Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4ayZXdVNXikfjLELqpsASo997RyXoE4uaWiULnM74VMw/0/3136372e3235302e36342e302f32342d3234203d3e20323635323034.roa
File:                     3136372e3235302e36342e302f32342d3234203d3e20323635323034.roa (raw, json)
Hash identifier:          1U6ZsaO5494SMkiVJdXhXIiRbTvs9/uJBR53qny1I40=
Subject key identifier:   85:EF:33:91:40:50:A6:98:3F:D0:3D:F2:77:DF:E5:E7:94:D9:3C:10
Certificate issuer:       /CN=4369F8DE2CF4B9C1EBD11AD407C9DB3EFFA92B3E
Certificate serial:       585EF4DF448E8D7BB25331D13C25C3B6F2BB2C47
Authority key identifier: 43:69:F8:DE:2C:F4:B9:C1:EB:D1:1A:D4:07:C9:DB:3E:FF:A9:2B:3E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4369F8DE2CF4B9C1EBD11AD407C9DB3EFFA92B3E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4ayZXdVNXikfjLELqpsASo997RyXoE4uaWiULnM74VMw/0/3136372e3235302e36342e302f32342d3234203d3e20323635323034.roa
Signing time:             Tue 08 Aug 2023 00:46:58 +0000
ROA not before:           Tue 08 Aug 2023 00:41:58 +0000
ROA not after:            Tue 06 Aug 2024 00:46:58 +0000
asID:                     265204
IP address blocks:        167.250.64.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:5e:f4:df:44:8e:8d:7b:b2:53:31:d1:3c:25:c3:b6:f2:bb:2c:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4369F8DE2CF4B9C1EBD11AD407C9DB3EFFA92B3E
        Validity
            Not Before: Aug  8 00:41:58 2023 GMT
            Not After : Aug  6 00:46:58 2024 GMT
        Subject: CN=85EF33914050A6983FD03DF277DFE5E794D93C10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:f3:49:a5:a0:29:03:a4:6e:ea:58:a5:2b:5c:
                    f1:bb:5c:31:8a:e6:fd:4d:5f:3d:de:5f:61:41:ad:
                    d7:fd:5f:02:7c:89:98:87:71:12:b1:d6:74:43:0a:
                    7f:a9:92:2b:28:8e:f6:eb:14:9a:7d:94:fe:ed:2d:
                    17:8d:5f:a5:c0:f7:7e:f4:91:87:a2:85:5d:7f:84:
                    8a:11:c5:7d:4a:8f:81:3c:01:c3:4d:65:4d:8f:80:
                    31:04:f1:fd:07:75:4e:97:07:65:20:88:c6:a3:22:
                    bf:19:52:3d:11:a0:48:7e:ab:0e:b6:d0:51:1f:73:
                    82:ce:d6:2d:32:29:db:71:3e:3d:1e:78:c9:1c:14:
                    d1:a0:d0:20:1f:52:f5:0e:07:3a:80:fe:63:e0:3d:
                    9c:70:bc:17:d6:31:73:ba:f4:39:3d:2c:fe:02:78:
                    b4:b8:1e:ad:f0:63:aa:d4:17:a5:e8:14:86:35:46:
                    f3:6e:4d:64:9f:b4:bb:46:5d:07:a1:f9:21:86:17:
                    be:22:69:50:9a:64:97:72:bf:ba:7a:29:10:10:51:
                    12:f9:ed:5a:62:10:2c:15:ad:16:ab:9c:77:e6:46:
                    71:7d:fa:15:81:97:be:d6:a1:47:d0:34:15:06:69:
                    70:5c:90:d0:9f:1c:71:ba:dc:e8:af:ea:92:89:66:
                    69:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:EF:33:91:40:50:A6:98:3F:D0:3D:F2:77:DF:E5:E7:94:D9:3C:10
            X509v3 Authority Key Identifier:
                keyid:43:69:F8:DE:2C:F4:B9:C1:EB:D1:1A:D4:07:C9:DB:3E:FF:A9:2B:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4ayZXdVNXikfjLELqpsASo997RyXoE4uaWiULnM74VMw/0/4369F8DE2CF4B9C1EBD11AD407C9DB3EFFA92B3E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4369F8DE2CF4B9C1EBD11AD407C9DB3EFFA92B3E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4ayZXdVNXikfjLELqpsASo997RyXoE4uaWiULnM74VMw/0/3136372e3235302e36342e302f32342d3234203d3e20323635323034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.250.64.0/24

    Signature Algorithm: sha256WithRSAEncryption
         42:9b:fc:80:43:7f:1e:e2:e5:c8:cc:fa:46:2b:43:f3:12:ba:
         9b:99:41:1f:48:9b:b6:bc:a2:fd:a5:73:46:ec:0e:7b:e7:a0:
         ed:d2:4f:5a:92:44:93:e8:cf:4c:a8:5b:df:66:62:12:3f:1e:
         68:af:4e:98:d2:2e:20:e3:1e:45:c1:a0:5c:c1:2b:ce:bf:2d:
         c6:a8:fd:b1:ad:cd:46:a2:bf:a1:ee:bb:c2:c0:ab:5c:77:50:
         ab:5c:12:3f:c9:b1:5b:18:48:aa:67:cc:e6:ba:10:8d:48:45:
         d9:6b:63:0e:40:10:e4:b9:84:80:d3:22:f2:c3:4d:3b:15:49:
         1c:bc:c7:79:a8:c5:32:c4:25:45:1a:d8:c8:81:d2:c8:f6:91:
         f8:02:2f:06:03:1f:6e:89:f7:41:b0:69:ae:af:8a:d3:60:fa:
         6f:7e:73:42:01:d8:d9:c5:ba:39:e3:b2:d7:8c:08:93:59:1b:
         1f:20:88:a2:01:28:83:a6:e9:c7:32:f8:72:6a:92:ae:9e:dd:
         88:cb:eb:af:fb:ad:fd:97:0f:33:bd:bb:a4:71:db:0b:76:32:
         85:8a:31:a7:ec:c4:6b:dd:bb:0a:b5:39:c9:45:ab:8d:f7:61:
         7d:04:71:d3:9f:94:31:49:bd:5e:cb:27:ad:81:67:d9:91:98:
         ac:5e:af:a6
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUWF7030SOjXuyUzHRPCXDtvK7LEcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDM2OUY4REUyQ0Y0QjlDMUVCRDExQUQ0MDdDOURCM0VG
RkE5MkIzRTAeFw0yMzA4MDgwMDQxNThaFw0yNDA4MDYwMDQ2NThaMDMxMTAvBgNV
BAMTKDg1RUYzMzkxNDA1MEE2OTgzRkQwM0RGMjc3REZFNUU3OTREOTNDMTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDE80mloCkDpG7qWKUrXPG7XDGK
5v1NXz3eX2FBrdf9XwJ8iZiHcRKx1nRDCn+pkisojvbrFJp9lP7tLReNX6XA9370
kYeihV1/hIoRxX1Kj4E8AcNNZU2PgDEE8f0HdU6XB2UgiMajIr8ZUj0RoEh+qw62
0FEfc4LO1i0yKdtxPj0eeMkcFNGg0CAfUvUOBzqA/mPgPZxwvBfWMXO69Dk9LP4C
eLS4Hq3wY6rUF6XoFIY1RvNuTWSftLtGXQeh+SGGF74iaVCaZJdyv7p6KRAQURL5
7VpiECwVrRarnHfmRnF9+hWBl77WoUfQNBUGaXBckNCfHHG63Oiv6pKJZmnNAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUhe8zkUBQppg/0D3yd9/l55TZPBAwHwYDVR0j
BBgwFoAUQ2n43iz0ucHr0RrUB8nbPv+pKz4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNGF5WlhkVk5YaWtmakxFTHFwc0FTbzk5N1J5WG9FNHVhV2lVTG5NNzRW
TXcvMC80MzY5RjhERTJDRjRCOUMxRUJEMTFBRDQwN0M5REIzRUZGQTkyQjNFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzQzNjlGOERFMkNGNEI5QzFF
QkQxMUFENDA3QzlEQjNFRkZBOTJCM0UuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRheVpYZFZOWGlrZmpMRUxxcHNBU285OTdSeVhvRTR1YVdpVUxuTTc0Vk13LzAv
MzEzNjM3MmUzMjM1MzAyZTM2MzQyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzUzMjMwMzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBACn+kAwDQYJKoZIhvcNAQELBQADggEBAEKb/IBD
fx7i5cjM+kYrQ/MSupuZQR9Im7a8ov2lc0bsDnvnoO3ST1qSRJPoz0yoW99mYhI/
HmivTpjSLiDjHkXBoFzBK86/Lcao/bGtzUaiv6Huu8LAq1x3UKtcEj/JsVsYSKpn
zOa6EI1IRdlrYw5AEOS5hIDTIvLDTTsVSRy8x3moxTLEJUUa2MiB0sj2kfgCLwYD
H26J90Gwaa6vitNg+m9+c0IB2NnFujnjsteMCJNZGx8giKIBKIOm6ccy+HJqkq6e
3YjL66/7rf2XDzO9u6Rx2wt2MoWKMafsxGvduwq1OclFq433YX0EcdOflDFJvV7L
J62BZ9mRmKxer6Y=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:35 2024 by rpki-client on console-fra.rpki-client.org