Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FyFHAd2MhesANeK2QY5bQ4HSvuRcBmY5SRPx6aK1B3CG/0/3136382e3139352e3137382e302f32332d3233203d3e20323635343337.roa
File:                     3136382e3139352e3137382e302f32332d3233203d3e20323635343337.roa (raw, json)
Hash identifier:          NSk8WafdqKeuWEpPAdFBAfLi8ErcaUFKeYPAloy7Gu0=
Subject key identifier:   E1:28:60:99:7C:32:93:39:6D:38:21:28:57:59:E5:39:16:A6:25:8D
Certificate issuer:       /CN=3AC6959CD824080D479373BCCC2F356CCF6F4F7C
Certificate serial:       34246C205BAFAD401302655EAE1A0BDC10B6185E
Authority key identifier: 3A:C6:95:9C:D8:24:08:0D:47:93:73:BC:CC:2F:35:6C:CF:6F:4F:7C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3AC6959CD824080D479373BCCC2F356CCF6F4F7C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FyFHAd2MhesANeK2QY5bQ4HSvuRcBmY5SRPx6aK1B3CG/0/3136382e3139352e3137382e302f32332d3233203d3e20323635343337.roa
Signing time:             Fri 09 Sep 2022 19:23:35 +0000
ROA not before:           Fri 09 Sep 2022 19:18:35 +0000
ROA not after:            Fri 08 Sep 2023 19:23:35 +0000
asID:                     265437
IP address blocks:        168.195.178.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:24:6c:20:5b:af:ad:40:13:02:65:5e:ae:1a:0b:dc:10:b6:18:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3AC6959CD824080D479373BCCC2F356CCF6F4F7C
        Validity
            Not Before: Sep  9 19:18:35 2022 GMT
            Not After : Sep  8 19:23:35 2023 GMT
        Subject: CN=E12860997C3293396D3821285759E53916A6258D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:c1:c8:cb:62:a0:f2:00:c1:32:26:54:95:f0:
                    22:d3:99:3c:91:48:b1:28:be:05:d0:35:00:93:5f:
                    3e:68:00:34:b3:3d:2e:e5:ba:09:c7:a2:47:7a:87:
                    77:bf:5c:7b:b3:ca:43:2c:69:35:4d:c4:3f:da:5f:
                    6e:6d:61:94:b8:66:98:b2:6f:e5:5a:dc:a4:c6:2f:
                    18:1c:de:82:71:d9:44:89:03:ac:a9:1b:e4:13:8a:
                    b6:c7:d4:d9:68:7d:45:2a:ea:7c:90:fe:9c:da:1c:
                    38:a9:2a:f1:c2:04:65:58:a9:f3:76:57:8b:73:84:
                    3e:fb:b0:25:cc:ca:9c:3f:83:39:8d:5e:29:b8:50:
                    73:6a:1a:58:09:49:00:d4:b0:6f:cf:21:01:a8:52:
                    bc:b9:d6:0a:f1:d4:53:f4:42:58:90:02:1a:10:f1:
                    d3:01:c1:2e:8c:d1:5f:5a:5c:ae:3e:ea:78:b9:57:
                    78:99:76:16:0e:20:21:67:cb:a1:b8:fc:f2:16:f7:
                    4d:e4:63:8d:98:a2:3a:eb:cf:5a:f6:af:b4:38:7b:
                    dd:d3:8d:c2:3b:2d:c9:50:0b:b8:5b:fc:a2:9c:4f:
                    4a:df:17:23:e8:70:e5:5c:ee:da:14:af:43:76:72:
                    9c:fa:49:b4:31:a3:6f:af:54:aa:51:53:e4:35:c1:
                    36:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:28:60:99:7C:32:93:39:6D:38:21:28:57:59:E5:39:16:A6:25:8D
            X509v3 Authority Key Identifier:
                keyid:3A:C6:95:9C:D8:24:08:0D:47:93:73:BC:CC:2F:35:6C:CF:6F:4F:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FyFHAd2MhesANeK2QY5bQ4HSvuRcBmY5SRPx6aK1B3CG/0/3AC6959CD824080D479373BCCC2F356CCF6F4F7C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3AC6959CD824080D479373BCCC2F356CCF6F4F7C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FyFHAd2MhesANeK2QY5bQ4HSvuRcBmY5SRPx6aK1B3CG/0/3136382e3139352e3137382e302f32332d3233203d3e20323635343337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.195.178.0/23

    Signature Algorithm: sha256WithRSAEncryption
         39:3b:11:6f:7c:66:e5:18:99:a0:60:6d:bc:ff:41:96:c2:82:
         4e:29:3f:4e:45:79:fe:17:f5:cb:6c:ad:8b:34:ea:63:51:4e:
         a7:bf:7d:57:68:1a:8f:93:01:a9:ed:96:88:e9:c0:3d:87:90:
         29:72:d8:7a:49:fa:41:5a:37:ff:af:fa:ec:00:28:b1:e8:17:
         3d:fa:e5:2a:77:b0:40:a6:17:03:25:e7:f9:31:ec:7d:a2:ff:
         78:f3:9c:fa:60:a8:7d:37:35:05:98:d8:0e:cc:d4:f0:c0:4e:
         1b:2d:21:0d:13:8a:c2:7e:78:cc:55:ad:79:33:93:e9:68:b6:
         f1:f8:76:fe:02:f0:cd:26:e4:33:4d:b8:5e:56:c8:b2:cd:55:
         96:b1:f5:25:91:0b:71:5c:2e:60:1b:e9:41:92:5a:70:87:b4:
         50:88:42:7e:2d:0f:6c:ea:50:eb:14:f1:41:49:04:1a:24:0d:
         67:ed:c9:a9:f6:97:36:57:bf:22:e9:d5:84:1f:be:e2:70:44:
         31:07:d5:b6:f0:ce:b5:4c:4d:d6:f0:c6:22:23:05:ac:74:35:
         31:11:a3:ff:70:2b:5d:24:29:f3:c6:48:88:89:ce:22:68:05:
         b5:59:2a:62:3c:e1:b5:52:98:04:a9:94:0d:1d:02:cf:de:7f:
         5b:67:f5:87
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUNCRsIFuvrUATAmVerhoL3BC2GF4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0FDNjk1OUNEODI0MDgwRDQ3OTM3M0JDQ0MyRjM1NkND
RjZGNEY3QzAeFw0yMjA5MDkxOTE4MzVaFw0yMzA5MDgxOTIzMzVaMDMxMTAvBgNV
BAMTKEUxMjg2MDk5N0MzMjkzMzk2RDM4MjEyODU3NTlFNTM5MTZBNjI1OEQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXwcjLYqDyAMEyJlSV8CLTmTyR
SLEovgXQNQCTXz5oADSzPS7lugnHokd6h3e/XHuzykMsaTVNxD/aX25tYZS4Zpiy
b+Va3KTGLxgc3oJx2USJA6ypG+QTirbH1NlofUUq6nyQ/pzaHDipKvHCBGVYqfN2
V4tzhD77sCXMypw/gzmNXim4UHNqGlgJSQDUsG/PIQGoUry51grx1FP0QliQAhoQ
8dMBwS6M0V9aXK4+6ni5V3iZdhYOICFny6G4/PIW903kY42Yojrrz1r2r7Q4e93T
jcI7LclQC7hb/KKcT0rfFyPocOVc7toUr0N2cpz6SbQxo2+vVKpRU+Q1wTZlAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQU4ShgmXwykzltOCEoV1nlORamJY0wHwYDVR0j
BBgwFoAUOsaVnNgkCA1Hk3O8zC81bM9vT3wwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRnlGSEFkMk1oZXNBTmVLMlFZNWJRNEhTdnVSY0JtWTVTUlB4NmFLMUIz
Q0cvMC8zQUM2OTU5Q0Q4MjQwODBENDc5MzczQkNDQzJGMzU2Q0NGNkY0RjdDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzNBQzY5NTlDRDgyNDA4MEQ0
NzkzNzNCQ0NDMkYzNTZDQ0Y2RjRGN0MuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0Z5RkhBZDJNaGVzQU5lSzJRWTViUTRIU3Z1UmNCbVk1U1JQeDZhSzFCM0NHLzAv
MzEzNjM4MmUzMTM5MzUyZTMxMzczODJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDMy
MzYzNTM0MzMzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAajDsjANBgkqhkiG9w0BAQsFAAOCAQEAOTsR
b3xm5RiZoGBtvP9BlsKCTik/TkV5/hf1y2ytizTqY1FOp799V2gaj5MBqe2WiOnA
PYeQKXLYekn6QVo3/6/67AAosegXPfrlKnewQKYXAyXn+THsfaL/ePOc+mCofTc1
BZjYDszU8MBOGy0hDROKwn54zFWteTOT6Wi28fh2/gLwzSbkM024XlbIss1VlrH1
JZELcVwuYBvpQZJacIe0UIhCfi0PbOpQ6xTxQUkEGiQNZ+3JqfaXNle/IunVhB++
4nBEMQfVtvDOtUxN1vDGIiMFrHQ1MRGj/3ArXSQp88ZIiInOImgFtVkqYjzhtVKY
BKmUDR0Cz95/W2f1hw==
-----END CERTIFICATE-----
Generated at Mon Feb 17 02:15:29 2025 by rpki-client