Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3hKi5Ys82hcybRZNYyZBgfnHhhkU4s9D8JUxjguATLhd/0/3136302e31392e34342e302f32322d3232203d3e20323636313539.roa
File:                     3136302e31392e34342e302f32322d3232203d3e20323636313539.roa (raw, json)
Hash identifier:          8YEjR4oSelww2+Wof0xZb2GJYP9zBgTm/wdPZxXWa98=
Subject key identifier:   3A:EA:01:F2:36:5F:81:20:28:F1:81:88:AD:9F:66:B2:15:0E:55:71
Certificate issuer:       /CN=BA05FA500E415B56175D97B8CD9EC5C3A4A25285
Certificate serial:       32AF464974C7AD1CC4CDBC7E62503433B9C5F4E6
Authority key identifier: BA:05:FA:50:0E:41:5B:56:17:5D:97:B8:CD:9E:C5:C3:A4:A2:52:85
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BA05FA500E415B56175D97B8CD9EC5C3A4A25285.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3hKi5Ys82hcybRZNYyZBgfnHhhkU4s9D8JUxjguATLhd/0/3136302e31392e34342e302f32322d3232203d3e20323636313539.roa
Signing time:             Thu 05 Oct 2023 19:26:43 +0000
ROA not before:           Thu 05 Oct 2023 19:21:43 +0000
ROA not after:            Thu 03 Oct 2024 19:26:43 +0000
asID:                     266159
IP address blocks:        160.19.44.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:af:46:49:74:c7:ad:1c:c4:cd:bc:7e:62:50:34:33:b9:c5:f4:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BA05FA500E415B56175D97B8CD9EC5C3A4A25285
        Validity
            Not Before: Oct  5 19:21:43 2023 GMT
            Not After : Oct  3 19:26:43 2024 GMT
        Subject: CN=3AEA01F2365F812028F18188AD9F66B2150E5571
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:ce:5d:19:ca:ec:6d:ca:04:43:a0:28:8f:c9:
                    f7:cd:2f:d4:26:d5:e3:42:59:00:9a:ed:a1:a7:ba:
                    62:7e:a7:62:fe:54:41:1c:db:e6:f1:ae:d6:c5:4a:
                    a6:61:07:fc:e6:53:7d:6f:0d:93:d7:68:ff:39:54:
                    ad:75:c9:c2:a3:71:9d:07:cd:ad:7d:29:ec:c2:5c:
                    6c:49:96:af:8b:ba:0e:af:4f:15:f9:5c:9d:50:2b:
                    7d:9c:fb:5d:47:a5:53:37:09:25:44:12:6c:af:9f:
                    5e:05:d8:12:29:73:9b:d0:5a:f3:64:2d:13:ce:91:
                    fb:a0:aa:e4:74:d7:2f:91:23:ff:50:b5:0c:bf:ec:
                    10:c8:b0:fd:33:58:f9:ce:fa:12:e1:9c:38:b9:81:
                    08:1f:3a:89:3c:e2:26:7b:ac:f8:e6:ee:30:55:3a:
                    c1:6c:0a:92:35:cf:1b:bf:59:77:bd:79:8a:97:99:
                    72:f7:ff:ac:72:1b:10:a2:30:fc:cb:2c:9d:39:01:
                    b3:27:33:a8:31:71:a2:13:bf:a0:47:e5:0f:2e:eb:
                    af:13:eb:55:77:ba:aa:fb:10:47:28:55:10:6d:b2:
                    d7:a4:74:1d:3e:8e:d2:9e:51:e5:44:b8:6d:1d:22:
                    47:2f:52:51:70:d8:cc:3d:a6:64:59:56:41:8f:27:
                    79:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:EA:01:F2:36:5F:81:20:28:F1:81:88:AD:9F:66:B2:15:0E:55:71
            X509v3 Authority Key Identifier:
                keyid:BA:05:FA:50:0E:41:5B:56:17:5D:97:B8:CD:9E:C5:C3:A4:A2:52:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3hKi5Ys82hcybRZNYyZBgfnHhhkU4s9D8JUxjguATLhd/0/BA05FA500E415B56175D97B8CD9EC5C3A4A25285.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BA05FA500E415B56175D97B8CD9EC5C3A4A25285.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3hKi5Ys82hcybRZNYyZBgfnHhhkU4s9D8JUxjguATLhd/0/3136302e31392e34342e302f32322d3232203d3e20323636313539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.19.44.0/22

    Signature Algorithm: sha256WithRSAEncryption
         ba:1a:50:f8:78:fc:3a:10:ee:f7:dd:8d:4d:3f:10:d5:0d:77:
         b7:f2:34:72:85:a7:21:02:9b:c4:c6:c6:11:62:3e:1b:7e:ff:
         d9:31:41:29:12:11:e8:5b:4e:9c:ea:14:5c:22:0a:11:9d:55:
         85:54:ed:21:1d:ae:89:c7:64:0a:26:d0:2b:aa:aa:f6:33:ac:
         db:58:cd:03:e4:d3:80:83:42:9f:95:59:51:ea:65:62:eb:5a:
         e7:d8:26:d3:a3:bf:fe:40:8d:02:37:f5:b2:51:0c:ed:7c:6c:
         6b:6c:9b:f5:3d:b0:7d:c7:a3:63:0f:98:c6:3f:6e:c0:2b:d3:
         b3:54:2f:60:db:d9:28:a4:eb:9e:ce:22:4e:8c:df:1c:0e:97:
         0b:45:d9:75:83:58:08:3a:3d:d9:4f:36:e1:06:68:6d:4c:d8:
         65:7e:55:89:59:5d:8c:a7:bf:b1:4e:a2:50:0f:f6:ce:76:33:
         d6:d6:67:c1:39:6d:39:87:82:47:0c:6e:2d:3c:fd:a2:cc:ed:
         f6:30:4b:a9:a9:44:e2:f1:c5:6e:bb:b4:11:f2:7e:b3:26:f1:
         19:93:7d:f8:8e:bf:78:52:58:f3:4a:cb:35:c0:bc:6b:05:e8:
         57:4d:1a:cf:86:79:96:36:15:79:bc:95:99:2f:17:84:67:6e:
         5e:44:5f:d8
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUMq9GSXTHrRzEzbx+YlA0M7nF9OYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkEwNUZBNTAwRTQxNUI1NjE3NUQ5N0I4Q0Q5RUM1QzNB
NEEyNTI4NTAeFw0yMzEwMDUxOTIxNDNaFw0yNDEwMDMxOTI2NDNaMDMxMTAvBgNV
BAMTKDNBRUEwMUYyMzY1RjgxMjAyOEYxODE4OEFEOUY2NkIyMTUwRTU1NzEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzzl0ZyuxtygRDoCiPyffNL9Qm
1eNCWQCa7aGnumJ+p2L+VEEc2+bxrtbFSqZhB/zmU31vDZPXaP85VK11ycKjcZ0H
za19KezCXGxJlq+Lug6vTxX5XJ1QK32c+11HpVM3CSVEEmyvn14F2BIpc5vQWvNk
LRPOkfugquR01y+RI/9QtQy/7BDIsP0zWPnO+hLhnDi5gQgfOok84iZ7rPjm7jBV
OsFsCpI1zxu/WXe9eYqXmXL3/6xyGxCiMPzLLJ05AbMnM6gxcaITv6BH5Q8u668T
61V3uqr7EEcoVRBtstekdB0+jtKeUeVEuG0dIkcvUlFw2Mw9pmRZVkGPJ3ljAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUOuoB8jZfgSAo8YGIrZ9mshUOVXEwHwYDVR0j
BBgwFoAUugX6UA5BW1YXXZe4zZ7Fw6SiUoUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM2hLaTVZczgyaGN5YlJaTll5WkJnZm5IaGhrVTRzOUQ4SlV4amd1QVRM
aGQvMC9CQTA1RkE1MDBFNDE1QjU2MTc1RDk3QjhDRDlFQzVDM0E0QTI1Mjg1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0JBMDVGQTUwMEU0MTVCNTYx
NzVEOTdCOENEOUVDNUMzQTRBMjUyODUuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNoS2k1WXM4MmhjeWJSWk5ZeVpCZ2ZuSGhoa1U0czlEOEpVeGpndUFUTGhkLzAv
MzEzNjMwMmUzMTM5MmUzNDM0MmUzMDJmMzIzMjJkMzIzMjIwM2QzZTIwMzIzNjM2
MzEzNTM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCoBMsMA0GCSqGSIb3DQEBCwUAA4IBAQC6GlD4ePw6
EO733Y1NPxDVDXe38jRyhachApvExsYRYj4bfv/ZMUEpEhHoW06c6hRcIgoRnVWF
VO0hHa6Jx2QKJtArqqr2M6zbWM0D5NOAg0KflVlR6mVi61rn2CbTo7/+QI0CN/Wy
UQztfGxrbJv1PbB9x6NjD5jGP27AK9OzVC9g29kopOueziJOjN8cDpcLRdl1g1gI
Oj3ZTzbhBmhtTNhlflWJWV2Mp7+xTqJQD/bOdjPW1mfBOW05h4JHDG4tPP2izO32
MEupqUTi8cVuu7QR8n6zJvEZk334jr94UljzSss1wLxrBehXTRrPhnmWNhV5vJWZ
LxeEZ25eRF/Y
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:26 2024 by rpki-client on console-ams.rpki-client.org