Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2ycF6iWBitTLNykTzxCszNKmP6TnsuEqRuMuba42PQ3U/0/3136382e3139362e3132382e302f32342d3234203d3e20323633323839.roa
File:                     3136382e3139362e3132382e302f32342d3234203d3e20323633323839.roa (raw, json)
Hash identifier:          AIfeZiuNyHdKGqXQud5aJRsbuXrot2+h+7rElv+INKs=
Subject key identifier:   00:70:8F:AE:CD:F3:E5:AB:3A:5B:A3:77:E7:15:35:7E:08:A2:83:8F
Certificate issuer:       /CN=8CA2336475BC551CD8B0D5ECDA42170036666F54
Certificate serial:       12F7CEAAE1F0188D14DC4C3352779C4F19BB3C39
Authority key identifier: 8C:A2:33:64:75:BC:55:1C:D8:B0:D5:EC:DA:42:17:00:36:66:6F:54
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8CA2336475BC551CD8B0D5ECDA42170036666F54.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2ycF6iWBitTLNykTzxCszNKmP6TnsuEqRuMuba42PQ3U/0/3136382e3139362e3132382e302f32342d3234203d3e20323633323839.roa
Signing time:             Tue 16 Jan 2024 20:01:38 +0000
ROA not before:           Tue 16 Jan 2024 19:56:38 +0000
ROA not after:            Tue 14 Jan 2025 20:01:38 +0000
asID:                     263289
IP address blocks:        168.196.128.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:f7:ce:aa:e1:f0:18:8d:14:dc:4c:33:52:77:9c:4f:19:bb:3c:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8CA2336475BC551CD8B0D5ECDA42170036666F54
        Validity
            Not Before: Jan 16 19:56:38 2024 GMT
            Not After : Jan 14 20:01:38 2025 GMT
        Subject: CN=00708FAECDF3E5AB3A5BA377E715357E08A2838F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:9a:21:69:18:c2:bc:04:3c:22:7b:2b:78:14:
                    82:86:c8:7f:d6:da:80:f7:d7:2e:07:3a:3d:fe:7c:
                    6c:48:f8:34:81:b9:16:1b:43:83:e4:f9:cb:c6:d8:
                    c3:a5:36:9a:e3:d6:03:9d:7b:8f:e7:79:5f:d7:98:
                    7a:29:4b:b1:88:9d:7a:ec:2f:5f:bb:52:1d:a4:55:
                    99:65:45:82:ff:76:f0:4b:f7:04:d7:a1:34:2c:d4:
                    a2:ff:55:84:62:b1:d2:93:ec:65:f9:1a:4d:30:f9:
                    aa:04:5e:e3:62:8c:44:d1:ca:4a:69:2a:73:5b:bf:
                    eb:03:71:5d:41:45:0f:18:62:38:48:dd:b9:a9:d4:
                    e8:d0:8f:a6:9f:64:30:90:78:cb:1b:98:d9:ed:d5:
                    fa:94:42:71:b1:27:59:87:1f:f2:73:26:88:ed:8f:
                    1a:61:42:8e:94:05:23:43:bd:4d:21:e7:5d:5b:9a:
                    91:e1:ab:c7:96:ac:0f:e2:4f:56:7c:f2:f3:5f:f5:
                    5b:1e:9f:d8:9f:82:45:fb:f1:cd:e9:7e:5e:59:46:
                    5b:c7:fd:e6:cd:fb:d1:54:cc:dd:dd:2b:92:2f:0b:
                    04:54:10:52:95:ab:79:cd:b5:61:ae:f9:f8:f4:de:
                    25:54:0c:34:fc:b2:f6:40:7b:20:53:89:14:7e:2a:
                    68:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:70:8F:AE:CD:F3:E5:AB:3A:5B:A3:77:E7:15:35:7E:08:A2:83:8F
            X509v3 Authority Key Identifier:
                keyid:8C:A2:33:64:75:BC:55:1C:D8:B0:D5:EC:DA:42:17:00:36:66:6F:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2ycF6iWBitTLNykTzxCszNKmP6TnsuEqRuMuba42PQ3U/0/8CA2336475BC551CD8B0D5ECDA42170036666F54.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8CA2336475BC551CD8B0D5ECDA42170036666F54.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2ycF6iWBitTLNykTzxCszNKmP6TnsuEqRuMuba42PQ3U/0/3136382e3139362e3132382e302f32342d3234203d3e20323633323839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.196.128.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0d:18:50:4a:89:1d:f7:76:8f:5e:dc:21:47:e3:bf:88:ab:9c:
         54:a0:6e:ea:c6:1e:4a:39:d9:73:4c:a4:0b:23:4c:fd:00:54:
         aa:46:6e:08:0e:be:d2:56:10:fd:7c:25:fc:4a:17:c4:da:2f:
         4a:84:e2:88:09:f7:be:72:9e:06:89:9b:41:42:31:a5:22:86:
         b7:27:80:52:07:a1:97:3b:b4:4f:2c:a0:b1:ae:f1:3c:d8:f9:
         d1:28:1c:c3:c3:01:ab:d2:a8:5f:e8:6d:07:99:15:2b:db:76:
         37:c0:fd:df:46:a6:86:b5:c9:2a:3c:cb:8d:b5:34:c7:9a:a9:
         d7:58:b9:71:1e:aa:23:57:03:99:0d:c5:39:48:3a:86:a4:eb:
         0a:6b:c0:a8:e5:d4:c3:14:ee:eb:6e:2b:07:bc:2d:5f:78:22:
         6d:7f:ea:c8:c4:d8:d6:9a:05:a5:c8:7f:f3:57:8d:da:a6:e2:
         e8:08:38:4e:db:5e:73:ad:21:39:ac:cc:9b:ea:df:6d:3f:1c:
         93:8e:b9:60:ae:db:fc:0f:43:34:10:fb:34:aa:81:fb:24:66:
         33:54:50:61:9e:ff:17:b2:fc:cb:18:6a:90:2a:d8:da:bc:fc:
         89:eb:1e:7a:2f:ac:8c:ad:06:30:e2:b1:7b:94:39:74:da:cc:
         65:2f:0f:3c
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUEvfOquHwGI0U3EwzUnecTxm7PDkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOENBMjMzNjQ3NUJDNTUxQ0Q4QjBENUVDREE0MjE3MDAz
NjY2NkY1NDAeFw0yNDAxMTYxOTU2MzhaFw0yNTAxMTQyMDAxMzhaMDMxMTAvBgNV
BAMTKDAwNzA4RkFFQ0RGM0U1QUIzQTVCQTM3N0U3MTUzNTdFMDhBMjgzOEYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdmiFpGMK8BDwieyt4FIKGyH/W
2oD31y4HOj3+fGxI+DSBuRYbQ4Pk+cvG2MOlNprj1gOde4/neV/XmHopS7GInXrs
L1+7Uh2kVZllRYL/dvBL9wTXoTQs1KL/VYRisdKT7GX5Gk0w+aoEXuNijETRykpp
KnNbv+sDcV1BRQ8YYjhI3bmp1OjQj6afZDCQeMsbmNnt1fqUQnGxJ1mHH/JzJojt
jxphQo6UBSNDvU0h511bmpHhq8eWrA/iT1Z88vNf9Vsen9ifgkX78c3pfl5ZRlvH
/ebN+9FUzN3dK5IvCwRUEFKVq3nNtWGu+fj03iVUDDT8svZAeyBTiRR+KmhTAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUAHCPrs3z5as6W6N35xU1fgiig48wHwYDVR0j
BBgwFoAUjKIzZHW8VRzYsNXs2kIXADZmb1QwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMnljRjZpV0JpdFRMTnlrVHp4Q3N6TkttUDZUbnN1RXFSdU11YmE0MlBR
M1UvMC84Q0EyMzM2NDc1QkM1NTFDRDhCMEQ1RUNEQTQyMTcwMDM2NjY2RjU0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzhDQTIzMzY0NzVCQzU1MUNE
OEIwRDVFQ0RBNDIxNzAwMzY2NjZGNTQuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJ5Y0Y2aVdCaXRUTE55a1R6eENzek5LbVA2VG5zdUVxUnVNdWJhNDJQUTNVLzAv
MzEzNjM4MmUzMTM5MzYyZTMxMzIzODJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzYzMzMyMzgzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAKjEgDANBgkqhkiG9w0BAQsFAAOCAQEADRhQ
Sokd93aPXtwhR+O/iKucVKBu6sYeSjnZc0ykCyNM/QBUqkZuCA6+0lYQ/Xwl/EoX
xNovSoTiiAn3vnKeBombQUIxpSKGtyeAUgehlzu0Tyygsa7xPNj50Sgcw8MBq9Ko
X+htB5kVK9t2N8D930amhrXJKjzLjbU0x5qp11i5cR6qI1cDmQ3FOUg6hqTrCmvA
qOXUwxTu624rB7wtX3gibX/qyMTY1poFpch/81eN2qbi6Ag4Tttec60hOazMm+rf
bT8ck465YK7b/A9DNBD7NKqB+yRmM1RQYZ7/F7L8yxhqkCrY2rz8ieseei+sjK0G
MOKxe5Q5dNrMZS8PPA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:24 2024 by rpki-client on console-fra.rpki-client.org