Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5DStw3JiYMo8QnDAcZZE5UhgCZP5dSuSxQGJtx7qFzgd/1/3139302e3130392e36342e302f32322d3332203d3e20323634323238.roa
File:                     3139302e3130392e36342e302f32322d3332203d3e20323634323238.roa (raw, json)
Hash identifier:          ksvdYdpLtd9vuSN1D6zHg/y1C2LIm63ZjjKkhgLWGoc=
Subject key identifier:   1D:79:BB:4B:18:88:6F:64:5A:BB:C7:B0:89:B6:3A:BD:5B:0E:9B:72
Certificate issuer:       /CN=3CFEE7CF39A316A90FBA590255220CBCEB5BBEAA
Certificate serial:       4EF1A57FBBB90E537F5AE28036F2F5EE708DB887
Authority key identifier: 3C:FE:E7:CF:39:A3:16:A9:0F:BA:59:02:55:22:0C:BC:EB:5B:BE:AA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3CFEE7CF39A316A90FBA590255220CBCEB5BBEAA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5DStw3JiYMo8QnDAcZZE5UhgCZP5dSuSxQGJtx7qFzgd/1/3139302e3130392e36342e302f32322d3332203d3e20323634323238.roa
Signing time:             Sun 26 Mar 2023 22:09:26 +0000
ROA not before:           Sun 26 Mar 2023 22:04:26 +0000
ROA not after:            Sun 24 Mar 2024 22:09:26 +0000
asID:                     264228
IP address blocks:        190.109.64.0/22 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:f1:a5:7f:bb:b9:0e:53:7f:5a:e2:80:36:f2:f5:ee:70:8d:b8:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3CFEE7CF39A316A90FBA590255220CBCEB5BBEAA
        Validity
            Not Before: Mar 26 22:04:26 2023 GMT
            Not After : Mar 24 22:09:26 2024 GMT
        Subject: CN=1D79BB4B18886F645ABBC7B089B63ABD5B0E9B72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:97:22:31:8b:b6:9e:ff:7d:92:44:64:c1:cf:
                    55:d6:bf:3b:35:be:1e:cb:fa:d9:55:9e:69:99:79:
                    e4:cd:4b:ac:16:78:06:4b:bf:48:49:bb:3f:33:a1:
                    e0:69:c9:93:c4:f5:6a:c4:2c:16:4b:c3:47:ff:48:
                    83:a0:90:fd:28:18:12:2f:5a:f0:c8:20:ad:c6:1a:
                    b7:82:6b:77:6b:20:52:cb:a6:1a:91:09:8d:57:19:
                    0b:c5:ee:ab:19:0d:78:94:fe:41:79:a9:7c:fa:88:
                    ad:03:d4:db:10:fc:b1:18:2a:8a:72:22:70:d2:69:
                    73:d3:1f:49:54:10:62:83:7b:da:ef:f4:4e:20:e4:
                    60:dd:ff:34:6d:c9:e5:89:f7:ee:d6:4b:32:05:70:
                    99:71:2d:46:ac:98:ba:d1:fc:84:2a:9a:5d:63:13:
                    d4:19:90:f9:18:95:70:73:3b:84:b9:1c:21:c6:c5:
                    e9:9b:44:7c:2b:d6:39:23:bb:76:d8:2a:27:c9:18:
                    0a:37:12:a7:a2:92:7e:80:34:2a:db:9b:66:61:b3:
                    ee:99:f2:2f:48:68:5e:51:54:8f:0e:6a:f3:15:93:
                    4a:f7:45:42:ab:95:db:7c:fa:91:4f:66:5d:20:bf:
                    91:da:d9:89:d8:cb:4c:3d:dd:ae:b6:a3:08:06:7a:
                    0b:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:79:BB:4B:18:88:6F:64:5A:BB:C7:B0:89:B6:3A:BD:5B:0E:9B:72
            X509v3 Authority Key Identifier:
                keyid:3C:FE:E7:CF:39:A3:16:A9:0F:BA:59:02:55:22:0C:BC:EB:5B:BE:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5DStw3JiYMo8QnDAcZZE5UhgCZP5dSuSxQGJtx7qFzgd/1/3CFEE7CF39A316A90FBA590255220CBCEB5BBEAA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3CFEE7CF39A316A90FBA590255220CBCEB5BBEAA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5DStw3JiYMo8QnDAcZZE5UhgCZP5dSuSxQGJtx7qFzgd/1/3139302e3130392e36342e302f32322d3332203d3e20323634323238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.109.64.0/22

    Signature Algorithm: sha256WithRSAEncryption
         68:f5:c3:e5:7b:57:bf:38:35:51:a8:42:b4:d7:13:97:63:ba:
         6d:19:3e:f4:d5:ca:f4:cc:b7:e4:7a:84:67:29:83:76:32:85:
         b0:78:8d:e9:d0:e5:63:2e:ba:80:ed:32:05:31:20:14:ef:eb:
         5c:68:d8:ed:8f:17:91:5c:0a:37:94:df:91:b7:63:a7:86:07:
         a4:76:95:98:e2:c1:05:8b:fb:a3:18:f3:ee:cd:f7:76:53:38:
         bb:8b:d5:c0:d2:80:bd:2a:3a:83:ce:f7:84:2d:8c:ef:4d:90:
         24:b6:55:09:9c:00:3c:02:20:66:86:ff:01:26:fa:be:12:05:
         04:d2:0f:28:6f:83:10:12:02:aa:d0:f4:e3:20:63:65:d9:98:
         62:19:65:77:39:f1:b8:eb:4a:5b:5a:6c:80:b9:07:85:43:6f:
         24:74:6f:5f:98:e2:66:3d:dd:3f:f6:d8:a1:ab:78:7c:83:37:
         ee:be:50:f8:12:88:92:39:9b:cd:a5:93:a9:2a:f8:9e:58:5f:
         86:45:7a:5d:3a:cd:fe:e1:5f:ff:1b:93:90:69:5b:c3:4a:80:
         3b:5e:4e:ac:0e:53:c4:43:81:94:af:00:68:65:29:20:95:9e:
         16:3d:c6:8b:bb:21:fc:0b:56:3f:e4:d8:9e:ef:b6:7d:62:de:
         47:10:b9:e3
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUTvGlf7u5DlN/WuKANvL17nCNuIcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0NGRUU3Q0YzOUEzMTZBOTBGQkE1OTAyNTUyMjBDQkNF
QjVCQkVBQTAeFw0yMzAzMjYyMjA0MjZaFw0yNDAzMjQyMjA5MjZaMDMxMTAvBgNV
BAMTKDFENzlCQjRCMTg4ODZGNjQ1QUJCQzdCMDg5QjYzQUJENUIwRTlCNzIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDClyIxi7ae/32SRGTBz1XWvzs1
vh7L+tlVnmmZeeTNS6wWeAZLv0hJuz8zoeBpyZPE9WrELBZLw0f/SIOgkP0oGBIv
WvDIIK3GGreCa3drIFLLphqRCY1XGQvF7qsZDXiU/kF5qXz6iK0D1NsQ/LEYKopy
InDSaXPTH0lUEGKDe9rv9E4g5GDd/zRtyeWJ9+7WSzIFcJlxLUasmLrR/IQqml1j
E9QZkPkYlXBzO4S5HCHGxembRHwr1jkju3bYKifJGAo3Eqeikn6ANCrbm2Zhs+6Z
8i9IaF5RVI8OavMVk0r3RUKrldt8+pFPZl0gv5Ha2YnYy0w93a62owgGegvzAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUHXm7SxiIb2Rau8ewibY6vVsOm3IwHwYDVR0j
BBgwFoAUPP7nzzmjFqkPulkCVSIMvOtbvqowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNURTdHczSmlZTW84UW5EQWNaWkU1VWhnQ1pQNWRTdVN4UUdKdHg3cUZ6
Z2QvMS8zQ0ZFRTdDRjM5QTMxNkE5MEZCQTU5MDI1NTIyMENCQ0VCNUJCRUFBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzNDRkVFN0NGMzlBMzE2QTkw
RkJBNTkwMjU1MjIwQ0JDRUI1QkJFQUEuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzVEU3R3M0ppWU1vOFFuREFjWlpFNVVoZ0NaUDVkU3VTeFFHSnR4N3FGemdkLzEv
MzEzOTMwMmUzMTMwMzkyZTM2MzQyZTMwMmYzMjMyMmQzMzMyMjAzZDNlMjAzMjM2
MzQzMjMyMzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAK+bUAwDQYJKoZIhvcNAQELBQADggEBAGj1w+V7
V784NVGoQrTXE5djum0ZPvTVyvTMt+R6hGcpg3YyhbB4jenQ5WMuuoDtMgUxIBTv
61xo2O2PF5FcCjeU35G3Y6eGB6R2lZjiwQWL+6MY8+7N93ZTOLuL1cDSgL0qOoPO
94QtjO9NkCS2VQmcADwCIGaG/wEm+r4SBQTSDyhvgxASAqrQ9OMgY2XZmGIZZXc5
8bjrSltabIC5B4VDbyR0b1+Y4mY93T/22KGreHyDN+6+UPgSiJI5m82lk6kq+J5Y
X4ZFel06zf7hX/8bk5BpW8NKgDteTqwOU8RDgZSvAGhlKSCVnhY9xou7IfwLVj/k
2J7vtn1i3kcQueM=
-----END CERTIFICATE-----
Generated at Tue Feb 18 13:31:29 2025 by rpki-client