Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/43f46SnqFL3KgVzUTFtPSrbcW8LPqd9UdPJQaTRR7tup/1/3136382e3139372e31342e302f32342d3234203d3e20323635343633.roa
File:                     3136382e3139372e31342e302f32342d3234203d3e20323635343633.roa (raw, json)
Hash identifier:          DxFsVzoZpbs+OmIl9m9begM0vSRpSa1/hRPvoUL0ep8=
Subject key identifier:   C7:3B:DD:02:9B:67:4A:1E:46:31:E6:2E:A7:97:CB:1E:F2:38:A2:2D
Certificate issuer:       /CN=1EA76B20E8CBB253F233A085B8C916B9BFD78B79
Certificate serial:       71FD55A0FB1C04F526CF4017A7F784E50CD10331
Authority key identifier: 1E:A7:6B:20:E8:CB:B2:53:F2:33:A0:85:B8:C9:16:B9:BF:D7:8B:79
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1EA76B20E8CBB253F233A085B8C916B9BFD78B79.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/43f46SnqFL3KgVzUTFtPSrbcW8LPqd9UdPJQaTRR7tup/1/3136382e3139372e31342e302f32342d3234203d3e20323635343633.roa
Signing time:             Thu 04 Apr 2024 16:55:42 +0000
ROA not before:           Thu 04 Apr 2024 16:50:42 +0000
ROA not after:            Thu 03 Apr 2025 16:55:42 +0000
asID:                     265463
IP address blocks:        168.197.14.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:fd:55:a0:fb:1c:04:f5:26:cf:40:17:a7:f7:84:e5:0c:d1:03:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1EA76B20E8CBB253F233A085B8C916B9BFD78B79
        Validity
            Not Before: Apr  4 16:50:42 2024 GMT
            Not After : Apr  3 16:55:42 2025 GMT
        Subject: CN=C73BDD029B674A1E4631E62EA797CB1EF238A22D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:f8:cf:fc:0a:b4:88:5b:cd:31:b6:db:88:cb:
                    f7:cf:6e:f4:aa:f3:71:e4:48:f9:0c:db:b9:b2:15:
                    bf:9c:08:87:20:3c:e4:74:5c:38:c7:6c:93:78:51:
                    1f:9c:c3:17:d3:72:d7:b5:9c:36:f4:68:dc:da:23:
                    b5:fb:4d:32:d6:05:3e:93:5a:12:bb:30:1a:f5:86:
                    0c:9e:ed:4d:28:29:dc:f5:05:7e:d0:3a:20:d8:39:
                    a0:a3:b8:d0:16:aa:74:41:42:15:d0:ce:54:8b:58:
                    aa:16:67:67:15:06:33:f8:c6:36:c2:31:73:08:02:
                    f2:43:13:d9:51:e9:00:db:c8:6f:72:c7:29:68:a1:
                    96:05:93:5b:2c:4a:f0:4d:bd:b4:16:da:a7:94:5f:
                    8c:19:83:f6:8b:20:9b:ca:bd:0f:b3:44:96:24:a0:
                    91:98:36:0a:52:d6:ca:d7:96:08:cf:af:0f:e8:70:
                    14:98:a5:f2:67:8f:02:6c:ac:d7:e9:5c:60:51:7f:
                    f7:94:b2:ef:1d:fb:60:85:53:08:aa:84:18:b3:ad:
                    16:9a:ab:16:81:80:a4:9a:c9:0e:11:05:12:8c:4d:
                    e8:b7:7c:f2:f2:5c:e2:5a:cd:e4:1a:9f:8f:c8:26:
                    f4:83:19:d3:fe:a3:0c:cc:29:13:4b:9c:74:c2:57:
                    a2:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:3B:DD:02:9B:67:4A:1E:46:31:E6:2E:A7:97:CB:1E:F2:38:A2:2D
            X509v3 Authority Key Identifier:
                keyid:1E:A7:6B:20:E8:CB:B2:53:F2:33:A0:85:B8:C9:16:B9:BF:D7:8B:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/43f46SnqFL3KgVzUTFtPSrbcW8LPqd9UdPJQaTRR7tup/1/1EA76B20E8CBB253F233A085B8C916B9BFD78B79.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1EA76B20E8CBB253F233A085B8C916B9BFD78B79.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/43f46SnqFL3KgVzUTFtPSrbcW8LPqd9UdPJQaTRR7tup/1/3136382e3139372e31342e302f32342d3234203d3e20323635343633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.197.14.0/24

    Signature Algorithm: sha256WithRSAEncryption
         55:ea:71:8b:57:08:13:f0:42:54:97:68:86:65:01:5a:18:bc:
         4f:35:8e:e9:28:64:db:9a:70:27:94:e5:d7:7c:c0:9e:9c:ed:
         09:87:fc:80:bc:92:89:21:74:35:8a:30:ff:8c:c2:2c:77:7d:
         73:24:0f:bd:70:c9:a8:93:01:3d:ee:26:94:13:db:aa:8c:62:
         70:cd:78:95:c9:bc:2a:4d:0b:20:9b:87:49:bc:c8:0a:9e:0d:
         8e:66:b6:33:eb:c2:08:4c:44:01:1e:0b:9e:3c:5b:a5:b0:74:
         00:5d:89:ad:9f:ee:47:be:c1:80:0f:82:18:d3:82:b0:30:23:
         62:a0:8e:e5:86:1c:25:71:8d:eb:ce:04:9c:e1:fc:1c:ad:4c:
         ce:1c:3c:80:95:f0:65:ee:9c:ff:fe:9f:f2:99:25:7f:17:4b:
         46:67:c7:4a:0a:49:f8:9d:e9:98:e5:ff:7a:0c:15:05:77:dd:
         b1:03:fd:96:26:23:59:27:e5:f7:8b:4d:9c:ec:36:28:18:d5:
         5a:de:3b:53:2b:dd:d8:ef:cf:8c:e4:2d:d7:4c:0b:be:e2:14:
         59:4c:7c:02:6f:b5:6f:15:ec:89:1c:13:46:e4:e9:c2:8c:7a:
         fa:9d:f4:4c:db:cf:04:c5:01:81:c9:0b:e2:13:71:f6:1e:a3:
         14:c2:17:83
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUcf1VoPscBPUmz0AXp/eE5QzRAzEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUVBNzZCMjBFOENCQjI1M0YyMzNBMDg1QjhDOTE2QjlC
RkQ3OEI3OTAeFw0yNDA0MDQxNjUwNDJaFw0yNTA0MDMxNjU1NDJaMDMxMTAvBgNV
BAMTKEM3M0JERDAyOUI2NzRBMUU0NjMxRTYyRUE3OTdDQjFFRjIzOEEyMkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDG+M/8CrSIW80xttuIy/fPbvSq
83HkSPkM27myFb+cCIcgPOR0XDjHbJN4UR+cwxfTcte1nDb0aNzaI7X7TTLWBT6T
WhK7MBr1hgye7U0oKdz1BX7QOiDYOaCjuNAWqnRBQhXQzlSLWKoWZ2cVBjP4xjbC
MXMIAvJDE9lR6QDbyG9yxylooZYFk1ssSvBNvbQW2qeUX4wZg/aLIJvKvQ+zRJYk
oJGYNgpS1srXlgjPrw/ocBSYpfJnjwJsrNfpXGBRf/eUsu8d+2CFUwiqhBizrRaa
qxaBgKSayQ4RBRKMTei3fPLyXOJazeQan4/IJvSDGdP+owzMKRNLnHTCV6JHAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUxzvdAptnSh5GMeYup5fLHvI4oi0wHwYDVR0j
BBgwFoAUHqdrIOjLslPyM6CFuMkWub/Xi3kwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNDNmNDZTbnFGTDNLZ1Z6VVRGdFBTcmJjVzhMUHFkOVVkUEpRYVRSUjd0
dXAvMS8xRUE3NkIyMEU4Q0JCMjUzRjIzM0EwODVCOEM5MTZCOUJGRDc4Qjc5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzFFQTc2QjIwRThDQkIyNTNG
MjMzQTA4NUI4QzkxNkI5QkZENzhCNzkuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzQzZjQ2U25xRkwzS2dWelVURnRQU3JiY1c4TFBxZDlVZFBKUWFUUlI3dHVwLzEv
MzEzNjM4MmUzMTM5MzcyZTMxMzQyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzUzNDM2MzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBACoxQ4wDQYJKoZIhvcNAQELBQADggEBAFXqcYtX
CBPwQlSXaIZlAVoYvE81jukoZNuacCeU5dd8wJ6c7QmH/IC8kokhdDWKMP+Mwix3
fXMkD71wyaiTAT3uJpQT26qMYnDNeJXJvCpNCyCbh0m8yAqeDY5mtjPrwghMRAEe
C548W6WwdABdia2f7ke+wYAPghjTgrAwI2KgjuWGHCVxjevOBJzh/BytTM4cPICV
8GXunP/+n/KZJX8XS0Znx0oKSfid6Zjl/3oMFQV33bED/ZYmI1kn5feLTZzsNigY
1VreO1Mr3djvz4zkLddMC77iFFlMfAJvtW8V7IkcE0bk6cKMevqd9EzbzwTFAYHJ
C+ITcfYeoxTCF4M=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:29 2024 by rpki-client on console-fra.rpki-client.org