Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2oY7KoRqCZUrsqwZwv8gypiRSmjDULTjsjSSq5cEG7wF/0/3136382e3232382e33322e302f32342d3234203d3e20323730393833.roa
File:                     3136382e3232382e33322e302f32342d3234203d3e20323730393833.roa (raw, json)
Hash identifier:          lo/tmq5/nzTwemE5XiHZ/xV8/WRkt78o71Mww8kxuFo=
Subject key identifier:   BC:76:6D:80:93:D7:E0:D7:D0:E7:E5:BD:E6:22:8D:68:E3:79:E7:88
Certificate issuer:       /CN=73A759420E60B79FBFB48037B5A830EF409EA873
Certificate serial:       50108A0EA4BE84D977242094EDCFBF17337D400B
Authority key identifier: 73:A7:59:42:0E:60:B7:9F:BF:B4:80:37:B5:A8:30:EF:40:9E:A8:73
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/73A759420E60B79FBFB48037B5A830EF409EA873.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2oY7KoRqCZUrsqwZwv8gypiRSmjDULTjsjSSq5cEG7wF/0/3136382e3232382e33322e302f32342d3234203d3e20323730393833.roa
Signing time:             Wed 24 Jan 2024 19:20:26 +0000
ROA not before:           Wed 24 Jan 2024 19:15:26 +0000
ROA not after:            Wed 22 Jan 2025 19:20:26 +0000
asID:                     270983
IP address blocks:        168.228.32.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:10:8a:0e:a4:be:84:d9:77:24:20:94:ed:cf:bf:17:33:7d:40:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73A759420E60B79FBFB48037B5A830EF409EA873
        Validity
            Not Before: Jan 24 19:15:26 2024 GMT
            Not After : Jan 22 19:20:26 2025 GMT
        Subject: CN=BC766D8093D7E0D7D0E7E5BDE6228D68E379E788
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:85:47:bd:aa:31:c3:c6:19:d2:67:38:79:75:
                    4e:7e:af:44:52:f3:19:bd:8e:c4:bd:dc:11:c1:f9:
                    2a:ad:63:c9:d0:4d:82:8a:4c:b8:a3:39:bc:94:63:
                    de:51:ee:35:41:55:d7:d7:1a:ca:5b:d6:31:06:4f:
                    5c:66:98:52:bf:92:cf:e5:55:76:ba:85:d6:78:8f:
                    c6:9e:1f:ca:6e:d4:00:34:03:ed:3f:35:ef:fc:6a:
                    21:57:09:b0:3c:bb:7a:fc:96:03:f4:28:d5:a4:fe:
                    1b:a3:3b:b1:b7:3a:38:e0:ee:07:5e:05:97:4a:8f:
                    ec:06:3a:c5:d5:18:cc:a3:33:d8:e4:3e:7f:14:fa:
                    86:8a:2f:76:68:02:b7:9f:a5:ef:51:bc:15:47:8f:
                    ae:45:59:ba:41:b9:e8:75:ed:a8:58:60:6a:12:61:
                    9b:fd:fa:f1:8b:65:c8:70:04:2b:ba:1a:04:27:35:
                    08:3a:5e:ef:86:2c:a1:21:11:29:c1:cb:85:8c:4f:
                    33:6e:9c:ce:b7:f0:36:5b:4c:17:d3:f9:13:6f:21:
                    42:d7:ac:49:ed:4b:36:49:31:ba:4f:9f:c1:35:62:
                    bb:8b:2b:86:41:cd:35:8d:64:cc:9e:13:f9:84:7d:
                    e6:c9:57:5e:d7:fb:c0:04:95:09:27:6b:d9:11:80:
                    c4:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:76:6D:80:93:D7:E0:D7:D0:E7:E5:BD:E6:22:8D:68:E3:79:E7:88
            X509v3 Authority Key Identifier:
                keyid:73:A7:59:42:0E:60:B7:9F:BF:B4:80:37:B5:A8:30:EF:40:9E:A8:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2oY7KoRqCZUrsqwZwv8gypiRSmjDULTjsjSSq5cEG7wF/0/73A759420E60B79FBFB48037B5A830EF409EA873.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/73A759420E60B79FBFB48037B5A830EF409EA873.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2oY7KoRqCZUrsqwZwv8gypiRSmjDULTjsjSSq5cEG7wF/0/3136382e3232382e33322e302f32342d3234203d3e20323730393833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.228.32.0/24

    Signature Algorithm: sha256WithRSAEncryption
         28:24:35:0d:b1:df:53:a2:7f:a0:1b:db:f4:93:e5:81:09:27:
         53:29:b8:a3:6b:d6:08:5e:fe:4b:d6:8a:d4:53:a7:18:61:8b:
         86:f8:60:82:18:89:a7:c2:07:76:63:44:56:27:ba:9e:35:d5:
         4b:64:54:c7:ad:52:95:ac:44:c2:ee:9f:80:90:b6:b9:10:07:
         e0:b6:bc:a6:62:af:9e:c1:9b:79:ed:85:bb:8b:27:0b:db:f9:
         1b:a4:ea:09:bb:4f:ac:36:e6:be:14:47:40:ed:46:fb:34:47:
         4c:1c:10:d5:0f:8b:e2:71:93:39:73:a7:9d:25:b2:84:aa:6b:
         a0:a9:61:7c:65:a5:d4:3a:46:6b:01:6e:0e:ad:bc:0f:87:da:
         2b:91:f4:5c:2e:b2:13:b8:d1:62:e3:08:ad:5f:bd:00:ff:6f:
         d1:ee:67:93:2b:04:1a:bd:18:ab:f5:6d:3e:1e:ff:95:49:0d:
         5b:08:09:23:d9:ee:df:af:ab:fc:86:8e:ca:23:6a:0c:fb:da:
         00:0d:0b:36:c2:21:74:7b:6f:e8:51:ea:66:73:a0:70:6c:cc:
         70:cd:c1:ab:21:26:00:07:30:9e:35:69:60:96:9a:f9:d3:bc:
         c3:bd:d1:c6:d7:11:f7:d5:f1:7e:28:bf:3f:0d:21:fb:ed:8c:
         30:5e:9f:a4
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUUBCKDqS+hNl3JCCU7c+/FzN9QAswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzNBNzU5NDIwRTYwQjc5RkJGQjQ4MDM3QjVBODMwRUY0
MDlFQTg3MzAeFw0yNDAxMjQxOTE1MjZaFw0yNTAxMjIxOTIwMjZaMDMxMTAvBgNV
BAMTKEJDNzY2RDgwOTNEN0UwRDdEMEU3RTVCREU2MjI4RDY4RTM3OUU3ODgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDohUe9qjHDxhnSZzh5dU5+r0RS
8xm9jsS93BHB+SqtY8nQTYKKTLijObyUY95R7jVBVdfXGspb1jEGT1xmmFK/ks/l
VXa6hdZ4j8aeH8pu1AA0A+0/Ne/8aiFXCbA8u3r8lgP0KNWk/hujO7G3Ojjg7gde
BZdKj+wGOsXVGMyjM9jkPn8U+oaKL3ZoArefpe9RvBVHj65FWbpBueh17ahYYGoS
YZv9+vGLZchwBCu6GgQnNQg6Xu+GLKEhESnBy4WMTzNunM638DZbTBfT+RNvIULX
rEntSzZJMbpPn8E1YruLK4ZBzTWNZMyeE/mEfebJV17X+8AElQkna9kRgMT/AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUvHZtgJPX4NfQ5+W95iKNaON554gwHwYDVR0j
BBgwFoAUc6dZQg5gt5+/tIA3tagw70CeqHMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMm9ZN0tvUnFDWlVyc3F3Wnd2OGd5cGlSU21qRFVMVGpzalNTcTVjRUc3
d0YvMC83M0E3NTk0MjBFNjBCNzlGQkZCNDgwMzdCNUE4MzBFRjQwOUVBODczLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzczQTc1OTQyMEU2MEI3OUZC
RkI0ODAzN0I1QTgzMEVGNDA5RUE4NzMuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJvWTdLb1JxQ1pVcnNxd1p3djhneXBpUlNtakRVTFRqc2pTU3E1Y0VHN3dGLzAv
MzEzNjM4MmUzMjMyMzgyZTMzMzIyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM3
MzAzOTM4MzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBACo5CAwDQYJKoZIhvcNAQELBQADggEBACgkNQ2x
31Oif6Ab2/ST5YEJJ1MpuKNr1ghe/kvWitRTpxhhi4b4YIIYiafCB3ZjRFYnup41
1UtkVMetUpWsRMLun4CQtrkQB+C2vKZir57Bm3nthbuLJwvb+Ruk6gm7T6w25r4U
R0DtRvs0R0wcENUPi+Jxkzlzp50lsoSqa6CpYXxlpdQ6RmsBbg6tvA+H2iuR9Fwu
shO40WLjCK1fvQD/b9HuZ5MrBBq9GKv1bT4e/5VJDVsICSPZ7t+vq/yGjsojagz7
2gANCzbCIXR7b+hR6mZzoHBszHDNwashJgAHMJ41aWCWmvnTvMO90cbXEffV8X4o
vz8NIfvtjDBen6Q=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:08 2024 by rpki-client on console-ams.rpki-client.org