Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3NsK3febSV4wLMZjWNcWSRKy6PVCe5SAHBXjNjJMDhi2/0/3136382e3139352e35302e302f32342d3234203d3e20323635343230.roa
File:                     3136382e3139352e35302e302f32342d3234203d3e20323635343230.roa (raw, json)
Hash identifier:          sRi5aKzCScBxmWx7wxK/tLIhcDwoE3z3XX3+Tv/WfW8=
Subject key identifier:   9A:84:0E:F7:56:4C:FA:2F:3C:9C:40:13:52:EC:BB:93:12:FE:B3:1D
Certificate issuer:       /CN=305EE7370CB5E56FF8D0E01B37E786125925B0C8
Certificate serial:       4A69D1B060809D4704AF7CA3607CC7D07123560C
Authority key identifier: 30:5E:E7:37:0C:B5:E5:6F:F8:D0:E0:1B:37:E7:86:12:59:25:B0:C8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/305EE7370CB5E56FF8D0E01B37E786125925B0C8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3NsK3febSV4wLMZjWNcWSRKy6PVCe5SAHBXjNjJMDhi2/0/3136382e3139352e35302e302f32342d3234203d3e20323635343230.roa
Signing time:             Thu 04 May 2023 12:51:20 +0000
ROA not before:           Thu 04 May 2023 12:46:20 +0000
ROA not after:            Thu 02 May 2024 12:51:20 +0000
asID:                     265420
IP address blocks:        168.195.50.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:69:d1:b0:60:80:9d:47:04:af:7c:a3:60:7c:c7:d0:71:23:56:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=305EE7370CB5E56FF8D0E01B37E786125925B0C8
        Validity
            Not Before: May  4 12:46:20 2023 GMT
            Not After : May  2 12:51:20 2024 GMT
        Subject: CN=9A840EF7564CFA2F3C9C401352ECBB9312FEB31D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:4d:94:32:7a:85:78:79:2a:42:40:04:dd:a6:
                    6f:fe:75:5a:bf:94:3a:b9:0a:2a:90:7e:3b:08:ef:
                    9d:a4:de:5d:f1:c0:56:86:cd:fe:fc:b0:79:d6:23:
                    49:33:97:fe:d1:11:ec:60:95:5d:91:9e:63:9e:ec:
                    d9:1c:3b:f4:b7:50:6c:33:3c:b4:5d:f6:1b:43:3b:
                    d7:b2:4f:fa:35:ca:0c:6e:39:bf:c9:01:09:55:c0:
                    3d:16:bf:b5:42:6c:e2:d6:bc:24:97:10:c9:8b:ac:
                    3b:7b:bf:4c:32:bc:7c:5c:ea:5e:0d:09:6c:3e:94:
                    42:4c:77:13:e7:e9:84:b9:8b:35:85:97:48:3f:4a:
                    14:65:70:a6:80:6d:46:e8:0e:0e:ff:31:41:f0:8d:
                    20:52:ca:85:99:d9:f2:05:92:01:d4:a2:16:17:30:
                    d3:98:55:8a:7a:60:4a:09:e7:7b:41:6e:56:57:55:
                    72:cb:a0:f1:02:5d:c5:63:2e:5a:03:52:10:f1:4c:
                    23:b3:77:bf:4f:b7:38:29:8f:e5:df:95:0a:41:58:
                    fb:88:df:d3:2b:9c:ae:f6:aa:3d:2e:16:9f:f2:69:
                    8e:f5:5b:10:82:9e:d1:0f:61:e0:00:38:23:ba:a9:
                    56:e3:4a:d1:3e:f3:9e:8c:b4:c5:9c:4b:aa:a1:20:
                    d1:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:84:0E:F7:56:4C:FA:2F:3C:9C:40:13:52:EC:BB:93:12:FE:B3:1D
            X509v3 Authority Key Identifier:
                keyid:30:5E:E7:37:0C:B5:E5:6F:F8:D0:E0:1B:37:E7:86:12:59:25:B0:C8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3NsK3febSV4wLMZjWNcWSRKy6PVCe5SAHBXjNjJMDhi2/0/305EE7370CB5E56FF8D0E01B37E786125925B0C8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/305EE7370CB5E56FF8D0E01B37E786125925B0C8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3NsK3febSV4wLMZjWNcWSRKy6PVCe5SAHBXjNjJMDhi2/0/3136382e3139352e35302e302f32342d3234203d3e20323635343230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.195.50.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4d:1b:99:09:fc:b5:7b:e7:28:75:70:a4:51:9c:86:59:2f:d9:
         a1:df:e2:cd:36:b5:65:02:de:7f:b0:ef:59:86:f1:84:f0:bf:
         91:e8:d4:7e:05:ff:e9:a8:fd:17:eb:3d:7b:42:1b:88:89:34:
         72:af:22:71:71:28:8f:50:6a:da:15:ef:38:29:2d:d5:71:54:
         aa:bc:1b:c0:df:10:fc:45:8d:6d:8f:38:16:58:b0:e6:57:86:
         bf:08:26:26:81:24:2b:2f:6c:3f:33:74:25:15:26:a8:9c:35:
         26:69:5d:c5:73:12:42:4a:d2:fb:d8:b8:76:58:dc:57:39:a9:
         ea:e8:e0:cc:bb:19:c4:cf:e1:fe:4b:f8:cb:b8:c0:31:07:e2:
         1f:88:77:6c:70:2d:90:1c:40:fb:58:0d:8b:bb:ea:ef:5a:f5:
         67:11:6e:96:5c:28:fd:02:02:b7:bc:02:d8:af:a6:58:a7:18:
         01:6f:bc:4f:18:57:c8:f4:8c:f3:8c:af:44:ad:21:8c:29:0e:
         96:5c:12:6a:30:bf:33:38:17:00:37:a6:92:93:da:8a:6e:ff:
         80:e0:fe:0e:8d:aa:a4:08:45:93:f8:c8:86:a1:2b:ed:54:06:
         dd:3d:1c:c1:3e:6b:10:72:6e:91:ff:3e:98:cf:48:b8:50:b4:
         30:9e:af:ef
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUSmnRsGCAnUcEr3yjYHzH0HEjVgwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzA1RUU3MzcwQ0I1RTU2RkY4RDBFMDFCMzdFNzg2MTI1
OTI1QjBDODAeFw0yMzA1MDQxMjQ2MjBaFw0yNDA1MDIxMjUxMjBaMDMxMTAvBgNV
BAMTKDlBODQwRUY3NTY0Q0ZBMkYzQzlDNDAxMzUyRUNCQjkzMTJGRUIzMUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOTZQyeoV4eSpCQATdpm/+dVq/
lDq5CiqQfjsI752k3l3xwFaGzf78sHnWI0kzl/7REexglV2RnmOe7NkcO/S3UGwz
PLRd9htDO9eyT/o1ygxuOb/JAQlVwD0Wv7VCbOLWvCSXEMmLrDt7v0wyvHxc6l4N
CWw+lEJMdxPn6YS5izWFl0g/ShRlcKaAbUboDg7/MUHwjSBSyoWZ2fIFkgHUohYX
MNOYVYp6YEoJ53tBblZXVXLLoPECXcVjLloDUhDxTCOzd79Ptzgpj+XflQpBWPuI
39MrnK72qj0uFp/yaY71WxCCntEPYeAAOCO6qVbjStE+856MtMWcS6qhINEXAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUmoQO91ZM+i88nEATUuy7kxL+sx0wHwYDVR0j
BBgwFoAUMF7nNwy15W/40OAbN+eGElklsMgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM05zSzNmZWJTVjR3TE1aaldOY1dTUkt5NlBWQ2U1U0FIQlhqTmpKTURo
aTIvMC8zMDVFRTczNzBDQjVFNTZGRjhEMEUwMUIzN0U3ODYxMjU5MjVCMEM4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzMwNUVFNzM3MENCNUU1NkZG
OEQwRTAxQjM3RTc4NjEyNTkyNUIwQzguY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNOc0szZmViU1Y0d0xNWmpXTmNXU1JLeTZQVkNlNVNBSEJYak5qSk1EaGkyLzAv
MzEzNjM4MmUzMTM5MzUyZTM1MzAyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzUzNDMyMzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBACowzIwDQYJKoZIhvcNAQELBQADggEBAE0bmQn8
tXvnKHVwpFGchlkv2aHf4s02tWUC3n+w71mG8YTwv5Ho1H4F/+mo/RfrPXtCG4iJ
NHKvInFxKI9QatoV7zgpLdVxVKq8G8DfEPxFjW2POBZYsOZXhr8IJiaBJCsvbD8z
dCUVJqicNSZpXcVzEkJK0vvYuHZY3Fc5qero4My7GcTP4f5L+Mu4wDEH4h+Id2xw
LZAcQPtYDYu76u9a9WcRbpZcKP0CAre8AtivplinGAFvvE8YV8j0jPOMr0StIYwp
DpZcEmowvzM4FwA3ppKT2opu/4Dg/g6NqqQIRZP4yIahK+1UBt09HME+axBybpH/
PpjPSLhQtDCer+8=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:27 2024 by rpki-client on console-fra.rpki-client.org