Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4v1ArkdPciMWNVFLkx6xFwscab1Q3jHJwBRHgUaREqqM/1/3139302e3130332e3136342e302f32322d3332203d3e20323632393839.roa
File:                     3139302e3130332e3136342e302f32322d3332203d3e20323632393839.roa (raw, json)
Hash identifier:          eFxbTTaCBmYGK19smHjaLAF63YJi+fdBf73slEi++tI=
Subject key identifier:   CE:07:AE:1E:2E:08:81:54:32:CD:B9:DE:8C:DE:E0:1E:B3:03:C6:04
Certificate issuer:       /CN=D322281463F194BEAD29926EC73A0E7378D1F259
Certificate serial:       06A8650ECC4D862205F24DA149AD230B39BA7B91
Authority key identifier: D3:22:28:14:63:F1:94:BE:AD:29:92:6E:C7:3A:0E:73:78:D1:F2:59
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D322281463F194BEAD29926EC73A0E7378D1F259.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4v1ArkdPciMWNVFLkx6xFwscab1Q3jHJwBRHgUaREqqM/1/3139302e3130332e3136342e302f32322d3332203d3e20323632393839.roa
Signing time:             Thu 06 Mar 2025 20:58:09 +0000
ROA not before:           Thu 06 Mar 2025 20:53:09 +0000
ROA not after:            Thu 05 Mar 2026 20:58:09 +0000
asID:                     262989
IP address blocks:        190.103.164.0/22 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:a8:65:0e:cc:4d:86:22:05:f2:4d:a1:49:ad:23:0b:39:ba:7b:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D322281463F194BEAD29926EC73A0E7378D1F259
        Validity
            Not Before: Mar  6 20:53:09 2025 GMT
            Not After : Mar  5 20:58:09 2026 GMT
        Subject: CN=CE07AE1E2E08815432CDB9DE8CDEE01EB303C604
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:57:f3:cd:8d:cd:ce:26:50:cc:9c:61:69:83:
                    76:08:41:b2:65:17:8a:04:0b:2f:5f:12:80:01:e3:
                    ce:72:b9:93:cf:b7:35:18:31:e4:65:d5:cd:a5:20:
                    7a:31:50:b9:d7:09:13:23:a0:a9:f0:a2:a5:ca:d5:
                    87:80:5d:9e:07:e3:d0:76:c5:57:f6:ee:f1:30:ba:
                    b7:2c:ec:78:1a:4e:65:ee:64:22:b0:c3:98:e5:15:
                    9e:5d:ca:14:27:d6:68:4d:10:0d:23:8e:2c:df:85:
                    73:ff:1b:b3:c1:c8:ee:59:40:bd:ce:e9:97:b0:12:
                    72:ba:6f:60:8d:b4:1c:fe:91:40:39:bd:a6:68:79:
                    03:62:28:e9:b7:1c:b3:5b:24:a4:7e:3e:ad:ea:2e:
                    3e:8d:25:ee:86:77:b2:f1:aa:00:8b:cb:6a:13:d0:
                    b7:1c:32:d2:cf:b0:4c:c5:e7:8f:4f:6c:10:42:1c:
                    01:1a:17:5c:10:54:c8:a2:58:fa:63:20:13:55:4d:
                    6c:09:3a:25:7e:54:2d:5b:91:14:0f:3e:07:72:4a:
                    63:a8:37:de:43:cb:7e:bd:ce:84:17:02:2f:25:c1:
                    68:5f:a2:00:f4:4e:90:19:ba:84:ae:eb:be:a4:7f:
                    ae:da:fb:3c:ec:c7:60:8b:31:d7:0f:81:ef:7f:92:
                    09:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:07:AE:1E:2E:08:81:54:32:CD:B9:DE:8C:DE:E0:1E:B3:03:C6:04
            X509v3 Authority Key Identifier:
                keyid:D3:22:28:14:63:F1:94:BE:AD:29:92:6E:C7:3A:0E:73:78:D1:F2:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4v1ArkdPciMWNVFLkx6xFwscab1Q3jHJwBRHgUaREqqM/1/D322281463F194BEAD29926EC73A0E7378D1F259.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D322281463F194BEAD29926EC73A0E7378D1F259.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4v1ArkdPciMWNVFLkx6xFwscab1Q3jHJwBRHgUaREqqM/1/3139302e3130332e3136342e302f32322d3332203d3e20323632393839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.103.164.0/22

    Signature Algorithm: sha256WithRSAEncryption
         87:33:25:7e:17:7c:e4:5a:b4:54:dc:b4:b4:5c:39:82:a5:93:
         35:19:96:4b:dc:e2:3c:6e:d6:55:0b:a2:6f:f5:fc:e0:dc:47:
         aa:da:c1:00:23:55:a3:f4:6f:ff:18:35:49:6f:20:d4:25:c5:
         d1:c2:93:52:a6:53:90:57:61:93:b8:27:78:7a:33:17:ad:36:
         81:b0:44:d5:a3:8e:a4:2d:d5:50:50:da:de:3e:f4:bf:74:28:
         87:7c:80:39:56:14:ee:2b:b1:58:97:aa:5a:a1:90:d8:6b:ac:
         25:cb:4a:4b:66:55:d0:13:42:25:8e:58:84:4c:ba:84:ec:7c:
         32:54:ff:32:8e:d6:89:6b:28:04:15:e3:7d:1b:79:84:0c:30:
         d6:b3:f9:79:45:e1:66:f8:c6:9d:1e:d2:5a:fd:bd:81:2f:d5:
         3d:4c:bc:2b:47:99:e5:3a:57:0c:30:12:f6:e3:2d:ba:55:6e:
         5a:90:89:eb:49:a5:22:6a:c3:40:d5:29:86:ad:d6:67:3f:5e:
         20:ae:53:68:7c:fb:64:fb:16:29:c6:f3:1c:ab:6c:4e:6a:4d:
         6b:6c:ab:07:ed:74:c7:2e:c0:87:8d:44:c3:16:ed:d0:55:92:
         16:05:5c:66:19:40:8f:b6:75:0e:58:45:0b:b3:fa:0f:8a:9b:
         5a:90:c2:49
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUBqhlDsxNhiIF8k2hSa0jCzm6e5EwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDMyMjI4MTQ2M0YxOTRCRUFEMjk5MjZFQzczQTBFNzM3
OEQxRjI1OTAeFw0yNTAzMDYyMDUzMDlaFw0yNjAzMDUyMDU4MDlaMDMxMTAvBgNV
BAMTKENFMDdBRTFFMkUwODgxNTQzMkNEQjlERThDREVFMDFFQjMwM0M2MDQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDiV/PNjc3OJlDMnGFpg3YIQbJl
F4oECy9fEoAB485yuZPPtzUYMeRl1c2lIHoxULnXCRMjoKnwoqXK1YeAXZ4H49B2
xVf27vEwurcs7HgaTmXuZCKww5jlFZ5dyhQn1mhNEA0jjizfhXP/G7PByO5ZQL3O
6ZewEnK6b2CNtBz+kUA5vaZoeQNiKOm3HLNbJKR+Pq3qLj6NJe6Gd7LxqgCLy2oT
0LccMtLPsEzF549PbBBCHAEaF1wQVMiiWPpjIBNVTWwJOiV+VC1bkRQPPgdySmOo
N95Dy369zoQXAi8lwWhfogD0TpAZuoSu676kf67a+zzsx2CLMdcPge9/kgkNAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUzgeuHi4IgVQyzbnejN7gHrMDxgQwHwYDVR0j
BBgwFoAU0yIoFGPxlL6tKZJuxzoOc3jR8lkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNHYxQXJrZFBjaU1XTlZGTGt4NnhGd3NjYWIxUTNqSEp3QlJIZ1VhUkVx
cU0vMS9EMzIyMjgxNDYzRjE5NEJFQUQyOTkyNkVDNzNBMEU3Mzc4RDFGMjU5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0QzMjIyODE0NjNGMTk0QkVB
RDI5OTI2RUM3M0EwRTczNzhEMUYyNTkuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzR2MUFya2RQY2lNV05WRkxreDZ4RndzY2FiMVEzakhKd0JSSGdVYVJFcXFNLzEv
MzEzOTMwMmUzMTMwMzMyZTMxMzYzNDJlMzAyZjMyMzIyZDMzMzIyMDNkM2UyMDMy
MzYzMjM5MzgzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAr5npDANBgkqhkiG9w0BAQsFAAOCAQEAhzMl
fhd85Fq0VNy0tFw5gqWTNRmWS9ziPG7WVQuib/X84NxHqtrBACNVo/Rv/xg1SW8g
1CXF0cKTUqZTkFdhk7gneHozF602gbBE1aOOpC3VUFDa3j70v3Qoh3yAOVYU7iux
WJeqWqGQ2GusJctKS2ZV0BNCJY5YhEy6hOx8MlT/Mo7WiWsoBBXjfRt5hAww1rP5
eUXhZvjGnR7SWv29gS/VPUy8K0eZ5TpXDDAS9uMtulVuWpCJ60mlImrDQNUphq3W
Zz9eIK5TaHz7ZPsWKcbzHKtsTmpNa2yrB+10xy7Ah41Ewxbt0FWSFgVcZhlAj7Z1
DlhFC7P6D4qbWpDCSQ==
-----END CERTIFICATE-----
Generated at Fri Apr 11 12:54:16 2025 by rpki-client