Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BnwUHpu6rWLBqpzdFWXVvUAEmFYXvx7anSLtWhqjgLyF/0/3136382e3139352e3232322e302f32332d3233203d3e20323633343231.roa
File:                     3136382e3139352e3232322e302f32332d3233203d3e20323633343231.roa (raw, json)
Hash identifier:          BUF9ywUqB8XPXtd6tXkOkJvx6emiwmqfUSwYzClxcT0=
Subject key identifier:   9B:D9:93:03:3A:EF:91:CD:50:82:4E:AE:29:01:C1:BE:A4:1F:41:A2
Certificate issuer:       /CN=B2BBC2B5109511F272026E674B0D0AA24CE514F5
Certificate serial:       13DCF79091CFB761A9DA01B6776C07FD92CEB8D0
Authority key identifier: B2:BB:C2:B5:10:95:11:F2:72:02:6E:67:4B:0D:0A:A2:4C:E5:14:F5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B2BBC2B5109511F272026E674B0D0AA24CE514F5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BnwUHpu6rWLBqpzdFWXVvUAEmFYXvx7anSLtWhqjgLyF/0/3136382e3139352e3232322e302f32332d3233203d3e20323633343231.roa
Signing time:             Mon 04 Dec 2023 18:55:19 +0000
ROA not before:           Mon 04 Dec 2023 18:50:19 +0000
ROA not after:            Mon 02 Dec 2024 18:55:19 +0000
asID:                     263421
IP address blocks:        168.195.222.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:dc:f7:90:91:cf:b7:61:a9:da:01:b6:77:6c:07:fd:92:ce:b8:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B2BBC2B5109511F272026E674B0D0AA24CE514F5
        Validity
            Not Before: Dec  4 18:50:19 2023 GMT
            Not After : Dec  2 18:55:19 2024 GMT
        Subject: CN=9BD993033AEF91CD50824EAE2901C1BEA41F41A2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:51:c0:09:85:14:0e:a6:30:0f:0e:53:17:2d:
                    cb:17:47:f4:31:7c:58:b7:16:18:91:5d:ef:21:4a:
                    87:4f:74:b9:50:68:9f:24:12:81:61:ef:4d:79:ff:
                    52:b9:4d:89:c7:8c:cc:6e:1d:c9:45:46:80:37:4a:
                    de:0d:0f:ab:87:7c:15:d1:7f:c3:7b:75:d5:8b:ba:
                    9a:47:4e:3c:e7:f0:a3:9c:b0:be:7b:78:78:84:41:
                    3a:82:8f:c8:04:a0:7c:ac:63:d7:e0:e3:34:f6:d1:
                    97:9f:28:59:2c:c4:1d:98:de:56:a4:75:41:82:a1:
                    a2:d8:d5:1f:b6:f3:99:c5:2f:e3:8a:6b:0e:85:e9:
                    52:d5:30:e5:a1:19:25:8c:db:cf:86:b0:9a:9a:b9:
                    ce:ec:02:79:92:9f:2a:d7:55:84:d0:49:05:a8:85:
                    10:79:14:16:bb:6a:c8:e6:09:3d:e4:5a:87:74:da:
                    ea:41:68:66:67:55:c1:77:fb:70:e3:3b:71:b7:35:
                    eb:a2:62:d2:05:91:7a:e5:0d:01:f1:0c:9c:88:48:
                    8f:b4:04:43:82:7c:fc:cc:4c:3e:b3:e8:1c:95:8e:
                    45:c4:b6:94:b5:ed:d1:9c:08:4b:48:de:6b:f6:a4:
                    84:e9:5b:f5:0d:ae:a5:6b:89:37:ff:7b:53:a5:67:
                    db:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:D9:93:03:3A:EF:91:CD:50:82:4E:AE:29:01:C1:BE:A4:1F:41:A2
            X509v3 Authority Key Identifier:
                keyid:B2:BB:C2:B5:10:95:11:F2:72:02:6E:67:4B:0D:0A:A2:4C:E5:14:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BnwUHpu6rWLBqpzdFWXVvUAEmFYXvx7anSLtWhqjgLyF/0/B2BBC2B5109511F272026E674B0D0AA24CE514F5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B2BBC2B5109511F272026E674B0D0AA24CE514F5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BnwUHpu6rWLBqpzdFWXVvUAEmFYXvx7anSLtWhqjgLyF/0/3136382e3139352e3232322e302f32332d3233203d3e20323633343231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.195.222.0/23

    Signature Algorithm: sha256WithRSAEncryption
         60:5a:87:e0:ba:8e:d6:b8:85:73:4f:4d:92:c3:7d:bf:67:ca:
         f4:45:a2:53:62:07:ae:4b:54:a3:af:97:75:a1:ca:a1:14:31:
         38:02:95:d6:fa:db:91:4d:fb:93:80:7a:4b:a2:03:da:1f:98:
         09:2d:a0:02:1f:bd:f1:ee:7a:7b:d3:2c:26:55:e4:83:9c:61:
         1d:b6:c9:9d:0e:7d:ae:1f:1b:28:c5:3e:52:9e:49:69:ca:f0:
         5e:a0:4b:53:2b:ef:10:fb:5b:f8:a4:00:7e:41:44:d7:b9:98:
         41:05:cc:14:bd:6a:75:22:69:13:72:70:06:22:a4:91:74:da:
         27:8b:62:a4:2f:0b:b2:5a:02:08:d5:a2:28:4f:e8:be:a9:41:
         7b:97:7f:71:74:5f:9f:d0:7e:ed:ec:c4:ba:5b:7c:ed:8f:8e:
         da:da:9f:fb:7f:2f:a7:d8:8f:aa:0a:e4:61:c0:75:c3:ca:46:
         30:d2:ea:65:e0:18:13:be:32:b6:7a:5b:32:04:c1:c4:c6:71:
         b5:0c:99:26:05:93:32:c0:b8:65:c7:38:e5:25:35:ef:9e:34:
         8c:b4:c8:08:b6:e5:ae:10:2a:0b:f5:0f:9d:a0:30:b6:f8:ff:
         67:59:18:36:41:22:df:63:3b:fd:9a:e9:08:68:02:86:c1:1b:
         b5:d6:fc:d8
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUE9z3kJHPt2Gp2gG2d2wH/ZLOuNAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjJCQkMyQjUxMDk1MTFGMjcyMDI2RTY3NEIwRDBBQTI0
Q0U1MTRGNTAeFw0yMzEyMDQxODUwMTlaFw0yNDEyMDIxODU1MTlaMDMxMTAvBgNV
BAMTKDlCRDk5MzAzM0FFRjkxQ0Q1MDgyNEVBRTI5MDFDMUJFQTQxRjQxQTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbUcAJhRQOpjAPDlMXLcsXR/Qx
fFi3FhiRXe8hSodPdLlQaJ8kEoFh7015/1K5TYnHjMxuHclFRoA3St4ND6uHfBXR
f8N7ddWLuppHTjzn8KOcsL57eHiEQTqCj8gEoHysY9fg4zT20ZefKFksxB2Y3lak
dUGCoaLY1R+285nFL+OKaw6F6VLVMOWhGSWM28+GsJqauc7sAnmSnyrXVYTQSQWo
hRB5FBa7asjmCT3kWod02upBaGZnVcF3+3DjO3G3NeuiYtIFkXrlDQHxDJyISI+0
BEOCfPzMTD6z6ByVjkXEtpS17dGcCEtI3mv2pITpW/UNrqVriTf/e1OlZ9ujAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUm9mTAzrvkc1Qgk6uKQHBvqQfQaIwHwYDVR0j
BBgwFoAUsrvCtRCVEfJyAm5nSw0KokzlFPUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQm53VUhwdTZyV0xCcXB6ZEZXWFZ2VUFFbUZZWHZ4N2FuU0x0V2hxamdM
eUYvMC9CMkJCQzJCNTEwOTUxMUYyNzIwMjZFNjc0QjBEMEFBMjRDRTUxNEY1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0IyQkJDMkI1MTA5NTExRjI3
MjAyNkU2NzRCMEQwQUEyNENFNTE0RjUuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0Jud1VIcHU2cldMQnFwemRGV1hWdlVBRW1GWVh2eDdhblNMdFdocWpnTHlGLzAv
MzEzNjM4MmUzMTM5MzUyZTMyMzIzMjJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDMy
MzYzMzM0MzIzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAajD3jANBgkqhkiG9w0BAQsFAAOCAQEAYFqH
4LqO1riFc09NksN9v2fK9EWiU2IHrktUo6+XdaHKoRQxOAKV1vrbkU37k4B6S6ID
2h+YCS2gAh+98e56e9MsJlXkg5xhHbbJnQ59rh8bKMU+Up5JacrwXqBLUyvvEPtb
+KQAfkFE17mYQQXMFL1qdSJpE3JwBiKkkXTaJ4tipC8LsloCCNWiKE/ovqlBe5d/
cXRfn9B+7ezEult87Y+O2tqf+38vp9iPqgrkYcB1w8pGMNLqZeAYE74ytnpbMgTB
xMZxtQyZJgWTMsC4Zcc45SU17540jLTICLblrhAqC/UPnaAwtvj/Z1kYNkEi32M7
/ZrpCGgChsEbtdb82A==
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:56 2024 by rpki-client on console-fra.rpki-client.org