Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5DStw3JiYMo8QnDAcZZE5UhgCZP5dSuSxQGJtx7qFzgd/1/3136382e3139352e3130302e302f32322d3332203d3e20323634323238.roa
File:                     3136382e3139352e3130302e302f32322d3332203d3e20323634323238.roa (raw, json)
Hash identifier:          1sv7OIlF2OGuAGiAqt59yg38PZy7iHAAskkI/2xZrFg=
Subject key identifier:   CC:96:B4:86:17:4E:8B:DC:EC:8E:6A:67:E5:9F:6C:9C:35:7E:92:DA
Certificate issuer:       /CN=3CFEE7CF39A316A90FBA590255220CBCEB5BBEAA
Certificate serial:       29EE3821CBDDDDFD09E80843D454F135BB389140
Authority key identifier: 3C:FE:E7:CF:39:A3:16:A9:0F:BA:59:02:55:22:0C:BC:EB:5B:BE:AA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3CFEE7CF39A316A90FBA590255220CBCEB5BBEAA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5DStw3JiYMo8QnDAcZZE5UhgCZP5dSuSxQGJtx7qFzgd/1/3136382e3139352e3130302e302f32322d3332203d3e20323634323238.roa
Signing time:             Sun 26 Mar 2023 22:09:06 +0000
ROA not before:           Sun 26 Mar 2023 22:04:06 +0000
ROA not after:            Sun 24 Mar 2024 22:09:06 +0000
asID:                     264228
IP address blocks:        168.195.100.0/22 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:ee:38:21:cb:dd:dd:fd:09:e8:08:43:d4:54:f1:35:bb:38:91:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3CFEE7CF39A316A90FBA590255220CBCEB5BBEAA
        Validity
            Not Before: Mar 26 22:04:06 2023 GMT
            Not After : Mar 24 22:09:06 2024 GMT
        Subject: CN=CC96B486174E8BDCEC8E6A67E59F6C9C357E92DA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:07:0b:02:6c:bb:b9:e9:02:b8:cb:b6:52:7c:
                    b4:84:25:ca:2e:58:4f:08:e8:e9:28:35:6e:e8:fd:
                    a2:d6:6d:14:44:ef:4c:b9:71:de:fe:44:57:9a:01:
                    4a:43:ce:80:cc:c8:83:62:a9:de:2a:67:22:b1:57:
                    49:de:f6:3b:18:64:ea:4f:ca:74:1b:99:16:31:7d:
                    78:1d:09:e9:02:91:f7:59:8d:ac:81:3d:05:94:29:
                    2e:80:3c:b3:a1:e0:4a:8b:fc:b9:81:07:c5:3d:7b:
                    71:ab:eb:ab:ae:33:cf:64:c6:5a:dc:fc:da:1e:7d:
                    0e:a5:62:a3:89:21:d5:9c:86:71:f0:4c:0e:e8:0b:
                    e3:c5:1b:39:74:55:5b:26:fd:b4:27:c5:7c:60:2a:
                    14:51:fd:33:2c:4b:95:67:d0:88:0f:4c:87:0b:8d:
                    08:5e:5a:dd:8c:07:e5:49:42:e2:ee:aa:07:e3:a7:
                    7e:10:af:9f:17:7e:59:07:5e:83:c8:b4:f6:67:b1:
                    6e:a6:3f:2e:aa:da:67:b2:5c:d3:c1:86:7b:d7:72:
                    37:2d:e2:d0:c7:99:78:d9:0e:79:ae:14:1d:ad:57:
                    1d:0d:cf:24:73:f5:14:18:79:7c:10:27:ef:77:91:
                    70:56:58:c5:7c:28:11:6a:e6:fb:7c:86:5c:14:20:
                    8a:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:96:B4:86:17:4E:8B:DC:EC:8E:6A:67:E5:9F:6C:9C:35:7E:92:DA
            X509v3 Authority Key Identifier:
                keyid:3C:FE:E7:CF:39:A3:16:A9:0F:BA:59:02:55:22:0C:BC:EB:5B:BE:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5DStw3JiYMo8QnDAcZZE5UhgCZP5dSuSxQGJtx7qFzgd/1/3CFEE7CF39A316A90FBA590255220CBCEB5BBEAA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3CFEE7CF39A316A90FBA590255220CBCEB5BBEAA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5DStw3JiYMo8QnDAcZZE5UhgCZP5dSuSxQGJtx7qFzgd/1/3136382e3139352e3130302e302f32322d3332203d3e20323634323238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.195.100.0/22

    Signature Algorithm: sha256WithRSAEncryption
         04:0f:c6:fc:24:e8:1d:ce:00:2d:da:7b:28:04:fb:f5:3a:01:
         e4:cb:cd:91:4b:b2:cf:8f:48:57:8b:19:a7:72:5f:77:f2:5f:
         ee:4f:c3:8f:1f:9a:d6:f5:5c:00:f6:b4:0b:04:bb:e9:7a:e6:
         4c:a5:1d:95:9f:4c:f4:82:cb:0f:44:0d:ce:d2:bb:c6:e7:9a:
         7c:41:e4:ed:08:4d:d1:8d:cf:c1:02:39:1e:03:a0:d6:88:60:
         0e:7f:46:e1:0f:42:19:fe:a8:68:69:83:0a:d9:dd:cb:d6:0c:
         81:c5:49:50:42:7b:15:bf:4d:bb:35:28:05:1e:a9:d3:b9:44:
         5d:01:c4:20:ec:c6:a0:1d:4d:7e:ba:c4:bb:92:3c:6e:5a:96:
         5f:df:fc:22:51:a3:d7:79:e5:35:fd:8d:00:e6:09:b8:09:c6:
         c5:8e:66:65:3b:dd:23:ea:79:47:3e:4f:07:dc:25:05:74:de:
         13:f1:ce:bf:fd:6c:8b:2b:c6:f5:7c:c0:f2:df:d6:f6:e0:b3:
         2f:fe:45:5a:a7:ca:77:f5:f6:a2:65:4c:54:a4:61:a5:a5:09:
         60:5c:2a:50:d2:45:79:69:06:34:82:f3:08:84:4f:3d:af:1a:
         99:b3:a5:2d:e1:93:2a:46:86:94:54:50:97:dc:72:aa:48:58:
         03:ed:12:36
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUKe44Icvd3f0J6AhD1FTxNbs4kUAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0NGRUU3Q0YzOUEzMTZBOTBGQkE1OTAyNTUyMjBDQkNF
QjVCQkVBQTAeFw0yMzAzMjYyMjA0MDZaFw0yNDAzMjQyMjA5MDZaMDMxMTAvBgNV
BAMTKENDOTZCNDg2MTc0RThCRENFQzhFNkE2N0U1OUY2QzlDMzU3RTkyREEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpBwsCbLu56QK4y7ZSfLSEJcou
WE8I6OkoNW7o/aLWbRRE70y5cd7+RFeaAUpDzoDMyINiqd4qZyKxV0ne9jsYZOpP
ynQbmRYxfXgdCekCkfdZjayBPQWUKS6APLOh4EqL/LmBB8U9e3Gr66uuM89kxlrc
/NoefQ6lYqOJIdWchnHwTA7oC+PFGzl0VVsm/bQnxXxgKhRR/TMsS5Vn0IgPTIcL
jQheWt2MB+VJQuLuqgfjp34Qr58XflkHXoPItPZnsW6mPy6q2meyXNPBhnvXcjct
4tDHmXjZDnmuFB2tVx0NzyRz9RQYeXwQJ+93kXBWWMV8KBFq5vt8hlwUIIoZAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUzJa0hhdOi9zsjmpn5Z9snDV+ktowHwYDVR0j
BBgwFoAUPP7nzzmjFqkPulkCVSIMvOtbvqowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNURTdHczSmlZTW84UW5EQWNaWkU1VWhnQ1pQNWRTdVN4UUdKdHg3cUZ6
Z2QvMS8zQ0ZFRTdDRjM5QTMxNkE5MEZCQTU5MDI1NTIyMENCQ0VCNUJCRUFBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzNDRkVFN0NGMzlBMzE2QTkw
RkJBNTkwMjU1MjIwQ0JDRUI1QkJFQUEuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzVEU3R3M0ppWU1vOFFuREFjWlpFNVVoZ0NaUDVkU3VTeFFHSnR4N3FGemdkLzEv
MzEzNjM4MmUzMTM5MzUyZTMxMzAzMDJlMzAyZjMyMzIyZDMzMzIyMDNkM2UyMDMy
MzYzNDMyMzIzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAqjDZDANBgkqhkiG9w0BAQsFAAOCAQEABA/G
/CToHc4ALdp7KAT79ToB5MvNkUuyz49IV4sZp3Jfd/Jf7k/Djx+a1vVcAPa0CwS7
6XrmTKUdlZ9M9ILLD0QNztK7xueafEHk7QhN0Y3PwQI5HgOg1ohgDn9G4Q9CGf6o
aGmDCtndy9YMgcVJUEJ7Fb9NuzUoBR6p07lEXQHEIOzGoB1NfrrEu5I8blqWX9/8
IlGj13nlNf2NAOYJuAnGxY5mZTvdI+p5Rz5PB9wlBXTeE/HOv/1siyvG9XzA8t/W
9uCzL/5FWqfKd/X2omVMVKRhpaUJYFwqUNJFeWkGNILzCIRPPa8ambOlLeGTKkaG
lFRQl9xyqkhYA+0SNg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:38 2024 by rpki-client on console-fra.rpki-client.org