Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7Vhv5c4ZEhaf8ALZANuRtpGjrjY5n3dE4T2xvk6gvqrL/0/3136382e3139342e3136362e302f32332d3233203d3e20323635333933.roa
File:                     3136382e3139342e3136362e302f32332d3233203d3e20323635333933.roa (raw, json)
Hash identifier:          VfEa1iw8q0jC08WM3fv7dXqPBXgd35jbtOFGHRyoRvQ=
Subject key identifier:   40:F4:DD:9A:C4:C7:75:CD:69:B1:1B:1A:4D:9F:1B:9A:3D:36:CF:A7
Certificate issuer:       /CN=1A119FEF97A158C2B8C86079AD0C322A8E8AAFA7
Certificate serial:       50B30749991BAFE2144F22AE602AA992ED5246C3
Authority key identifier: 1A:11:9F:EF:97:A1:58:C2:B8:C8:60:79:AD:0C:32:2A:8E:8A:AF:A7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A119FEF97A158C2B8C86079AD0C322A8E8AAFA7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7Vhv5c4ZEhaf8ALZANuRtpGjrjY5n3dE4T2xvk6gvqrL/0/3136382e3139342e3136362e302f32332d3233203d3e20323635333933.roa
Signing time:             Tue 14 Jan 2025 15:48:46 +0000
ROA not before:           Tue 14 Jan 2025 15:43:46 +0000
ROA not after:            Tue 13 Jan 2026 15:48:46 +0000
asID:                     265393
IP address blocks:        168.194.166.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:b3:07:49:99:1b:af:e2:14:4f:22:ae:60:2a:a9:92:ed:52:46:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1A119FEF97A158C2B8C86079AD0C322A8E8AAFA7
        Validity
            Not Before: Jan 14 15:43:46 2025 GMT
            Not After : Jan 13 15:48:46 2026 GMT
        Subject: CN=40F4DD9AC4C775CD69B11B1A4D9F1B9A3D36CFA7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:24:50:fa:46:b5:78:a8:a7:19:c0:7a:c6:4c:
                    2d:17:e5:a4:fb:b1:45:37:c0:9b:e7:76:cf:60:26:
                    a2:6b:72:eb:fd:dd:49:0c:52:2f:b9:d8:a4:cf:2a:
                    b5:89:b9:25:37:6b:47:45:65:c7:3f:08:f3:c5:17:
                    32:78:9b:29:96:b3:8e:a9:48:1a:d1:6d:ac:3d:70:
                    ee:55:73:90:f1:5e:ec:2d:ec:93:ad:63:11:a3:e4:
                    d1:4a:6a:70:52:36:07:55:5d:c8:53:a2:a9:a1:e4:
                    85:7e:68:ad:44:51:a2:c3:2a:36:f4:8d:ea:69:eb:
                    09:1d:e3:fa:d0:12:d5:af:94:95:f0:41:58:6c:26:
                    7b:47:95:30:02:77:f0:2a:2b:a8:f2:65:41:47:bc:
                    b4:f4:60:6a:1a:c2:7b:22:72:b9:4c:fd:d1:9e:25:
                    89:19:f0:ff:60:14:10:2f:26:c2:b4:74:ed:de:e8:
                    79:1b:46:f8:95:7f:dc:f7:9f:64:a8:8f:26:32:aa:
                    c9:6c:10:66:74:83:cd:7f:24:33:57:e8:85:22:58:
                    7b:8e:18:65:5b:4c:d1:14:6b:84:c3:6f:46:d8:5d:
                    10:60:ee:8e:d1:0d:3c:ec:ab:8d:a2:65:7a:3c:00:
                    64:c9:d7:58:e7:f3:2d:d8:eb:eb:92:57:dc:76:df:
                    1d:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:F4:DD:9A:C4:C7:75:CD:69:B1:1B:1A:4D:9F:1B:9A:3D:36:CF:A7
            X509v3 Authority Key Identifier:
                keyid:1A:11:9F:EF:97:A1:58:C2:B8:C8:60:79:AD:0C:32:2A:8E:8A:AF:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7Vhv5c4ZEhaf8ALZANuRtpGjrjY5n3dE4T2xvk6gvqrL/0/1A119FEF97A158C2B8C86079AD0C322A8E8AAFA7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A119FEF97A158C2B8C86079AD0C322A8E8AAFA7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7Vhv5c4ZEhaf8ALZANuRtpGjrjY5n3dE4T2xvk6gvqrL/0/3136382e3139342e3136362e302f32332d3233203d3e20323635333933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.194.166.0/23

    Signature Algorithm: sha256WithRSAEncryption
         74:6e:df:64:57:7f:ac:fa:2b:39:d7:52:13:d8:ac:51:51:1d:
         05:bf:32:9e:12:31:fd:cf:63:ea:2e:75:c2:55:38:bd:e7:21:
         77:38:67:3d:a7:ad:00:4c:ed:a6:3e:d6:b4:c1:8e:2f:df:98:
         a4:7e:03:22:d4:f2:b0:5f:5d:53:58:42:6c:72:4d:3e:89:5a:
         99:31:e9:cc:a0:9f:b3:0f:c9:9f:6a:11:b4:2a:68:2a:41:65:
         9a:20:bb:76:6e:67:07:c6:f9:95:94:b0:0b:a9:a1:e4:13:bc:
         03:16:1e:3f:d2:c4:e4:1e:c1:01:2f:8c:d0:8d:f1:be:77:f9:
         3f:8f:d7:70:1e:28:5a:6f:40:ff:a9:d1:1d:2f:a0:2e:19:b4:
         ab:5a:ac:ee:60:ad:47:95:1c:59:2e:de:a1:9e:20:82:73:61:
         e9:4d:c3:8a:e9:e9:39:ab:22:d8:b7:e2:27:3c:87:79:53:95:
         ed:c8:73:55:f6:f2:53:07:14:91:28:64:7e:e0:17:e0:32:54:
         87:ba:f4:1e:73:a8:a3:ef:60:67:d1:89:8c:7d:b7:20:e3:c3:
         54:9d:bf:96:3b:bb:71:cf:26:cc:65:84:76:9e:ef:b6:09:ea:
         8f:2b:a1:16:f0:1b:5b:03:47:3c:a3:72:1c:91:78:bd:04:57:
         99:96:c5:f6
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUULMHSZkbr+IUTyKuYCqpku1SRsMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUExMTlGRUY5N0ExNThDMkI4Qzg2MDc5QUQwQzMyMkE4
RThBQUZBNzAeFw0yNTAxMTQxNTQzNDZaFw0yNjAxMTMxNTQ4NDZaMDMxMTAvBgNV
BAMTKDQwRjRERDlBQzRDNzc1Q0Q2OUIxMUIxQTREOUYxQjlBM0QzNkNGQTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcJFD6RrV4qKcZwHrGTC0X5aT7
sUU3wJvnds9gJqJrcuv93UkMUi+52KTPKrWJuSU3a0dFZcc/CPPFFzJ4mymWs46p
SBrRbaw9cO5Vc5DxXuwt7JOtYxGj5NFKanBSNgdVXchToqmh5IV+aK1EUaLDKjb0
jepp6wkd4/rQEtWvlJXwQVhsJntHlTACd/AqK6jyZUFHvLT0YGoawnsicrlM/dGe
JYkZ8P9gFBAvJsK0dO3e6HkbRviVf9z3n2SojyYyqslsEGZ0g81/JDNX6IUiWHuO
GGVbTNEUa4TDb0bYXRBg7o7RDTzsq42iZXo8AGTJ11jn8y3Y6+uSV9x23x3XAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUQPTdmsTHdc1psRsaTZ8bmj02z6cwHwYDVR0j
BBgwFoAUGhGf75ehWMK4yGB5rQwyKo6Kr6cwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vN1ZodjVjNFpFaGFmOEFMWkFOdVJ0cEdqcmpZNW4zZEU0VDJ4dms2Z3Zx
ckwvMC8xQTExOUZFRjk3QTE1OEMyQjhDODYwNzlBRDBDMzIyQThFOEFBRkE3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzFBMTE5RkVGOTdBMTU4QzJC
OEM4NjA3OUFEMEMzMjJBOEU4QUFGQTcuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzdWaHY1YzRaRWhhZjhBTFpBTnVSdHBHanJqWTVuM2RFNFQyeHZrNmd2cXJMLzAv
MzEzNjM4MmUzMTM5MzQyZTMxMzYzNjJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDMy
MzYzNTMzMzkzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAajCpjANBgkqhkiG9w0BAQsFAAOCAQEAdG7f
ZFd/rPorOddSE9isUVEdBb8ynhIx/c9j6i51wlU4vechdzhnPaetAEztpj7WtMGO
L9+YpH4DItTysF9dU1hCbHJNPolamTHpzKCfsw/Jn2oRtCpoKkFlmiC7dm5nB8b5
lZSwC6mh5BO8AxYeP9LE5B7BAS+M0I3xvnf5P4/XcB4oWm9A/6nRHS+gLhm0q1qs
7mCtR5UcWS7eoZ4ggnNh6U3DiunpOasi2LfiJzyHeVOV7chzVfbyUwcUkShkfuAX
4DJUh7r0HnOoo+9gZ9GJjH23IOPDVJ2/lju7cc8mzGWEdp7vtgnqjyuhFvAbWwNH
PKNyHJF4vQRXmZbF9g==
-----END CERTIFICATE-----
Generated at Sat Apr 26 20:38:29 2025 by rpki-client