Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4V6sT6cbjFnqfTNmh1at6dDonzH8u1KEXie5XJM9LTos/0/3136342e3136332e3134342e302f32322d3232203d3e20323635393832.roa
File:                     3136342e3136332e3134342e302f32322d3232203d3e20323635393832.roa (raw, json)
Hash identifier:          Wnb/cUPhBUvlGGvK0ibUnyL06k7mInMN1x8iWFmO0Y8=
Subject key identifier:   76:13:CE:FC:A3:61:79:88:0A:B1:78:C1:B0:F1:E9:D4:9A:EB:FE:F4
Certificate issuer:       /CN=BBAA988D47E837300BB1551B443A99CB6B4A8DDE
Certificate serial:       2A0DF7566BE9071FF4AF83DE2E1EF314EA8136D7
Authority key identifier: BB:AA:98:8D:47:E8:37:30:0B:B1:55:1B:44:3A:99:CB:6B:4A:8D:DE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BBAA988D47E837300BB1551B443A99CB6B4A8DDE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4V6sT6cbjFnqfTNmh1at6dDonzH8u1KEXie5XJM9LTos/0/3136342e3136332e3134342e302f32322d3232203d3e20323635393832.roa
Signing time:             Thu 25 Aug 2022 17:00:00 +0000
ROA not before:           Thu 25 Aug 2022 16:55:00 +0000
ROA not after:            Thu 24 Aug 2023 17:00:00 +0000
asID:                     265982
IP address blocks:        164.163.144.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:0d:f7:56:6b:e9:07:1f:f4:af:83:de:2e:1e:f3:14:ea:81:36:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BBAA988D47E837300BB1551B443A99CB6B4A8DDE
        Validity
            Not Before: Aug 25 16:55:00 2022 GMT
            Not After : Aug 24 17:00:00 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:dd:1f:22:9d:14:b6:b4:4b:8a:4f:7e:81:35:
                    9b:f5:cb:3f:3d:3c:24:d8:91:67:f2:de:b9:75:14:
                    91:f7:e6:87:53:68:b9:3f:e6:c8:bc:35:f5:0c:a3:
                    2d:c7:6f:62:72:ae:dd:98:3b:a0:78:f4:92:2a:44:
                    35:49:73:8b:ab:fd:ff:88:25:ee:51:3a:c8:34:59:
                    3e:87:aa:b1:ff:68:68:c1:f9:a8:f9:df:7c:a3:0a:
                    c8:26:b8:44:ed:9c:45:2a:21:b3:35:52:73:c8:eb:
                    51:5f:dd:07:ee:db:da:70:6e:f9:82:1a:fd:90:9e:
                    db:2b:ad:bc:50:6e:ae:a0:6a:df:17:99:0d:a3:1e:
                    ae:9e:49:c7:fe:d0:e7:4c:ae:8b:7a:f4:f7:fd:a8:
                    6d:72:e7:45:7c:ae:a5:e8:04:44:4b:fd:b4:fb:e3:
                    e6:7a:71:fb:1d:1a:73:59:6d:b6:b2:58:4e:af:95:
                    4c:44:25:8c:b9:1d:54:d3:2d:98:84:66:77:eb:ab:
                    c6:31:40:65:b1:dc:14:07:47:5e:41:fc:b8:4c:41:
                    64:9c:7f:96:74:aa:d2:7c:e2:83:02:cc:26:0b:73:
                    34:e8:3a:ea:9f:91:18:07:4f:68:49:54:c6:c5:97:
                    3a:c8:78:71:87:d1:ca:af:f0:98:28:9a:c5:ee:a3:
                    0c:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:13:CE:FC:A3:61:79:88:0A:B1:78:C1:B0:F1:E9:D4:9A:EB:FE:F4
            X509v3 Authority Key Identifier:
                keyid:BB:AA:98:8D:47:E8:37:30:0B:B1:55:1B:44:3A:99:CB:6B:4A:8D:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4V6sT6cbjFnqfTNmh1at6dDonzH8u1KEXie5XJM9LTos/0/BBAA988D47E837300BB1551B443A99CB6B4A8DDE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BBAA988D47E837300BB1551B443A99CB6B4A8DDE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4V6sT6cbjFnqfTNmh1at6dDonzH8u1KEXie5XJM9LTos/0/3136342e3136332e3134342e302f32322d3232203d3e20323635393832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.163.144.0/22

    Signature Algorithm: sha256WithRSAEncryption
         92:9f:d3:54:90:37:38:ad:a5:e3:79:83:87:bf:ed:fa:4d:f8:
         6c:6e:60:c0:01:49:83:ca:b6:e1:1f:d4:bb:bb:76:36:a9:73:
         da:f2:52:8a:33:b9:80:bf:53:59:c9:b1:83:43:07:df:6f:32:
         c0:ee:82:85:70:7f:d2:70:35:53:16:96:28:7d:5e:4a:c7:6c:
         97:db:81:09:62:10:e8:b3:bf:11:fd:c6:79:d5:71:d3:14:f5:
         af:73:3f:4e:94:f6:fd:a3:aa:84:89:73:e5:58:b2:7e:fa:d6:
         d4:a7:4d:50:cd:5e:47:9c:fd:51:c7:98:69:6a:cd:ce:66:8e:
         e6:48:e2:77:14:33:7e:d1:bf:3b:18:f7:e2:1c:4e:a3:a7:aa:
         5e:62:8f:e9:e9:ab:98:0a:63:fb:f4:7d:ba:7c:93:a7:a8:d6:
         55:11:2a:53:16:a7:29:29:48:5d:97:9c:ea:dd:f6:cf:18:bf:
         1c:b8:a5:46:04:a3:86:27:d0:7e:f8:9d:06:c1:9b:d4:d8:46:
         17:37:c9:3c:6c:b1:24:a0:f8:24:46:55:7b:f0:de:32:cd:53:
         6f:a2:3e:9c:4b:f2:24:0d:04:fc:92:2a:ef:e0:da:8e:16:96:
         9a:a0:88:64:c4:79:db:24:13:04:5a:74:8e:14:d2:00:10:e2:
         b5:7a:4d:42
-----BEGIN CERTIFICATE-----
MIIHRTCCBi2gAwIBAgIUKg33VmvpBx/0r4PeLh7zFOqBNtcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkJBQTk4OEQ0N0U4MzczMDBCQjE1NTFCNDQzQTk5Q0I2
QjRBOERERTAeFw0yMjA4MjUxNjU1MDBaFw0yMzA4MjQxNzAwMDBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwRDNERDFGMjI5RDE0QjZCNDRC
OEE0RjdFODEzNTlCRjVDQjNGM0QzQzI0RDg5MTY3RjJERUI5NzUxNDkxRjdFNjg3
NTM2OEI5M0ZFNkM4QkMzNUY1MENBMzJEQzc2RjYyNzJBRUREOTgzQkEwNzhGNDky
MkE0NDM1NDk3MzhCQUJGREZGODgyNUVFNTEzQUM4MzQ1OTNFODdBQUIxRkY2ODY4
QzFGOUE4RjlERjdDQTMwQUM4MjZCODQ0RUQ5QzQ1MkEyMUIzMzU1MjczQzhFQjUx
NUZERDA3RUVEQkRBNzA2RUY5ODIxQUZEOTA5RURCMkJBREJDNTA2RUFFQTA2QURG
MTc5OTBEQTMxRUFFOUU0OUM3RkVEMEU3NENBRThCN0FGNEY3RkRBODZENzJFNzQ1
N0NBRUE1RTgwNDQ0NEJGREI0RkJFM0U2N0E3MUZCMUQxQTczNTk2REI2QjI1ODRF
QUY5NTRDNDQyNThDQjkxRDU0RDMyRDk4ODQ2Njc3RUJBQkM2MzE0MDY1QjFEQzE0
MDc0NzVFNDFGQ0I4NEM0MTY0OUM3Rjk2NzRBQUQyN0NFMjgzMDJDQzI2MEI3MzM0
RTgzQUVBOUY5MTE4MDc0RjY4NDk1NEM2QzU5NzNBQzg3ODcxODdEMUNBQUZGMDk4
Mjg5QUM1RUVBMzBDQzkwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEA090fIp0UtrRLik9+gTWb9cs/PTwk2JFn8t65dRSR9+aHU2i5P+bI
vDX1DKMtx29icq7dmDugePSSKkQ1SXOLq/3/iCXuUTrINFk+h6qx/2howfmo+d98
owrIJrhE7ZxFKiGzNVJzyOtRX90H7tvacG75ghr9kJ7bK628UG6uoGrfF5kNox6u
nknH/tDnTK6LevT3/ahtcudFfK6l6ARES/20++PmenH7HRpzWW22slhOr5VMRCWM
uR1U0y2YhGZ366vGMUBlsdwUB0deQfy4TEFknH+WdKrSfOKDAswmC3M06Drqn5EY
B09oSVTGxZc6yHhxh9HKr/CYKJrF7qMMyQIDAQABo4ICUzCCAk8wHQYDVR0OBBYE
FHYTzvyjYXmICrF4wbDx6dSa6/70MB8GA1UdIwQYMBaAFLuqmI1H6DcwC7FVG0Q6
mctrSo3eMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzRWNnNUNmNiakZucWZU
Tm1oMWF0NmREb256SDh1MUtFWGllNVhKTTlMVG9zLzAvQkJBQTk4OEQ0N0U4Mzcz
MDBCQjE1NTFCNDQzQTk5Q0I2QjRBOERERS5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC9CQkFBOTg4RDQ3RTgzNzMwMEJCMTU1MUI0NDNBOTlDQjZCNEE4
RERFLmNlcjCBsAYIKwYBBQUHAQsEgaMwgaAwgZ0GCCsGAQUFBzALhoGQcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby80VjZzVDZjYmpGbnFmVE5taDFh
dDZkRG9uekg4dTFLRVhpZTVYSk05TFRvcy8wLzMxMzYzNDJlMzEzNjMzMmUzMTM0
MzQyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzMjM2MzUzOTM4MzIucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAKko5AwDQYJKoZIhvcNAQELBQADggEBAJKf01SQNzitpeN5g4e/7fpN+GxuYMAB
SYPKtuEf1Lu7djapc9ryUoozuYC/U1nJsYNDB99vMsDugoVwf9JwNVMWlih9XkrH
bJfbgQliEOizvxH9xnnVcdMU9a9zP06U9v2jqoSJc+VYsn761tSnTVDNXkec/VHH
mGlqzc5mjuZI4ncUM37RvzsY9+IcTqOnql5ij+npq5gKY/v0fbp8k6eo1lURKlMW
pykpSF2XnOrd9s8Yvxy4pUYEo4Yn0H74nQbBm9TYRhc3yTxssSSg+CRGVXvw3jLN
U2+iPpxL8iQNBPySKu/g2o4WlpqgiGTEedskEwRadI4U0gAQ4rV6TUI=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:45 2024 by rpki-client on console-ams.rpki-client.org