Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4511sHW1ApwKRYEAfHgEMa1Czsgw871Hp4SMpX3pKsRL/0/3136382e3230352e3133362e302f32322d3232203d3e20323633313435.roa
File:                     3136382e3230352e3133362e302f32322d3232203d3e20323633313435.roa (raw, json)
Hash identifier:          hpM/SkDfDhdeQgy5DzF2V+hexEW77vva1WH6Szp49Ks=
Subject key identifier:   E2:F5:2A:75:1F:9C:25:D0:93:0D:D6:5B:AB:7C:42:FF:9E:DB:8A:33
Certificate issuer:       /CN=57C4F1A5DE60EFA114F64F1DEA32CF298BF9BFDE
Certificate serial:       6CEA487D8E740CC4E0105C0ADD4299EF1F38CDEA
Authority key identifier: 57:C4:F1:A5:DE:60:EF:A1:14:F6:4F:1D:EA:32:CF:29:8B:F9:BF:DE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/57C4F1A5DE60EFA114F64F1DEA32CF298BF9BFDE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4511sHW1ApwKRYEAfHgEMa1Czsgw871Hp4SMpX3pKsRL/0/3136382e3230352e3133362e302f32322d3232203d3e20323633313435.roa
Signing time:             Tue 14 Jun 2022 02:15:02 +0000
ROA not before:           Tue 14 Jun 2022 02:10:02 +0000
ROA not after:            Tue 13 Jun 2023 02:15:02 +0000
asID:                     263145
IP address blocks:        168.205.136.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:ea:48:7d:8e:74:0c:c4:e0:10:5c:0a:dd:42:99:ef:1f:38:cd:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57C4F1A5DE60EFA114F64F1DEA32CF298BF9BFDE
        Validity
            Not Before: Jun 14 02:10:02 2022 GMT
            Not After : Jun 13 02:15:02 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:c8:11:aa:7b:22:5b:e7:72:f9:ad:c1:36:2b:
                    ac:dd:72:25:1e:18:6a:93:1f:c9:f2:23:26:39:db:
                    0d:0c:8c:f2:4a:db:af:26:a1:cd:97:80:30:7a:d8:
                    95:bb:d0:0b:ba:e3:f9:60:9e:64:91:93:c4:ed:ed:
                    6b:be:b6:54:92:51:9f:f0:a4:a8:91:60:33:23:b9:
                    34:99:32:60:be:36:62:98:0b:7d:0c:9c:5f:54:f9:
                    57:73:6a:37:d1:fb:8f:11:4b:c3:98:1b:4f:15:4f:
                    cb:b2:dd:0b:0e:98:97:aa:7c:68:06:31:63:90:03:
                    c2:d3:12:2d:05:58:0e:69:6c:38:e7:c7:70:dd:95:
                    3a:dd:dd:0e:80:4b:82:57:a0:3b:09:d3:66:59:c8:
                    ca:c2:45:5b:85:8d:30:71:89:fd:a6:a1:f3:91:5a:
                    8c:65:d3:91:dd:1a:0b:53:dc:7d:03:0b:54:29:04:
                    04:2a:87:27:48:b0:cc:c1:96:95:ed:ca:36:43:ce:
                    65:03:20:01:0e:30:26:70:31:d9:aa:f6:11:dd:53:
                    10:7c:44:83:44:9d:69:96:5b:28:eb:b5:5f:e3:14:
                    52:dc:81:1c:ef:14:d6:3e:e6:67:d4:44:bb:40:ba:
                    7b:fa:b2:38:6b:f7:0d:37:b5:c0:3c:46:fe:b9:c7:
                    6c:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:F5:2A:75:1F:9C:25:D0:93:0D:D6:5B:AB:7C:42:FF:9E:DB:8A:33
            X509v3 Authority Key Identifier:
                keyid:57:C4:F1:A5:DE:60:EF:A1:14:F6:4F:1D:EA:32:CF:29:8B:F9:BF:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4511sHW1ApwKRYEAfHgEMa1Czsgw871Hp4SMpX3pKsRL/0/57C4F1A5DE60EFA114F64F1DEA32CF298BF9BFDE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/57C4F1A5DE60EFA114F64F1DEA32CF298BF9BFDE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4511sHW1ApwKRYEAfHgEMa1Czsgw871Hp4SMpX3pKsRL/0/3136382e3230352e3133362e302f32322d3232203d3e20323633313435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.205.136.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1e:1d:5b:79:44:06:f4:ab:48:4d:97:ba:90:5d:40:7e:71:65:
         2c:23:50:96:33:0a:83:a6:a1:66:3d:de:30:7f:b7:d4:0f:0e:
         03:75:06:e1:2e:26:f2:98:d3:b6:49:eb:49:09:67:38:d0:fd:
         ab:b4:94:c2:9c:ca:57:71:db:f3:ee:73:54:51:7a:80:68:e0:
         9a:63:89:d4:da:f1:bb:a3:9a:e1:f5:d8:ab:8e:1a:cd:c5:c3:
         0c:70:a1:39:43:e8:b0:99:66:b5:77:17:bb:b9:cd:e6:7d:f3:
         57:b2:77:ce:b5:55:86:1d:a5:83:1e:eb:0a:b3:50:af:5c:b6:
         13:2d:2e:3b:a8:48:3b:4f:af:7f:91:91:ef:c4:bd:36:97:55:
         2c:11:f1:00:bf:84:71:58:7f:2a:f5:fe:d4:e5:0c:03:28:3d:
         dc:58:0a:df:97:3f:6c:89:b2:37:b5:41:a4:ac:dd:ee:64:65:
         8e:67:11:40:35:ed:49:12:64:1e:95:2b:a0:87:79:d3:c6:67:
         e7:fe:55:bb:41:1d:a1:68:a4:4c:5a:de:0a:ad:37:6a:6b:3a:
         e9:ee:f2:fb:56:e0:75:91:38:92:cc:aa:f8:ef:82:59:60:6e:
         db:94:a6:0f:5a:77:12:7a:00:86:b5:f5:af:4c:68:40:33:4d:
         4d:4f:c9:58
-----BEGIN CERTIFICATE-----
MIIHRTCCBi2gAwIBAgIUbOpIfY50DMTgEFwK3UKZ7x84zeowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdDNEYxQTVERTYwRUZBMTE0RjY0RjFERUEzMkNGMjk4
QkY5QkZERTAeFw0yMjA2MTQwMjEwMDJaFw0yMzA2MTMwMjE1MDJaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwRTJDODExQUE3QjIyNUJFNzcy
RjlBREMxMzYyQkFDREQ3MjI1MUUxODZBOTMxRkM5RjIyMzI2MzlEQjBEMEM4Q0Yy
NEFEQkFGMjZBMUNEOTc4MDMwN0FEODk1QkJEMDBCQkFFM0Y5NjA5RTY0OTE5M0M0
RURFRDZCQkVCNjU0OTI1MTlGRjBBNEE4OTE2MDMzMjNCOTM0OTkzMjYwQkUzNjYy
OTgwQjdEMEM5QzVGNTRGOTU3NzM2QTM3RDFGQjhGMTE0QkMzOTgxQjRGMTU0RkNC
QjJERDBCMEU5ODk3QUE3QzY4MDYzMTYzOTAwM0MyRDMxMjJEMDU1ODBFNjk2QzM4
RTdDNzcwREQ5NTNBRERERDBFODA0QjgyNTdBMDNCMDlEMzY2NTlDOENBQzI0NTVC
ODU4RDMwNzE4OUZEQTZBMUYzOTE1QThDNjVEMzkxREQxQTBCNTNEQzdEMDMwQjU0
MjkwNDA0MkE4NzI3NDhCMENDQzE5Njk1RURDQTM2NDNDRTY1MDMyMDAxMEUzMDI2
NzAzMUQ5QUFGNjExREQ1MzEwN0M0NDgzNDQ5RDY5OTY1QjI4RUJCNTVGRTMxNDUy
REM4MTFDRUYxNEQ2M0VFNjY3RDQ0NEJCNDBCQTdCRkFCMjM4NkJGNzBEMzdCNUMw
M0M0NkZFQjlDNzZDNkQwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEA4sgRqnsiW+dy+a3BNius3XIlHhhqkx/J8iMmOdsNDIzyStuvJqHN
l4AwetiVu9ALuuP5YJ5kkZPE7e1rvrZUklGf8KSokWAzI7k0mTJgvjZimAt9DJxf
VPlXc2o30fuPEUvDmBtPFU/Lst0LDpiXqnxoBjFjkAPC0xItBVgOaWw458dw3ZU6
3d0OgEuCV6A7CdNmWcjKwkVbhY0wcYn9pqHzkVqMZdOR3RoLU9x9AwtUKQQEKocn
SLDMwZaV7co2Q85lAyABDjAmcDHZqvYR3VMQfESDRJ1pllso67Vf4xRS3IEc7xTW
PuZn1ES7QLp7+rI4a/cNN7XAPEb+ucdsbQIDAQABo4ICUzCCAk8wHQYDVR0OBBYE
FOL1KnUfnCXQkw3WW6t8Qv+e24ozMB8GA1UdIwQYMBaAFFfE8aXeYO+hFPZPHeoy
zymL+b/eMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzQ1MTFzSFcxQXB3S1JZ
RUFmSGdFTWExQ3pzZ3c4NzFIcDRTTXBYM3BLc1JMLzAvNTdDNEYxQTVERTYwRUZB
MTE0RjY0RjFERUEzMkNGMjk4QkY5QkZERS5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC81N0M0RjFBNURFNjBFRkExMTRGNjRGMURFQTMyQ0YyOThCRjlC
RkRFLmNlcjCBsAYIKwYBBQUHAQsEgaMwgaAwgZ0GCCsGAQUFBzALhoGQcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby80NTExc0hXMUFwd0tSWUVBZkhn
RU1hMUN6c2d3ODcxSHA0U01wWDNwS3NSTC8wLzMxMzYzODJlMzIzMDM1MmUzMTMz
MzYyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzMjM2MzMzMTM0MzUucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAKozYgwDQYJKoZIhvcNAQELBQADggEBAB4dW3lEBvSrSE2XupBdQH5xZSwjUJYz
CoOmoWY93jB/t9QPDgN1BuEuJvKY07ZJ60kJZzjQ/au0lMKcyldx2/Puc1RReoBo
4JpjidTa8bujmuH12KuOGs3FwwxwoTlD6LCZZrV3F7u5zeZ981eyd861VYYdpYMe
6wqzUK9cthMtLjuoSDtPr3+Rke/EvTaXVSwR8QC/hHFYfyr1/tTlDAMoPdxYCt+X
P2yJsje1QaSs3e5kZY5nEUA17UkSZB6VK6CHedPGZ+f+VbtBHaFopExa3gqtN2pr
Ounu8vtW4HWROJLMqvjvgllgbtuUpg9adxJ6AIa19a9MaEAzTU1PyVg=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:30 2024 by rpki-client on console-fra.rpki-client.org