Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5dktwpt3QEXn3oCWzptfJ1LzPKRHmKnKnkorK17yYjj/0/3136382e3139372e3135362e302f32342d3234203d3e20323635343835.roa
File:                     3136382e3139372e3135362e302f32342d3234203d3e20323635343835.roa (raw, json)
Hash identifier:          tU37kJB616eBhcnRk7Adpd4BucSb19ETnXJREwK+3P0=
Subject key identifier:   E9:F8:8C:90:3F:E4:E6:93:0E:6A:63:72:FA:01:B5:7C:7C:68:70:5A
Certificate issuer:       /CN=DB4775FF1387265B8F4B430B70351316A66B6D44
Certificate serial:       07943EF62DF18CEE5F573A4CB399A85D35A561CA
Authority key identifier: DB:47:75:FF:13:87:26:5B:8F:4B:43:0B:70:35:13:16:A6:6B:6D:44
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DB4775FF1387265B8F4B430B70351316A66B6D44.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5dktwpt3QEXn3oCWzptfJ1LzPKRHmKnKnkorK17yYjj/0/3136382e3139372e3135362e302f32342d3234203d3e20323635343835.roa
Signing time:             Fri 23 Feb 2024 23:40:57 +0000
ROA not before:           Fri 23 Feb 2024 23:35:57 +0000
ROA not after:            Fri 21 Feb 2025 23:40:57 +0000
asID:                     265485
IP address blocks:        168.197.156.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:94:3e:f6:2d:f1:8c:ee:5f:57:3a:4c:b3:99:a8:5d:35:a5:61:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DB4775FF1387265B8F4B430B70351316A66B6D44
        Validity
            Not Before: Feb 23 23:35:57 2024 GMT
            Not After : Feb 21 23:40:57 2025 GMT
        Subject: CN=E9F88C903FE4E6930E6A6372FA01B57C7C68705A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:e5:2d:a6:96:fe:b3:ce:6f:ca:02:c2:f3:6f:
                    37:6f:32:83:21:9a:b3:11:e7:79:39:f3:ba:fc:4c:
                    d4:5d:0e:02:ab:60:b5:7d:39:83:cb:59:24:7c:da:
                    7e:de:07:43:e2:36:6f:aa:0b:b3:53:15:53:30:99:
                    e0:29:11:da:3c:e8:ba:52:3c:17:ad:fb:4d:b3:6f:
                    2d:12:01:0e:bd:10:76:b0:5d:36:2c:dc:6f:7b:16:
                    94:3b:77:5f:ce:54:7c:8d:98:86:2a:07:fd:54:c1:
                    31:db:d4:4c:86:78:33:23:40:02:67:bd:37:eb:cd:
                    90:b9:a8:ce:48:df:60:22:24:36:83:15:70:dc:53:
                    0e:af:14:b9:c0:71:8d:5b:1c:11:7b:e6:c5:e6:05:
                    d5:34:2d:8f:56:b6:8d:c3:ad:50:50:9c:5d:cc:d9:
                    42:03:bc:21:9a:8d:08:a7:d6:85:e5:b0:98:7d:29:
                    c1:8f:86:37:fc:05:e8:12:ef:94:52:2c:7a:51:80:
                    20:bc:23:1e:a4:6d:00:a7:25:0c:0e:32:05:48:9e:
                    9a:0a:a5:40:31:71:60:1a:de:b3:85:a4:67:55:38:
                    23:99:56:61:b5:2e:96:4e:6d:b3:5c:b9:3a:74:b8:
                    2a:44:f0:e7:e9:42:6a:58:df:60:b2:76:40:68:83:
                    ee:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:F8:8C:90:3F:E4:E6:93:0E:6A:63:72:FA:01:B5:7C:7C:68:70:5A
            X509v3 Authority Key Identifier:
                keyid:DB:47:75:FF:13:87:26:5B:8F:4B:43:0B:70:35:13:16:A6:6B:6D:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5dktwpt3QEXn3oCWzptfJ1LzPKRHmKnKnkorK17yYjj/0/DB4775FF1387265B8F4B430B70351316A66B6D44.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DB4775FF1387265B8F4B430B70351316A66B6D44.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5dktwpt3QEXn3oCWzptfJ1LzPKRHmKnKnkorK17yYjj/0/3136382e3139372e3135362e302f32342d3234203d3e20323635343835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.197.156.0/24

    Signature Algorithm: sha256WithRSAEncryption
         52:74:f2:23:c6:ca:a6:55:b9:ea:e6:86:20:8d:6a:ae:80:0c:
         3a:86:5d:ba:7b:5a:59:40:4a:7c:5f:a1:e6:9e:22:27:69:48:
         87:4d:30:de:7b:1a:51:aa:df:a7:0d:f7:32:a5:97:0d:f8:6f:
         22:da:32:ea:94:0f:97:5c:91:d3:1a:80:1d:77:03:9f:e8:12:
         6a:2b:33:09:5d:6d:35:9f:0e:fc:6c:5b:b3:16:01:eb:eb:9b:
         19:00:14:ad:c6:7c:ee:2e:31:56:b2:64:ba:40:bc:21:e2:53:
         7e:15:74:4c:dd:f1:e4:78:79:c7:fa:a4:e1:f1:6c:fe:23:27:
         57:23:1b:22:1f:c9:42:8c:3e:5e:52:e2:9b:e5:93:19:14:a9:
         be:26:ea:84:cf:f3:60:9a:41:85:df:c3:c2:75:1f:60:15:79:
         93:83:ae:46:8c:8d:d6:5b:0c:c7:de:d6:52:fb:a7:e0:6a:19:
         82:d9:f7:4f:45:65:12:3b:da:82:57:59:64:c2:d7:50:bb:eb:
         68:6c:9d:08:e4:de:07:90:24:03:f4:14:bf:5a:47:3b:d2:57:
         ca:a5:01:f2:c3:bf:af:7d:8f:6b:16:b6:d7:ba:52:67:d8:bb:
         26:c4:f3:5c:d0:5a:4d:a0:11:23:01:b0:55:54:f0:71:c9:81:
         91:5a:f7:30
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUB5Q+9i3xjO5fVzpMs5moXTWlYcowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoREI0Nzc1RkYxMzg3MjY1QjhGNEI0MzBCNzAzNTEzMTZB
NjZCNkQ0NDAeFw0yNDAyMjMyMzM1NTdaFw0yNTAyMjEyMzQwNTdaMDMxMTAvBgNV
BAMTKEU5Rjg4QzkwM0ZFNEU2OTMwRTZBNjM3MkZBMDFCNTdDN0M2ODcwNUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDE5S2mlv6zzm/KAsLzbzdvMoMh
mrMR53k587r8TNRdDgKrYLV9OYPLWSR82n7eB0PiNm+qC7NTFVMwmeApEdo86LpS
PBet+02zby0SAQ69EHawXTYs3G97FpQ7d1/OVHyNmIYqB/1UwTHb1EyGeDMjQAJn
vTfrzZC5qM5I32AiJDaDFXDcUw6vFLnAcY1bHBF75sXmBdU0LY9Wto3DrVBQnF3M
2UIDvCGajQin1oXlsJh9KcGPhjf8BegS75RSLHpRgCC8Ix6kbQCnJQwOMgVInpoK
pUAxcWAa3rOFpGdVOCOZVmG1LpZObbNcuTp0uCpE8OfpQmpY32CydkBog+4HAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQU6fiMkD/k5pMOamNy+gG1fHxocFowHwYDVR0j
BBgwFoAU20d1/xOHJluPS0MLcDUTFqZrbUQwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby81ZGt0d3B0M1FFWG4zb0NXenB0ZkoxTHpQS1JIbUtuS25rb3JLMTd5WWpq
LzAvREI0Nzc1RkYxMzg3MjY1QjhGNEI0MzBCNzAzNTEzMTZBNjZCNkQ0NC5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMC9EQjQ3NzVGRjEzODcyNjVCOEY0
QjQzMEI3MDM1MTMxNkE2NkI2RDQ0LmNlcjCBrwYIKwYBBQUHAQsEgaIwgZ8wgZwG
CCsGAQUFBzALhoGPcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby81
ZGt0d3B0M1FFWG4zb0NXenB0ZkoxTHpQS1JIbUtuS25rb3JLMTd5WWpqLzAvMzEz
NjM4MmUzMTM5MzcyZTMxMzUzNjJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzYz
NTM0MzgzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcB
BwEB/wQQMA4wDAQCAAEwBgMEAKjFnDANBgkqhkiG9w0BAQsFAAOCAQEAUnTyI8bK
plW56uaGII1qroAMOoZduntaWUBKfF+h5p4iJ2lIh00w3nsaUarfpw33MqWXDfhv
Itoy6pQPl1yR0xqAHXcDn+gSaiszCV1tNZ8O/GxbsxYB6+ubGQAUrcZ87i4xVrJk
ukC8IeJTfhV0TN3x5Hh5x/qk4fFs/iMnVyMbIh/JQow+XlLim+WTGRSpvibqhM/z
YJpBhd/DwnUfYBV5k4OuRoyN1lsMx97WUvun4GoZgtn3T0VlEjvagldZZMLXULvr
aGydCOTeB5AkA/QUv1pHO9JXyqUB8sO/r32Paxa217pSZ9i7JsTzXNBaTaARIwGw
VVTwccmBkVr3MA==
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:45 2024 by rpki-client on console-fra.rpki-client.org