Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9vor5aA4Db9zbBTiHXa325cBwKJkE6dMCAhoXJFM9Sum/0/32342e3135322e3131382e302f32342d3234203d3e20323639333136.roa
File:                     32342e3135322e3131382e302f32342d3234203d3e20323639333136.roa (raw, json)
Hash identifier:          vJmV/nhMOpEUL1pdHW0wbDNMOLnMIDQf+FpR0rbyfqc=
Subject key identifier:   E5:76:8E:6A:76:FC:9D:15:C0:1D:4E:DA:0F:29:17:40:B2:1E:86:8B
Certificate issuer:       /CN=168914F4DB078B44B18ED648C964C70D7A65DCCB
Certificate serial:       287D3391668BFB0CDCF2409E7468687B88944AFC
Authority key identifier: 16:89:14:F4:DB:07:8B:44:B1:8E:D6:48:C9:64:C7:0D:7A:65:DC:CB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/168914F4DB078B44B18ED648C964C70D7A65DCCB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9vor5aA4Db9zbBTiHXa325cBwKJkE6dMCAhoXJFM9Sum/0/32342e3135322e3131382e302f32342d3234203d3e20323639333136.roa
Signing time:             Mon 31 Jul 2023 14:26:58 +0000
ROA not before:           Mon 31 Jul 2023 14:21:58 +0000
ROA not after:            Mon 29 Jul 2024 14:26:58 +0000
asID:                     269316
IP address blocks:        24.152.118.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:7d:33:91:66:8b:fb:0c:dc:f2:40:9e:74:68:68:7b:88:94:4a:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=168914F4DB078B44B18ED648C964C70D7A65DCCB
        Validity
            Not Before: Jul 31 14:21:58 2023 GMT
            Not After : Jul 29 14:26:58 2024 GMT
        Subject: CN=E5768E6A76FC9D15C01D4EDA0F291740B21E868B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:4a:8c:af:69:7a:de:48:75:cd:95:9c:54:1e:
                    54:e9:35:5e:46:03:0b:08:d8:fa:98:3f:15:8d:72:
                    06:a0:3b:2d:b9:b5:48:c4:f9:c8:63:9c:9c:a1:02:
                    0a:27:42:8b:85:ba:7d:e7:96:ab:4c:cf:6f:65:7c:
                    e9:36:d8:7c:a4:09:55:5f:64:ab:24:34:95:2f:55:
                    64:51:98:0e:ef:56:a4:53:aa:5e:97:3a:e1:0b:ec:
                    b4:4c:b5:3c:52:ab:35:bb:74:19:52:64:ce:d5:ab:
                    9a:f9:ef:4f:29:73:c1:8b:1f:41:83:4f:de:7c:dd:
                    f2:08:17:ee:a2:72:d1:a4:f9:33:72:2e:1d:7e:5a:
                    3b:64:c9:eb:50:86:34:66:93:4e:61:ef:bc:8c:56:
                    71:66:cb:a1:90:a7:5f:75:e0:3e:9d:2b:79:d1:07:
                    0a:36:fe:23:ec:48:b0:50:2c:dc:0a:d2:9c:98:9d:
                    80:f2:67:3f:ae:98:27:dd:c8:b6:6a:44:b3:cd:d1:
                    da:d4:13:a7:58:2e:6b:b3:97:1c:57:ae:d5:78:6b:
                    7c:c9:ad:8c:96:53:fb:f6:a5:55:e7:af:af:6f:01:
                    12:61:0a:f2:03:ba:a9:69:50:b3:85:4e:c6:73:c3:
                    55:06:4a:10:39:62:b7:3a:6a:6d:01:2d:79:42:b8:
                    be:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:76:8E:6A:76:FC:9D:15:C0:1D:4E:DA:0F:29:17:40:B2:1E:86:8B
            X509v3 Authority Key Identifier:
                keyid:16:89:14:F4:DB:07:8B:44:B1:8E:D6:48:C9:64:C7:0D:7A:65:DC:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9vor5aA4Db9zbBTiHXa325cBwKJkE6dMCAhoXJFM9Sum/0/168914F4DB078B44B18ED648C964C70D7A65DCCB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/168914F4DB078B44B18ED648C964C70D7A65DCCB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9vor5aA4Db9zbBTiHXa325cBwKJkE6dMCAhoXJFM9Sum/0/32342e3135322e3131382e302f32342d3234203d3e20323639333136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.152.118.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3e:c3:2b:7c:a5:2d:4e:9d:92:89:e8:80:fd:5e:30:d6:ff:9e:
         fb:c9:88:5b:e6:d5:7a:34:2a:ce:77:95:6b:b0:5a:8a:92:91:
         c3:6e:e2:1e:dc:32:8c:a0:bd:b3:a8:28:20:7b:e4:30:40:0f:
         cb:1f:d2:58:0d:77:6d:96:77:24:36:bc:35:c3:b3:7b:24:5a:
         ea:bf:1d:f1:6c:8b:de:c6:66:94:bb:e0:32:da:2d:2c:c1:ca:
         61:7c:f6:2f:95:10:47:23:3f:42:8d:5f:73:9c:ed:f6:b8:b8:
         32:00:ec:5d:49:d4:ba:58:2e:e5:6e:b8:45:37:b8:dd:01:69:
         a3:77:56:d9:13:4c:f3:18:ce:7c:da:3e:b1:27:2c:3e:b6:24:
         3f:0e:5f:59:e9:43:e2:ec:3e:62:b0:cd:3f:cb:b2:dd:53:34:
         e4:42:40:9d:99:0b:60:c3:58:10:de:fe:13:0f:cb:85:47:3e:
         28:02:a3:5e:90:75:81:7f:6f:01:a0:6c:5c:3c:28:5f:c5:76:
         57:43:63:c6:bf:c5:79:22:7e:a8:b2:8c:09:cf:f7:44:0c:90:
         b3:ab:8d:6c:db:5f:89:56:ba:e7:9d:87:9f:8f:d6:71:ca:e5:
         ae:88:eb:78:4c:1d:7c:d0:aa:a3:c2:5c:d7:32:92:22:bd:d0:
         44:0f:76:90
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUKH0zkWaL+wzc8kCedGhoe4iUSvwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTY4OTE0RjREQjA3OEI0NEIxOEVENjQ4Qzk2NEM3MEQ3
QTY1RENDQjAeFw0yMzA3MzExNDIxNThaFw0yNDA3MjkxNDI2NThaMDMxMTAvBgNV
BAMTKEU1NzY4RTZBNzZGQzlEMTVDMDFENEVEQTBGMjkxNzQwQjIxRTg2OEIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZSoyvaXreSHXNlZxUHlTpNV5G
AwsI2PqYPxWNcgagOy25tUjE+chjnJyhAgonQouFun3nlqtMz29lfOk22HykCVVf
ZKskNJUvVWRRmA7vVqRTql6XOuEL7LRMtTxSqzW7dBlSZM7Vq5r5708pc8GLH0GD
T9583fIIF+6ictGk+TNyLh1+WjtkyetQhjRmk05h77yMVnFmy6GQp1914D6dK3nR
Bwo2/iPsSLBQLNwK0pyYnYDyZz+umCfdyLZqRLPN0drUE6dYLmuzlxxXrtV4a3zJ
rYyWU/v2pVXnr69vARJhCvIDuqlpULOFTsZzw1UGShA5Yrc6am0BLXlCuL77AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU5XaOanb8nRXAHU7aDykXQLIehoswHwYDVR0j
BBgwFoAUFokU9NsHi0SxjtZIyWTHDXpl3MswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOXZvcjVhQTREYjl6YkJUaUhYYTMyNWNCd0tKa0U2ZE1DQWhvWEpGTTlT
dW0vMC8xNjg5MTRGNERCMDc4QjQ0QjE4RUQ2NDhDOTY0QzcwRDdBNjVEQ0NCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzE2ODkxNEY0REIwNzhCNDRC
MThFRDY0OEM5NjRDNzBEN0E2NURDQ0IuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
Lzl2b3I1YUE0RGI5emJCVGlIWGEzMjVjQndLSmtFNmRNQ0Fob1hKRk05U3VtLzAv
MzIzNDJlMzEzNTMyMmUzMTMxMzgyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzkzMzMxMzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAAYmHYwDQYJKoZIhvcNAQELBQADggEBAD7DK3yl
LU6dkonogP1eMNb/nvvJiFvm1Xo0Ks53lWuwWoqSkcNu4h7cMoygvbOoKCB75DBA
D8sf0lgNd22WdyQ2vDXDs3skWuq/HfFsi97GZpS74DLaLSzBymF89i+VEEcjP0KN
X3Oc7fa4uDIA7F1J1LpYLuVuuEU3uN0BaaN3VtkTTPMYznzaPrEnLD62JD8OX1np
Q+LsPmKwzT/Lst1TNORCQJ2ZC2DDWBDe/hMPy4VHPigCo16QdYF/bwGgbFw8KF/F
dldDY8a/xXkifqiyjAnP90QMkLOrjWzbX4lWuuedh5+P1nHK5a6I63hMHXzQqqPC
XNcykiK90EQPdpA=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:10 2024 by rpki-client on console-fra.rpki-client.org