Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4erqKUcKg9JvxMspUgu9JjdkfErNhpq1KDNg68PJtHg3/0/3136342e3136332e3232332e302f32342d3234203d3e20323637343535.roa
File:                     3136342e3136332e3232332e302f32342d3234203d3e20323637343535.roa (raw, json)
Hash identifier:          LHWvf+99SWLxJNHRAPRl+w1RblDUjsT3CS475jB+MJ0=
Subject key identifier:   02:CF:69:AA:EB:D2:23:32:C1:3F:08:6E:59:62:F6:40:B2:76:81:39
Certificate issuer:       /CN=C105FF99BCA19864676CA5FCFCA53A25516E10F5
Certificate serial:       332CD08513E9DE81276011065020A9FE1CCF04A8
Authority key identifier: C1:05:FF:99:BC:A1:98:64:67:6C:A5:FC:FC:A5:3A:25:51:6E:10:F5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C105FF99BCA19864676CA5FCFCA53A25516E10F5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4erqKUcKg9JvxMspUgu9JjdkfErNhpq1KDNg68PJtHg3/0/3136342e3136332e3232332e302f32342d3234203d3e20323637343535.roa
Signing time:             Thu 28 Mar 2024 23:18:44 +0000
ROA not before:           Thu 28 Mar 2024 23:13:44 +0000
ROA not after:            Thu 27 Mar 2025 23:18:44 +0000
asID:                     267455
IP address blocks:        164.163.223.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:2c:d0:85:13:e9:de:81:27:60:11:06:50:20:a9:fe:1c:cf:04:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C105FF99BCA19864676CA5FCFCA53A25516E10F5
        Validity
            Not Before: Mar 28 23:13:44 2024 GMT
            Not After : Mar 27 23:18:44 2025 GMT
        Subject: CN=02CF69AAEBD22332C13F086E5962F640B2768139
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:05:de:d9:25:20:b2:b2:45:e2:9c:c3:20:ec:
                    10:7e:04:1f:7f:c2:b4:16:fb:a0:2c:60:83:4e:42:
                    7e:3f:ad:3d:9c:a3:44:67:b8:e1:80:26:c5:fe:65:
                    3e:cf:cf:a7:91:1b:65:63:f0:a8:63:f2:86:7e:e2:
                    52:fe:6d:0d:d5:53:97:8b:4e:67:79:eb:d4:43:c4:
                    e3:99:9b:2e:58:7f:47:79:b8:e8:7f:01:d7:ca:44:
                    e6:26:35:58:40:0e:3a:9b:e9:5b:2d:ce:7b:bf:21:
                    7a:d2:ca:93:6b:19:b4:b2:f8:fa:4d:3b:07:17:f0:
                    de:af:55:6f:26:d9:5d:3b:16:22:aa:50:1d:a6:b5:
                    08:1d:eb:55:5c:07:c8:48:f3:3c:7c:29:07:b9:56:
                    6d:2a:57:af:d2:ba:29:23:77:03:0c:60:d8:e9:2e:
                    80:28:80:3a:b0:00:ae:55:9a:33:68:fe:8b:9c:2d:
                    4e:3b:2f:33:a3:68:d3:fe:9c:26:65:d4:1e:cb:fe:
                    f7:52:37:63:f5:bf:f0:19:52:eb:c0:ce:41:bf:8d:
                    ba:5c:2d:33:75:83:1f:ae:bd:c6:55:b0:11:46:39:
                    5d:0a:17:af:77:9a:8b:5c:89:0b:8d:1d:93:9c:41:
                    2f:2c:28:fe:59:2d:28:ba:92:9b:27:c7:6a:b4:bd:
                    5a:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:CF:69:AA:EB:D2:23:32:C1:3F:08:6E:59:62:F6:40:B2:76:81:39
            X509v3 Authority Key Identifier:
                keyid:C1:05:FF:99:BC:A1:98:64:67:6C:A5:FC:FC:A5:3A:25:51:6E:10:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4erqKUcKg9JvxMspUgu9JjdkfErNhpq1KDNg68PJtHg3/0/C105FF99BCA19864676CA5FCFCA53A25516E10F5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C105FF99BCA19864676CA5FCFCA53A25516E10F5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4erqKUcKg9JvxMspUgu9JjdkfErNhpq1KDNg68PJtHg3/0/3136342e3136332e3232332e302f32342d3234203d3e20323637343535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.163.223.0/24

    Signature Algorithm: sha256WithRSAEncryption
         28:8d:74:58:eb:ee:0b:44:a3:53:b2:7f:25:0d:bc:e7:b5:8e:
         51:a6:e2:a1:99:2f:6f:00:41:bb:10:a4:63:96:f9:39:d3:cc:
         50:bf:ff:d0:37:26:ef:6e:6a:d0:e2:0c:97:2e:4c:b8:ef:fe:
         e3:1f:6f:01:c4:75:65:32:58:91:5b:a4:c4:03:93:6c:d7:63:
         32:94:80:f6:54:25:4e:6f:3f:0c:74:e1:e7:60:9b:c7:db:ed:
         ab:60:fa:e8:ca:18:ec:12:93:db:da:e5:7a:ba:54:15:39:20:
         71:19:8b:c0:e4:a8:64:ec:a9:05:65:fd:ce:74:96:1f:fd:6e:
         c4:36:76:6f:9e:eb:ad:b4:72:96:89:3a:f8:f1:ff:e9:b5:f2:
         92:e9:34:65:b4:b7:b9:ee:1f:3c:68:1b:31:ef:94:e3:f1:40:
         90:f4:2e:53:03:84:31:73:b0:4c:59:03:49:0c:9a:96:49:d2:
         aa:91:9f:7d:fd:fb:71:d0:a6:a7:74:dc:f7:0c:ab:a8:ae:6c:
         03:07:f5:ab:0d:b5:c3:5a:6d:58:be:6c:39:68:ac:f9:0e:d9:
         7a:a3:2f:da:29:be:32:eb:06:84:3a:6c:08:10:77:3e:81:76:
         f3:cd:89:05:d0:1c:82:d1:36:10:66:09:a5:5f:c8:6e:c9:1c:
         c2:29:60:3d
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUMyzQhRPp3oEnYBEGUCCp/hzPBKgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzEwNUZGOTlCQ0ExOTg2NDY3NkNBNUZDRkNBNTNBMjU1
MTZFMTBGNTAeFw0yNDAzMjgyMzEzNDRaFw0yNTAzMjcyMzE4NDRaMDMxMTAvBgNV
BAMTKDAyQ0Y2OUFBRUJEMjIzMzJDMTNGMDg2RTU5NjJGNjQwQjI3NjgxMzkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDyBd7ZJSCyskXinMMg7BB+BB9/
wrQW+6AsYINOQn4/rT2co0RnuOGAJsX+ZT7Pz6eRG2Vj8Khj8oZ+4lL+bQ3VU5eL
Tmd569RDxOOZmy5Yf0d5uOh/AdfKROYmNVhADjqb6Vstznu/IXrSypNrGbSy+PpN
OwcX8N6vVW8m2V07FiKqUB2mtQgd61VcB8hI8zx8KQe5Vm0qV6/SuikjdwMMYNjp
LoAogDqwAK5VmjNo/oucLU47LzOjaNP+nCZl1B7L/vdSN2P1v/AZUuvAzkG/jbpc
LTN1gx+uvcZVsBFGOV0KF693motciQuNHZOcQS8sKP5ZLSi6kpsnx2q0vVrxAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUAs9pquvSIzLBPwhuWWL2QLJ2gTkwHwYDVR0j
BBgwFoAUwQX/mbyhmGRnbKX8/KU6JVFuEPUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNGVycUtVY0tnOUp2eE1zcFVndTlKamRrZkVyTmhwcTFLRE5nNjhQSnRI
ZzMvMC9DMTA1RkY5OUJDQTE5ODY0Njc2Q0E1RkNGQ0E1M0EyNTUxNkUxMEY1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0MxMDVGRjk5QkNBMTk4NjQ2
NzZDQTVGQ0ZDQTUzQTI1NTE2RTEwRjUuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRlcnFLVWNLZzlKdnhNc3BVZ3U5Smpka2ZFck5ocHExS0ROZzY4UEp0SGczLzAv
MzEzNjM0MmUzMTM2MzMyZTMyMzIzMzJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzYzNzM0MzUzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAKSj3zANBgkqhkiG9w0BAQsFAAOCAQEAKI10
WOvuC0SjU7J/JQ2857WOUabioZkvbwBBuxCkY5b5OdPMUL//0Dcm725q0OIMly5M
uO/+4x9vAcR1ZTJYkVukxAOTbNdjMpSA9lQlTm8/DHTh52Cbx9vtq2D66MoY7BKT
29rlerpUFTkgcRmLwOSoZOypBWX9znSWH/1uxDZ2b57rrbRylok6+PH/6bXykuk0
ZbS3ue4fPGgbMe+U4/FAkPQuUwOEMXOwTFkDSQyalknSqpGfff37cdCmp3Tc9wyr
qK5sAwf1qw21w1ptWL5sOWis+Q7ZeqMv2im+MusGhDpsCBB3PoF2882JBdAcgtE2
EGYJpV/IbskcwilgPQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:36 2024 by rpki-client on console-fra.rpki-client.org