Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/He7bPZqear8UkEq3odf9SEZSYvbQ9uP444qhs5qZbJGQ/0/3136382e3139342e31322e302f32322d3232203d3e20323635333737.roa
File:                     3136382e3139342e31322e302f32322d3232203d3e20323635333737.roa (raw, json)
Hash identifier:          Rw6BlkqTTPpOLIU+3esHe+Lb9hPHOnr2zdnj0dg1b2Y=
Subject key identifier:   3F:60:0F:83:F2:9B:F5:E3:56:49:17:5E:BE:CE:A5:BB:EE:09:CF:02
Certificate issuer:       /CN=25CF17C687A6082A587E8672CFDF29DABE487548
Certificate serial:       059FB4E22809BEC7694CE4EE81BEDF2CA95AEF70
Authority key identifier: 25:CF:17:C6:87:A6:08:2A:58:7E:86:72:CF:DF:29:DA:BE:48:75:48
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/25CF17C687A6082A587E8672CFDF29DABE487548.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/He7bPZqear8UkEq3odf9SEZSYvbQ9uP444qhs5qZbJGQ/0/3136382e3139342e31322e302f32322d3232203d3e20323635333737.roa
Signing time:             Thu 14 Mar 2024 20:44:46 +0000
ROA not before:           Thu 14 Mar 2024 20:39:46 +0000
ROA not after:            Thu 13 Mar 2025 20:44:46 +0000
asID:                     265377
IP address blocks:        168.194.12.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:9f:b4:e2:28:09:be:c7:69:4c:e4:ee:81:be:df:2c:a9:5a:ef:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25CF17C687A6082A587E8672CFDF29DABE487548
        Validity
            Not Before: Mar 14 20:39:46 2024 GMT
            Not After : Mar 13 20:44:46 2025 GMT
        Subject: CN=3F600F83F29BF5E35649175EBECEA5BBEE09CF02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:c5:40:66:3a:e5:1a:69:c0:23:e0:3f:a0:ba:
                    94:e1:a8:28:17:58:6e:d6:8a:ca:9d:b4:06:75:5c:
                    1e:a1:7b:8d:5b:98:e9:11:b8:3c:f4:f3:ea:12:33:
                    97:68:0f:cf:55:e6:9b:a3:bd:26:6f:b9:fe:9f:2d:
                    7b:18:8a:c1:be:d8:58:62:0e:01:58:2c:3d:0d:6b:
                    47:83:3c:37:30:9b:ca:b8:0c:45:a1:00:d0:b8:f9:
                    60:11:01:41:16:c4:71:dc:06:e9:e5:da:c6:ae:9f:
                    4c:11:4d:d8:ec:5a:ad:bc:dc:14:de:28:2c:44:60:
                    a8:00:cb:94:2f:a9:6d:76:31:0a:f1:3e:f6:94:17:
                    3a:75:e4:9f:49:66:73:4f:d3:6a:12:d0:2f:de:22:
                    bc:1e:03:6c:94:06:e5:b1:c3:fd:54:b7:36:ac:97:
                    00:d2:b2:8a:f0:65:2f:94:02:d5:dd:2a:5e:fc:3b:
                    15:b6:8f:48:0b:85:b4:c5:5b:31:e3:32:44:9a:ca:
                    80:d7:77:a1:e5:50:73:1d:57:97:9f:c3:83:84:23:
                    25:fb:d9:24:87:93:8b:2f:df:cc:65:32:37:ee:ea:
                    fe:b2:3a:d3:b2:54:57:73:0d:94:7f:f5:c4:ab:5e:
                    aa:c7:55:85:5a:82:e4:a7:da:d8:50:fd:79:b6:64:
                    94:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:60:0F:83:F2:9B:F5:E3:56:49:17:5E:BE:CE:A5:BB:EE:09:CF:02
            X509v3 Authority Key Identifier:
                keyid:25:CF:17:C6:87:A6:08:2A:58:7E:86:72:CF:DF:29:DA:BE:48:75:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/He7bPZqear8UkEq3odf9SEZSYvbQ9uP444qhs5qZbJGQ/0/25CF17C687A6082A587E8672CFDF29DABE487548.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/25CF17C687A6082A587E8672CFDF29DABE487548.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/He7bPZqear8UkEq3odf9SEZSYvbQ9uP444qhs5qZbJGQ/0/3136382e3139342e31322e302f32322d3232203d3e20323635333737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.194.12.0/22

    Signature Algorithm: sha256WithRSAEncryption
         89:3a:b7:b0:c2:e4:df:20:08:e0:2a:7c:20:35:c2:a6:de:9f:
         3b:4f:f3:8b:56:38:9f:9a:2d:93:09:d9:50:8e:5f:66:1d:9d:
         d6:b9:59:aa:5b:9d:2a:24:d1:88:06:bb:ae:3a:3c:e0:3f:99:
         02:2f:24:69:8e:9c:7a:97:ff:56:2b:d5:57:bf:33:19:24:85:
         ab:f4:7e:ed:9e:a4:7a:74:48:99:b9:98:f1:3a:fe:57:5b:db:
         ea:d4:48:71:c5:70:64:ec:02:5d:df:7b:97:35:61:c6:6c:bc:
         bb:c0:28:27:ea:79:da:34:a4:a2:73:34:24:95:58:d6:82:ab:
         ff:59:5d:6f:07:5f:bc:4d:b0:52:a8:97:08:40:e0:65:e0:d0:
         e6:09:8c:90:44:bd:50:47:62:1f:66:a2:b4:1d:72:87:c6:84:
         ee:8e:57:7c:30:1b:12:97:d0:1b:03:a3:97:1e:b7:12:83:91:
         4a:63:29:37:61:d9:fc:e8:e8:b8:0c:95:68:25:61:0c:da:d3:
         56:43:7c:62:f5:78:d2:56:75:ec:51:9d:35:da:40:09:18:05:
         ec:7d:26:61:d6:d3:83:bb:83:12:7b:eb:99:07:a3:fd:23:34:
         55:e9:a8:f0:54:09:9a:f0:48:24:c9:22:0d:57:24:14:6a:33:
         0e:89:bf:8e
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUBZ+04igJvsdpTOTugb7fLKla73AwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjVDRjE3QzY4N0E2MDgyQTU4N0U4NjcyQ0ZERjI5REFC
RTQ4NzU0ODAeFw0yNDAzMTQyMDM5NDZaFw0yNTAzMTMyMDQ0NDZaMDMxMTAvBgNV
BAMTKDNGNjAwRjgzRjI5QkY1RTM1NjQ5MTc1RUJFQ0VBNUJCRUUwOUNGMDIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKxUBmOuUaacAj4D+gupThqCgX
WG7WisqdtAZ1XB6he41bmOkRuDz08+oSM5doD89V5pujvSZvuf6fLXsYisG+2Fhi
DgFYLD0Na0eDPDcwm8q4DEWhANC4+WARAUEWxHHcBunl2saun0wRTdjsWq283BTe
KCxEYKgAy5QvqW12MQrxPvaUFzp15J9JZnNP02oS0C/eIrweA2yUBuWxw/1Utzas
lwDSsorwZS+UAtXdKl78OxW2j0gLhbTFWzHjMkSayoDXd6HlUHMdV5efw4OEIyX7
2SSHk4sv38xlMjfu6v6yOtOyVFdzDZR/9cSrXqrHVYVaguSn2thQ/Xm2ZJQRAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUP2APg/Kb9eNWSRdevs6lu+4JzwIwHwYDVR0j
BBgwFoAUJc8XxoemCCpYfoZyz98p2r5IdUgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSGU3YlBacWVhcjhVa0VxM29kZjlTRVpTWXZiUTl1UDQ0NHFoczVxWmJK
R1EvMC8yNUNGMTdDNjg3QTYwODJBNTg3RTg2NzJDRkRGMjlEQUJFNDg3NTQ4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzI1Q0YxN0M2ODdBNjA4MkE1
ODdFODY3MkNGREYyOURBQkU0ODc1NDguY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0hlN2JQWnFlYXI4VWtFcTNvZGY5U0VaU1l2YlE5dVA0NDRxaHM1cVpiSkdRLzAv
MzEzNjM4MmUzMTM5MzQyZTMxMzIyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzMjM2
MzUzMzM3Mzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAKowgwwDQYJKoZIhvcNAQELBQADggEBAIk6t7DC
5N8gCOAqfCA1wqbenztP84tWOJ+aLZMJ2VCOX2Ydnda5WapbnSok0YgGu646POA/
mQIvJGmOnHqX/1Yr1Ve/Mxkkhav0fu2epHp0SJm5mPE6/ldb2+rUSHHFcGTsAl3f
e5c1YcZsvLvAKCfqedo0pKJzNCSVWNaCq/9ZXW8HX7xNsFKolwhA4GXg0OYJjJBE
vVBHYh9morQdcofGhO6OV3wwGxKX0BsDo5cetxKDkUpjKTdh2fzo6LgMlWglYQza
01ZDfGL1eNJWdexRnTXaQAkYBex9JmHW04O7gxJ765kHo/0jNFXpqPBUCZrwSCTJ
Ig1XJBRqMw6Jv44=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:01 2024 by rpki-client on console-fra.rpki-client.org