Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/62eHZ4fSK6vNQGdNwNXibZMRXKaUmZVfEmt1ErTuTWEz/0/3136382e3138312e3132342e302f32322d3234203d3e20323635333536.roa
File:                     3136382e3138312e3132342e302f32322d3234203d3e20323635333536.roa (raw, json)
Hash identifier:          S1cJk3I4KSB49/wDvFwmkFHgIZnuTLiOsB+uwMnwxK8=
Subject key identifier:   17:C1:30:01:00:DD:21:4C:54:96:FC:70:F9:CE:E6:3E:3D:71:A2:3F
Certificate issuer:       /CN=EE5C25C14E7F4C70E0C07EFF95951C9F3EE11F34
Certificate serial:       3A147231DEF0FCE1F3B90E68B10338F41653EE0D
Authority key identifier: EE:5C:25:C1:4E:7F:4C:70:E0:C0:7E:FF:95:95:1C:9F:3E:E1:1F:34
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE5C25C14E7F4C70E0C07EFF95951C9F3EE11F34.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/62eHZ4fSK6vNQGdNwNXibZMRXKaUmZVfEmt1ErTuTWEz/0/3136382e3138312e3132342e302f32322d3234203d3e20323635333536.roa
Signing time:             Mon 14 Nov 2022 14:16:51 +0000
ROA not before:           Mon 14 Nov 2022 14:11:51 +0000
ROA not after:            Mon 13 Nov 2023 14:16:51 +0000
asID:                     265356
IP address blocks:        168.181.124.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:14:72:31:de:f0:fc:e1:f3:b9:0e:68:b1:03:38:f4:16:53:ee:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE5C25C14E7F4C70E0C07EFF95951C9F3EE11F34
        Validity
            Not Before: Nov 14 14:11:51 2022 GMT
            Not After : Nov 13 14:16:51 2023 GMT
        Subject: CN=17C1300100DD214C5496FC70F9CEE63E3D71A23F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:8b:fc:72:1d:4d:87:de:28:95:f2:13:3a:de:
                    a4:c9:e0:c8:de:92:cf:5b:4c:27:cd:0a:8e:c0:cb:
                    4e:0b:07:3a:0f:c9:d0:8e:07:36:d1:13:63:6c:56:
                    fa:1c:65:c8:ed:83:28:a1:9d:dc:ac:48:ca:c6:90:
                    44:60:cd:37:e6:9d:e5:fe:9b:36:c7:c7:33:00:af:
                    98:0f:af:a6:af:0f:d0:0d:ef:75:48:43:9a:b1:a5:
                    bb:49:ba:13:68:fe:29:70:24:c8:43:c7:f0:92:a7:
                    19:8a:cb:c7:5f:11:d1:47:63:5f:53:46:f1:15:ac:
                    cd:1d:51:c9:d9:17:dd:1d:aa:9f:63:ef:6a:b2:3d:
                    fe:b6:cb:f7:ab:39:b6:70:1b:03:0e:79:77:43:63:
                    c1:27:22:e3:82:f2:b5:23:42:81:9f:25:b1:4d:94:
                    de:40:cb:3d:3f:91:41:84:2c:92:7f:d8:42:eb:86:
                    30:79:55:1c:28:79:e7:a9:ff:30:54:5e:a5:32:d6:
                    3f:1e:8b:f9:7c:63:8a:46:50:1c:ef:22:2c:94:e8:
                    4c:42:51:40:a3:43:3b:d5:45:3f:33:6f:d6:4f:e8:
                    89:de:f6:8f:7f:5a:18:38:c6:65:81:7c:89:88:2e:
                    4e:c3:65:eb:8a:3c:68:9d:16:fe:11:8d:ce:c1:6a:
                    28:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:C1:30:01:00:DD:21:4C:54:96:FC:70:F9:CE:E6:3E:3D:71:A2:3F
            X509v3 Authority Key Identifier:
                keyid:EE:5C:25:C1:4E:7F:4C:70:E0:C0:7E:FF:95:95:1C:9F:3E:E1:1F:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/62eHZ4fSK6vNQGdNwNXibZMRXKaUmZVfEmt1ErTuTWEz/0/EE5C25C14E7F4C70E0C07EFF95951C9F3EE11F34.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE5C25C14E7F4C70E0C07EFF95951C9F3EE11F34.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/62eHZ4fSK6vNQGdNwNXibZMRXKaUmZVfEmt1ErTuTWEz/0/3136382e3138312e3132342e302f32322d3234203d3e20323635333536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.181.124.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9c:d1:97:b9:b2:e3:20:41:65:62:37:d9:28:4e:29:39:71:0b:
         5c:bc:42:57:7e:db:e1:33:45:8d:7e:86:c4:16:e4:9b:ef:61:
         ba:43:48:24:70:75:32:fc:8a:ef:ce:fb:cb:89:9e:57:a8:0e:
         43:4d:ad:f5:dc:c6:44:d0:32:7f:76:63:ae:8a:e1:09:98:11:
         f2:7f:e5:bf:32:ce:7f:2c:6b:b5:c2:17:c8:a6:ca:cd:ab:a0:
         8f:b2:a1:cb:e1:39:82:02:69:cb:40:b2:9e:1f:c3:0a:fc:8e:
         7b:46:7f:d0:1f:68:78:b3:3a:d6:16:0a:e6:f5:88:99:e6:d7:
         06:70:35:28:eb:16:68:48:f4:c8:5a:f4:bd:6f:78:78:1f:82:
         0f:ba:a5:d6:7e:a1:c6:d1:74:66:cb:57:1b:68:12:73:b0:c4:
         29:8e:05:86:ff:42:5b:4c:62:91:f3:65:ad:65:33:a0:05:f9:
         b8:00:21:8e:88:04:67:91:2e:6e:84:64:1a:13:fd:48:83:f2:
         87:e0:f4:cf:dd:57:c3:d1:c5:a5:05:6c:a1:b6:f7:22:c8:19:
         3d:21:63:90:64:27:b3:a7:68:40:9e:e7:93:a3:b3:dc:1f:6a:
         d3:0f:8f:e1:92:13:a6:56:1d:a0:f5:5a:61:09:dc:cf:e8:14:
         73:43:4f:3e
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUOhRyMd7w/OHzuQ5osQM49BZT7g0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU1QzI1QzE0RTdGNEM3MEUwQzA3RUZGOTU5NTFDOUYz
RUUxMUYzNDAeFw0yMjExMTQxNDExNTFaFw0yMzExMTMxNDE2NTFaMDMxMTAvBgNV
BAMTKDE3QzEzMDAxMDBERDIxNEM1NDk2RkM3MEY5Q0VFNjNFM0Q3MUEyM0YwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJi/xyHU2H3iiV8hM63qTJ4Mje
ks9bTCfNCo7Ay04LBzoPydCOBzbRE2NsVvocZcjtgyihndysSMrGkERgzTfmneX+
mzbHxzMAr5gPr6avD9AN73VIQ5qxpbtJuhNo/ilwJMhDx/CSpxmKy8dfEdFHY19T
RvEVrM0dUcnZF90dqp9j72qyPf62y/erObZwGwMOeXdDY8EnIuOC8rUjQoGfJbFN
lN5Ayz0/kUGELJJ/2ELrhjB5VRwoeeep/zBUXqUy1j8ei/l8Y4pGUBzvIiyU6ExC
UUCjQzvVRT8zb9ZP6Ine9o9/Whg4xmWBfImILk7DZeuKPGidFv4Rjc7Baii3AgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUF8EwAQDdIUxUlvxw+c7mPj1xoj8wHwYDVR0j
BBgwFoAU7lwlwU5/THDgwH7/lZUcnz7hHzQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNjJlSFo0ZlNLNnZOUUdkTndOWGliWk1SWEthVW1aVmZFbXQxRXJUdVRX
RXovMC9FRTVDMjVDMTRFN0Y0QzcwRTBDMDdFRkY5NTk1MUM5RjNFRTExRjM0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0VFNUMyNUMxNEU3RjRDNzBF
MEMwN0VGRjk1OTUxQzlGM0VFMTFGMzQuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzYyZUhaNGZTSzZ2TlFHZE53TlhpYlpNUlhLYVVtWlZmRW10MUVyVHVUV0V6LzAv
MzEzNjM4MmUzMTM4MzEyZTMxMzIzNDJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDMy
MzYzNTMzMzUzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAqi1fDANBgkqhkiG9w0BAQsFAAOCAQEAnNGX
ubLjIEFlYjfZKE4pOXELXLxCV37b4TNFjX6GxBbkm+9hukNIJHB1MvyK7877y4me
V6gOQ02t9dzGRNAyf3ZjrorhCZgR8n/lvzLOfyxrtcIXyKbKzaugj7Khy+E5ggJp
y0Cynh/DCvyOe0Z/0B9oeLM61hYK5vWImebXBnA1KOsWaEj0yFr0vW94eB+CD7ql
1n6hxtF0ZstXG2gSc7DEKY4Fhv9CW0xikfNlrWUzoAX5uAAhjogEZ5EuboRkGhP9
SIPyh+D0z91Xw9HFpQVsobb3IsgZPSFjkGQns6doQJ7nk6Oz3B9q0w+P4ZITplYd
oPVaYQncz+gUc0NPPg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:11 2024 by rpki-client on console-ams.rpki-client.org