Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H8ywLeDwTHvcxpJwcpef5Ecb61P8oxFMWSNWimk4rthP/0/3133312e3139362e3131362e302f32322d3234203d3e20323635393234.roa
File:                     3133312e3139362e3131362e302f32322d3234203d3e20323635393234.roa (raw, json)
Hash identifier:          cFBwgZhXc5WBDstmxttFQncQlioCnbMxRWXV9UZG0KM=
Subject key identifier:   14:3F:4E:BE:C5:0E:77:4C:7C:E6:3A:E9:BB:46:00:A4:23:12:BE:39
Certificate issuer:       /CN=40B2FBC716FE695B73EE27C9E977630BDF53BDD2
Certificate serial:       295901DC8D96CE3CD1FC09A14097F78CE756CF14
Authority key identifier: 40:B2:FB:C7:16:FE:69:5B:73:EE:27:C9:E9:77:63:0B:DF:53:BD:D2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/40B2FBC716FE695B73EE27C9E977630BDF53BDD2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H8ywLeDwTHvcxpJwcpef5Ecb61P8oxFMWSNWimk4rthP/0/3133312e3139362e3131362e302f32322d3234203d3e20323635393234.roa
Signing time:             Thu 14 Jul 2022 19:19:01 +0000
ROA not before:           Thu 14 Jul 2022 19:14:01 +0000
ROA not after:            Thu 13 Jul 2023 19:19:01 +0000
asID:                     265924
IP address blocks:        131.196.116.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:59:01:dc:8d:96:ce:3c:d1:fc:09:a1:40:97:f7:8c:e7:56:cf:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40B2FBC716FE695B73EE27C9E977630BDF53BDD2
        Validity
            Not Before: Jul 14 19:14:01 2022 GMT
            Not After : Jul 13 19:19:01 2023 GMT
        Subject: CN=143F4EBEC50E774C7CE63AE9BB4600A42312BE39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:dc:24:27:a9:ff:0e:1f:86:cf:b6:e5:e7:18:
                    c6:dd:11:3d:ea:9b:6c:f3:6c:ef:0f:03:1a:63:ee:
                    3a:49:ae:9a:ae:fa:25:68:5a:88:9a:ff:4f:b4:43:
                    ee:9b:a1:8a:4a:7b:97:50:1d:5f:e7:cc:e2:8a:e3:
                    72:2c:69:ee:8f:25:ea:b6:2c:a7:b0:b2:02:b2:b1:
                    0f:cc:7f:96:2d:d6:41:6c:46:48:3e:7c:0f:a0:88:
                    4e:92:95:2b:70:5c:c0:ae:f6:df:a5:ac:03:c1:18:
                    94:e4:aa:19:86:a4:84:98:41:bf:a6:95:a0:a1:5c:
                    d9:48:18:12:75:65:fe:0a:2f:93:74:1d:98:06:2e:
                    8f:40:dc:63:3c:7f:5e:b8:8d:90:48:f9:ac:2d:67:
                    4a:0e:cf:11:bb:bc:c5:0c:18:ba:7b:b8:9a:cd:3c:
                    7d:47:d3:76:5c:82:6b:cd:87:92:aa:85:5e:00:2d:
                    1a:eb:7a:d7:08:ee:dc:74:31:ca:93:3a:9b:64:33:
                    df:0b:63:fb:fc:cb:c7:f3:ad:02:be:86:45:f4:cc:
                    3b:ef:39:17:cc:d7:d3:e3:95:8e:10:68:29:97:2a:
                    4d:28:a1:10:03:09:ea:c9:d2:c9:ba:65:c8:38:68:
                    8e:a7:fd:79:4c:4c:db:6b:a9:76:f6:25:fa:f9:41:
                    1d:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:3F:4E:BE:C5:0E:77:4C:7C:E6:3A:E9:BB:46:00:A4:23:12:BE:39
            X509v3 Authority Key Identifier:
                keyid:40:B2:FB:C7:16:FE:69:5B:73:EE:27:C9:E9:77:63:0B:DF:53:BD:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H8ywLeDwTHvcxpJwcpef5Ecb61P8oxFMWSNWimk4rthP/0/40B2FBC716FE695B73EE27C9E977630BDF53BDD2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/40B2FBC716FE695B73EE27C9E977630BDF53BDD2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H8ywLeDwTHvcxpJwcpef5Ecb61P8oxFMWSNWimk4rthP/0/3133312e3139362e3131362e302f32322d3234203d3e20323635393234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.196.116.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7a:10:9d:39:b1:e2:a8:00:fa:3b:9b:72:ce:7e:00:86:b1:22:
         82:e7:4b:d0:7c:1a:ae:ef:ec:85:6e:78:78:35:a2:a0:1b:02:
         72:42:e4:35:bb:72:8b:b5:55:ed:47:6e:57:7c:ab:ed:46:fa:
         ac:30:0d:52:d3:88:96:67:84:2f:df:36:e4:d5:92:97:46:09:
         ec:00:c1:3e:6d:29:d0:de:90:15:a7:9b:31:c1:bc:54:49:d0:
         0c:80:0e:d4:44:5e:d0:1a:67:ef:6a:c8:a9:33:c3:54:1f:3f:
         41:61:6f:a6:fe:2f:75:52:ee:6f:e8:1c:4d:84:52:86:97:f4:
         7d:ed:79:b5:03:ec:30:60:5d:c2:c1:0a:8f:b3:e2:38:2d:22:
         58:41:23:3c:f1:fc:96:d8:f3:2a:70:d5:2b:18:f7:84:7a:1f:
         7d:e8:3c:60:b6:a1:29:8f:ac:12:10:48:07:54:f9:0d:a2:6d:
         e7:36:95:39:09:30:f4:d2:c6:4c:c3:bb:61:fd:21:1a:07:1d:
         58:60:4a:3f:56:f1:b9:40:d0:63:ab:6a:df:1b:05:93:4d:23:
         eb:6e:f3:b3:51:16:6b:4f:b1:ca:a1:eb:3d:3c:3d:6a:c4:96:
         bd:e2:04:f9:78:c5:fb:9c:a1:45:f4:83:12:3e:17:25:78:90:
         85:05:2e:90
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUKVkB3I2WzjzR/AmhQJf3jOdWzxQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDBCMkZCQzcxNkZFNjk1QjczRUUyN0M5RTk3NzYzMEJE
RjUzQkREMjAeFw0yMjA3MTQxOTE0MDFaFw0yMzA3MTMxOTE5MDFaMDMxMTAvBgNV
BAMTKDE0M0Y0RUJFQzUwRTc3NEM3Q0U2M0FFOUJCNDYwMEE0MjMxMkJFMzkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDh3CQnqf8OH4bPtuXnGMbdET3q
m2zzbO8PAxpj7jpJrpqu+iVoWoia/0+0Q+6boYpKe5dQHV/nzOKK43Isae6PJeq2
LKewsgKysQ/Mf5Yt1kFsRkg+fA+giE6SlStwXMCu9t+lrAPBGJTkqhmGpISYQb+m
laChXNlIGBJ1Zf4KL5N0HZgGLo9A3GM8f164jZBI+awtZ0oOzxG7vMUMGLp7uJrN
PH1H03ZcgmvNh5KqhV4ALRrretcI7tx0McqTOptkM98LY/v8y8fzrQK+hkX0zDvv
ORfM19PjlY4QaCmXKk0ooRADCerJ0sm6Zcg4aI6n/XlMTNtrqXb2Jfr5QR27AgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUFD9OvsUOd0x85jrpu0YApCMSvjkwHwYDVR0j
BBgwFoAUQLL7xxb+aVtz7ifJ6XdjC99TvdIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSDh5d0xlRHdUSHZjeHBKd2NwZWY1RWNiNjFQOG94Rk1XU05XaW1rNHJ0
aFAvMC80MEIyRkJDNzE2RkU2OTVCNzNFRTI3QzlFOTc3NjMwQkRGNTNCREQyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzQwQjJGQkM3MTZGRTY5NUI3
M0VFMjdDOUU5Nzc2MzBCREY1M0JERDIuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0g4eXdMZUR3VEh2Y3hwSndjcGVmNUVjYjYxUDhveEZNV1NOV2ltazRydGhQLzAv
MzEzMzMxMmUzMTM5MzYyZTMxMzEzNjJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDMy
MzYzNTM5MzIzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAoPEdDANBgkqhkiG9w0BAQsFAAOCAQEAehCd
ObHiqAD6O5tyzn4AhrEigudL0Hwaru/shW54eDWioBsCckLkNbtyi7VV7UduV3yr
7Ub6rDANUtOIlmeEL9825NWSl0YJ7ADBPm0p0N6QFaebMcG8VEnQDIAO1ERe0Bpn
72rIqTPDVB8/QWFvpv4vdVLub+gcTYRShpf0fe15tQPsMGBdwsEKj7PiOC0iWEEj
PPH8ltjzKnDVKxj3hHoffeg8YLahKY+sEhBIB1T5DaJt5zaVOQkw9NLGTMO7Yf0h
GgcdWGBKP1bxuUDQY6tq3xsFk00j627zs1EWa0+xyqHrPTw9asSWveIE+XjF+5yh
RfSDEj4XJXiQhQUukA==
-----END CERTIFICATE-----
Generated at Mon Feb 17 02:21:40 2025 by rpki-client