Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A4JCSsRQtVzxKtKwE9zfEFeggccVV8NDRCVJad8wwdvm/0/3139322e3134342e36382e302f32322d3332203d3e20323636313536.roa
File:                     3139322e3134342e36382e302f32322d3332203d3e20323636313536.roa (raw, json)
Hash identifier:          v09dBpnis3sRvuV2FQPWYEAhJ4J7lJymLwRybO6AfRM=
Subject key identifier:   CD:F3:83:FD:0C:DE:AA:E2:33:80:EB:D0:BA:6A:E8:E5:AC:51:25:E2
Certificate issuer:       /CN=F4DA99F0BF900653CEF6C8BCC8C14BD016DEBDA1
Certificate serial:       8286AD59B07DB19C99B0AE6E39BCCB808DC0F9
Authority key identifier: F4:DA:99:F0:BF:90:06:53:CE:F6:C8:BC:C8:C1:4B:D0:16:DE:BD:A1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F4DA99F0BF900653CEF6C8BCC8C14BD016DEBDA1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A4JCSsRQtVzxKtKwE9zfEFeggccVV8NDRCVJad8wwdvm/0/3139322e3134342e36382e302f32322d3332203d3e20323636313536.roa
Signing time:             Thu 15 Feb 2024 05:03:38 +0000
ROA not before:           Thu 15 Feb 2024 04:58:38 +0000
ROA not after:            Thu 13 Feb 2025 05:03:38 +0000
asID:                     266156
IP address blocks:        192.144.68.0/22 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            82:86:ad:59:b0:7d:b1:9c:99:b0:ae:6e:39:bc:cb:80:8d:c0:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F4DA99F0BF900653CEF6C8BCC8C14BD016DEBDA1
        Validity
            Not Before: Feb 15 04:58:38 2024 GMT
            Not After : Feb 13 05:03:38 2025 GMT
        Subject: CN=CDF383FD0CDEAAE23380EBD0BA6AE8E5AC5125E2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:65:21:02:5e:82:8d:30:d7:39:8b:ee:86:d4:
                    29:8a:fd:49:ef:b4:1c:b7:a8:dc:3d:8a:3d:fa:0d:
                    e8:c0:69:57:8a:98:94:ef:31:16:a7:7b:f0:c0:a8:
                    84:62:1e:fe:e4:79:bb:47:6f:05:07:f3:8a:37:c2:
                    1e:02:b9:55:e4:be:c7:ff:b5:73:17:cd:f4:1f:9b:
                    4e:7e:0c:d3:bb:a2:d1:de:55:9f:45:9a:56:e8:5b:
                    b2:32:89:f0:de:89:26:3f:8f:55:bb:ed:48:a9:8b:
                    27:d6:0e:36:ce:a0:5b:a6:25:6c:70:3a:12:3d:59:
                    2a:4e:5c:74:79:b2:88:3b:b3:22:e9:1a:0b:4f:10:
                    29:a2:aa:b8:96:87:a7:ab:8b:b6:16:5c:a3:a4:f7:
                    71:b8:25:89:6d:8a:80:ae:c8:a5:9b:b2:d8:01:31:
                    1d:50:a4:6a:70:b2:86:26:81:10:b6:41:d2:06:97:
                    a2:93:43:6a:d8:6d:b3:89:6a:93:e8:10:f1:e3:52:
                    f0:0d:0d:80:9e:b7:83:de:a3:e8:1d:85:9a:32:74:
                    cf:b9:8b:dd:ef:29:e7:db:8b:ba:4e:e6:05:1c:ed:
                    bb:c5:8a:cd:1b:ec:57:41:20:80:0f:ca:46:eb:a8:
                    18:69:62:54:db:19:20:0a:fc:58:84:37:49:3e:b1:
                    20:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:F3:83:FD:0C:DE:AA:E2:33:80:EB:D0:BA:6A:E8:E5:AC:51:25:E2
            X509v3 Authority Key Identifier:
                keyid:F4:DA:99:F0:BF:90:06:53:CE:F6:C8:BC:C8:C1:4B:D0:16:DE:BD:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A4JCSsRQtVzxKtKwE9zfEFeggccVV8NDRCVJad8wwdvm/0/F4DA99F0BF900653CEF6C8BCC8C14BD016DEBDA1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F4DA99F0BF900653CEF6C8BCC8C14BD016DEBDA1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A4JCSsRQtVzxKtKwE9zfEFeggccVV8NDRCVJad8wwdvm/0/3139322e3134342e36382e302f32322d3332203d3e20323636313536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.144.68.0/22

    Signature Algorithm: sha256WithRSAEncryption
         84:25:b1:ea:94:ad:c0:7f:c8:06:c9:08:96:15:44:8e:09:49:
         ab:2d:1f:ab:7d:8a:dd:9f:c3:20:a0:3a:ad:3c:15:02:14:f2:
         10:a1:19:bb:f0:e0:02:d9:29:dd:bf:87:38:a2:ef:06:a3:a4:
         99:ac:7e:7a:fe:00:05:d2:e1:22:fa:69:57:95:9b:32:28:47:
         14:7a:e0:64:39:2c:61:d2:06:9d:5b:4f:c1:af:4c:13:b5:5c:
         d0:91:cc:b4:7d:b4:d5:ca:20:ef:67:ca:69:dd:ff:76:bb:fa:
         51:2a:fb:5d:89:84:fd:77:1c:6a:66:8d:bc:8b:23:d0:c8:60:
         e6:43:85:d5:bb:eb:7e:a9:2b:fe:fb:e3:eb:68:58:df:11:4c:
         22:3e:e1:07:d1:73:3f:e7:91:a7:7c:d1:5b:64:e7:6b:36:6c:
         4b:fd:f8:3d:6f:fb:8b:04:b3:ca:76:b0:7a:bf:58:71:c7:83:
         65:fd:12:51:3e:73:48:9c:3e:01:65:ff:c1:29:f0:64:b9:b4:
         da:62:28:3f:22:a2:14:7c:e2:d1:5c:77:45:ef:0b:16:a3:a6:
         c7:64:b8:a7:eb:5a:ae:28:cf:e0:7d:03:30:06:9f:01:ee:9b:
         bd:c6:98:57:32:22:d2:e8:b7:05:01:65:a0:3d:3c:a5:de:91:
         4f:bc:d9:2e
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUAIKGrVmwfbGcmbCubjm8y4CNwPkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjREQTk5RjBCRjkwMDY1M0NFRjZDOEJDQzhDMTRCRDAx
NkRFQkRBMTAeFw0yNDAyMTUwNDU4MzhaFw0yNTAyMTMwNTAzMzhaMDMxMTAvBgNV
BAMTKENERjM4M0ZEMENERUFBRTIzMzgwRUJEMEJBNkFFOEU1QUM1MTI1RTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8ZSECXoKNMNc5i+6G1CmK/Unv
tBy3qNw9ij36DejAaVeKmJTvMRane/DAqIRiHv7kebtHbwUH84o3wh4CuVXkvsf/
tXMXzfQfm05+DNO7otHeVZ9FmlboW7IyifDeiSY/j1W77UipiyfWDjbOoFumJWxw
OhI9WSpOXHR5sog7syLpGgtPECmiqriWh6eri7YWXKOk93G4JYltioCuyKWbstgB
MR1QpGpwsoYmgRC2QdIGl6KTQ2rYbbOJapPoEPHjUvANDYCet4Peo+gdhZoydM+5
i93vKefbi7pO5gUc7bvFis0b7FdBIIAPykbrqBhpYlTbGSAK/FiEN0k+sSAnAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUzfOD/QzequIzgOvQumro5axRJeIwHwYDVR0j
BBgwFoAU9NqZ8L+QBlPO9si8yMFL0BbevaEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQTRKQ1NzUlF0Vnp4S3RLd0U5emZFRmVnZ2NjVlY4TkRSQ1ZKYWQ4d3dk
dm0vMC9GNERBOTlGMEJGOTAwNjUzQ0VGNkM4QkNDOEMxNEJEMDE2REVCREExLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0Y0REE5OUYwQkY5MDA2NTND
RUY2QzhCQ0M4QzE0QkQwMTZERUJEQTEuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0E0SkNTc1JRdFZ6eEt0S3dFOXpmRUZlZ2djY1ZWOE5EUkNWSmFkOHd3ZHZtLzAv
MzEzOTMyMmUzMTM0MzQyZTM2MzgyZTMwMmYzMjMyMmQzMzMyMjAzZDNlMjAzMjM2
MzYzMTM1MzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBALAkEQwDQYJKoZIhvcNAQELBQADggEBAIQlseqU
rcB/yAbJCJYVRI4JSastH6t9it2fwyCgOq08FQIU8hChGbvw4ALZKd2/hzii7waj
pJmsfnr+AAXS4SL6aVeVmzIoRxR64GQ5LGHSBp1bT8GvTBO1XNCRzLR9tNXKIO9n
ymnd/3a7+lEq+12JhP13HGpmjbyLI9DIYOZDhdW7636pK/774+toWN8RTCI+4QfR
cz/nkad80Vtk52s2bEv9+D1v+4sEs8p2sHq/WHHHg2X9ElE+c0icPgFl/8Ep8GS5
tNpiKD8iohR84tFcd0XvCxajpsdkuKfrWq4oz+B9AzAGnwHum73GmFcyItLotwUB
ZaA9PKXekU+82S4=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:25 2024 by rpki-client on console-ams.rpki-client.org