Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fjb3NrgfueX1yRdhF1vvDP2iFdZoQAsesapos6P1afvN/0/3136382e3139342e3234382e302f32322d3234203d3e20323639333539.roa
File:                     3136382e3139342e3234382e302f32322d3234203d3e20323639333539.roa (raw, json)
Hash identifier:          ja/rdqD9uE8La01E9JjjLZyiXkDuoDasEJxX2nMPhEU=
Subject key identifier:   0C:F6:D6:21:04:78:30:63:ED:81:A9:10:18:41:93:1D:20:29:80:90
Certificate issuer:       /CN=793AA6D0CC0F6CFA0A23CA396BE713EF1AD67EB6
Certificate serial:       4C4F29CF553E71352BBD0B4CED155A053C79209D
Authority key identifier: 79:3A:A6:D0:CC:0F:6C:FA:0A:23:CA:39:6B:E7:13:EF:1A:D6:7E:B6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/793AA6D0CC0F6CFA0A23CA396BE713EF1AD67EB6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fjb3NrgfueX1yRdhF1vvDP2iFdZoQAsesapos6P1afvN/0/3136382e3139342e3234382e302f32322d3234203d3e20323639333539.roa
Signing time:             Tue 19 Nov 2024 18:58:15 +0000
ROA not before:           Tue 19 Nov 2024 18:53:15 +0000
ROA not after:            Tue 18 Nov 2025 18:58:15 +0000
asID:                     269359
IP address blocks:        168.194.248.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:4f:29:cf:55:3e:71:35:2b:bd:0b:4c:ed:15:5a:05:3c:79:20:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=793AA6D0CC0F6CFA0A23CA396BE713EF1AD67EB6
        Validity
            Not Before: Nov 19 18:53:15 2024 GMT
            Not After : Nov 18 18:58:15 2025 GMT
        Subject: CN=0CF6D62104783063ED81A9101841931D20298090
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:17:05:5c:6c:23:b0:4e:a4:6d:71:f3:fd:b7:
                    93:18:b4:2d:db:a7:dc:60:53:a0:aa:e9:a4:a1:70:
                    ae:95:f4:a5:96:54:26:7b:7f:b5:56:af:28:53:2d:
                    72:db:1d:5a:95:68:55:c6:4f:a7:db:5a:fc:da:ac:
                    e1:a9:69:1a:0b:33:b8:d5:cd:30:6e:92:ca:1a:4c:
                    79:51:bb:95:31:6e:5d:3f:2c:1c:ca:0c:e0:f8:a7:
                    98:7d:f5:7f:40:9f:db:a0:d6:5d:c3:76:63:04:bf:
                    03:74:5e:15:60:07:f8:49:19:e8:92:13:a3:a4:5b:
                    9f:be:99:a0:d4:b1:13:0a:97:5d:75:a8:ea:37:b9:
                    21:4d:72:b9:14:1b:9a:ca:69:4e:21:98:3f:94:90:
                    2e:5d:28:a6:ba:12:0d:b3:84:fc:8d:95:66:26:0b:
                    11:b1:aa:c9:9a:6f:a4:6b:28:b0:de:ee:42:84:9f:
                    4d:c0:9d:e2:24:ca:67:e5:08:4a:d7:d3:b0:6a:ae:
                    8d:47:e6:b8:9a:35:2d:5c:81:61:37:5d:88:ed:91:
                    60:b7:bc:ef:64:2b:8f:29:f3:ff:1e:31:49:67:dc:
                    00:7e:b0:9b:4b:2f:af:74:40:20:e7:7b:c9:8c:c2:
                    34:61:38:09:27:98:ae:40:24:01:ec:3b:29:51:aa:
                    7b:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:F6:D6:21:04:78:30:63:ED:81:A9:10:18:41:93:1D:20:29:80:90
            X509v3 Authority Key Identifier:
                keyid:79:3A:A6:D0:CC:0F:6C:FA:0A:23:CA:39:6B:E7:13:EF:1A:D6:7E:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fjb3NrgfueX1yRdhF1vvDP2iFdZoQAsesapos6P1afvN/0/793AA6D0CC0F6CFA0A23CA396BE713EF1AD67EB6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/793AA6D0CC0F6CFA0A23CA396BE713EF1AD67EB6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fjb3NrgfueX1yRdhF1vvDP2iFdZoQAsesapos6P1afvN/0/3136382e3139342e3234382e302f32322d3234203d3e20323639333539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.194.248.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7e:f1:82:89:e4:c2:50:f0:4b:9f:5a:f2:7b:ea:88:69:c5:12:
         2e:29:1c:d9:d8:1d:45:14:28:08:0b:f1:68:45:1e:11:f8:29:
         93:1e:cc:0c:e4:22:44:4d:b6:10:84:be:fd:a6:da:a0:6c:39:
         9f:6d:ff:9f:b3:30:0c:c4:20:75:b2:f5:f5:23:fd:4f:cc:95:
         fb:9a:83:35:b8:85:40:f7:70:2d:a2:b1:a0:ba:ca:fb:7b:72:
         c4:35:06:48:3c:ca:f1:80:7c:08:cf:e4:69:20:f8:bb:b4:55:
         5c:dc:6d:6e:b0:2c:c0:90:ae:59:95:f4:e3:d4:d7:a5:72:fb:
         20:ca:67:95:16:a8:fd:5b:94:b7:ee:a2:34:3b:fb:31:81:b1:
         01:2a:69:30:16:2f:2f:39:82:60:23:7c:d9:aa:9a:02:09:4f:
         ec:1d:65:72:4b:93:d1:14:db:aa:12:44:93:04:05:57:37:c7:
         a1:8e:06:68:ae:4a:68:05:af:1c:0c:46:46:b7:1a:c5:37:61:
         ab:cd:2c:a3:35:54:8e:ce:37:b4:9d:31:db:42:92:68:10:8f:
         2a:54:86:69:db:35:e2:ff:d9:88:6b:92:af:32:30:83:5a:28:
         fd:69:63:d6:4b:f1:b2:6b:5f:b1:02:5e:2e:a5:20:23:a4:da:
         8c:52:43:fe
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUTE8pz1U+cTUrvQtM7RVaBTx5IJ0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzkzQUE2RDBDQzBGNkNGQTBBMjNDQTM5NkJFNzEzRUYx
QUQ2N0VCNjAeFw0yNDExMTkxODUzMTVaFw0yNTExMTgxODU4MTVaMDMxMTAvBgNV
BAMTKDBDRjZENjIxMDQ3ODMwNjNFRDgxQTkxMDE4NDE5MzFEMjAyOTgwOTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrFwVcbCOwTqRtcfP9t5MYtC3b
p9xgU6Cq6aShcK6V9KWWVCZ7f7VWryhTLXLbHVqVaFXGT6fbWvzarOGpaRoLM7jV
zTBuksoaTHlRu5Uxbl0/LBzKDOD4p5h99X9An9ug1l3DdmMEvwN0XhVgB/hJGeiS
E6OkW5++maDUsRMKl111qOo3uSFNcrkUG5rKaU4hmD+UkC5dKKa6Eg2zhPyNlWYm
CxGxqsmab6RrKLDe7kKEn03AneIkymflCErX07Bqro1H5riaNS1cgWE3XYjtkWC3
vO9kK48p8/8eMUln3AB+sJtLL690QCDne8mMwjRhOAknmK5AJAHsOylRqnsnAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUDPbWIQR4MGPtgakQGEGTHSApgJAwHwYDVR0j
BBgwFoAUeTqm0MwPbPoKI8o5a+cT7xrWfrYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRmpiM05yZ2Z1ZVgxeVJkaEYxdnZEUDJpRmRab1FBc2VzYXBvczZQMWFm
dk4vMC83OTNBQTZEMENDMEY2Q0ZBMEEyM0NBMzk2QkU3MTNFRjFBRDY3RUI2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzc5M0FBNkQwQ0MwRjZDRkEw
QTIzQ0EzOTZCRTcxM0VGMUFENjdFQjYuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0ZqYjNOcmdmdWVYMXlSZGhGMXZ2RFAyaUZkWm9RQXNlc2Fwb3M2UDFhZnZOLzAv
MzEzNjM4MmUzMTM5MzQyZTMyMzQzODJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDMy
MzYzOTMzMzUzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAqjC+DANBgkqhkiG9w0BAQsFAAOCAQEAfvGC
ieTCUPBLn1rye+qIacUSLikc2dgdRRQoCAvxaEUeEfgpkx7MDOQiRE22EIS+/aba
oGw5n23/n7MwDMQgdbL19SP9T8yV+5qDNbiFQPdwLaKxoLrK+3tyxDUGSDzK8YB8
CM/kaSD4u7RVXNxtbrAswJCuWZX049TXpXL7IMpnlRao/VuUt+6iNDv7MYGxASpp
MBYvLzmCYCN82aqaAglP7B1lckuT0RTbqhJEkwQFVzfHoY4GaK5KaAWvHAxGRrca
xTdhq80sozVUjs43tJ0x20KSaBCPKlSGads14v/ZiGuSrzIwg1oo/Wlj1kvxsmtf
sQJeLqUgI6TajFJD/g==
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:29:50 2025 by rpki-client