Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/C7d4bFfKuVzU8dxoCSqvsD3UBWkVaDwuurLqHfZWEDoc/0/3136382e3132312e36382e302f32332d3233203d3e20323635333030.roa
File:                     3136382e3132312e36382e302f32332d3233203d3e20323635333030.roa (raw, json)
Hash identifier:          ttfjsDEwRUu4zIez2TaguV9NCiVgSXKqyXeT0EKz/yM=
Subject key identifier:   1A:2F:13:08:80:57:43:F8:42:B1:8B:62:DF:97:C2:A2:E1:AB:10:DF
Certificate issuer:       /CN=FA878ADB9FDAB7635D897E861584C927DCBA2827
Certificate serial:       40644BA025A7505EFB8F15EF7792C660962C7EF0
Authority key identifier: FA:87:8A:DB:9F:DA:B7:63:5D:89:7E:86:15:84:C9:27:DC:BA:28:27
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FA878ADB9FDAB7635D897E861584C927DCBA2827.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C7d4bFfKuVzU8dxoCSqvsD3UBWkVaDwuurLqHfZWEDoc/0/3136382e3132312e36382e302f32332d3233203d3e20323635333030.roa
Signing time:             Wed 18 Dec 2024 04:11:08 +0000
ROA not before:           Wed 18 Dec 2024 04:06:08 +0000
ROA not after:            Wed 17 Dec 2025 04:11:08 +0000
asID:                     265300
IP address blocks:        168.121.68.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:64:4b:a0:25:a7:50:5e:fb:8f:15:ef:77:92:c6:60:96:2c:7e:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FA878ADB9FDAB7635D897E861584C927DCBA2827
        Validity
            Not Before: Dec 18 04:06:08 2024 GMT
            Not After : Dec 17 04:11:08 2025 GMT
        Subject: CN=1A2F1308805743F842B18B62DF97C2A2E1AB10DF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:5a:7a:91:5f:6d:2d:32:f4:52:14:78:6a:08:
                    9a:18:7b:21:3e:56:0a:a1:13:1f:86:38:16:48:57:
                    7e:d4:76:64:bf:71:3e:5f:ce:98:17:72:fa:92:74:
                    d9:53:6e:c6:75:5f:65:82:43:06:de:a3:31:0a:1c:
                    11:c2:cd:82:19:cc:15:ce:cc:01:62:7e:d5:6d:1a:
                    e4:51:24:04:a1:fb:67:a5:1d:7e:be:85:9d:d5:e2:
                    f4:74:c6:63:64:cf:28:8a:e7:f5:08:f4:20:92:55:
                    9f:66:39:49:66:9e:96:31:3b:62:a0:8d:13:c1:9f:
                    3d:30:94:da:80:4f:f2:75:f5:99:7d:b1:30:1f:04:
                    c2:43:c9:ef:1c:af:5c:59:83:b1:f6:fa:f7:b3:8a:
                    9d:40:fe:f8:82:f6:73:37:c9:59:21:bb:ee:70:9e:
                    94:63:91:52:77:13:f7:7d:17:21:68:3c:a0:d9:e2:
                    5b:ad:a9:5d:60:df:f8:e9:46:13:bd:ba:17:ba:83:
                    d5:90:6e:92:0b:0c:13:fb:89:78:87:db:c8:1c:ae:
                    f2:b5:ad:66:d4:8f:e9:ef:17:5e:60:ad:88:57:d8:
                    6f:ad:a8:76:f6:6f:bc:2a:31:38:fa:0a:f1:95:02:
                    4c:a9:1d:cb:d8:4a:c2:4d:47:2b:e9:fb:83:2f:cb:
                    75:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:2F:13:08:80:57:43:F8:42:B1:8B:62:DF:97:C2:A2:E1:AB:10:DF
            X509v3 Authority Key Identifier:
                keyid:FA:87:8A:DB:9F:DA:B7:63:5D:89:7E:86:15:84:C9:27:DC:BA:28:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C7d4bFfKuVzU8dxoCSqvsD3UBWkVaDwuurLqHfZWEDoc/0/FA878ADB9FDAB7635D897E861584C927DCBA2827.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FA878ADB9FDAB7635D897E861584C927DCBA2827.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C7d4bFfKuVzU8dxoCSqvsD3UBWkVaDwuurLqHfZWEDoc/0/3136382e3132312e36382e302f32332d3233203d3e20323635333030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.121.68.0/23

    Signature Algorithm: sha256WithRSAEncryption
         39:69:2c:08:5b:54:46:e5:ed:9f:de:b0:78:8e:9d:75:81:fc:
         ac:91:24:96:f8:7e:ff:17:22:93:c5:91:bc:b1:dd:da:34:07:
         df:88:9f:06:d5:9a:75:c1:c4:d6:4b:3a:04:d1:be:5e:48:3e:
         95:67:d2:64:68:cb:a6:5d:e3:c0:ff:a7:54:79:d4:c2:cd:f1:
         47:dd:72:c3:44:1e:8d:2c:cf:62:b9:9a:55:00:a1:a4:b0:a7:
         98:03:07:4a:fc:78:d6:8a:3e:70:79:1d:a4:e1:f3:f6:cd:43:
         3a:07:86:7f:29:d4:fb:4e:4a:bf:48:64:ce:cd:d3:48:16:ff:
         d2:ff:71:b0:15:0c:fb:7a:e0:3a:ad:9f:fe:6d:b7:d9:f3:56:
         72:d3:d8:b2:a5:2f:9b:6a:3f:49:fd:85:a5:3e:64:49:70:34:
         32:f5:1f:2b:39:df:d3:5e:cf:7f:ec:93:ef:72:3b:72:c2:f7:
         68:39:44:79:fe:71:41:aa:39:02:ce:17:27:32:9d:9a:63:ee:
         34:aa:18:e6:b7:e3:66:81:03:34:c6:c4:fe:75:31:73:bf:54:
         03:a4:5d:80:9f:d3:b4:7d:3e:cd:80:05:47:f8:6a:06:41:18:
         c5:e1:0d:86:8f:ea:74:b4:66:a0:17:b6:25:ee:45:6b:bd:c2:
         e5:37:07:d7
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUQGRLoCWnUF77jxXvd5LGYJYsfvAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkE4NzhBREI5RkRBQjc2MzVEODk3RTg2MTU4NEM5MjdE
Q0JBMjgyNzAeFw0yNDEyMTgwNDA2MDhaFw0yNTEyMTcwNDExMDhaMDMxMTAvBgNV
BAMTKDFBMkYxMzA4ODA1NzQzRjg0MkIxOEI2MkRGOTdDMkEyRTFBQjEwREYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTWnqRX20tMvRSFHhqCJoYeyE+
VgqhEx+GOBZIV37UdmS/cT5fzpgXcvqSdNlTbsZ1X2WCQwbeozEKHBHCzYIZzBXO
zAFiftVtGuRRJASh+2elHX6+hZ3V4vR0xmNkzyiK5/UI9CCSVZ9mOUlmnpYxO2Kg
jRPBnz0wlNqAT/J19Zl9sTAfBMJDye8cr1xZg7H2+vezip1A/viC9nM3yVkhu+5w
npRjkVJ3E/d9FyFoPKDZ4lutqV1g3/jpRhO9uhe6g9WQbpILDBP7iXiH28gcrvK1
rWbUj+nvF15grYhX2G+tqHb2b7wqMTj6CvGVAkypHcvYSsJNRyvp+4Mvy3VPAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUGi8TCIBXQ/hCsYti35fCouGrEN8wHwYDVR0j
BBgwFoAU+oeK25/at2NdiX6GFYTJJ9y6KCcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQzdkNGJGZkt1VnpVOGR4b0NTcXZzRDNVQldrVmFEd3V1ckxxSGZaV0VE
b2MvMC9GQTg3OEFEQjlGREFCNzYzNUQ4OTdFODYxNTg0QzkyN0RDQkEyODI3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0ZBODc4QURCOUZEQUI3NjM1
RDg5N0U4NjE1ODRDOTI3RENCQTI4MjcuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0M3ZDRiRmZLdVZ6VThkeG9DU3F2c0QzVUJXa1ZhRHd1dXJMcUhmWldFRG9jLzAv
MzEzNjM4MmUzMTMyMzEyZTM2MzgyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzMjM2
MzUzMzMwMzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAGoeUQwDQYJKoZIhvcNAQELBQADggEBADlpLAhb
VEbl7Z/esHiOnXWB/KyRJJb4fv8XIpPFkbyx3do0B9+InwbVmnXBxNZLOgTRvl5I
PpVn0mRoy6Zd48D/p1R51MLN8UfdcsNEHo0sz2K5mlUAoaSwp5gDB0r8eNaKPnB5
HaTh8/bNQzoHhn8p1PtOSr9IZM7N00gW/9L/cbAVDPt64Dqtn/5tt9nzVnLT2LKl
L5tqP0n9haU+ZElwNDL1Hys539Nez3/sk+9yO3LC92g5RHn+cUGqOQLOFycynZpj
7jSqGOa342aBAzTGxP51MXO/VAOkXYCf07R9Ps2ABUf4agZBGMXhDYaP6nS0ZqAX
tiXuRWu9wuU3B9c=
-----END CERTIFICATE-----
Generated at Sat Apr 12 06:31:03 2025 by rpki-client