Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7rAziowefNmFrwbW51SyPKaD3H1wNUj1JwUPwgujmacU/1/3136382e3139352e3131322e302f32322d3234203d3e20323032.roa
File:                     3136382e3139352e3131322e302f32322d3234203d3e20323032.roa (raw, json)
Hash identifier:          yX2pjwIl2SZrmEsPIwqFilhfb6TeLJ2c/gKikJIjC6Y=
Subject key identifier:   51:BF:5D:44:67:9B:2A:46:9C:A5:05:E3:FC:29:A0:8E:96:6D:32:EB
Certificate issuer:       /CN=2444B4EFFAB2FF62A2518F28FA3AF906FF80C277
Certificate serial:       31F893B10F85B02E34751D5059425C3BE515143A
Authority key identifier: 24:44:B4:EF:FA:B2:FF:62:A2:51:8F:28:FA:3A:F9:06:FF:80:C2:77
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2444B4EFFAB2FF62A2518F28FA3AF906FF80C277.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7rAziowefNmFrwbW51SyPKaD3H1wNUj1JwUPwgujmacU/1/3136382e3139352e3131322e302f32322d3234203d3e20323032.roa
Signing time:             Mon 19 Dec 2022 18:53:26 +0000
ROA not before:           Mon 19 Dec 2022 18:48:26 +0000
ROA not after:            Mon 18 Dec 2023 18:53:26 +0000
asID:                     202
IP address blocks:        168.195.112.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:f8:93:b1:0f:85:b0:2e:34:75:1d:50:59:42:5c:3b:e5:15:14:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2444B4EFFAB2FF62A2518F28FA3AF906FF80C277
        Validity
            Not Before: Dec 19 18:48:26 2022 GMT
            Not After : Dec 18 18:53:26 2023 GMT
        Subject: CN=51BF5D44679B2A469CA505E3FC29A08E966D32EB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:cd:33:e0:d5:16:03:a7:4b:7f:58:c6:cb:58:
                    18:c3:cd:f0:07:b2:db:cb:82:49:db:41:79:18:d3:
                    f2:df:9e:8c:4c:43:e0:c4:1c:68:c6:29:ff:ea:2d:
                    74:f5:40:6a:ac:68:e0:e2:23:20:84:92:82:a6:53:
                    4a:32:e9:7c:92:2f:9e:88:9f:e6:1f:3c:19:2f:d1:
                    e5:2e:24:06:27:4b:b4:ff:2f:bb:da:42:8b:d4:a3:
                    56:8f:df:35:ce:21:ea:cd:8e:5d:fe:db:80:f5:c1:
                    b4:31:85:5a:3d:fe:d7:47:82:ce:5c:da:b9:a4:fe:
                    7e:c6:2b:69:48:b1:26:47:6e:26:85:e9:f8:9b:94:
                    d4:e2:5e:f2:3a:fe:17:e3:33:dc:0d:d1:e8:73:8e:
                    3f:bd:ce:44:5c:1b:27:79:27:eb:b9:b7:a1:5d:6d:
                    b1:36:1b:7e:6d:9c:92:3c:ea:ec:09:dd:05:54:a5:
                    da:b8:ff:39:01:e5:25:ed:75:72:fc:85:8c:0b:cb:
                    1b:34:d3:c0:9d:53:5a:bb:9d:8d:f4:47:53:12:b7:
                    6d:a5:14:78:8c:dd:df:4b:04:51:27:f0:dd:ae:24:
                    a8:63:a2:a3:df:5a:49:07:7b:79:8d:e8:50:44:df:
                    d8:7c:70:0c:b9:0b:c0:fb:b3:56:dc:43:96:c1:e6:
                    38:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:BF:5D:44:67:9B:2A:46:9C:A5:05:E3:FC:29:A0:8E:96:6D:32:EB
            X509v3 Authority Key Identifier:
                keyid:24:44:B4:EF:FA:B2:FF:62:A2:51:8F:28:FA:3A:F9:06:FF:80:C2:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7rAziowefNmFrwbW51SyPKaD3H1wNUj1JwUPwgujmacU/1/2444B4EFFAB2FF62A2518F28FA3AF906FF80C277.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2444B4EFFAB2FF62A2518F28FA3AF906FF80C277.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7rAziowefNmFrwbW51SyPKaD3H1wNUj1JwUPwgujmacU/1/3136382e3139352e3131322e302f32322d3234203d3e20323032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.195.112.0/22

    Signature Algorithm: sha256WithRSAEncryption
         cd:47:c1:f5:3d:f4:56:96:c1:82:3a:5a:21:4f:34:56:00:37:
         97:1a:3e:96:56:82:f0:59:50:6b:48:97:af:bb:86:dd:14:30:
         9e:be:97:dd:13:9f:d9:4e:59:f3:33:37:98:26:c6:77:49:90:
         0e:19:4a:02:42:40:6c:fb:ae:58:df:51:64:c7:c2:4c:53:ca:
         4e:40:0d:e0:55:f1:f6:ff:22:8f:2b:e8:26:a9:c2:bb:2a:08:
         b1:35:ad:07:8c:d1:25:61:f0:11:07:14:f6:70:a4:09:60:a5:
         28:c5:8d:bf:99:f6:fb:d4:bb:69:74:5f:f4:99:1b:b6:63:60:
         14:34:85:8f:2e:a2:65:11:aa:35:17:ca:12:f5:82:57:12:8b:
         49:c8:25:63:81:3e:57:ac:f5:ea:90:3c:7e:a8:a8:b4:6e:71:
         a8:15:f6:81:41:f0:56:cc:4a:e7:14:21:1e:03:d2:e3:61:ee:
         23:a4:30:e9:1e:29:da:fe:22:aa:24:93:39:db:32:13:00:b6:
         fa:be:2e:a0:55:46:c3:87:9d:2b:e2:b3:7d:89:0d:c5:cf:a5:
         8b:22:23:64:e7:74:23:7e:8b:a3:77:cb:48:a1:85:60:7b:82:
         50:29:44:4c:f2:21:f9:a2:79:e3:8d:ed:d6:04:a4:00:b2:43:
         19:26:5d:56
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUMfiTsQ+FsC40dR1QWUJcO+UVFDowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjQ0NEI0RUZGQUIyRkY2MkEyNTE4RjI4RkEzQUY5MDZG
RjgwQzI3NzAeFw0yMjEyMTkxODQ4MjZaFw0yMzEyMTgxODUzMjZaMDMxMTAvBgNV
BAMTKDUxQkY1RDQ0Njc5QjJBNDY5Q0E1MDVFM0ZDMjlBMDhFOTY2RDMyRUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqzTPg1RYDp0t/WMbLWBjDzfAH
stvLgknbQXkY0/LfnoxMQ+DEHGjGKf/qLXT1QGqsaODiIyCEkoKmU0oy6XySL56I
n+YfPBkv0eUuJAYnS7T/L7vaQovUo1aP3zXOIerNjl3+24D1wbQxhVo9/tdHgs5c
2rmk/n7GK2lIsSZHbiaF6fiblNTiXvI6/hfjM9wN0ehzjj+9zkRcGyd5J+u5t6Fd
bbE2G35tnJI86uwJ3QVUpdq4/zkB5SXtdXL8hYwLyxs008CdU1q7nY30R1MSt22l
FHiM3d9LBFEn8N2uJKhjoqPfWkkHe3mN6FBE39h8cAy5C8D7s1bcQ5bB5jidAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUUb9dRGebKkacpQXj/CmgjpZtMuswHwYDVR0j
BBgwFoAUJES07/qy/2KiUY8o+jr5Bv+AwncwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vN3JBemlvd2VmTm1GcndiVzUxU3lQS2FEM0gxd05VajFKd1VQd2d1am1h
Y1UvMS8yNDQ0QjRFRkZBQjJGRjYyQTI1MThGMjhGQTNBRjkwNkZGODBDMjc3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzI0NDRCNEVGRkFCMkZGNjJB
MjUxOEYyOEZBM0FGOTA2RkY4MEMyNzcuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzdyQXppb3dlZk5tRnJ3Ylc1MVN5UEthRDNIMXdOVWoxSndVUHdndWptYWNVLzEv
MzEzNjM4MmUzMTM5MzUyZTMxMzEzMjJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDMy
MzAzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEAqjDcDANBgkqhkiG9w0BAQsFAAOCAQEAzUfB9T30VpbB
gjpaIU80VgA3lxo+llaC8FlQa0iXr7uG3RQwnr6X3ROf2U5Z8zM3mCbGd0mQDhlK
AkJAbPuuWN9RZMfCTFPKTkAN4FXx9v8ijyvoJqnCuyoIsTWtB4zRJWHwEQcU9nCk
CWClKMWNv5n2+9S7aXRf9JkbtmNgFDSFjy6iZRGqNRfKEvWCVxKLScglY4E+V6z1
6pA8fqiotG5xqBX2gUHwVsxK5xQhHgPS42HuI6Qw6R4p2v4iqiSTOdsyEwC2+r4u
oFVGw4edK+KzfYkNxc+liyIjZOd0I36Lo3fLSKGFYHuCUClETPIh+aJ5443t1gSk
ALJDGSZdVg==
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:20:29 2025 by rpki-client