Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4v1ArkdPciMWNVFLkx6xFwscab1Q3jHJwBRHgUaREqqM/1/3139302e3130332e3136312e302f32342d3332203d3e20323632393839.roa
File:                     3139302e3130332e3136312e302f32342d3332203d3e20323632393839.roa (raw, json)
Hash identifier:          Hq94yg3T5WRaRBO5tJDk9JxpixAWK7WQbGqOEp5wH7k=
Subject key identifier:   35:D0:77:3D:64:7F:01:2A:4E:D1:5F:CA:FA:98:23:D6:A9:08:BE:2F
Certificate issuer:       /CN=D322281463F194BEAD29926EC73A0E7378D1F259
Certificate serial:       23C35E135525304D75723078D3C3A56FBB7EF335
Authority key identifier: D3:22:28:14:63:F1:94:BE:AD:29:92:6E:C7:3A:0E:73:78:D1:F2:59
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D322281463F194BEAD29926EC73A0E7378D1F259.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4v1ArkdPciMWNVFLkx6xFwscab1Q3jHJwBRHgUaREqqM/1/3139302e3130332e3136312e302f32342d3332203d3e20323632393839.roa
Signing time:             Thu 06 Mar 2025 20:58:10 +0000
ROA not before:           Thu 06 Mar 2025 20:53:10 +0000
ROA not after:            Thu 05 Mar 2026 20:58:10 +0000
asID:                     262989
IP address blocks:        190.103.161.0/24 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:c3:5e:13:55:25:30:4d:75:72:30:78:d3:c3:a5:6f:bb:7e:f3:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D322281463F194BEAD29926EC73A0E7378D1F259
        Validity
            Not Before: Mar  6 20:53:10 2025 GMT
            Not After : Mar  5 20:58:10 2026 GMT
        Subject: CN=35D0773D647F012A4ED15FCAFA9823D6A908BE2F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:c4:1f:a2:9e:9e:39:a9:72:e0:6d:b8:e1:46:
                    28:7f:90:10:69:77:67:bc:0f:78:fb:0c:df:c2:b1:
                    4a:b8:e9:8b:d9:c9:03:66:f2:e7:f9:2a:19:70:4d:
                    02:92:9a:f4:b2:7e:2d:ba:02:f6:a7:a0:fd:2e:f0:
                    df:a1:0a:02:1f:0f:5e:4e:46:a0:66:71:f5:b4:8d:
                    b9:e8:37:50:2b:cd:fc:f3:65:36:78:30:74:8e:b8:
                    a5:89:13:f6:27:13:ea:c0:61:4b:91:74:89:fb:78:
                    52:e9:b3:32:88:82:12:58:44:46:9c:26:cd:59:fa:
                    9f:50:99:10:8d:76:47:8c:d3:46:52:b1:ba:e2:e6:
                    ba:c4:ec:03:bf:3f:00:18:ae:46:03:26:d7:4f:76:
                    c8:db:69:f9:40:be:55:2c:19:67:da:4a:58:47:94:
                    e1:29:49:7b:db:6b:67:15:29:62:ea:fd:e9:72:8f:
                    9e:c2:2c:de:b7:ed:b5:59:a9:dd:d2:c1:9a:e3:a9:
                    be:03:03:1d:21:04:4b:74:e0:9c:40:6d:ae:02:de:
                    56:00:9b:d1:bb:b7:ef:ca:79:4d:c0:dc:73:a7:be:
                    b3:c1:1a:88:64:bd:88:87:e0:c6:87:e7:51:de:dc:
                    d6:1a:73:1f:be:74:4e:6d:b2:49:df:12:dc:e1:0e:
                    bd:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:D0:77:3D:64:7F:01:2A:4E:D1:5F:CA:FA:98:23:D6:A9:08:BE:2F
            X509v3 Authority Key Identifier:
                keyid:D3:22:28:14:63:F1:94:BE:AD:29:92:6E:C7:3A:0E:73:78:D1:F2:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4v1ArkdPciMWNVFLkx6xFwscab1Q3jHJwBRHgUaREqqM/1/D322281463F194BEAD29926EC73A0E7378D1F259.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D322281463F194BEAD29926EC73A0E7378D1F259.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4v1ArkdPciMWNVFLkx6xFwscab1Q3jHJwBRHgUaREqqM/1/3139302e3130332e3136312e302f32342d3332203d3e20323632393839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.103.161.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a1:5c:91:f5:ba:eb:6d:c2:76:bf:a3:01:9a:37:90:56:4e:f3:
         d6:9e:84:7e:6b:d3:e7:66:db:29:7f:db:7a:2f:d7:34:8d:8a:
         6e:49:7f:05:cf:ae:7a:82:62:0a:0d:d9:99:70:cc:3e:1b:51:
         9f:f6:11:07:11:9f:79:ed:f0:b9:7a:be:ed:bb:7a:ba:7b:b3:
         8e:dd:21:6b:1f:dc:f2:9d:51:a9:2f:3d:57:e8:89:bd:09:b6:
         0a:7e:08:e4:89:45:58:09:0b:89:70:f7:6a:94:9e:e2:7f:29:
         2c:a1:33:21:1f:9f:4a:c6:1c:38:66:7a:ec:4a:c0:5d:2c:a9:
         49:df:dc:28:3b:e9:7c:e4:56:4a:e8:36:f6:2e:dc:b0:24:88:
         10:54:f8:58:cf:18:0e:05:c6:08:fb:13:a0:70:94:74:10:27:
         b7:08:3b:00:e2:10:30:fa:17:0c:04:52:31:18:bf:1f:07:69:
         11:62:52:0f:86:42:17:1a:bb:9b:1d:d4:f9:5f:34:68:ed:3f:
         67:61:37:b7:db:a1:50:a8:7f:b1:44:f0:54:51:7c:cb:50:74:
         c3:ae:6b:0a:f3:b4:d5:bc:f9:e3:09:b4:1e:b3:fb:ca:37:d7:
         ea:60:ae:b2:bf:72:6d:2d:a3:8e:77:88:ba:0e:7e:8a:bc:e7:
         3b:8c:d8:00
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUI8NeE1UlME11cjB408Olb7t+8zUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDMyMjI4MTQ2M0YxOTRCRUFEMjk5MjZFQzczQTBFNzM3
OEQxRjI1OTAeFw0yNTAzMDYyMDUzMTBaFw0yNjAzMDUyMDU4MTBaMDMxMTAvBgNV
BAMTKDM1RDA3NzNENjQ3RjAxMkE0RUQxNUZDQUZBOTgyM0Q2QTkwOEJFMkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQxB+inp45qXLgbbjhRih/kBBp
d2e8D3j7DN/CsUq46YvZyQNm8uf5KhlwTQKSmvSyfi26AvanoP0u8N+hCgIfD15O
RqBmcfW0jbnoN1ArzfzzZTZ4MHSOuKWJE/YnE+rAYUuRdIn7eFLpszKIghJYREac
Js1Z+p9QmRCNdkeM00ZSsbri5rrE7AO/PwAYrkYDJtdPdsjbaflAvlUsGWfaSlhH
lOEpSXvba2cVKWLq/elyj57CLN637bVZqd3SwZrjqb4DAx0hBEt04JxAba4C3lYA
m9G7t+/KeU3A3HOnvrPBGohkvYiH4MaH51He3NYacx++dE5tsknfEtzhDr2hAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUNdB3PWR/ASpO0V/K+pgj1qkIvi8wHwYDVR0j
BBgwFoAU0yIoFGPxlL6tKZJuxzoOc3jR8lkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNHYxQXJrZFBjaU1XTlZGTGt4NnhGd3NjYWIxUTNqSEp3QlJIZ1VhUkVx
cU0vMS9EMzIyMjgxNDYzRjE5NEJFQUQyOTkyNkVDNzNBMEU3Mzc4RDFGMjU5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0QzMjIyODE0NjNGMTk0QkVB
RDI5OTI2RUM3M0EwRTczNzhEMUYyNTkuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzR2MUFya2RQY2lNV05WRkxreDZ4RndzY2FiMVEzakhKd0JSSGdVYVJFcXFNLzEv
MzEzOTMwMmUzMTMwMzMyZTMxMzYzMTJlMzAyZjMyMzQyZDMzMzIyMDNkM2UyMDMy
MzYzMjM5MzgzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAL5noTANBgkqhkiG9w0BAQsFAAOCAQEAoVyR
9brrbcJ2v6MBmjeQVk7z1p6EfmvT52bbKX/bei/XNI2Kbkl/Bc+ueoJiCg3ZmXDM
PhtRn/YRBxGfee3wuXq+7bt6unuzjt0hax/c8p1RqS89V+iJvQm2Cn4I5IlFWAkL
iXD3apSe4n8pLKEzIR+fSsYcOGZ67ErAXSypSd/cKDvpfORWSug29i7csCSIEFT4
WM8YDgXGCPsToHCUdBAntwg7AOIQMPoXDARSMRi/HwdpEWJSD4ZCFxq7mx3U+V80
aO0/Z2E3t9uhUKh/sUTwVFF8y1B0w65rCvO01bz54wm0HrP7yjfX6mCusr9ybS2j
jneIug5+irznO4zYAA==
-----END CERTIFICATE-----
Generated at Mon Apr 7 00:37:43 2025 by rpki-client