Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/3136382e3232372e3130382e302f32322d3234203d3e20323632373236.roa
File:                     3136382e3232372e3130382e302f32322d3234203d3e20323632373236.roa (raw, json)
Hash identifier:          T+rtTb5AuoJjfyXxDxyYFtC76SmNe/igIn2wQqd/wx8=
Subject key identifier:   54:2B:46:81:3E:04:7A:C8:86:93:A4:C4:28:F7:F8:C1:E1:F5:02:35
Certificate issuer:       /CN=3622354098DA9E8445BAD24445F56C57EE638E0E
Certificate serial:       19B7BAFF8D8FE89277581137D69B4C7600C17001
Authority key identifier: 36:22:35:40:98:DA:9E:84:45:BA:D2:44:45:F5:6C:57:EE:63:8E:0E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3622354098DA9E8445BAD24445F56C57EE638E0E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/3136382e3232372e3130382e302f32322d3234203d3e20323632373236.roa
Signing time:             Thu 09 Mar 2023 23:01:05 +0000
ROA not before:           Thu 09 Mar 2023 22:56:05 +0000
ROA not after:            Thu 07 Mar 2024 23:01:05 +0000
asID:                     262726
IP address blocks:        168.227.108.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:b7:ba:ff:8d:8f:e8:92:77:58:11:37:d6:9b:4c:76:00:c1:70:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3622354098DA9E8445BAD24445F56C57EE638E0E
        Validity
            Not Before: Mar  9 22:56:05 2023 GMT
            Not After : Mar  7 23:01:05 2024 GMT
        Subject: CN=542B46813E047AC88693A4C428F7F8C1E1F50235
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:b4:52:f7:da:d1:81:d7:b1:45:69:b7:5f:91:
                    6c:6f:9f:b0:42:df:d7:98:91:d2:96:3d:01:c3:17:
                    1d:3e:cb:f1:75:41:a6:41:d3:83:72:eb:26:22:49:
                    a4:19:06:92:05:48:e2:2d:3b:71:f0:40:45:77:05:
                    c9:02:aa:8f:52:ea:37:20:34:e6:e6:a7:10:fb:db:
                    4d:07:01:23:d5:6e:ce:4b:5b:f7:87:a6:4d:b5:79:
                    63:36:b2:02:f2:3d:e9:6f:7d:2c:f1:32:7f:6f:2f:
                    af:c2:e0:6b:27:30:03:13:bc:d3:45:c1:50:aa:72:
                    38:71:0b:f6:c1:68:b5:75:a4:b8:08:14:8e:c7:06:
                    87:0a:0c:4c:ca:8e:b3:29:41:db:c8:e2:e4:82:59:
                    49:36:cb:03:0f:2d:d0:a3:28:12:ee:a2:4b:f8:fa:
                    ed:8b:d5:96:49:a8:9f:a9:02:80:53:4d:7e:5b:d2:
                    da:74:d9:1d:c2:8a:11:a5:41:ea:b1:38:5b:df:7f:
                    d5:0c:13:62:f5:96:67:db:6e:c6:17:96:2b:b9:ea:
                    c4:62:91:24:84:21:a1:f9:ae:5f:4e:e8:5d:67:00:
                    d7:0d:f0:89:13:70:1d:88:44:c3:ee:4a:67:82:d4:
                    d9:c6:88:61:ed:9d:1d:5b:d1:2d:e5:1e:4c:4e:0e:
                    6d:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:2B:46:81:3E:04:7A:C8:86:93:A4:C4:28:F7:F8:C1:E1:F5:02:35
            X509v3 Authority Key Identifier:
                keyid:36:22:35:40:98:DA:9E:84:45:BA:D2:44:45:F5:6C:57:EE:63:8E:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/3622354098DA9E8445BAD24445F56C57EE638E0E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3622354098DA9E8445BAD24445F56C57EE638E0E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/3136382e3232372e3130382e302f32322d3234203d3e20323632373236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.227.108.0/22

    Signature Algorithm: sha256WithRSAEncryption
         62:ee:79:f5:d3:89:a0:b4:d4:7f:3e:b1:98:4f:82:f1:53:7d:
         f9:13:41:a8:b1:bc:50:d0:86:f0:21:68:20:0d:d3:48:3c:38:
         00:a7:69:9f:c9:97:76:1f:cb:11:2f:75:f5:27:bf:76:8d:20:
         2f:06:b3:5c:96:e0:96:68:0d:c8:2a:7f:e8:06:d7:b2:40:8c:
         df:00:fe:cd:ab:24:03:71:0c:62:4a:40:2e:8f:aa:5c:6a:52:
         45:ec:19:f0:e8:a9:10:f7:fd:89:a7:1d:eb:04:a4:eb:0d:0c:
         c2:f7:e8:89:02:ad:9d:12:cf:95:9a:2b:d1:06:cf:77:c9:99:
         9e:ed:d7:b3:27:90:91:50:15:f4:42:71:52:c1:a1:d5:5f:bc:
         78:b6:6b:25:5d:4e:36:f7:c4:8e:6d:1a:18:b7:b7:3b:50:7d:
         4d:be:eb:49:ef:52:4f:1d:a9:67:28:89:c8:f5:d9:5a:a0:0d:
         ef:b5:12:83:45:90:d5:23:44:43:8b:dc:31:17:37:6c:df:fd:
         de:66:de:8d:31:7f:c3:57:69:c2:de:22:8d:8b:ff:83:b9:c3:
         76:02:62:e7:c7:ed:49:71:d1:4a:60:20:0d:74:f8:09:7f:45:
         9d:d1:38:d5:7d:b7:d3:8f:47:96:bf:01:84:39:50:bb:07:22:
         a3:ef:46:0b
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUGbe6/42P6JJ3WBE31ptMdgDBcAEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzYyMjM1NDA5OERBOUU4NDQ1QkFEMjQ0NDVGNTZDNTdF
RTYzOEUwRTAeFw0yMzAzMDkyMjU2MDVaFw0yNDAzMDcyMzAxMDVaMDMxMTAvBgNV
BAMTKDU0MkI0NjgxM0UwNDdBQzg4NjkzQTRDNDI4RjdGOEMxRTFGNTAyMzUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8tFL32tGB17FFabdfkWxvn7BC
39eYkdKWPQHDFx0+y/F1QaZB04Ny6yYiSaQZBpIFSOItO3HwQEV3BckCqo9S6jcg
NObmpxD7200HASPVbs5LW/eHpk21eWM2sgLyPelvfSzxMn9vL6/C4GsnMAMTvNNF
wVCqcjhxC/bBaLV1pLgIFI7HBocKDEzKjrMpQdvI4uSCWUk2ywMPLdCjKBLuokv4
+u2L1ZZJqJ+pAoBTTX5b0tp02R3CihGlQeqxOFvff9UME2L1lmfbbsYXliu56sRi
kSSEIaH5rl9O6F1nANcN8IkTcB2IRMPuSmeC1NnGiGHtnR1b0S3lHkxODm1NAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUVCtGgT4EesiGk6TEKPf4weH1AjUwHwYDVR0j
BBgwFoAUNiI1QJjanoRFutJERfVsV+5jjg4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMmRHQVBKUDY1ZWZlQ1RVYTg0aHc1UkdSYlpHUFcycVJ5VHZnYWhnanhF
ZUIvMC8zNjIyMzU0MDk4REE5RTg0NDVCQUQyNDQ0NUY1NkM1N0VFNjM4RTBFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzM2MjIzNTQwOThEQTlFODQ0
NUJBRDI0NDQ1RjU2QzU3RUU2MzhFMEUuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJkR0FQSlA2NWVmZUNUVWE4NGh3NVJHUmJaR1BXMnFSeVR2Z2FoZ2p4RWVCLzAv
MzEzNjM4MmUzMjMyMzcyZTMxMzAzODJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDMy
MzYzMjM3MzIzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAqjjbDANBgkqhkiG9w0BAQsFAAOCAQEAYu55
9dOJoLTUfz6xmE+C8VN9+RNBqLG8UNCG8CFoIA3TSDw4AKdpn8mXdh/LES919Se/
do0gLwazXJbglmgNyCp/6AbXskCM3wD+zaskA3EMYkpALo+qXGpSRewZ8OipEPf9
iacd6wSk6w0MwvfoiQKtnRLPlZor0QbPd8mZnu3XsyeQkVAV9EJxUsGh1V+8eLZr
JV1ONvfEjm0aGLe3O1B9Tb7rSe9STx2pZyiJyPXZWqAN77USg0WQ1SNEQ4vcMRc3
bN/93mbejTF/w1dpwt4ijYv/g7nDdgJi58ftSXHRSmAgDXT4CX9FndE41X23049H
lr8BhDlQuwcio+9GCw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:04 2024 by rpki-client on console-ams.rpki-client.org