Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/MjsrdDanpq6d9H7tSRi15U6hXBdFjLQgtwF2BcBF3xU/0/3139302e38392e3231362e302f32322d3332203d3e20323730333936.roa
File:                     3139302e38392e3231362e302f32322d3332203d3e20323730333936.roa (raw, json)
Hash identifier:          s1kEy01lW/3ZR+D7CYan6AKQgBvwgAiw68dikki3BjY=
Subject key identifier:   F2:A1:E4:D7:3C:A1:CF:04:9C:0B:36:4D:64:6A:DA:FD:C1:D9:CA:2C
Certificate issuer:       /CN=FCE4412C7EBFFE9F9AF8F23BD851E8BD673D2238
Certificate serial:       5F3C810953D2FF1DB8209EA54B59CD40D7CC4DB1
Authority key identifier: FC:E4:41:2C:7E:BF:FE:9F:9A:F8:F2:3B:D8:51:E8:BD:67:3D:22:38
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FCE4412C7EBFFE9F9AF8F23BD851E8BD673D2238.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/MjsrdDanpq6d9H7tSRi15U6hXBdFjLQgtwF2BcBF3xU/0/3139302e38392e3231362e302f32322d3332203d3e20323730333936.roa
Signing time:             Thu 15 Dec 2022 12:45:31 +0000
ROA not before:           Thu 15 Dec 2022 12:40:31 +0000
ROA not after:            Thu 14 Dec 2023 12:45:31 +0000
asID:                     270396
IP address blocks:        190.89.216.0/22 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:3c:81:09:53:d2:ff:1d:b8:20:9e:a5:4b:59:cd:40:d7:cc:4d:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FCE4412C7EBFFE9F9AF8F23BD851E8BD673D2238
        Validity
            Not Before: Dec 15 12:40:31 2022 GMT
            Not After : Dec 14 12:45:31 2023 GMT
        Subject: CN=F2A1E4D73CA1CF049C0B364D646ADAFDC1D9CA2C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:eb:98:3e:5e:66:2a:02:8d:74:3d:56:90:dc:
                    8d:41:2e:eb:98:df:42:75:13:05:22:0d:6a:a4:bf:
                    c9:81:d2:7f:54:ea:17:20:d5:d3:11:16:91:00:f8:
                    5d:9e:89:16:4f:15:e0:f4:11:3c:76:a6:b7:85:3c:
                    d8:0b:ff:bb:9a:94:b7:ce:9a:4c:9d:4b:c4:c7:f0:
                    40:15:66:bc:a7:67:5c:0f:6f:93:ea:93:60:a3:8f:
                    79:f9:a4:ac:83:4c:13:35:16:73:3e:1b:e4:04:72:
                    20:c0:b5:17:ff:bf:a2:f9:1b:32:13:e4:77:15:ab:
                    ef:6d:e3:d2:8a:9c:ae:93:55:a1:3b:fb:de:f7:5e:
                    a0:8f:6c:95:fc:e1:cb:e0:f7:34:7c:80:98:30:dc:
                    ed:93:c3:63:ed:ab:41:88:78:56:23:39:bb:2d:50:
                    f8:2e:1a:d6:63:43:8a:2b:aa:25:41:d8:c0:ce:33:
                    49:8d:88:8a:d7:91:1a:94:d6:3f:f3:74:3a:14:69:
                    10:8b:be:23:f3:01:9c:02:fd:3b:bb:bc:b5:7c:dd:
                    fa:25:1d:c9:7b:3d:18:69:28:ed:d7:53:f5:91:97:
                    2b:1b:81:1d:11:9f:03:5a:21:ec:a1:c7:35:11:11:
                    01:55:17:3c:8a:e3:a8:b6:ed:70:4d:3b:3e:37:c0:
                    7a:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:A1:E4:D7:3C:A1:CF:04:9C:0B:36:4D:64:6A:DA:FD:C1:D9:CA:2C
            X509v3 Authority Key Identifier:
                keyid:FC:E4:41:2C:7E:BF:FE:9F:9A:F8:F2:3B:D8:51:E8:BD:67:3D:22:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/MjsrdDanpq6d9H7tSRi15U6hXBdFjLQgtwF2BcBF3xU/0/FCE4412C7EBFFE9F9AF8F23BD851E8BD673D2238.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FCE4412C7EBFFE9F9AF8F23BD851E8BD673D2238.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/MjsrdDanpq6d9H7tSRi15U6hXBdFjLQgtwF2BcBF3xU/0/3139302e38392e3231362e302f32322d3332203d3e20323730333936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.89.216.0/22

    Signature Algorithm: sha256WithRSAEncryption
         50:7f:ba:ec:45:e8:0a:12:46:94:c6:6d:50:bc:97:4b:20:80:
         97:a0:68:64:52:de:b5:a6:86:9b:b9:c8:75:a8:be:3f:45:08:
         7f:69:49:eb:be:23:b7:7e:50:ee:1d:69:2f:51:24:8c:71:4f:
         24:d8:c7:f0:d5:9b:18:61:a3:fe:b2:80:23:6c:73:56:01:ab:
         10:1a:04:80:b3:f7:4e:cb:50:00:42:7b:95:62:25:e6:22:ca:
         68:b1:25:33:8a:d5:d8:b3:8a:fd:fd:01:3c:11:a1:7c:21:12:
         39:ab:a4:75:b2:83:02:3c:34:13:ca:94:20:32:e9:5e:bb:85:
         fa:40:23:3c:70:1d:ed:3d:cf:7b:dd:51:07:d7:0f:7f:72:c0:
         62:2d:b4:d4:1e:5a:d4:97:84:8c:a7:5d:de:a9:8d:e7:9a:fb:
         e0:f7:25:c8:06:2a:9c:f4:e6:70:48:ff:fb:c1:fd:30:0d:f3:
         dd:83:4e:e6:09:4a:8a:93:25:43:18:cb:71:24:40:9b:23:4c:
         1d:34:3f:c4:46:3f:de:af:9d:4c:a5:6e:a7:ee:5c:f0:06:ad:
         f0:73:50:f4:5e:c7:16:5f:d3:f1:7e:2e:69:37:ef:0e:c8:0c:
         3f:1b:2d:cc:0e:77:52:7d:ef:b4:e7:c2:a8:37:3e:55:9e:98:
         ad:c0:b0:58
-----BEGIN CERTIFICATE-----
MIIFRDCCBCygAwIBAgIUXzyBCVPS/x24IJ6lS1nNQNfMTbEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkNFNDQxMkM3RUJGRkU5RjlBRjhGMjNCRDg1MUU4QkQ2
NzNEMjIzODAeFw0yMjEyMTUxMjQwMzFaFw0yMzEyMTQxMjQ1MzFaMDMxMTAvBgNV
BAMTKEYyQTFFNEQ3M0NBMUNGMDQ5QzBCMzY0RDY0NkFEQUZEQzFEOUNBMkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCj65g+XmYqAo10PVaQ3I1BLuuY
30J1EwUiDWqkv8mB0n9U6hcg1dMRFpEA+F2eiRZPFeD0ETx2preFPNgL/7ualLfO
mkydS8TH8EAVZrynZ1wPb5Pqk2Cjj3n5pKyDTBM1FnM+G+QEciDAtRf/v6L5GzIT
5HcVq+9t49KKnK6TVaE7+973XqCPbJX84cvg9zR8gJgw3O2Tw2Ptq0GIeFYjObst
UPguGtZjQ4orqiVB2MDOM0mNiIrXkRqU1j/zdDoUaRCLviPzAZwC/Tu7vLV83fol
Hcl7PRhpKO3XU/WRlysbgR0RnwNaIeyhxzUREQFVFzyK46i27XBNOz43wHr/AgMB
AAGjggJOMIICSjAdBgNVHQ4EFgQU8qHk1zyhzwScCzZNZGra/cHZyiwwHwYDVR0j
BBgwFoAU/ORBLH6//p+a+PI72FHovWc9IjgwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9NanNyZERhbnBxNmQ5SDd0U1JpMTVVNmhYQmRGakxRZ3R3RjJCY0JGM3hV
LzAvRkNFNDQxMkM3RUJGRkU5RjlBRjhGMjNCRDg1MUU4QkQ2NzNEMjIzOC5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMC9GQ0U0NDEyQzdFQkZGRTlGOUFG
OEYyM0JEODUxRThCRDY3M0QyMjM4LmNlcjCBrQYIKwYBBQUHAQsEgaAwgZ0wgZoG
CCsGAQUFBzALhoGNcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9N
anNyZERhbnBxNmQ5SDd0U1JpMTVVNmhYQmRGakxRZ3R3RjJCY0JGM3hVLzAvMzEz
OTMwMmUzODM5MmUzMjMxMzYyZTMwMmYzMjMyMmQzMzMyMjAzZDNlMjAzMjM3MzAz
MzM5MzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcB
Af8EEDAOMAwEAgABMAYDBAK+WdgwDQYJKoZIhvcNAQELBQADggEBAFB/uuxF6AoS
RpTGbVC8l0sggJegaGRS3rWmhpu5yHWovj9FCH9pSeu+I7d+UO4daS9RJIxxTyTY
x/DVmxhho/6ygCNsc1YBqxAaBICz907LUABCe5ViJeYiymixJTOK1diziv39ATwR
oXwhEjmrpHWygwI8NBPKlCAy6V67hfpAIzxwHe09z3vdUQfXD39ywGIttNQeWtSX
hIynXd6pjeea++D3JcgGKpz05nBI//vB/TAN892DTuYJSoqTJUMYy3EkQJsjTB00
P8RGP96vnUylbqfuXPAGrfBzUPRexxZf0/F+Lmk37w7IDD8bLcwOd1J977Tnwqg3
PlWemK3AsFg=
-----END CERTIFICATE-----
Generated at Tue Feb 18 13:37:40 2025 by rpki-client