Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/59jUntcWnN6uJLAnfRi2pJS4imMv17WzDeS7HUkDv8dy/1/3136382e3233322e38342e302f32332d3233203d3e20323634353632.roa
File:                     3136382e3233322e38342e302f32332d3233203d3e20323634353632.roa (raw, json)
Hash identifier:          jYkq44fx/JIMcNMt31kglf9JcsRthLTyUMQGP5GbT3A=
Subject key identifier:   E7:23:C4:85:D1:5F:EE:E4:FD:44:5E:98:C7:74:C0:CF:CA:77:C4:C3
Certificate issuer:       /CN=D7FEB8333E4AA11344E779BB749E8570B27FBCCD
Certificate serial:       3739EC3FE912C23B587AF3321500B2DA3D1E519F
Authority key identifier: D7:FE:B8:33:3E:4A:A1:13:44:E7:79:BB:74:9E:85:70:B2:7F:BC:CD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D7FEB8333E4AA11344E779BB749E8570B27FBCCD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/59jUntcWnN6uJLAnfRi2pJS4imMv17WzDeS7HUkDv8dy/1/3136382e3233322e38342e302f32332d3233203d3e20323634353632.roa
Signing time:             Fri 26 Apr 2024 19:28:42 +0000
ROA not before:           Fri 26 Apr 2024 19:23:42 +0000
ROA not after:            Fri 25 Apr 2025 19:28:42 +0000
asID:                     264562
IP address blocks:        168.232.84.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:39:ec:3f:e9:12:c2:3b:58:7a:f3:32:15:00:b2:da:3d:1e:51:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D7FEB8333E4AA11344E779BB749E8570B27FBCCD
        Validity
            Not Before: Apr 26 19:23:42 2024 GMT
            Not After : Apr 25 19:28:42 2025 GMT
        Subject: CN=E723C485D15FEEE4FD445E98C774C0CFCA77C4C3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:d4:f0:ef:6e:9c:71:a1:d2:1e:5c:d0:db:46:
                    b0:02:20:d7:f4:1c:99:d0:bc:d6:3d:97:25:37:2b:
                    a2:69:59:5a:32:d2:b7:a9:4c:78:b7:57:0e:68:ad:
                    86:e0:8b:13:70:a5:22:a2:bf:5a:ad:46:20:8e:a4:
                    89:a1:67:4e:bf:0d:2a:c8:ac:73:ee:5b:4a:e9:7b:
                    a5:ee:d2:1e:6e:b2:c5:3c:11:46:81:30:32:e0:c3:
                    20:5e:4f:c2:0c:2c:5e:92:60:e4:79:02:77:59:d9:
                    78:a2:26:f2:39:0a:19:49:29:d0:db:b2:d5:4f:94:
                    9d:6c:30:45:a3:2a:b7:90:a0:29:d5:7b:b9:6a:eb:
                    2d:f9:ee:bd:32:1c:a3:6a:ef:40:da:6f:dc:6c:c7:
                    e2:17:4b:9b:26:0a:91:1b:08:76:7b:ae:3f:bb:b0:
                    64:9c:c1:3a:37:00:8d:4a:5d:84:0d:b3:de:76:64:
                    41:e2:3e:50:e0:af:91:26:fe:cc:87:e7:26:b0:50:
                    28:25:74:76:c7:6e:1b:73:7f:bc:f9:6d:ae:fb:69:
                    09:a8:29:fe:95:17:a6:57:e0:c6:6d:48:31:70:72:
                    9d:91:92:9d:9c:fe:c6:bf:09:63:83:81:1e:a1:01:
                    e7:b8:92:d4:fe:36:e6:d6:a5:91:1f:e3:b0:05:0a:
                    ab:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:23:C4:85:D1:5F:EE:E4:FD:44:5E:98:C7:74:C0:CF:CA:77:C4:C3
            X509v3 Authority Key Identifier:
                keyid:D7:FE:B8:33:3E:4A:A1:13:44:E7:79:BB:74:9E:85:70:B2:7F:BC:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/59jUntcWnN6uJLAnfRi2pJS4imMv17WzDeS7HUkDv8dy/1/D7FEB8333E4AA11344E779BB749E8570B27FBCCD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D7FEB8333E4AA11344E779BB749E8570B27FBCCD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/59jUntcWnN6uJLAnfRi2pJS4imMv17WzDeS7HUkDv8dy/1/3136382e3233322e38342e302f32332d3233203d3e20323634353632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.232.84.0/23

    Signature Algorithm: sha256WithRSAEncryption
         18:97:c0:90:3a:a3:65:a9:1d:c2:e7:aa:63:f1:0c:4f:fe:fd:
         52:08:87:ea:29:d9:16:22:a8:b9:6d:25:aa:43:59:86:34:74:
         0d:74:f1:10:39:f1:48:ca:e0:87:55:ea:de:e5:d2:45:a3:a7:
         c2:b4:8e:72:f5:52:14:97:ca:21:97:f5:8f:d7:a7:0a:10:bf:
         d3:04:33:87:b5:36:30:06:87:e2:e6:b4:7e:ef:63:07:37:7f:
         30:bd:f9:40:d5:ed:8c:17:2b:e6:e2:ea:51:c4:09:93:bd:6b:
         6b:65:ae:f7:78:07:d3:74:e9:d2:64:61:a1:13:3b:93:96:6f:
         ca:7c:83:37:e7:ab:8f:92:25:91:04:ee:90:a5:59:3c:31:9e:
         51:4f:36:d8:a5:a5:f3:81:54:1a:3e:49:82:2b:60:b3:21:98:
         1c:3d:d3:6e:6c:69:25:be:4e:cf:6e:8c:73:8d:bb:fd:94:0d:
         8c:fd:70:11:f5:82:e5:4b:31:07:e6:fb:59:dc:3c:6c:5f:d6:
         d5:6a:23:b6:de:38:4e:24:d2:0d:be:3b:76:a5:e0:68:97:95:
         a0:a7:b9:d7:4b:50:ea:a1:59:26:09:ae:00:2b:e4:5f:db:55:
         d5:07:f4:78:2f:a4:4f:cc:62:59:11:be:6e:e6:26:bb:84:18:
         16:e9:0c:4b
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUNznsP+kSwjtYevMyFQCy2j0eUZ8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDdGRUI4MzMzRTRBQTExMzQ0RTc3OUJCNzQ5RTg1NzBC
MjdGQkNDRDAeFw0yNDA0MjYxOTIzNDJaFw0yNTA0MjUxOTI4NDJaMDMxMTAvBgNV
BAMTKEU3MjNDNDg1RDE1RkVFRTRGRDQ0NUU5OEM3NzRDMENGQ0E3N0M0QzMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC71PDvbpxxodIeXNDbRrACINf0
HJnQvNY9lyU3K6JpWVoy0repTHi3Vw5orYbgixNwpSKiv1qtRiCOpImhZ06/DSrI
rHPuW0rpe6Xu0h5ussU8EUaBMDLgwyBeT8IMLF6SYOR5AndZ2XiiJvI5ChlJKdDb
stVPlJ1sMEWjKreQoCnVe7lq6y357r0yHKNq70Dab9xsx+IXS5smCpEbCHZ7rj+7
sGScwTo3AI1KXYQNs952ZEHiPlDgr5Em/syH5yawUCgldHbHbhtzf7z5ba77aQmo
Kf6VF6ZX4MZtSDFwcp2Rkp2c/sa/CWODgR6hAee4ktT+NubWpZEf47AFCqvRAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU5yPEhdFf7uT9RF6Yx3TAz8p3xMMwHwYDVR0j
BBgwFoAU1/64Mz5KoRNE53m7dJ6FcLJ/vM0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNTlqVW50Y1duTjZ1SkxBbmZSaTJwSlM0aW1NdjE3V3pEZVM3SFVrRHY4
ZHkvMS9EN0ZFQjgzMzNFNEFBMTEzNDRFNzc5QkI3NDlFODU3MEIyN0ZCQ0NELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Q3RkVCODMzM0U0QUExMTM0
NEU3NzlCQjc0OUU4NTcwQjI3RkJDQ0QuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzU5alVudGNXbk42dUpMQW5mUmkycEpTNGltTXYxN1d6RGVTN0hVa0R2OGR5LzEv
MzEzNjM4MmUzMjMzMzIyZTM4MzQyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzMjM2
MzQzNTM2MzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAGo6FQwDQYJKoZIhvcNAQELBQADggEBABiXwJA6
o2WpHcLnqmPxDE/+/VIIh+op2RYiqLltJapDWYY0dA108RA58UjK4IdV6t7l0kWj
p8K0jnL1UhSXyiGX9Y/XpwoQv9MEM4e1NjAGh+LmtH7vYwc3fzC9+UDV7YwXK+bi
6lHECZO9a2tlrvd4B9N06dJkYaETO5OWb8p8gzfnq4+SJZEE7pClWTwxnlFPNtil
pfOBVBo+SYIrYLMhmBw9025saSW+Ts9ujHONu/2UDYz9cBH1guVLMQfm+1ncPGxf
1tVqI7beOE4k0g2+O3al4GiXlaCnuddLUOqhWSYJrgAr5F/bVdUH9HgvpE/MYlkR
vm7mJruEGBbpDEs=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:38 2024 by rpki-client on console-fra.rpki-client.org