Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FFoFqBx7xSvSrj32ZF2zJtBqCLitEEGD2x49VqdQ5Sn4/0/3136382e3139342e3133392e302f32342d3234203d3e20323633333935.roa
File:                     3136382e3139342e3133392e302f32342d3234203d3e20323633333935.roa (raw, json)
Hash identifier:          7i14fwK67Ll2lcAxTT3dhybWEN4UNp/TZgoUjWWZsA4=
Subject key identifier:   7A:AD:A5:36:1A:37:8D:55:9A:B1:E1:58:8F:E3:26:07:A9:DC:99:AA
Certificate issuer:       /CN=67666492B102F21109D368673B2B20745692E1A8
Certificate serial:       5E68207DCEAB9FF4773C24E793485523963E5EA3
Authority key identifier: 67:66:64:92:B1:02:F2:11:09:D3:68:67:3B:2B:20:74:56:92:E1:A8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/67666492B102F21109D368673B2B20745692E1A8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FFoFqBx7xSvSrj32ZF2zJtBqCLitEEGD2x49VqdQ5Sn4/0/3136382e3139342e3133392e302f32342d3234203d3e20323633333935.roa
Signing time:             Sun 25 Dec 2022 17:22:17 +0000
ROA not before:           Sun 25 Dec 2022 17:17:17 +0000
ROA not after:            Sun 24 Dec 2023 17:22:17 +0000
asID:                     263395
IP address blocks:        168.194.139.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:68:20:7d:ce:ab:9f:f4:77:3c:24:e7:93:48:55:23:96:3e:5e:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67666492B102F21109D368673B2B20745692E1A8
        Validity
            Not Before: Dec 25 17:17:17 2022 GMT
            Not After : Dec 24 17:22:17 2023 GMT
        Subject: CN=7AADA5361A378D559AB1E1588FE32607A9DC99AA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:35:07:7d:bb:0f:2c:11:0c:e9:12:c0:92:f7:
                    86:b5:d5:36:9d:05:80:09:d9:6b:eb:4e:f6:17:91:
                    a5:56:62:12:b0:2f:4d:8e:f3:6a:21:66:6d:d9:0e:
                    bf:05:a7:de:ee:f1:c4:f7:ac:3d:dd:99:bb:08:79:
                    08:4f:41:9f:c5:af:94:44:ee:4d:58:43:5e:aa:d5:
                    47:bc:2a:b8:e6:84:04:76:b6:df:c4:e3:68:94:bf:
                    df:8f:60:82:b5:74:e0:00:0d:98:8b:a9:37:6b:3c:
                    aa:83:b2:73:79:88:84:a7:d4:bb:56:5b:2b:ed:f9:
                    f8:2c:3e:76:30:8a:e5:ab:26:2f:13:70:25:fa:56:
                    f9:3d:9c:6d:09:da:10:fe:29:9c:45:de:47:03:74:
                    01:28:d1:35:d4:43:57:89:6a:92:15:ed:78:06:77:
                    ff:e7:0d:f8:73:08:53:12:76:e7:f9:31:95:9d:44:
                    da:aa:de:64:89:5d:86:c3:24:49:87:09:3f:c9:f8:
                    1f:03:cd:69:81:0e:8c:2a:fe:64:82:31:93:d4:6f:
                    dc:d1:51:58:27:3a:3f:3d:02:2d:5a:8e:93:a0:c6:
                    9a:90:ce:7c:d6:59:95:7e:34:1d:bf:c7:b0:ae:8c:
                    ce:ba:a1:af:74:05:3d:40:db:ae:77:16:75:90:29:
                    1d:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:AD:A5:36:1A:37:8D:55:9A:B1:E1:58:8F:E3:26:07:A9:DC:99:AA
            X509v3 Authority Key Identifier:
                keyid:67:66:64:92:B1:02:F2:11:09:D3:68:67:3B:2B:20:74:56:92:E1:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FFoFqBx7xSvSrj32ZF2zJtBqCLitEEGD2x49VqdQ5Sn4/0/67666492B102F21109D368673B2B20745692E1A8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/67666492B102F21109D368673B2B20745692E1A8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FFoFqBx7xSvSrj32ZF2zJtBqCLitEEGD2x49VqdQ5Sn4/0/3136382e3139342e3133392e302f32342d3234203d3e20323633333935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.194.139.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7e:9e:b0:38:06:9d:7a:8a:37:fd:3d:3c:a0:57:7d:62:3f:a6:
         bf:13:c9:d2:bd:8c:4e:ff:7a:09:ee:65:96:98:0a:54:6f:f3:
         b7:df:d3:f0:07:ae:52:b3:a4:b4:95:86:2f:77:41:3e:c2:5d:
         bd:fb:2d:be:6e:2c:4e:20:9c:de:43:a7:d5:98:9b:87:99:2c:
         e3:14:e0:9f:2b:59:ce:fa:53:12:c5:c5:2d:f1:18:81:6b:dc:
         c3:94:75:68:84:1e:86:71:e4:1c:c8:07:06:3b:1a:05:db:34:
         43:7a:62:63:2a:b1:7f:6d:67:2b:b8:f6:c5:79:9c:13:b5:a3:
         35:38:cb:ef:fd:3a:f0:b7:2a:54:8a:98:1e:a4:23:48:09:02:
         e1:82:c9:32:66:2a:3b:5c:2b:68:9b:29:c5:be:99:51:8f:11:
         5b:6a:af:3f:24:01:a5:00:3b:15:0d:0d:25:eb:db:87:24:af:
         eb:20:3c:da:c0:6a:e1:01:be:d0:ba:bf:4d:62:20:c9:ce:68:
         8d:cd:82:47:2e:d1:49:2f:01:fc:42:93:67:36:6a:49:dd:b3:
         93:26:cd:19:8b:ec:e6:54:6c:bb:1a:59:22:fd:7b:87:b0:57:
         4c:57:85:ed:94:3b:6e:e3:00:9b:de:b2:43:6e:17:9d:57:60:
         65:23:92:9b
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUXmggfc6rn/R3PCTnk0hVI5Y+XqMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjc2NjY0OTJCMTAyRjIxMTA5RDM2ODY3M0IyQjIwNzQ1
NjkyRTFBODAeFw0yMjEyMjUxNzE3MTdaFw0yMzEyMjQxNzIyMTdaMDMxMTAvBgNV
BAMTKDdBQURBNTM2MUEzNzhENTU5QUIxRTE1ODhGRTMyNjA3QTlEQzk5QUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzNQd9uw8sEQzpEsCS94a11Tad
BYAJ2WvrTvYXkaVWYhKwL02O82ohZm3ZDr8Fp97u8cT3rD3dmbsIeQhPQZ/Fr5RE
7k1YQ16q1Ue8KrjmhAR2tt/E42iUv9+PYIK1dOAADZiLqTdrPKqDsnN5iISn1LtW
Wyvt+fgsPnYwiuWrJi8TcCX6Vvk9nG0J2hD+KZxF3kcDdAEo0TXUQ1eJapIV7XgG
d//nDfhzCFMSduf5MZWdRNqq3mSJXYbDJEmHCT/J+B8DzWmBDowq/mSCMZPUb9zR
UVgnOj89Ai1ajpOgxpqQznzWWZV+NB2/x7CujM66oa90BT1A2653FnWQKR2RAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUeq2lNho3jVWaseFYj+MmB6ncmaowHwYDVR0j
BBgwFoAUZ2ZkkrEC8hEJ02hnOysgdFaS4agwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRkZvRnFCeDd4U3ZTcmozMlpGMnpKdEJxQ0xpdEVFR0QyeDQ5VnFkUTVT
bjQvMC82NzY2NjQ5MkIxMDJGMjExMDlEMzY4NjczQjJCMjA3NDU2OTJFMUE4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzY3NjY2NDkyQjEwMkYyMTEw
OUQzNjg2NzNCMkIyMDc0NTY5MkUxQTguY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0ZGb0ZxQng3eFN2U3JqMzJaRjJ6SnRCcUNMaXRFRUdEMng0OVZxZFE1U240LzAv
MzEzNjM4MmUzMTM5MzQyZTMxMzMzOTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzYzMzMzMzkzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAKjCizANBgkqhkiG9w0BAQsFAAOCAQEAfp6w
OAadeoo3/T08oFd9Yj+mvxPJ0r2MTv96Ce5llpgKVG/zt9/T8AeuUrOktJWGL3dB
PsJdvfstvm4sTiCc3kOn1Zibh5ks4xTgnytZzvpTEsXFLfEYgWvcw5R1aIQehnHk
HMgHBjsaBds0Q3piYyqxf21nK7j2xXmcE7WjNTjL7/068LcqVIqYHqQjSAkC4YLJ
MmYqO1wraJspxb6ZUY8RW2qvPyQBpQA7FQ0NJevbhySv6yA82sBq4QG+0Lq/TWIg
yc5ojc2CRy7RSS8B/EKTZzZqSd2zkybNGYvs5lRsuxpZIv17h7BXTFeF7ZQ7buMA
m96yQ24XnVdgZSOSmw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:45 2024 by rpki-client on console-fra.rpki-client.org