Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/728Km9tFo8j9Ln615Ykkkg6T8rBnbgPgwshb3ghsPjHq/0/3136382e39302e32342e302f32322d3234203d3e20323633333231.roa
File:                     3136382e39302e32342e302f32322d3234203d3e20323633333231.roa (raw, json)
Hash identifier:          3fNmEE43JCnA7exyV+BotiRx1hLVKRPbSaQ+G47O9ME=
Subject key identifier:   27:64:77:92:EE:06:70:67:97:6E:C9:E9:36:7B:3D:45:42:80:50:7D
Certificate issuer:       /CN=F3BDCD1528286CE48AC6FD653291774EA335B83E
Certificate serial:       2F581787651BDA82BBE7EC3A59B1055DA9507A29
Authority key identifier: F3:BD:CD:15:28:28:6C:E4:8A:C6:FD:65:32:91:77:4E:A3:35:B8:3E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F3BDCD1528286CE48AC6FD653291774EA335B83E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/728Km9tFo8j9Ln615Ykkkg6T8rBnbgPgwshb3ghsPjHq/0/3136382e39302e32342e302f32322d3234203d3e20323633333231.roa
Signing time:             Fri 24 Feb 2023 11:32:15 +0000
ROA not before:           Fri 24 Feb 2023 11:27:15 +0000
ROA not after:            Fri 23 Feb 2024 11:32:15 +0000
asID:                     263321
IP address blocks:        168.90.24.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:58:17:87:65:1b:da:82:bb:e7:ec:3a:59:b1:05:5d:a9:50:7a:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3BDCD1528286CE48AC6FD653291774EA335B83E
        Validity
            Not Before: Feb 24 11:27:15 2023 GMT
            Not After : Feb 23 11:32:15 2024 GMT
        Subject: CN=27647792EE067067976EC9E9367B3D454280507D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:d6:35:16:00:c8:28:fe:08:7a:9a:ad:b0:1b:
                    d2:db:be:23:f3:d3:47:69:cf:ed:3a:be:52:d8:0d:
                    75:99:d4:3f:9b:24:9d:f7:5b:6b:c7:39:22:d2:0c:
                    36:ff:66:7c:61:5d:0f:db:a9:83:61:4a:06:cb:c5:
                    78:db:1d:23:11:d5:1c:b9:1f:7d:df:d6:2f:08:00:
                    1b:84:3b:51:b7:01:35:cd:e8:3f:15:ab:43:f8:82:
                    62:e4:f7:49:4e:89:59:85:0d:32:dd:e5:5d:c7:d6:
                    cf:8a:2b:c4:15:f5:c9:6d:32:99:25:8d:65:63:3e:
                    e1:c1:49:02:13:15:76:fc:93:1c:d2:8c:ee:08:52:
                    a1:a1:12:2f:0d:51:7a:e1:0c:9d:9d:c6:3b:f6:34:
                    53:73:c2:10:29:c0:d9:1f:e0:41:8f:3b:b8:58:03:
                    9a:e4:d2:6f:e3:ee:41:38:37:a8:2f:5b:9c:d7:2e:
                    13:0f:00:9a:24:e8:9c:3f:40:31:cc:bf:93:42:4c:
                    cb:95:25:89:9a:ed:0e:63:e7:6a:72:9a:49:4a:61:
                    74:29:87:66:d5:45:2c:c9:d1:9d:70:27:4b:ee:a8:
                    e8:54:32:d2:16:b7:fd:3c:36:37:3b:14:62:ce:09:
                    86:fc:17:b8:e3:ab:42:05:40:8d:54:ea:fc:33:16:
                    24:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:64:77:92:EE:06:70:67:97:6E:C9:E9:36:7B:3D:45:42:80:50:7D
            X509v3 Authority Key Identifier:
                keyid:F3:BD:CD:15:28:28:6C:E4:8A:C6:FD:65:32:91:77:4E:A3:35:B8:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/728Km9tFo8j9Ln615Ykkkg6T8rBnbgPgwshb3ghsPjHq/0/F3BDCD1528286CE48AC6FD653291774EA335B83E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F3BDCD1528286CE48AC6FD653291774EA335B83E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/728Km9tFo8j9Ln615Ykkkg6T8rBnbgPgwshb3ghsPjHq/0/3136382e39302e32342e302f32322d3234203d3e20323633333231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.90.24.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3c:00:ee:5e:48:58:89:d6:72:19:e3:a1:f3:7d:9a:cd:82:0d:
         a3:5e:1b:63:6e:f9:0e:5c:5e:05:05:32:c6:9b:95:37:1d:ab:
         48:b5:17:f4:1c:33:ff:af:a1:1b:58:42:00:52:6b:f6:ec:7a:
         f1:1c:3c:a0:ac:9f:b9:2a:9e:fa:1f:4d:db:88:e6:0a:0e:38:
         92:5a:bc:9b:e3:4c:e8:7d:39:10:3f:16:d6:88:3c:91:17:5a:
         03:48:24:21:fe:85:72:be:67:0e:fc:4c:93:b0:b7:36:c5:94:
         b6:a2:a5:90:ec:2a:77:34:d1:9a:2a:ca:61:9c:69:bb:94:45:
         8a:f0:e5:61:89:7a:c0:5f:80:47:28:0c:9e:4a:29:bd:e6:ca:
         5a:83:de:b7:70:d8:e4:b1:7b:b2:0c:e8:1f:cb:ed:91:c7:4c:
         18:dd:3b:d1:30:7a:85:e5:17:73:54:90:08:9e:b4:f2:cc:1d:
         da:b5:d5:4c:5b:c9:f5:f6:3f:35:ba:56:65:84:a7:8b:0f:b2:
         28:7d:e6:6f:7d:a1:af:fe:e9:95:87:f2:60:52:01:00:e1:f5:
         db:ad:e9:65:2c:88:13:23:90:55:cd:f9:85:09:a9:00:49:e5:
         3a:f6:81:03:db:fc:b2:77:8e:27:31:57:aa:cb:cb:32:8a:ad:
         5f:05:72:16
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUL1gXh2Ub2oK75+w6WbEFXalQeikwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjNCRENEMTUyODI4NkNFNDhBQzZGRDY1MzI5MTc3NEVB
MzM1QjgzRTAeFw0yMzAyMjQxMTI3MTVaFw0yNDAyMjMxMTMyMTVaMDMxMTAvBgNV
BAMTKDI3NjQ3NzkyRUUwNjcwNjc5NzZFQzlFOTM2N0IzRDQ1NDI4MDUwN0QwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC21jUWAMgo/gh6mq2wG9LbviPz
00dpz+06vlLYDXWZ1D+bJJ33W2vHOSLSDDb/ZnxhXQ/bqYNhSgbLxXjbHSMR1Ry5
H33f1i8IABuEO1G3ATXN6D8Vq0P4gmLk90lOiVmFDTLd5V3H1s+KK8QV9cltMpkl
jWVjPuHBSQITFXb8kxzSjO4IUqGhEi8NUXrhDJ2dxjv2NFNzwhApwNkf4EGPO7hY
A5rk0m/j7kE4N6gvW5zXLhMPAJok6Jw/QDHMv5NCTMuVJYma7Q5j52pymklKYXQp
h2bVRSzJ0Z1wJ0vuqOhUMtIWt/08Njc7FGLOCYb8F7jjq0IFQI1U6vwzFiQhAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUJ2R3ku4GcGeXbsnpNns9RUKAUH0wHwYDVR0j
BBgwFoAU873NFSgobOSKxv1lMpF3TqM1uD4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNzI4S205dEZvOGo5TG42MTVZa2trZzZUOHJCbmJnUGd3c2hiM2doc1Bq
SHEvMC9GM0JEQ0QxNTI4Mjg2Q0U0OEFDNkZENjUzMjkxNzc0RUEzMzVCODNFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0YzQkRDRDE1MjgyODZDRTQ4
QUM2RkQ2NTMyOTE3NzRFQTMzNUI4M0UuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzcyOEttOXRGbzhqOUxuNjE1WWtra2c2VDhyQm5iZ1Bnd3NoYjNnaHNQakhxLzAv
MzEzNjM4MmUzOTMwMmUzMjM0MmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzNjMz
MzMzMjMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCqFoYMA0GCSqGSIb3DQEBCwUAA4IBAQA8AO5eSFiJ
1nIZ46HzfZrNgg2jXhtjbvkOXF4FBTLGm5U3HatItRf0HDP/r6EbWEIAUmv27Hrx
HDygrJ+5Kp76H03biOYKDjiSWryb40zofTkQPxbWiDyRF1oDSCQh/oVyvmcO/EyT
sLc2xZS2oqWQ7Cp3NNGaKsphnGm7lEWK8OVhiXrAX4BHKAyeSim95spag963cNjk
sXuyDOgfy+2Rx0wY3TvRMHqF5RdzVJAInrTyzB3atdVMW8n19j81ulZlhKeLD7Io
feZvfaGv/umVh/JgUgEA4fXbrellLIgTI5BVzfmFCakASeU69oED2/yyd44nMVeq
y8syiq1fBXIW
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:23 2024 by rpki-client on console-ams.rpki-client.org