Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4V6sT6cbjFnqfTNmh1at6dDonzH8u1KEXie5XJM9LTos/0/3136342e3136332e3134342e302f32332d3233203d3e20323635393832.roa
File:                     3136342e3136332e3134342e302f32332d3233203d3e20323635393832.roa (raw, json)
Hash identifier:          5b9NicxBMphGz1HkSXd/fswoXwZbSx8G4mhiOz5jPmg=
Subject key identifier:   9B:89:34:40:37:05:A6:70:6D:FD:29:8A:03:4E:EB:35:2E:4B:E3:63
Certificate issuer:       /CN=BBAA988D47E837300BB1551B443A99CB6B4A8DDE
Certificate serial:       7B515EFBCD2D4126F8816AAA8979DF71B23F0C06
Authority key identifier: BB:AA:98:8D:47:E8:37:30:0B:B1:55:1B:44:3A:99:CB:6B:4A:8D:DE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BBAA988D47E837300BB1551B443A99CB6B4A8DDE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4V6sT6cbjFnqfTNmh1at6dDonzH8u1KEXie5XJM9LTos/0/3136342e3136332e3134342e302f32332d3233203d3e20323635393832.roa
Signing time:             Thu 25 Aug 2022 17:00:00 +0000
ROA not before:           Thu 25 Aug 2022 16:55:00 +0000
ROA not after:            Thu 24 Aug 2023 17:00:00 +0000
asID:                     265982
IP address blocks:        164.163.144.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:51:5e:fb:cd:2d:41:26:f8:81:6a:aa:89:79:df:71:b2:3f:0c:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BBAA988D47E837300BB1551B443A99CB6B4A8DDE
        Validity
            Not Before: Aug 25 16:55:00 2022 GMT
            Not After : Aug 24 17:00:00 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:10:ed:57:15:fa:ae:57:3e:8c:0d:4b:4f:53:
                    2d:f7:d8:02:14:c3:04:16:2d:c6:12:74:09:f0:8b:
                    b0:d5:67:3c:fe:5b:3d:7e:0c:0e:07:9c:37:04:64:
                    5b:f6:db:30:6a:ab:b2:04:f6:5b:44:dc:11:e1:43:
                    7f:9a:17:1d:8d:7c:07:16:c6:99:ca:ac:8c:5c:71:
                    d6:fa:b1:f4:16:5f:0b:9f:62:61:71:10:ab:b5:55:
                    bf:dc:99:ef:42:c2:94:22:43:89:0b:0c:96:7f:46:
                    53:5c:7c:8b:49:cf:b4:59:ef:b3:95:76:e6:70:df:
                    83:ce:86:67:15:5f:ad:a1:79:d4:76:8e:b6:d2:61:
                    1d:4f:3d:d6:69:ea:51:72:fa:94:90:ef:7d:45:0a:
                    d9:64:fb:a0:c6:8c:1e:a2:87:fd:f5:f5:eb:6a:7f:
                    7e:d6:5b:4a:01:69:06:87:5e:86:eb:27:cc:94:e3:
                    8e:b7:36:d3:20:15:bc:4d:a0:25:1f:96:70:64:73:
                    44:37:23:f5:34:fd:41:09:63:eb:43:69:56:fe:0f:
                    cc:87:1b:1b:f8:86:41:b1:af:49:64:d7:0b:5c:4f:
                    03:ac:45:7e:09:f8:c4:ca:52:da:46:0c:ac:a0:4e:
                    7d:0c:6d:57:11:d6:a9:d7:48:cf:6a:0d:e4:08:7f:
                    fe:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:89:34:40:37:05:A6:70:6D:FD:29:8A:03:4E:EB:35:2E:4B:E3:63
            X509v3 Authority Key Identifier:
                keyid:BB:AA:98:8D:47:E8:37:30:0B:B1:55:1B:44:3A:99:CB:6B:4A:8D:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4V6sT6cbjFnqfTNmh1at6dDonzH8u1KEXie5XJM9LTos/0/BBAA988D47E837300BB1551B443A99CB6B4A8DDE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BBAA988D47E837300BB1551B443A99CB6B4A8DDE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4V6sT6cbjFnqfTNmh1at6dDonzH8u1KEXie5XJM9LTos/0/3136342e3136332e3134342e302f32332d3233203d3e20323635393832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.163.144.0/23

    Signature Algorithm: sha256WithRSAEncryption
         37:9f:8e:55:a1:90:6c:a2:e5:d1:5d:0b:d2:e9:02:33:96:16:
         e6:70:d0:ac:40:4e:f5:5a:81:84:20:81:28:9b:b7:95:0b:ba:
         21:4d:31:b6:4f:e5:b3:85:68:02:2e:33:59:4d:3b:1a:81:6b:
         3f:01:e8:e3:a9:ef:de:81:83:7d:85:bf:32:6c:71:ec:99:9f:
         3d:b5:1a:72:27:d3:94:fc:a5:c7:31:91:47:24:a8:af:35:37:
         1e:86:13:cb:9d:bc:90:ba:c2:5d:8e:86:95:bd:d1:30:e4:e3:
         4c:55:e1:dc:df:ab:ad:4c:71:2b:1a:eb:ef:1d:86:9a:31:c0:
         63:80:cf:94:9c:1d:40:ab:0c:df:27:ed:95:b5:ae:85:45:63:
         54:99:50:cf:59:55:17:57:a6:97:c4:d0:5c:cf:b0:a8:05:48:
         7b:6a:8f:95:9f:bd:f5:7a:d9:b1:47:e3:1b:80:03:8d:28:9b:
         02:07:e7:95:a3:f1:8c:d3:ca:0c:ef:67:e8:bb:af:92:04:98:
         46:be:f1:f9:f2:03:44:53:f2:25:fa:bf:84:06:57:b3:d4:9e:
         8a:bf:2c:6d:8c:b4:ca:e3:92:f4:02:fb:fe:13:5e:ae:37:10:
         26:37:3e:7e:60:a1:4a:79:c1:a9:55:43:9e:68:0f:4a:4b:7e:
         23:87:a3:4a
-----BEGIN CERTIFICATE-----
MIIHRTCCBi2gAwIBAgIUe1Fe+80tQSb4gWqqiXnfcbI/DAYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkJBQTk4OEQ0N0U4MzczMDBCQjE1NTFCNDQzQTk5Q0I2
QjRBOERERTAeFw0yMjA4MjUxNjU1MDBaFw0yMzA4MjQxNzAwMDBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQ0UxMEVENTcxNUZBQUU1NzNF
OEMwRDRCNEY1MzJERjdEODAyMTRDMzA0MTYyREM2MTI3NDA5RjA4QkIwRDU2NzND
RkU1QjNEN0UwQzBFMDc5QzM3MDQ2NDVCRjZEQjMwNkFBQkIyMDRGNjVCNDREQzEx
RTE0MzdGOUExNzFEOEQ3QzA3MTZDNjk5Q0FBQzhDNUM3MUQ2RkFCMUY0MTY1RjBC
OUY2MjYxNzExMEFCQjU1NUJGREM5OUVGNDJDMjk0MjI0Mzg5MEIwQzk2N0Y0NjUz
NUM3QzhCNDlDRkI0NTlFRkIzOTU3NkU2NzBERjgzQ0U4NjY3MTU1RkFEQTE3OUQ0
NzY4RUI2RDI2MTFENEYzREQ2NjlFQTUxNzJGQTk0OTBFRjdENDUwQUQ5NjRGQkEw
QzY4QzFFQTI4N0ZERjVGNUVCNkE3RjdFRDY1QjRBMDE2OTA2ODc1RTg2RUIyN0ND
OTRFMzhFQjczNkQzMjAxNUJDNERBMDI1MUY5NjcwNjQ3MzQ0MzcyM0Y1MzRGRDQx
MDk2M0VCNDM2OTU2RkUwRkNDODcxQjFCRjg4NjQxQjFBRjQ5NjRENzBCNUM0RjAz
QUM0NTdFMDlGOEM0Q0E1MkRBNDYwQ0FDQTA0RTdEMEM2RDU3MTFENkE5RDc0OENG
NkEwREU0MDg3RkZFOTEwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAzhDtVxX6rlc+jA1LT1Mt99gCFMMEFi3GEnQJ8Iuw1Wc8/ls9fgwO
B5w3BGRb9tswaquyBPZbRNwR4UN/mhcdjXwHFsaZyqyMXHHW+rH0Fl8Ln2JhcRCr
tVW/3JnvQsKUIkOJCwyWf0ZTXHyLSc+0We+zlXbmcN+DzoZnFV+toXnUdo620mEd
Tz3WaepRcvqUkO99RQrZZPugxoweoof99fXran9+1ltKAWkGh16G6yfMlOOOtzbT
IBW8TaAlH5ZwZHNENyP1NP1BCWPrQ2lW/g/Mhxsb+IZBsa9JZNcLXE8DrEV+CfjE
ylLaRgysoE59DG1XEdap10jPag3kCH/+kQIDAQABo4ICUzCCAk8wHQYDVR0OBBYE
FJuJNEA3BaZwbf0pigNO6zUuS+NjMB8GA1UdIwQYMBaAFLuqmI1H6DcwC7FVG0Q6
mctrSo3eMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzRWNnNUNmNiakZucWZU
Tm1oMWF0NmREb256SDh1MUtFWGllNVhKTTlMVG9zLzAvQkJBQTk4OEQ0N0U4Mzcz
MDBCQjE1NTFCNDQzQTk5Q0I2QjRBOERERS5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC9CQkFBOTg4RDQ3RTgzNzMwMEJCMTU1MUI0NDNBOTlDQjZCNEE4
RERFLmNlcjCBsAYIKwYBBQUHAQsEgaMwgaAwgZ0GCCsGAQUFBzALhoGQcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby80VjZzVDZjYmpGbnFmVE5taDFh
dDZkRG9uekg4dTFLRVhpZTVYSk05TFRvcy8wLzMxMzYzNDJlMzEzNjMzMmUzMTM0
MzQyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzMjM2MzUzOTM4MzIucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAGko5AwDQYJKoZIhvcNAQELBQADggEBADefjlWhkGyi5dFdC9LpAjOWFuZw0KxA
TvVagYQggSibt5ULuiFNMbZP5bOFaAIuM1lNOxqBaz8B6OOp796Bg32FvzJsceyZ
nz21GnIn05T8pccxkUckqK81Nx6GE8udvJC6wl2OhpW90TDk40xV4dzfq61McSsa
6+8dhpoxwGOAz5ScHUCrDN8n7ZW1roVFY1SZUM9ZVRdXppfE0FzPsKgFSHtqj5Wf
vfV62bFH4xuAA40omwIH55Wj8YzTygzvZ+i7r5IEmEa+8fnyA0RT8iX6v4QGV7PU
noq/LG2MtMrjkvQC+/4TXq43ECY3Pn5goUp5walVQ55oD0pLfiOHo0o=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:45 2024 by rpki-client on console-ams.rpki-client.org