Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7oVrcem1iPXHJTcEEqq1tbeDTVXTss45xizLh2rPJeuC/0/3139312e3234312e31322e302f32322d3234203d3e20323633363633.roa
File:                     3139312e3234312e31322e302f32322d3234203d3e20323633363633.roa (raw, json)
Hash identifier:          DqN020uXxN07XJtyOt6AgPtmKCqLtyCw4Z7PjOWxnDM=
Subject key identifier:   26:03:C7:F1:D5:B7:F4:E5:AF:AC:12:6E:79:D4:5B:34:9C:A4:FF:80
Certificate issuer:       /CN=9CC5CFF7E9D168495B51D83F3C355F10409474FF
Certificate serial:       34D86C452583F84A32BABD867D45C5F0264379
Authority key identifier: 9C:C5:CF:F7:E9:D1:68:49:5B:51:D8:3F:3C:35:5F:10:40:94:74:FF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9CC5CFF7E9D168495B51D83F3C355F10409474FF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7oVrcem1iPXHJTcEEqq1tbeDTVXTss45xizLh2rPJeuC/0/3139312e3234312e31322e302f32322d3234203d3e20323633363633.roa
Signing time:             Fri 22 Mar 2024 14:32:11 +0000
ROA not before:           Fri 22 Mar 2024 14:27:11 +0000
ROA not after:            Fri 21 Mar 2025 14:32:11 +0000
asID:                     263663
IP address blocks:        191.241.12.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:d8:6c:45:25:83:f8:4a:32:ba:bd:86:7d:45:c5:f0:26:43:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9CC5CFF7E9D168495B51D83F3C355F10409474FF
        Validity
            Not Before: Mar 22 14:27:11 2024 GMT
            Not After : Mar 21 14:32:11 2025 GMT
        Subject: CN=2603C7F1D5B7F4E5AFAC126E79D45B349CA4FF80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:74:a7:ac:27:1d:b2:a4:6f:e5:e7:57:6a:7e:
                    70:46:1a:a6:72:d7:e2:81:e6:ed:fc:b5:98:d8:2a:
                    0a:96:01:92:57:10:ee:f9:7f:9e:c3:27:ec:c8:e7:
                    6a:52:d4:a1:b9:2f:4d:cb:9c:41:47:02:ef:3e:85:
                    08:36:49:af:16:c7:b0:d7:e9:42:b4:9e:c0:1e:1e:
                    6d:f9:09:92:43:88:d4:76:10:bf:9c:94:5b:b1:3d:
                    94:23:1c:ad:e4:dd:89:36:d1:2e:1d:8e:4a:e4:72:
                    88:a6:44:a9:4a:46:91:39:19:0f:c4:89:07:0a:79:
                    5d:67:6a:fa:b6:96:96:b2:86:a6:eb:4a:d8:a5:b4:
                    b5:a3:04:22:da:e4:d0:03:05:00:28:64:ca:db:79:
                    16:0b:08:f3:8a:2f:36:47:99:e9:59:0d:df:59:c1:
                    f5:f3:99:e1:27:ef:85:a9:f7:f6:f2:41:ed:c5:58:
                    fe:85:fe:21:1b:89:08:38:a0:8a:bc:71:9e:62:a9:
                    d8:f2:6b:81:ac:90:28:a0:d9:fd:bd:5d:7e:7d:87:
                    2e:ed:75:a4:8e:e5:de:e9:49:4f:6a:98:14:28:47:
                    5f:26:2e:46:cd:92:05:0b:e8:9e:51:e3:8a:7c:54:
                    a4:27:ff:b0:b8:72:aa:23:c7:be:c7:2d:f0:21:78:
                    85:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:03:C7:F1:D5:B7:F4:E5:AF:AC:12:6E:79:D4:5B:34:9C:A4:FF:80
            X509v3 Authority Key Identifier:
                keyid:9C:C5:CF:F7:E9:D1:68:49:5B:51:D8:3F:3C:35:5F:10:40:94:74:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7oVrcem1iPXHJTcEEqq1tbeDTVXTss45xizLh2rPJeuC/0/9CC5CFF7E9D168495B51D83F3C355F10409474FF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9CC5CFF7E9D168495B51D83F3C355F10409474FF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7oVrcem1iPXHJTcEEqq1tbeDTVXTss45xizLh2rPJeuC/0/3139312e3234312e31322e302f32322d3234203d3e20323633363633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.241.12.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3f:c5:e2:b5:1e:f5:20:f6:23:1e:7c:cc:73:5c:98:a3:7f:1d:
         f0:7e:28:88:e9:82:e1:2b:3f:d2:04:36:f4:fb:8b:65:44:fc:
         ac:92:06:49:31:1a:57:d6:a8:5d:bf:1f:47:8f:a0:5b:15:19:
         68:35:16:9d:1a:3b:97:d9:56:c4:4c:f9:ae:8f:d5:d4:00:e5:
         24:6c:9a:a8:da:9c:0e:ba:87:4f:14:62:0c:bf:98:03:c8:86:
         c2:f3:ee:52:6f:d8:9f:c2:ae:5d:f3:49:59:43:fe:17:a4:9a:
         d2:95:db:ec:56:53:5e:90:be:d2:07:61:12:ca:a7:1e:11:0f:
         c3:5a:ce:b2:15:40:bd:6c:4f:49:5c:dc:aa:bb:40:21:26:7b:
         3d:ce:7a:45:0d:8e:93:49:16:a2:2d:bb:35:09:c6:cd:01:ad:
         74:64:d5:37:87:94:7d:a1:c8:1f:0d:25:ac:9e:15:df:1d:25:
         a5:06:a4:df:85:fd:6c:a8:08:23:ba:87:50:ee:7d:0c:5a:14:
         d1:e2:25:f5:71:70:92:c6:1b:4d:69:92:34:d3:4d:71:3d:3d:
         d2:dd:c6:9d:90:e5:43:dc:4a:67:a3:f6:b9:40:45:ee:a2:64:
         3d:3a:d2:70:db:2c:df:36:6a:c6:80:04:72:b0:c5:48:17:a0:
         b0:0d:6d:4d
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgITNNhsRSWD+Eoyur2GfUXF8CZDeTANBgkqhkiG9w0BAQsF
ADAzMTEwLwYDVQQDEyg5Q0M1Q0ZGN0U5RDE2ODQ5NUI1MUQ4M0YzQzM1NUYxMDQw
OTQ3NEZGMB4XDTI0MDMyMjE0MjcxMVoXDTI1MDMyMTE0MzIxMVowMzExMC8GA1UE
AxMoMjYwM0M3RjFENUI3RjRFNUFGQUMxMjZFNzlENDVCMzQ5Q0E0RkY4MDCCASIw
DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAJR0p6wnHbKkb+XnV2p+cEYapnLX
4oHm7fy1mNgqCpYBklcQ7vl/nsMn7MjnalLUobkvTcucQUcC7z6FCDZJrxbHsNfp
QrSewB4ebfkJkkOI1HYQv5yUW7E9lCMcreTdiTbRLh2OSuRyiKZEqUpGkTkZD8SJ
Bwp5XWdq+raWlrKGputK2KW0taMEItrk0AMFAChkytt5FgsI84ovNkeZ6VkN31nB
9fOZ4Sfvhan39vJB7cVY/oX+IRuJCDigirxxnmKp2PJrgayQKKDZ/b1dfn2HLu11
pI7l3ulJT2qYFChHXyYuRs2SBQvonlHjinxUpCf/sLhyqiPHvsct8CF4hR8CAwEA
AaOCAlEwggJNMB0GA1UdDgQWBBQmA8fx1bf05a+sEm551Fs0nKT/gDAfBgNVHSME
GDAWgBScxc/36dFoSVtR2D88NV8QQJR0/zAOBgNVHQ8BAf8EBAMCB4AwgZQGA1Ud
HwSBjDCBiTCBhqCBg6CBgIZ+cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby83b1ZyY2VtMWlQWEhKVGNFRXFxMXRiZURUVlhUc3M0NXhpekxoMnJQSmV1
Qy8wLzlDQzVDRkY3RTlEMTY4NDk1QjUxRDgzRjNDMzU1RjEwNDA5NDc0RkYuY3Js
MHgGCCsGAQUFBwEBBGwwajBoBggrBgEFBQcwAoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvOUNDNUNGRjdFOUQxNjg0OTVC
NTFEODNGM0MzNTVGMTA0MDk0NzRGRi5jZXIwga4GCCsGAQUFBwELBIGhMIGeMIGb
BggrBgEFBQcwC4aBjnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
N29WcmNlbTFpUFhISlRjRUVxcTF0YmVEVFZYVHNzNDV4aXpMaDJyUEpldUMvMC8z
MTM5MzEyZTMyMzQzMTJlMzEzMjJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDMyMzYz
MzM2MzYzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcB
BwEB/wQQMA4wDAQCAAEwBgMEAr/xDDANBgkqhkiG9w0BAQsFAAOCAQEAP8XitR71
IPYjHnzMc1yYo38d8H4oiOmC4Ss/0gQ29PuLZUT8rJIGSTEaV9aoXb8fR4+gWxUZ
aDUWnRo7l9lWxEz5ro/V1ADlJGyaqNqcDrqHTxRiDL+YA8iGwvPuUm/Yn8KuXfNJ
WUP+F6Sa0pXb7FZTXpC+0gdhEsqnHhEPw1rOshVAvWxPSVzcqrtAISZ7Pc56RQ2O
k0kWoi27NQnGzQGtdGTVN4eUfaHIHw0lrJ4V3x0lpQak34X9bKgII7qHUO59DFoU
0eIl9XFwksYbTWmSNNNNcT090t3GnZDlQ9xKZ6P2uUBF7qJkPTrScNss3zZqxoAE
crDFSBegsA1tTQ==
-----END CERTIFICATE-----
Generated at Tue Apr 22 05:33:35 2025 by rpki-client