Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FHkLgcgBFTWGScNbM3oSB4tRjBURmqaEyciqEyoD2y6b/1/3139322e3134302e38342e302f32322d3232203d3e20323731313131.roa
File:                     3139322e3134302e38342e302f32322d3232203d3e20323731313131.roa (raw, json)
Hash identifier:          r0P7z6LIiX1sV9Kr1Yt2hvnsdgjvol9qQL8Jw0F/aE0=
Subject key identifier:   7A:9D:CE:40:1F:5D:FE:41:A7:62:00:06:31:79:63:B9:3A:79:B9:3D
Certificate issuer:       /CN=4A76AD5E8EDE48E8E0141FB450CC590B38DF818A
Certificate serial:       3FB6DC8487977FA4964D0F0FFFD8D900149C692F
Authority key identifier: 4A:76:AD:5E:8E:DE:48:E8:E0:14:1F:B4:50:CC:59:0B:38:DF:81:8A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4A76AD5E8EDE48E8E0141FB450CC590B38DF818A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FHkLgcgBFTWGScNbM3oSB4tRjBURmqaEyciqEyoD2y6b/1/3139322e3134302e38342e302f32322d3232203d3e20323731313131.roa
Signing time:             Thu 06 Mar 2025 18:55:00 +0000
ROA not before:           Thu 06 Mar 2025 18:50:00 +0000
ROA not after:            Thu 05 Mar 2026 18:55:00 +0000
asID:                     271111
IP address blocks:        192.140.84.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:b6:dc:84:87:97:7f:a4:96:4d:0f:0f:ff:d8:d9:00:14:9c:69:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4A76AD5E8EDE48E8E0141FB450CC590B38DF818A
        Validity
            Not Before: Mar  6 18:50:00 2025 GMT
            Not After : Mar  5 18:55:00 2026 GMT
        Subject: CN=7A9DCE401F5DFE41A7620006317963B93A79B93D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:f3:c1:2c:89:77:79:d9:ae:70:50:4f:41:78:
                    96:87:a5:30:04:ea:18:14:63:f7:62:05:11:9f:3d:
                    dd:fb:16:33:f3:f7:f2:f8:61:c5:7a:42:e5:47:4e:
                    7c:35:da:13:b7:ca:e6:dc:c2:99:67:cc:34:ed:92:
                    70:bd:52:f6:c4:18:51:fd:b4:be:38:17:da:a7:dc:
                    47:bb:a5:cc:37:7f:dd:78:5f:cf:11:d0:b2:d1:07:
                    22:ad:5a:d4:55:ba:47:ee:83:0a:e0:2f:c0:29:03:
                    41:7e:a4:c6:d0:8a:df:c9:73:b9:fe:0b:68:d9:19:
                    94:31:dc:7d:6d:3b:bb:b0:ad:0a:36:46:5a:d8:ad:
                    98:0c:7e:82:d9:05:f1:62:ba:a6:25:a0:39:95:0c:
                    7e:fa:58:0c:ef:d5:77:5a:61:24:e1:06:c4:1a:d7:
                    47:e1:03:d8:92:71:d3:e8:9a:42:9c:74:63:76:90:
                    e2:b3:8b:ca:df:35:1e:e8:35:f5:8b:7a:c1:92:aa:
                    b5:33:ff:27:6d:99:be:b2:4e:da:f4:5b:eb:48:17:
                    88:72:fe:56:04:13:eb:fe:19:84:a7:12:ad:21:2d:
                    d2:00:d6:98:c0:d4:be:fa:6c:a1:8c:97:73:3c:8a:
                    4c:7a:ff:9e:c2:01:24:97:7f:65:9c:d2:5e:39:c5:
                    0d:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:9D:CE:40:1F:5D:FE:41:A7:62:00:06:31:79:63:B9:3A:79:B9:3D
            X509v3 Authority Key Identifier:
                keyid:4A:76:AD:5E:8E:DE:48:E8:E0:14:1F:B4:50:CC:59:0B:38:DF:81:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FHkLgcgBFTWGScNbM3oSB4tRjBURmqaEyciqEyoD2y6b/1/4A76AD5E8EDE48E8E0141FB450CC590B38DF818A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4A76AD5E8EDE48E8E0141FB450CC590B38DF818A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FHkLgcgBFTWGScNbM3oSB4tRjBURmqaEyciqEyoD2y6b/1/3139322e3134302e38342e302f32322d3232203d3e20323731313131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.140.84.0/22

    Signature Algorithm: sha256WithRSAEncryption
         66:12:60:99:2b:bc:dd:cd:d9:81:2e:10:70:df:2c:ff:12:9b:
         34:2d:c8:ac:f2:00:e1:3b:49:db:90:62:bb:ad:29:66:42:19:
         ee:56:5c:da:d4:36:c2:9b:e1:d1:4b:40:b3:91:1f:b1:99:8f:
         d8:d1:0f:20:74:bf:84:1b:ef:8b:52:a1:d5:e8:5c:f9:43:76:
         55:fc:fa:6d:5e:c2:e9:e7:f5:37:ee:98:40:7b:25:a1:12:44:
         ee:d5:39:51:7a:e8:ce:cb:2f:29:1a:c5:8e:0d:55:98:98:3a:
         a0:74:d7:39:2a:87:07:5b:f4:b6:9b:b5:c4:ff:c3:43:de:26:
         56:e4:3e:ff:ad:67:8c:40:00:55:53:94:1f:48:af:cf:70:0e:
         23:6a:0e:44:56:00:1e:66:b1:76:5d:ea:cd:42:5c:e0:8f:ed:
         51:9a:a9:d4:55:fc:12:c8:da:05:d5:66:fe:50:53:99:88:0e:
         61:e1:71:69:21:bc:29:ca:fa:22:c3:0f:bb:e8:96:95:73:f4:
         21:46:d2:6b:70:3a:50:90:25:a3:ac:4e:2a:28:2a:ff:b5:e0:
         44:7f:f5:31:36:e4:50:fd:30:f8:53:6f:16:e5:3f:61:7d:25:
         d2:a8:57:c9:60:a4:d0:18:79:2e:f4:52:53:00:af:65:7b:93:
         12:5c:f3:52
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUP7bchIeXf6SWTQ8P/9jZABScaS8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNEE3NkFENUU4RURFNDhFOEUwMTQxRkI0NTBDQzU5MEIz
OERGODE4QTAeFw0yNTAzMDYxODUwMDBaFw0yNjAzMDUxODU1MDBaMDMxMTAvBgNV
BAMTKDdBOURDRTQwMUY1REZFNDFBNzYyMDAwNjMxNzk2M0I5M0E3OUI5M0QwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQ88EsiXd52a5wUE9BeJaHpTAE
6hgUY/diBRGfPd37FjPz9/L4YcV6QuVHTnw12hO3yubcwplnzDTtknC9UvbEGFH9
tL44F9qn3Ee7pcw3f914X88R0LLRByKtWtRVukfugwrgL8ApA0F+pMbQit/Jc7n+
C2jZGZQx3H1tO7uwrQo2RlrYrZgMfoLZBfFiuqYloDmVDH76WAzv1XdaYSThBsQa
10fhA9iScdPomkKcdGN2kOKzi8rfNR7oNfWLesGSqrUz/ydtmb6yTtr0W+tIF4hy
/lYEE+v+GYSnEq0hLdIA1pjA1L76bKGMl3M8ikx6/57CASSXf2Wc0l45xQ17AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUep3OQB9d/kGnYgAGMXljuTp5uT0wHwYDVR0j
BBgwFoAUSnatXo7eSOjgFB+0UMxZCzjfgYowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRkhrTGdjZ0JGVFdHU2NOYk0zb1NCNHRSakJVUm1xYUV5Y2lxRXlvRDJ5
NmIvMS80QTc2QUQ1RThFREU0OEU4RTAxNDFGQjQ1MENDNTkwQjM4REY4MThBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzRBNzZBRDVFOEVERTQ4RThF
MDE0MUZCNDUwQ0M1OTBCMzhERjgxOEEuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0ZIa0xnY2dCRlRXR1NjTmJNM29TQjR0UmpCVVJtcWFFeWNpcUV5b0QyeTZiLzEv
MzEzOTMyMmUzMTM0MzAyZTM4MzQyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzMjM3
MzEzMTMxMzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBALAjFQwDQYJKoZIhvcNAQELBQADggEBAGYSYJkr
vN3N2YEuEHDfLP8SmzQtyKzyAOE7SduQYrutKWZCGe5WXNrUNsKb4dFLQLORH7GZ
j9jRDyB0v4Qb74tSodXoXPlDdlX8+m1ewunn9TfumEB7JaESRO7VOVF66M7LLyka
xY4NVZiYOqB01zkqhwdb9LabtcT/w0PeJlbkPv+tZ4xAAFVTlB9Ir89wDiNqDkRW
AB5msXZd6s1CXOCP7VGaqdRV/BLI2gXVZv5QU5mIDmHhcWkhvCnK+iLDD7volpVz
9CFG0mtwOlCQJaOsTiooKv+14ER/9TE25FD9MPhTbxblP2F9JdKoV8lgpNAYeS70
UlMAr2V7kxJc81I=
-----END CERTIFICATE-----
Generated at Sun Apr 6 02:53:49 2025 by rpki-client