Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7rAziowefNmFrwbW51SyPKaD3H1wNUj1JwUPwgujmacU/1/3136382e3139352e3131322e302f32322d3332203d3e20323032.roa
File:                     3136382e3139352e3131322e302f32322d3332203d3e20323032.roa (raw, json)
Hash identifier:          6SH8RsS3UyQ7XxtyiBWvwndEiF83z6o/KPux0vrXr6k=
Subject key identifier:   B2:25:DF:5A:93:25:B4:18:A5:E6:B6:AB:8C:EF:4F:A2:79:CC:7B:37
Certificate issuer:       /CN=2444B4EFFAB2FF62A2518F28FA3AF906FF80C277
Certificate serial:       6F4826242E30510DF6DDB0F323D485606050051D
Authority key identifier: 24:44:B4:EF:FA:B2:FF:62:A2:51:8F:28:FA:3A:F9:06:FF:80:C2:77
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2444B4EFFAB2FF62A2518F28FA3AF906FF80C277.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7rAziowefNmFrwbW51SyPKaD3H1wNUj1JwUPwgujmacU/1/3136382e3139352e3131322e302f32322d3332203d3e20323032.roa
Signing time:             Thu 23 Nov 2023 17:10:16 +0000
ROA not before:           Thu 23 Nov 2023 17:05:16 +0000
ROA not after:            Thu 21 Nov 2024 17:10:16 +0000
asID:                     202
IP address blocks:        168.195.112.0/22 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:48:26:24:2e:30:51:0d:f6:dd:b0:f3:23:d4:85:60:60:50:05:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2444B4EFFAB2FF62A2518F28FA3AF906FF80C277
        Validity
            Not Before: Nov 23 17:05:16 2023 GMT
            Not After : Nov 21 17:10:16 2024 GMT
        Subject: CN=B225DF5A9325B418A5E6B6AB8CEF4FA279CC7B37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:ab:b5:cf:8e:9e:e1:1a:b0:e9:0c:36:ad:3b:
                    be:9e:92:8d:e4:bd:3f:3b:9e:7f:02:1c:59:84:8c:
                    ea:ef:e7:de:e4:a3:a5:6f:bd:87:fa:96:cd:0e:fc:
                    46:20:f4:59:ae:4e:28:6e:08:63:26:14:22:4c:c9:
                    f4:de:f1:75:4d:88:0c:7b:90:9a:45:e8:cf:85:60:
                    a9:13:1f:26:e7:94:2d:74:ea:94:e8:39:78:6b:86:
                    98:f8:4b:29:97:d2:b2:44:09:2a:4c:e7:eb:d9:70:
                    09:5f:13:7c:32:47:eb:3d:ce:6a:3f:30:db:08:9f:
                    34:b3:6e:c5:d4:51:13:a5:13:7d:8e:2f:a2:3e:12:
                    5f:f6:54:7e:4e:5d:68:dd:8a:b6:d3:78:09:ac:ee:
                    b8:75:f5:28:bb:40:fc:d0:42:0d:01:20:76:0e:5d:
                    4e:e7:f4:03:15:94:26:d4:01:ac:a3:47:0f:e9:29:
                    86:c5:b2:8f:00:e0:5d:2c:de:c4:59:a2:af:3e:05:
                    fc:42:e6:b6:3a:18:4b:bc:45:b4:82:03:6f:35:ad:
                    18:bd:c3:90:df:50:e8:90:1c:1f:34:f2:8f:a5:b7:
                    61:e5:80:b8:2c:3f:ca:a3:f1:0d:f4:06:26:e5:54:
                    c2:86:5d:ae:91:ba:ac:06:00:40:13:06:8b:a1:56:
                    69:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:25:DF:5A:93:25:B4:18:A5:E6:B6:AB:8C:EF:4F:A2:79:CC:7B:37
            X509v3 Authority Key Identifier:
                keyid:24:44:B4:EF:FA:B2:FF:62:A2:51:8F:28:FA:3A:F9:06:FF:80:C2:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7rAziowefNmFrwbW51SyPKaD3H1wNUj1JwUPwgujmacU/1/2444B4EFFAB2FF62A2518F28FA3AF906FF80C277.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2444B4EFFAB2FF62A2518F28FA3AF906FF80C277.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7rAziowefNmFrwbW51SyPKaD3H1wNUj1JwUPwgujmacU/1/3136382e3139352e3131322e302f32322d3332203d3e20323032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.195.112.0/22

    Signature Algorithm: sha256WithRSAEncryption
         58:b9:c9:0f:a8:dc:ef:7c:81:49:b8:c7:27:b6:32:ce:df:a6:
         68:cc:d7:0f:6b:99:50:2e:40:f5:73:e5:c7:29:59:6a:d9:bb:
         30:ef:d7:c1:ed:50:ed:ce:bf:71:30:1c:a6:c4:80:41:65:31:
         07:5f:f6:3a:48:02:e3:59:c9:a0:2e:d7:b4:3f:0a:2e:6f:5a:
         b7:f7:05:35:2a:b7:e5:78:6e:92:65:3b:e0:e9:c8:92:6a:55:
         08:34:ab:7a:ec:12:4f:91:39:3b:ee:62:4a:79:ff:72:af:79:
         7a:0e:0d:91:f9:cf:1b:2f:9e:b3:1f:70:2c:65:06:34:4a:eb:
         7a:13:36:9d:6a:8e:44:19:4a:fa:18:a7:7e:93:4f:6e:6d:c9:
         67:3d:8d:ed:7f:13:02:32:90:ab:3f:8f:0a:ed:0b:57:4c:88:
         03:0c:5b:45:d8:d8:3d:75:c5:ea:6c:d2:6d:78:8d:70:13:30:
         10:85:98:1d:e4:a8:fa:1c:58:90:7d:90:96:f4:db:5a:b1:fa:
         9e:61:e6:22:7d:e2:36:d8:ab:e7:55:84:ae:46:f4:78:13:8d:
         4b:7b:0f:7c:2e:7e:ee:8e:5e:2a:f3:d5:b6:e5:db:19:14:8b:
         cb:99:bc:f7:f1:2d:8d:2a:df:cd:ea:1c:62:79:06:d5:58:8d:
         c2:cb:e9:75
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUb0gmJC4wUQ323bDzI9SFYGBQBR0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjQ0NEI0RUZGQUIyRkY2MkEyNTE4RjI4RkEzQUY5MDZG
RjgwQzI3NzAeFw0yMzExMjMxNzA1MTZaFw0yNDExMjExNzEwMTZaMDMxMTAvBgNV
BAMTKEIyMjVERjVBOTMyNUI0MThBNUU2QjZBQjhDRUY0RkEyNzlDQzdCMzcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkq7XPjp7hGrDpDDatO76eko3k
vT87nn8CHFmEjOrv597ko6VvvYf6ls0O/EYg9FmuTihuCGMmFCJMyfTe8XVNiAx7
kJpF6M+FYKkTHybnlC106pToOXhrhpj4SymX0rJECSpM5+vZcAlfE3wyR+s9zmo/
MNsInzSzbsXUUROlE32OL6I+El/2VH5OXWjdirbTeAms7rh19Si7QPzQQg0BIHYO
XU7n9AMVlCbUAayjRw/pKYbFso8A4F0s3sRZoq8+BfxC5rY6GEu8RbSCA281rRi9
w5DfUOiQHB808o+lt2HlgLgsP8qj8Q30BiblVMKGXa6RuqwGAEATBouhVmmNAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUsiXfWpMltBil5rarjO9PonnMezcwHwYDVR0j
BBgwFoAUJES07/qy/2KiUY8o+jr5Bv+AwncwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vN3JBemlvd2VmTm1GcndiVzUxU3lQS2FEM0gxd05VajFKd1VQd2d1am1h
Y1UvMS8yNDQ0QjRFRkZBQjJGRjYyQTI1MThGMjhGQTNBRjkwNkZGODBDMjc3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzI0NDRCNEVGRkFCMkZGNjJB
MjUxOEYyOEZBM0FGOTA2RkY4MEMyNzcuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzdyQXppb3dlZk5tRnJ3Ylc1MVN5UEthRDNIMXdOVWoxSndVUHdndWptYWNVLzEv
MzEzNjM4MmUzMTM5MzUyZTMxMzEzMjJlMzAyZjMyMzIyZDMzMzIyMDNkM2UyMDMy
MzAzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEAqjDcDANBgkqhkiG9w0BAQsFAAOCAQEAWLnJD6jc73yB
SbjHJ7Yyzt+maMzXD2uZUC5A9XPlxylZatm7MO/Xwe1Q7c6/cTAcpsSAQWUxB1/2
OkgC41nJoC7XtD8KLm9at/cFNSq35XhukmU74OnIkmpVCDSreuwST5E5O+5iSnn/
cq95eg4NkfnPGy+esx9wLGUGNErrehM2nWqORBlK+hinfpNPbm3JZz2N7X8TAjKQ
qz+PCu0LV0yIAwxbRdjYPXXF6mzSbXiNcBMwEIWYHeSo+hxYkH2QlvTbWrH6nmHm
In3iNtir51WErkb0eBONS3sPfC5+7o5eKvPVtuXbGRSLy5m89/EtjSrfzeocYnkG
1ViNwsvpdQ==
-----END CERTIFICATE-----
Generated at Fri Mar 14 02:12:25 2025 by rpki-client