Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FyFHAd2MhesANeK2QY5bQ4HSvuRcBmY5SRPx6aK1B3CG/0/3136382e3139352e3137362e302f32322d3232203d3e20323635343337.roa
File:                     3136382e3139352e3137362e302f32322d3232203d3e20323635343337.roa (raw, json)
Hash identifier:          wC1EFS245VMYYnAsh8teQsBMvFA9yapk2tfKpCwjpw8=
Subject key identifier:   F4:3D:FC:17:92:51:1F:C1:C8:33:EE:49:E5:B3:72:55:51:4A:DC:74
Certificate issuer:       /CN=3AC6959CD824080D479373BCCC2F356CCF6F4F7C
Certificate serial:       79C3FDDC44D4F3395C073FBBC4AA1C10E3382A32
Authority key identifier: 3A:C6:95:9C:D8:24:08:0D:47:93:73:BC:CC:2F:35:6C:CF:6F:4F:7C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3AC6959CD824080D479373BCCC2F356CCF6F4F7C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FyFHAd2MhesANeK2QY5bQ4HSvuRcBmY5SRPx6aK1B3CG/0/3136382e3139352e3137362e302f32322d3232203d3e20323635343337.roa
Signing time:             Fri 09 Sep 2022 19:23:24 +0000
ROA not before:           Fri 09 Sep 2022 19:18:24 +0000
ROA not after:            Fri 08 Sep 2023 19:23:24 +0000
asID:                     265437
IP address blocks:        168.195.176.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:c3:fd:dc:44:d4:f3:39:5c:07:3f:bb:c4:aa:1c:10:e3:38:2a:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3AC6959CD824080D479373BCCC2F356CCF6F4F7C
        Validity
            Not Before: Sep  9 19:18:24 2022 GMT
            Not After : Sep  8 19:23:24 2023 GMT
        Subject: CN=F43DFC1792511FC1C833EE49E5B37255514ADC74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:2e:4e:75:db:ed:6c:64:32:04:7a:a8:07:6d:
                    d6:0a:3c:77:85:1d:20:03:99:a9:ad:cc:97:6b:d9:
                    9b:28:44:b5:68:2e:4f:d9:66:b4:5f:57:48:09:6e:
                    8f:da:41:eb:a5:12:09:da:ca:44:3e:36:e0:a7:39:
                    91:e0:6f:00:25:e0:f7:41:ba:3b:83:a2:d0:88:c1:
                    60:ef:e7:5e:f8:ac:a4:d0:2b:af:bb:55:d9:07:bf:
                    bd:61:7c:94:ad:4d:ba:68:1c:cf:b6:56:e6:73:1c:
                    6f:f5:19:45:53:16:9e:95:0a:c3:a8:8d:55:9a:b6:
                    ff:e7:f3:d5:cf:f0:fa:a7:5c:ea:8c:79:86:7d:9a:
                    63:94:76:43:23:c1:8a:1c:a1:ad:54:17:21:6f:b7:
                    6e:03:4d:ce:de:55:5c:19:1e:04:72:53:39:91:a0:
                    e3:40:8e:3a:28:08:60:48:83:47:fb:d7:e7:3e:90:
                    e1:d6:91:95:06:56:2a:53:3b:e4:b5:c7:ba:ea:67:
                    bf:b4:74:bf:1e:c9:ef:c9:37:ad:d3:60:c9:f2:bd:
                    f4:7d:0f:93:cb:c6:21:30:46:bf:a2:25:f4:b1:30:
                    2a:d0:2a:ee:75:d6:01:50:13:1f:24:f2:24:8c:ee:
                    a2:7f:23:78:56:f8:7a:4b:49:05:f4:5f:df:e5:80:
                    7a:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:3D:FC:17:92:51:1F:C1:C8:33:EE:49:E5:B3:72:55:51:4A:DC:74
            X509v3 Authority Key Identifier:
                keyid:3A:C6:95:9C:D8:24:08:0D:47:93:73:BC:CC:2F:35:6C:CF:6F:4F:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FyFHAd2MhesANeK2QY5bQ4HSvuRcBmY5SRPx6aK1B3CG/0/3AC6959CD824080D479373BCCC2F356CCF6F4F7C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3AC6959CD824080D479373BCCC2F356CCF6F4F7C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FyFHAd2MhesANeK2QY5bQ4HSvuRcBmY5SRPx6aK1B3CG/0/3136382e3139352e3137362e302f32322d3232203d3e20323635343337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.195.176.0/22

    Signature Algorithm: sha256WithRSAEncryption
         99:b4:43:9f:9e:70:0c:82:82:2d:86:55:cf:6d:e0:a1:3f:70:
         3e:af:e2:9a:19:f5:44:13:e1:d4:e2:01:16:5d:29:12:9c:c5:
         62:f6:c6:d9:5f:b7:96:8a:c9:ae:6b:a4:d8:c9:36:6a:34:65:
         ff:da:95:d5:ec:c1:b3:89:dc:83:c4:a7:d8:72:99:9b:35:c3:
         f6:ce:0f:d9:fe:99:56:a9:42:40:df:50:f4:65:b7:9c:62:ab:
         de:c1:43:5f:22:65:96:ba:b3:cb:1f:44:1a:2a:60:18:99:bb:
         ce:13:70:b3:1b:47:be:8f:38:4e:c3:00:32:49:2f:3b:82:42:
         49:c8:3a:24:83:0a:87:4e:e6:3b:7f:cd:a9:40:86:ec:31:c9:
         cd:71:e1:dd:df:2f:3a:b8:be:e2:31:c4:d0:6e:78:8b:ea:07:
         35:35:47:9d:00:d3:f3:19:7b:c1:ef:e2:7a:df:7e:18:3e:e5:
         5c:46:cf:10:cc:bf:20:71:df:c3:94:4b:ff:da:0e:6f:88:ad:
         ee:5a:1c:35:49:50:9f:bd:d1:7a:48:19:ec:84:e3:a9:01:99:
         15:bc:43:4a:df:5e:8b:2a:bf:2c:35:84:08:ac:66:d2:42:0e:
         7d:93:e9:0f:93:f2:d2:b5:78:6e:ab:29:2a:68:a5:97:40:84:
         da:12:88:38
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUecP93ETU8zlcBz+7xKocEOM4KjIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0FDNjk1OUNEODI0MDgwRDQ3OTM3M0JDQ0MyRjM1NkND
RjZGNEY3QzAeFw0yMjA5MDkxOTE4MjRaFw0yMzA5MDgxOTIzMjRaMDMxMTAvBgNV
BAMTKEY0M0RGQzE3OTI1MTFGQzFDODMzRUU0OUU1QjM3MjU1NTE0QURDNzQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsLk512+1sZDIEeqgHbdYKPHeF
HSADmamtzJdr2ZsoRLVoLk/ZZrRfV0gJbo/aQeulEgnaykQ+NuCnOZHgbwAl4PdB
ujuDotCIwWDv5174rKTQK6+7VdkHv71hfJStTbpoHM+2VuZzHG/1GUVTFp6VCsOo
jVWatv/n89XP8PqnXOqMeYZ9mmOUdkMjwYocoa1UFyFvt24DTc7eVVwZHgRyUzmR
oONAjjooCGBIg0f71+c+kOHWkZUGVipTO+S1x7rqZ7+0dL8eye/JN63TYMnyvfR9
D5PLxiEwRr+iJfSxMCrQKu511gFQEx8k8iSM7qJ/I3hW+HpLSQX0X9/lgHp3AgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQU9D38F5JRH8HIM+5J5bNyVVFK3HQwHwYDVR0j
BBgwFoAUOsaVnNgkCA1Hk3O8zC81bM9vT3wwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRnlGSEFkMk1oZXNBTmVLMlFZNWJRNEhTdnVSY0JtWTVTUlB4NmFLMUIz
Q0cvMC8zQUM2OTU5Q0Q4MjQwODBENDc5MzczQkNDQzJGMzU2Q0NGNkY0RjdDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzNBQzY5NTlDRDgyNDA4MEQ0
NzkzNzNCQ0NDMkYzNTZDQ0Y2RjRGN0MuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0Z5RkhBZDJNaGVzQU5lSzJRWTViUTRIU3Z1UmNCbVk1U1JQeDZhSzFCM0NHLzAv
MzEzNjM4MmUzMTM5MzUyZTMxMzczNjJlMzAyZjMyMzIyZDMyMzIyMDNkM2UyMDMy
MzYzNTM0MzMzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAqjDsDANBgkqhkiG9w0BAQsFAAOCAQEAmbRD
n55wDIKCLYZVz23goT9wPq/imhn1RBPh1OIBFl0pEpzFYvbG2V+3lorJrmuk2Mk2
ajRl/9qV1ezBs4ncg8Sn2HKZmzXD9s4P2f6ZVqlCQN9Q9GW3nGKr3sFDXyJllrqz
yx9EGipgGJm7zhNwsxtHvo84TsMAMkkvO4JCScg6JIMKh07mO3/NqUCG7DHJzXHh
3d8vOri+4jHE0G54i+oHNTVHnQDT8xl7we/iet9+GD7lXEbPEMy/IHHfw5RL/9oO
b4it7locNUlQn73RekgZ7ITjqQGZFbxDSt9eiyq/LDWECKxm0kIOfZPpD5Py0rV4
bqspKmill0CE2hKIOA==
-----END CERTIFICATE-----
Generated at Fri Mar 14 04:05:29 2025 by rpki-client