc:e7:1a:
         48:48:36:1e:c1:e7:a9:b1:de:b9:5f:0b:68:8a:2c:cd:6c:5a:
         eb:c9:1e:16:6d:05:d0:d0:78:e8:cd:2f:8a:2b:5a:62:fe:2f:
         ef:98:1c:63:77:e7:14:91:cc:8d:5a:bd:60:91:59:dc:10:5d:
         80:de:cb:9f:2d:88:84:d3:b6:52:36:4a:62:85:e2:8d:e2:76:
         8e:94:ec:fb:a6:5d:99:db:45:bb:23:85:db:47:63:b8:9d:6a:
         eb:7a:92:e7:0c:96:f7:86:ab:4c:52:1a:2a:25:34:20:80:20:
         0f:d6:2e:f0
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUDHQ0DXN/QpDz/j+40Hp5ZM/fxNswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzk2NkJGRTc1RDc0MERFQ0Q1Q0M4ODZGOTQzRjBGQkM0
MzkwMTkzRjAeFw0yMzA4MjIxNTIwNDNaFw0yNDA4MjAxNTI1NDNaMDMxMTAvBgNV
BAMTKEFGQzM3OTI4MEU2MzczQ0JDRjc2RTk0QjY3QzREQjU3Mzk1RDRFNkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1HuJHXTZk7R0Zn5zeULLU+blP
C8hUwlQWdTBY+618LaajikcJlbcgyrEbY8f2wK3opVwbAK46L1gGrlseIyCBQQx0
nfzZ+HqWUelwSoqbaHP756PGI8soOjTho1y4AybYHsGriBoPs7jeE2lBTwY9A63J
OtM8WfEEKYvZDmSXMVIMwAejzX/bf4dJsk3pqzcpDB0Hancya1KE36gBN6QmXww5
meXsN45zlv5WdTC85MQaYqb4H8yJKL6wP5b9M8HG5qjdcyz/w7CsvS9MUvU73iip
9Z/SREkiyGy0y8wycXCvbJLcbkkGoo2cxxNnuyVZPv0XmkbKE9nYpIEVJX6NAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUr8N5KA5jc8vPdulLZ8TbVzldTmwwHwYDVR0j
BBgwFoAUyWa/5110DezVzIhvlD8PvEOQGT8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNDRMNW1xRmJtUFE0ZTVXUGZOUUVKVXZLM1FRWjlWWlNKY200bU1IVEFp
czMvMC9DOTY2QkZFNzVENzQwREVDRDVDQzg4NkY5NDNGMEZCQzQzOTAxOTNGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0M5NjZCRkU3NUQ3NDBERUNE
NUNDODg2Rjk0M0YwRkJDNDM5MDE5M0YuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzQ0TDVtcUZibVBRNGU1V1BmTlFFSlV2SzNRUVo5VlpTSmNtNG1NSFRBaXMzLzAv
MzEzNjM4MmUzMTM5MzUyZTMyMzEzMDJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzczMTM1MzEzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAKjD0jANBgkqhkiG9w0BAQsFAAOCAQEABQTO
49Nb8qV8nuS7dtYtob/2b8aLRdxcBjF148Wnuf+dkVTRbr9Li+pQEExfLMJxBanw
PWqg0/FxZdWp3jzH3r3MJ5wtf3Ajhuh4hcUVyN8u+7JNXcbrz1TF5uYGASsmGpO2
toGM0iuGxAwwEHrPYaMDmSd5xrQgqvYrl5pTzY0ahZeEYpbG5Oo6EjP43OcaSEg2
HsHnqbHeuV8LaIoszWxa68keFm0F0NB46M0viitaYv4v75gcY3fnFJHMjVq9YJFZ
3BBdgN7Lny2IhNO2UjZKYoXijeJ2jpTs+6ZdmdtFuyOF20djuJ1q63qS5wyW94ar
TFIaKiU0IIAgD9Yu8A==
-----END CERTIFICATE-----
Generated at Fri Mar 14 04:16:59 2025 by rpki-client