Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BhU3QhMatjWXAo2XE3U93zLSGHGcBEGZrrd617gMap4z/0/3136372e3234392e38382e302f32342d3234203d3e20323731313334.roa
File:                     3136372e3234392e38382e302f32342d3234203d3e20323731313334.roa (raw, json)
Hash identifier:          SD5ob0ohINDpb8Y4yFdGjwVZRa9/5nqPc1+e40LuPMI=
Subject key identifier:   65:87:FA:8C:6A:DC:3F:AB:8F:2F:14:03:3B:BE:77:C1:EF:31:4F:E0
Certificate issuer:       /CN=33043F790D6A918A5EB28C4B3D04D8805609D0B7
Certificate serial:       7EC49B5AF96D697298934D1A3A2FCB9745552816
Authority key identifier: 33:04:3F:79:0D:6A:91:8A:5E:B2:8C:4B:3D:04:D8:80:56:09:D0:B7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/33043F790D6A918A5EB28C4B3D04D8805609D0B7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BhU3QhMatjWXAo2XE3U93zLSGHGcBEGZrrd617gMap4z/0/3136372e3234392e38382e302f32342d3234203d3e20323731313334.roa
Signing time:             Sat 10 Jun 2023 22:26:48 +0000
ROA not before:           Sat 10 Jun 2023 22:21:48 +0000
ROA not after:            Sat 08 Jun 2024 22:26:48 +0000
asID:                     271134
IP address blocks:        167.249.88.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:c4:9b:5a:f9:6d:69:72:98:93:4d:1a:3a:2f:cb:97:45:55:28:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=33043F790D6A918A5EB28C4B3D04D8805609D0B7
        Validity
            Not Before: Jun 10 22:21:48 2023 GMT
            Not After : Jun  8 22:26:48 2024 GMT
        Subject: CN=6587FA8C6ADC3FAB8F2F14033BBE77C1EF314FE0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:94:c0:3d:8d:1b:9d:28:17:01:50:a1:ba:52:
                    71:fb:b4:2e:33:78:72:f4:0b:eb:36:e0:10:8d:b0:
                    63:41:1e:0e:4a:b4:0d:25:f5:58:04:7c:10:61:11:
                    3a:6c:29:5a:5d:d4:cf:70:ae:50:30:4d:be:f8:d1:
                    fe:36:ed:84:f5:5b:c6:88:78:00:f2:ee:7e:36:56:
                    1c:0b:ea:c3:cf:16:8e:9a:95:0b:6a:b7:8b:f1:05:
                    88:78:63:d7:bf:f2:80:9d:48:bf:98:ec:80:58:e2:
                    e4:06:51:27:a3:79:86:2f:eb:be:8f:f5:9f:de:93:
                    f0:d2:79:dc:0f:81:c8:4c:61:28:09:ec:20:eb:01:
                    2c:b4:c4:0e:37:df:22:59:69:9b:55:1e:68:c8:e3:
                    63:63:c5:27:cc:ed:fa:ce:4e:75:06:9b:17:db:a7:
                    ea:08:95:3b:56:de:96:8d:ce:ef:74:4a:da:0a:97:
                    6f:e0:4c:c0:7f:4f:25:ba:2a:27:c2:b1:02:3c:96:
                    3d:0c:3b:93:53:1d:8e:bc:87:fc:96:4f:56:68:79:
                    c8:d6:26:bf:38:39:aa:ff:11:6e:10:0a:eb:5b:5e:
                    4e:77:25:cf:83:8d:55:8a:28:e8:54:ac:cf:b4:3e:
                    67:01:fa:5c:56:ba:20:51:bb:e5:11:ab:55:74:25:
                    0e:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:87:FA:8C:6A:DC:3F:AB:8F:2F:14:03:3B:BE:77:C1:EF:31:4F:E0
            X509v3 Authority Key Identifier:
                keyid:33:04:3F:79:0D:6A:91:8A:5E:B2:8C:4B:3D:04:D8:80:56:09:D0:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BhU3QhMatjWXAo2XE3U93zLSGHGcBEGZrrd617gMap4z/0/33043F790D6A918A5EB28C4B3D04D8805609D0B7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/33043F790D6A918A5EB28C4B3D04D8805609D0B7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BhU3QhMatjWXAo2XE3U93zLSGHGcBEGZrrd617gMap4z/0/3136372e3234392e38382e302f32342d3234203d3e20323731313334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.249.88.0/24

    Signature Algorithm: sha256WithRSAEncryption
         27:74:2e:d6:e5:1a:a9:bf:59:35:49:fd:59:3b:ef:f7:0c:57:
         e8:13:3e:b0:be:e1:55:e1:74:84:2b:d0:50:8b:67:98:b7:e2:
         b2:aa:e1:12:0f:99:5d:99:fe:67:3e:30:2c:4c:78:88:6a:4f:
         16:07:4c:13:0e:e4:9c:34:21:b1:66:37:ba:ef:da:af:57:98:
         56:e5:04:30:7f:e8:77:99:bd:76:44:fb:d2:03:21:f4:a4:87:
         d6:ce:67:58:23:ad:86:5b:52:53:9e:07:02:9d:f4:2e:31:dc:
         76:c9:b9:ed:0d:46:5f:fc:d9:24:07:45:cb:7d:3c:ae:d2:06:
         f3:ab:88:ae:ae:52:3a:b9:e1:71:9a:ee:c5:9a:97:ff:3e:e8:
         88:0c:87:61:f0:1f:0d:2b:39:5e:19:78:e1:dc:c5:8d:19:48:
         ff:6d:bf:0c:a1:c0:ed:6c:30:90:d9:f3:c2:01:34:81:13:95:
         57:7f:5a:d1:b4:18:7b:11:c9:ea:dc:bc:38:5e:37:56:08:ee:
         94:33:81:93:9c:b7:88:1f:ab:13:84:52:5b:f2:4b:c2:03:1a:
         7d:7c:9b:2e:bb:a6:cf:10:f1:1e:e3:6d:09:fe:2a:14:8f:44:
         fc:f1:c5:03:24:9b:ba:2c:8f:8b:01:cc:3f:32:14:85:64:56:
         ef:9e:26:c4
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUfsSbWvltaXKYk00aOi/Ll0VVKBYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzMwNDNGNzkwRDZBOTE4QTVFQjI4QzRCM0QwNEQ4ODA1
NjA5RDBCNzAeFw0yMzA2MTAyMjIxNDhaFw0yNDA2MDgyMjI2NDhaMDMxMTAvBgNV
BAMTKDY1ODdGQThDNkFEQzNGQUI4RjJGMTQwMzNCQkU3N0MxRUYzMTRGRTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6lMA9jRudKBcBUKG6UnH7tC4z
eHL0C+s24BCNsGNBHg5KtA0l9VgEfBBhETpsKVpd1M9wrlAwTb740f427YT1W8aI
eADy7n42VhwL6sPPFo6alQtqt4vxBYh4Y9e/8oCdSL+Y7IBY4uQGUSejeYYv676P
9Z/ek/DSedwPgchMYSgJ7CDrASy0xA433yJZaZtVHmjI42NjxSfM7frOTnUGmxfb
p+oIlTtW3paNzu90StoKl2/gTMB/TyW6KifCsQI8lj0MO5NTHY68h/yWT1ZoecjW
Jr84Oar/EW4QCutbXk53Jc+DjVWKKOhUrM+0PmcB+lxWuiBRu+URq1V0JQ4vAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUZYf6jGrcP6uPLxQDO753we8xT+AwHwYDVR0j
BBgwFoAUMwQ/eQ1qkYpesoxLPQTYgFYJ0LcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQmhVM1FoTWF0aldYQW8yWEUzVTkzekxTR0hHY0JFR1pycmQ2MTdnTWFw
NHovMC8zMzA0M0Y3OTBENkE5MThBNUVCMjhDNEIzRDA0RDg4MDU2MDlEMEI3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzMzMDQzRjc5MEQ2QTkxOEE1
RUIyOEM0QjNEMDREODgwNTYwOUQwQjcuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0JoVTNRaE1hdGpXWEFvMlhFM1U5M3pMU0dIR2NCRUdacnJkNjE3Z01hcDR6LzAv
MzEzNjM3MmUzMjM0MzkyZTM4MzgyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM3
MzEzMTMzMzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBACn+VgwDQYJKoZIhvcNAQELBQADggEBACd0Ltbl
Gqm/WTVJ/Vk77/cMV+gTPrC+4VXhdIQr0FCLZ5i34rKq4RIPmV2Z/mc+MCxMeIhq
TxYHTBMO5Jw0IbFmN7rv2q9XmFblBDB/6HeZvXZE+9IDIfSkh9bOZ1gjrYZbUlOe
BwKd9C4x3HbJue0NRl/82SQHRct9PK7SBvOriK6uUjq54XGa7sWal/8+6IgMh2Hw
Hw0rOV4ZeOHcxY0ZSP9tvwyhwO1sMJDZ88IBNIETlVd/WtG0GHsRyercvDheN1YI
7pQzgZOct4gfqxOEUlvyS8IDGn18my67ps8Q8R7jbQn+KhSPRPzxxQMkm7osj4sB
zD8yFIVkVu+eJsQ=
-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:16 2024 by rpki-client on console-ams.rpki-client.org