Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4X7eoTWokwgvkKJgDzJjKP69hhkRRVNCXQtzTLj1VwoL/0/3136382e3138312e3137322e302f32322d3232203d3e20323635333432.roa
File:                     3136382e3138312e3137322e302f32322d3232203d3e20323635333432.roa (raw, json)
Hash identifier:          uxujnvgcm7SfYhBN+tSX+CZBRyyUJFHXXTwNn8GekH8=
Subject key identifier:   15:22:75:BC:61:06:D5:56:72:6D:54:D4:AA:96:A6:BC:40:05:04:40
Certificate issuer:       /CN=A7E6C8BB9EEC702E3D82D45353ED51420573CAD0
Certificate serial:       0DCCE690596ADAD36084CE52EB1A0D2AF3F36A65
Authority key identifier: A7:E6:C8:BB:9E:EC:70:2E:3D:82:D4:53:53:ED:51:42:05:73:CA:D0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A7E6C8BB9EEC702E3D82D45353ED51420573CAD0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4X7eoTWokwgvkKJgDzJjKP69hhkRRVNCXQtzTLj1VwoL/0/3136382e3138312e3137322e302f32322d3232203d3e20323635333432.roa
Signing time:             Sun 15 Oct 2023 14:00:25 +0000
ROA not before:           Sun 15 Oct 2023 13:55:25 +0000
ROA not after:            Sun 13 Oct 2024 14:00:25 +0000
asID:                     265342
IP address blocks:        168.181.172.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:cc:e6:90:59:6a:da:d3:60:84:ce:52:eb:1a:0d:2a:f3:f3:6a:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A7E6C8BB9EEC702E3D82D45353ED51420573CAD0
        Validity
            Not Before: Oct 15 13:55:25 2023 GMT
            Not After : Oct 13 14:00:25 2024 GMT
        Subject: CN=152275BC6106D556726D54D4AA96A6BC40050440
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:23:a8:3a:64:f2:9b:65:ed:4a:6c:1e:c7:38:
                    9a:f9:cd:56:8e:18:1a:ae:ac:06:d5:ae:8f:82:7b:
                    71:f6:c0:be:1a:c3:68:e9:00:9b:a8:00:83:a4:30:
                    09:50:27:2f:9e:9a:ed:62:6e:f5:6e:8f:65:81:3c:
                    43:4c:59:7a:b9:23:55:b0:3c:ac:49:59:6e:dd:ed:
                    9a:c9:5c:33:25:4b:e6:02:0a:e0:5f:9e:2e:79:ce:
                    6d:36:60:3b:61:9d:26:8e:7c:70:e5:85:8f:c2:7e:
                    59:9b:0d:93:6c:75:af:a0:74:bc:e4:ac:fb:5d:14:
                    8c:04:6c:af:70:2a:9a:a7:dd:91:ad:65:27:22:44:
                    fd:db:64:f7:7c:51:8b:71:68:55:7d:af:f2:8c:94:
                    41:34:9d:f6:43:d2:6f:0d:9a:ec:49:c6:81:dd:9c:
                    a8:49:39:2e:57:cf:84:9e:8a:2f:86:4c:04:26:37:
                    ec:2e:3c:77:90:04:32:4c:fb:d1:f4:74:7e:f9:a6:
                    aa:9f:9a:86:25:f6:b3:45:b4:b5:c8:3e:26:7e:f6:
                    7e:23:6a:9c:f7:95:02:84:46:28:13:6d:36:ce:c1:
                    38:48:f2:55:78:38:22:b5:fb:57:61:df:a1:48:c6:
                    9a:f8:c3:ae:9c:4f:57:1a:c4:b2:18:f0:fb:be:84:
                    29:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:22:75:BC:61:06:D5:56:72:6D:54:D4:AA:96:A6:BC:40:05:04:40
            X509v3 Authority Key Identifier:
                keyid:A7:E6:C8:BB:9E:EC:70:2E:3D:82:D4:53:53:ED:51:42:05:73:CA:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4X7eoTWokwgvkKJgDzJjKP69hhkRRVNCXQtzTLj1VwoL/0/A7E6C8BB9EEC702E3D82D45353ED51420573CAD0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A7E6C8BB9EEC702E3D82D45353ED51420573CAD0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4X7eoTWokwgvkKJgDzJjKP69hhkRRVNCXQtzTLj1VwoL/0/3136382e3138312e3137322e302f32322d3232203d3e20323635333432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.181.172.0/22

    Signature Algorithm: sha256WithRSAEncryption
         bd:bc:02:48:2d:2f:ca:dc:b9:88:0a:ed:87:ff:72:3f:3e:68:
         09:f6:5c:ec:eb:07:16:9f:d8:ae:6c:fb:80:20:3b:89:a9:21:
         84:89:cf:7b:f0:da:1c:21:9f:c1:19:ae:e5:d0:17:3e:11:cf:
         d5:de:6a:0f:9f:ec:2d:07:c2:7f:51:1f:18:48:40:43:86:f9:
         68:e4:c6:a4:d8:93:ce:48:c4:ab:59:21:3e:b9:21:40:e2:f0:
         0a:c3:e3:b9:52:8c:7e:ed:a1:9e:9a:99:c3:6d:b0:19:fe:b9:
         17:49:8a:22:cc:38:55:f3:9d:c2:41:79:f3:cd:15:24:9c:24:
         17:73:85:c0:ff:f7:2a:88:9b:89:17:90:00:dd:de:e8:55:39:
         f9:e2:3c:1f:6f:e5:44:25:10:e5:68:96:35:59:09:e4:f9:a3:
         bc:51:c4:c1:32:9a:a7:f3:4c:d4:6a:8b:5b:b2:83:32:0f:19:
         d3:79:94:a2:cf:f5:76:a7:9c:4f:97:46:6f:f4:cb:d1:2d:87:
         03:19:d4:ce:2b:79:25:29:66:e7:f0:fa:14:30:6a:f7:de:b1:
         68:45:cc:30:2c:57:50:bd:bb:7b:81:69:d1:c4:71:40:ac:34:
         e1:95:33:5d:c6:19:ed:e6:1c:45:ea:49:41:6d:32:e5:e2:02:
         b1:7d:6e:17
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUDczmkFlq2tNghM5S6xoNKvPzamUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTdFNkM4QkI5RUVDNzAyRTNEODJENDUzNTNFRDUxNDIw
NTczQ0FEMDAeFw0yMzEwMTUxMzU1MjVaFw0yNDEwMTMxNDAwMjVaMDMxMTAvBgNV
BAMTKDE1MjI3NUJDNjEwNkQ1NTY3MjZENTRENEFBOTZBNkJDNDAwNTA0NDAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJI6g6ZPKbZe1KbB7HOJr5zVaO
GBqurAbVro+Ce3H2wL4aw2jpAJuoAIOkMAlQJy+emu1ibvVuj2WBPENMWXq5I1Ww
PKxJWW7d7ZrJXDMlS+YCCuBfni55zm02YDthnSaOfHDlhY/CflmbDZNsda+gdLzk
rPtdFIwEbK9wKpqn3ZGtZSciRP3bZPd8UYtxaFV9r/KMlEE0nfZD0m8NmuxJxoHd
nKhJOS5Xz4Seii+GTAQmN+wuPHeQBDJM+9H0dH75pqqfmoYl9rNFtLXIPiZ+9n4j
apz3lQKERigTbTbOwThI8lV4OCK1+1dh36FIxpr4w66cT1caxLIY8Pu+hCmXAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUFSJ1vGEG1VZybVTUqpamvEAFBEAwHwYDVR0j
BBgwFoAUp+bIu57scC49gtRTU+1RQgVzytAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNFg3ZW9UV29rd2d2a0tKZ0R6SmpLUDY5aGhrUlJWTkNYUXR6VExqMVZ3
b0wvMC9BN0U2QzhCQjlFRUM3MDJFM0Q4MkQ0NTM1M0VENTE0MjA1NzNDQUQwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0E3RTZDOEJCOUVFQzcwMkUz
RDgyRDQ1MzUzRUQ1MTQyMDU3M0NBRDAuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRYN2VvVFdva3dndmtLSmdEekpqS1A2OWhoa1JSVk5DWFF0elRMajFWd29MLzAv
MzEzNjM4MmUzMTM4MzEyZTMxMzczMjJlMzAyZjMyMzIyZDMyMzIyMDNkM2UyMDMy
MzYzNTMzMzQzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAqi1rDANBgkqhkiG9w0BAQsFAAOCAQEAvbwC
SC0vyty5iArth/9yPz5oCfZc7OsHFp/Yrmz7gCA7iakhhInPe/DaHCGfwRmu5dAX
PhHP1d5qD5/sLQfCf1EfGEhAQ4b5aOTGpNiTzkjEq1khPrkhQOLwCsPjuVKMfu2h
npqZw22wGf65F0mKIsw4VfOdwkF5880VJJwkF3OFwP/3KoibiReQAN3e6FU5+eI8
H2/lRCUQ5WiWNVkJ5PmjvFHEwTKap/NM1GqLW7KDMg8Z03mUos/1dqecT5dGb/TL
0S2HAxnUzit5JSlm5/D6FDBq996xaEXMMCxXUL27e4Fp0cRxQKw04ZUzXcYZ7eYc
RepJQW0y5eICsX1uFw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:35 2024 by rpki-client on console-fra.rpki-client.org