Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5EW1S5FsaMHi4NoZ9FyQuKyiyMxCuPg6UxiP6x5A7U4h/0/3136382e3139352e32382e302f32342d3234203d3e20323635343235.roa
File:                     3136382e3139352e32382e302f32342d3234203d3e20323635343235.roa (raw, json)
Hash identifier:          il5cWrLsqniC36PscyCp/nl2t1XmltdSTM0Oif3qNXI=
Subject key identifier:   99:D2:CA:1D:EB:24:D5:64:CB:CD:AB:94:65:3B:7E:1D:99:B1:F5:1B
Certificate issuer:       /CN=B728A69C0DF62AF0E112E55F59C757F4DA6D6959
Certificate serial:       122682CFA8ABD6F198DC3C9A1FF997406BCE57E9
Authority key identifier: B7:28:A6:9C:0D:F6:2A:F0:E1:12:E5:5F:59:C7:57:F4:DA:6D:69:59
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B728A69C0DF62AF0E112E55F59C757F4DA6D6959.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5EW1S5FsaMHi4NoZ9FyQuKyiyMxCuPg6UxiP6x5A7U4h/0/3136382e3139352e32382e302f32342d3234203d3e20323635343235.roa
Signing time:             Tue 02 Aug 2022 12:43:26 +0000
ROA not before:           Tue 02 Aug 2022 12:38:26 +0000
ROA not after:            Tue 01 Aug 2023 12:43:26 +0000
asID:                     265425
IP address blocks:        168.195.28.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:26:82:cf:a8:ab:d6:f1:98:dc:3c:9a:1f:f9:97:40:6b:ce:57:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B728A69C0DF62AF0E112E55F59C757F4DA6D6959
        Validity
            Not Before: Aug  2 12:38:26 2022 GMT
            Not After : Aug  1 12:43:26 2023 GMT
        Subject: CN=99D2CA1DEB24D564CBCDAB94653B7E1D99B1F51B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:d5:2e:87:ce:5e:db:f9:ef:8b:d6:24:56:32:
                    25:09:c7:a2:6a:8f:b9:c4:ff:12:7e:ca:68:de:db:
                    87:8c:2c:1a:79:e3:b1:d3:ca:13:f3:5e:9b:d4:1d:
                    34:26:02:3a:ca:3f:4a:b5:b1:f4:ad:87:9f:25:f7:
                    e7:4b:e4:bb:b6:fa:d7:f8:2e:ff:02:66:22:6d:ab:
                    4f:7f:8a:37:01:b3:42:d9:8e:01:89:c9:0a:1c:b1:
                    5b:4e:49:64:0b:4f:db:a5:0f:38:fa:b0:1b:c8:41:
                    de:b6:68:97:99:86:d7:91:a3:29:25:bf:e7:ab:a1:
                    9b:92:9f:9f:16:12:11:40:a5:6d:93:97:10:41:d4:
                    33:45:f5:e4:22:5f:58:f8:9c:f0:8c:4c:e7:92:1f:
                    5f:86:a7:53:c2:0a:6b:24:01:42:7c:19:e7:99:08:
                    06:26:db:a9:f4:ca:4f:be:9f:28:ed:b8:77:7b:70:
                    c8:65:fb:fd:7e:40:b0:0b:94:23:b9:7b:b2:f3:da:
                    cb:12:72:c1:9a:61:ab:a5:f5:8e:e1:ff:45:ef:08:
                    fe:b7:ad:63:95:75:cc:b8:69:fd:82:88:4f:2c:ca:
                    a1:10:42:e9:9e:8b:f8:66:59:2d:ae:d4:8e:6e:4e:
                    7c:ec:46:39:75:db:0a:97:33:78:dc:20:44:be:f2:
                    5c:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:D2:CA:1D:EB:24:D5:64:CB:CD:AB:94:65:3B:7E:1D:99:B1:F5:1B
            X509v3 Authority Key Identifier:
                keyid:B7:28:A6:9C:0D:F6:2A:F0:E1:12:E5:5F:59:C7:57:F4:DA:6D:69:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5EW1S5FsaMHi4NoZ9FyQuKyiyMxCuPg6UxiP6x5A7U4h/0/B728A69C0DF62AF0E112E55F59C757F4DA6D6959.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B728A69C0DF62AF0E112E55F59C757F4DA6D6959.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5EW1S5FsaMHi4NoZ9FyQuKyiyMxCuPg6UxiP6x5A7U4h/0/3136382e3139352e32382e302f32342d3234203d3e20323635343235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.195.28.0/24

    Signature Algorithm: sha256WithRSAEncryption
         38:f6:64:26:0b:80:68:93:7f:96:94:aa:72:56:b1:90:ef:22:
         c2:c9:c3:6b:fe:6f:0c:e4:7b:f4:27:5e:cd:bb:a0:88:0e:7f:
         f0:ca:4a:5c:e9:7f:88:ea:ee:31:50:b4:35:3a:fc:ae:b7:ec:
         37:65:34:b3:ac:cd:83:ff:2c:69:2a:af:1e:5f:f6:0f:5c:b2:
         ce:39:ea:f9:2d:70:42:4b:a1:c8:a8:8a:94:17:57:b7:89:0d:
         5c:2e:23:05:63:dc:77:88:85:f8:b6:44:e3:5d:8c:0b:5b:df:
         fc:3a:f9:57:3b:6c:a8:e6:13:67:16:03:36:73:be:f5:7f:bb:
         3b:de:eb:61:c1:47:21:c6:81:a0:a3:8a:5a:0d:99:51:a0:a7:
         1d:c7:d1:d7:a2:b8:5d:d3:66:8e:82:23:01:66:60:c8:4b:41:
         cd:29:7b:d9:a6:45:a4:73:a5:65:6a:c1:62:ec:26:48:a3:24:
         69:41:6a:80:ab:05:04:cc:9a:92:ac:77:63:76:6c:fe:ad:2a:
         8a:b6:44:9b:63:4c:15:61:5a:70:1a:e0:45:54:db:c9:09:55:
         8a:e1:25:8e:12:df:b5:18:b1:9d:70:31:b5:92:7d:0e:2f:ac:
         8a:0f:ca:ac:29:75:00:ed:a0:b6:84:cc:1f:b4:b6:fd:d6:a9:
         37:e7:56:89
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUEiaCz6ir1vGY3DyaH/mXQGvOV+kwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjcyOEE2OUMwREY2MkFGMEUxMTJFNTVGNTlDNzU3RjRE
QTZENjk1OTAeFw0yMjA4MDIxMjM4MjZaFw0yMzA4MDExMjQzMjZaMDMxMTAvBgNV
BAMTKDk5RDJDQTFERUIyNEQ1NjRDQkNEQUI5NDY1M0I3RTFEOTlCMUY1MUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDS1S6Hzl7b+e+L1iRWMiUJx6Jq
j7nE/xJ+ymje24eMLBp547HTyhPzXpvUHTQmAjrKP0q1sfSth58l9+dL5Lu2+tf4
Lv8CZiJtq09/ijcBs0LZjgGJyQocsVtOSWQLT9ulDzj6sBvIQd62aJeZhteRoykl
v+eroZuSn58WEhFApW2TlxBB1DNF9eQiX1j4nPCMTOeSH1+Gp1PCCmskAUJ8GeeZ
CAYm26n0yk++nyjtuHd7cMhl+/1+QLALlCO5e7Lz2ssScsGaYaul9Y7h/0XvCP63
rWOVdcy4af2CiE8syqEQQumei/hmWS2u1I5uTnzsRjl12wqXM3jcIES+8lyVAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUmdLKHesk1WTLzauUZTt+HZmx9RswHwYDVR0j
BBgwFoAUtyimnA32KvDhEuVfWcdX9NptaVkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNUVXMVM1RnNhTUhpNE5vWjlGeVF1S3lpeU14Q3VQZzZVeGlQNng1QTdV
NGgvMC9CNzI4QTY5QzBERjYyQUYwRTExMkU1NUY1OUM3NTdGNERBNkQ2OTU5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0I3MjhBNjlDMERGNjJBRjBF
MTEyRTU1RjU5Qzc1N0Y0REE2RDY5NTkuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzVFVzFTNUZzYU1IaTROb1o5RnlRdUt5aXlNeEN1UGc2VXhpUDZ4NUE3VTRoLzAv
MzEzNjM4MmUzMTM5MzUyZTMyMzgyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzUzNDMyMzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBACowxwwDQYJKoZIhvcNAQELBQADggEBADj2ZCYL
gGiTf5aUqnJWsZDvIsLJw2v+bwzke/QnXs27oIgOf/DKSlzpf4jq7jFQtDU6/K63
7DdlNLOszYP/LGkqrx5f9g9css456vktcEJLocioipQXV7eJDVwuIwVj3HeIhfi2
RONdjAtb3/w6+Vc7bKjmE2cWAzZzvvV/uzve62HBRyHGgaCjiloNmVGgpx3H0dei
uF3TZo6CIwFmYMhLQc0pe9mmRaRzpWVqwWLsJkijJGlBaoCrBQTMmpKsd2N2bP6t
Koq2RJtjTBVhWnAa4EVU28kJVYrhJY4S37UYsZ1wMbWSfQ4vrIoPyqwpdQDtoLaE
zB+0tv3WqTfnVok=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:38 2024 by rpki-client on console-fra.rpki-client.org