Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/He7bPZqear8UkEq3odf9SEZSYvbQ9uP444qhs5qZbJGQ/0/3136382e3139342e31322e302f32322d3234203d3e20323635333737.roa
File:                     3136382e3139342e31322e302f32322d3234203d3e20323635333737.roa (raw, json)
Hash identifier:          VLY3YA44fw6VRyn6Ex1h8H27Ze61aHm0sn/ZWJ3gbmU=
Subject key identifier:   AC:C4:49:B8:47:03:4F:69:22:BB:36:50:F8:74:79:F9:8C:52:9F:19
Certificate issuer:       /CN=1B70029E902514AAE3490FDDE79F8023925115A4
Certificate serial:       4D1A0BCED4D7E881117A01A891D6D96B1091CD0D
Authority key identifier: 1B:70:02:9E:90:25:14:AA:E3:49:0F:DD:E7:9F:80:23:92:51:15:A4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1B70029E902514AAE3490FDDE79F8023925115A4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/He7bPZqear8UkEq3odf9SEZSYvbQ9uP444qhs5qZbJGQ/0/3136382e3139342e31322e302f32322d3234203d3e20323635333737.roa
Signing time:             Thu 28 Apr 2022 21:36:29 +0000
ROA not before:           Thu 28 Apr 2022 21:31:29 +0000
ROA not after:            Thu 27 Apr 2023 21:36:29 +0000
asID:                     265377
IP address blocks:        168.194.12.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:1a:0b:ce:d4:d7:e8:81:11:7a:01:a8:91:d6:d9:6b:10:91:cd:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1B70029E902514AAE3490FDDE79F8023925115A4
        Validity
            Not Before: Apr 28 21:31:29 2022 GMT
            Not After : Apr 27 21:36:29 2023 GMT
        Subject: CN=ACC449B847034F6922BB3650F87479F98C529F19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:17:44:43:7f:1c:b1:66:92:3a:6c:74:a6:90:
                    27:cc:5e:b7:0f:a6:51:77:37:79:16:a8:2d:66:3e:
                    96:23:e5:d4:00:50:29:f1:f4:4b:29:93:a0:d3:22:
                    5a:a8:09:8f:d9:ef:46:5f:55:0f:46:14:96:c0:d4:
                    4b:bb:3d:e2:cf:a2:7b:8f:43:6e:ce:51:02:27:fe:
                    40:46:a5:c3:0f:28:3a:b1:e2:8f:35:1b:81:fd:f7:
                    a2:51:0c:af:60:6e:b7:1b:2f:3a:f7:d2:4d:0f:eb:
                    e7:61:72:42:55:bf:0e:d7:e3:9d:26:16:3f:1d:e5:
                    ab:52:fa:aa:2f:95:67:a8:5f:5a:73:09:46:c7:f6:
                    c6:28:72:54:ca:fb:b6:9b:f7:69:26:f8:37:c1:a1:
                    0d:7d:58:15:c3:29:8f:a2:48:3f:3a:a3:44:27:73:
                    f9:c1:7f:61:60:c8:1f:de:e9:6d:cb:cd:02:0e:a0:
                    3b:eb:1b:65:71:43:c8:66:fb:5f:50:6d:fe:bd:4e:
                    69:7d:b6:67:f5:84:ad:ba:54:38:4e:cf:cc:81:96:
                    b6:db:93:9a:6b:2b:eb:35:fc:1e:a5:a9:f6:1b:e8:
                    2c:c6:8b:3a:69:4e:fa:ab:0f:02:a2:b7:36:ce:c9:
                    0b:ca:aa:de:1b:e3:46:2a:84:94:3c:1d:bf:0b:64:
                    02:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:C4:49:B8:47:03:4F:69:22:BB:36:50:F8:74:79:F9:8C:52:9F:19
            X509v3 Authority Key Identifier:
                keyid:1B:70:02:9E:90:25:14:AA:E3:49:0F:DD:E7:9F:80:23:92:51:15:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/He7bPZqear8UkEq3odf9SEZSYvbQ9uP444qhs5qZbJGQ/0/1B70029E902514AAE3490FDDE79F8023925115A4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1B70029E902514AAE3490FDDE79F8023925115A4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/He7bPZqear8UkEq3odf9SEZSYvbQ9uP444qhs5qZbJGQ/0/3136382e3139342e31322e302f32322d3234203d3e20323635333737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.194.12.0/22

    Signature Algorithm: sha256WithRSAEncryption
         49:4d:a9:d1:04:68:5f:58:ed:96:f4:22:d6:1a:5b:00:db:f0:
         b5:a8:87:39:5a:54:0e:3f:5f:cd:c9:b3:d9:dd:05:86:f8:fd:
         d8:d7:c9:52:cf:f7:57:73:cc:16:7b:1f:10:6a:6a:c4:86:4a:
         cd:6d:08:02:df:2b:2e:e2:6d:48:ff:e3:d0:aa:d0:ee:39:34:
         da:54:b6:61:c3:86:0e:b6:5d:e8:fd:dc:0a:2b:f0:bb:13:6e:
         a0:47:b7:bd:f2:bb:d8:06:0d:77:82:81:c6:47:b0:6f:20:2f:
         32:c7:97:36:13:af:37:e3:f1:c6:4c:1f:24:c9:5f:1b:35:95:
         b2:39:b3:7a:d8:f2:13:6b:14:1b:30:fa:ac:62:c3:6b:44:d8:
         ae:0e:3e:a6:79:09:d2:24:32:6d:f0:48:97:0c:8c:60:2d:e1:
         96:98:0a:00:71:8c:dc:21:57:a2:2e:99:e2:4a:3d:f1:21:a3:
         91:69:c9:39:b5:8f:8b:49:51:39:47:9d:38:75:84:43:ca:37:
         e2:2d:44:7f:03:06:bd:e7:53:a7:1d:1b:17:ea:1b:31:87:9a:
         9d:98:81:8b:92:89:b1:7a:0c:29:f7:41:40:07:40:a2:7d:c3:
         39:9f:c6:e1:af:e2:6e:43:90:ca:8e:b2:62:d2:c3:ef:cd:59:
         4e:fb:04:c2
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUTRoLztTX6IERegGokdbZaxCRzQ0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUI3MDAyOUU5MDI1MTRBQUUzNDkwRkRERTc5RjgwMjM5
MjUxMTVBNDAeFw0yMjA0MjgyMTMxMjlaFw0yMzA0MjcyMTM2MjlaMDMxMTAvBgNV
BAMTKEFDQzQ0OUI4NDcwMzRGNjkyMkJCMzY1MEY4NzQ3OUY5OEM1MjlGMTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0F0RDfxyxZpI6bHSmkCfMXrcP
plF3N3kWqC1mPpYj5dQAUCnx9Espk6DTIlqoCY/Z70ZfVQ9GFJbA1Eu7PeLPonuP
Q27OUQIn/kBGpcMPKDqx4o81G4H996JRDK9gbrcbLzr30k0P6+dhckJVvw7X450m
Fj8d5atS+qovlWeoX1pzCUbH9sYoclTK+7ab92km+DfBoQ19WBXDKY+iSD86o0Qn
c/nBf2FgyB/e6W3LzQIOoDvrG2VxQ8hm+19Qbf69Tml9tmf1hK26VDhOz8yBlrbb
k5prK+s1/B6lqfYb6CzGizppTvqrDwKitzbOyQvKqt4b40YqhJQ8Hb8LZAJBAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUrMRJuEcDT2kiuzZQ+HR5+YxSnxkwHwYDVR0j
BBgwFoAUG3ACnpAlFKrjSQ/d55+AI5JRFaQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSGU3YlBacWVhcjhVa0VxM29kZjlTRVpTWXZiUTl1UDQ0NHFoczVxWmJK
R1EvMC8xQjcwMDI5RTkwMjUxNEFBRTM0OTBGRERFNzlGODAyMzkyNTExNUE0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzFCNzAwMjlFOTAyNTE0QUFF
MzQ5MEZEREU3OUY4MDIzOTI1MTE1QTQuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0hlN2JQWnFlYXI4VWtFcTNvZGY5U0VaU1l2YlE5dVA0NDRxaHM1cVpiSkdRLzAv
MzEzNjM4MmUzMTM5MzQyZTMxMzIyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM2
MzUzMzM3Mzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAKowgwwDQYJKoZIhvcNAQELBQADggEBAElNqdEE
aF9Y7Zb0ItYaWwDb8LWohzlaVA4/X83Js9ndBYb4/djXyVLP91dzzBZ7HxBqasSG
Ss1tCALfKy7ibUj/49Cq0O45NNpUtmHDhg62Xej93Aor8LsTbqBHt73yu9gGDXeC
gcZHsG8gLzLHlzYTrzfj8cZMHyTJXxs1lbI5s3rY8hNrFBsw+qxiw2tE2K4OPqZ5
CdIkMm3wSJcMjGAt4ZaYCgBxjNwhV6IumeJKPfEho5FpyTm1j4tJUTlHnTh1hEPK
N+ItRH8DBr3nU6cdGxfqGzGHmp2YgYuSibF6DCn3QUAHQKJ9wzmfxuGv4m5DkMqO
smLSw+/NWU77BMI=
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:29:36 2025 by rpki-client