Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5EW1S5FsaMHi4NoZ9FyQuKyiyMxCuPg6UxiP6x5A7U4h/1/3136382e3139352e32382e302f32332d3233203d3e20323635343235.roa
File:                     3136382e3139352e32382e302f32332d3233203d3e20323635343235.roa (raw, json)
Hash identifier:          uCEjVq/IEiJlMToJk3mabHTJd61C9PuBKrP5GxVoGSA=
Subject key identifier:   D2:72:D7:6F:8C:61:51:6E:22:7D:FF:9E:1F:23:95:CD:AD:ED:BF:64
Certificate issuer:       /CN=AEBE4A8C0B918A62DC00B5C6391FF5B6DDE29A0E
Certificate serial:       07923CCAE9538DE2DB82B221D269858EC93372D0
Authority key identifier: AE:BE:4A:8C:0B:91:8A:62:DC:00:B5:C6:39:1F:F5:B6:DD:E2:9A:0E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AEBE4A8C0B918A62DC00B5C6391FF5B6DDE29A0E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5EW1S5FsaMHi4NoZ9FyQuKyiyMxCuPg6UxiP6x5A7U4h/1/3136382e3139352e32382e302f32332d3233203d3e20323635343235.roa
Signing time:             Tue 12 Sep 2023 18:45:06 +0000
ROA not before:           Tue 12 Sep 2023 18:40:06 +0000
ROA not after:            Tue 10 Sep 2024 18:45:06 +0000
asID:                     265425
IP address blocks:        168.195.28.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:92:3c:ca:e9:53:8d:e2:db:82:b2:21:d2:69:85:8e:c9:33:72:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AEBE4A8C0B918A62DC00B5C6391FF5B6DDE29A0E
        Validity
            Not Before: Sep 12 18:40:06 2023 GMT
            Not After : Sep 10 18:45:06 2024 GMT
        Subject: CN=D272D76F8C61516E227DFF9E1F2395CDADEDBF64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:0f:db:ac:b2:fb:67:a2:0a:b1:7c:a7:f1:9e:
                    fd:d4:7f:08:9d:0c:b1:66:c3:db:a8:ba:f8:c0:7f:
                    80:ac:7f:56:59:2c:da:6d:2b:7b:0e:2f:f1:37:fa:
                    e3:3a:af:36:a8:1e:f7:ad:76:62:48:4b:00:bc:1b:
                    1f:9b:d8:c0:a4:d5:7d:fa:dc:49:cf:09:aa:00:fe:
                    95:8f:47:48:60:25:9a:ce:a5:21:13:5d:dd:f9:86:
                    5c:68:1b:09:e0:b4:c0:34:9e:b5:ba:63:5a:d0:5a:
                    3d:ce:43:7e:2e:af:4e:59:ea:16:af:db:38:aa:6e:
                    d4:b9:fc:cb:83:e6:46:e6:b4:7f:84:3b:e3:ab:f8:
                    ae:81:ae:15:c3:9e:cd:fa:b6:29:de:8c:c4:5a:bd:
                    b9:5a:34:34:05:39:ec:de:e0:10:3e:22:7f:a2:e6:
                    29:c6:70:2e:c3:6a:4d:fa:e0:c4:a2:c2:fb:9c:68:
                    6a:37:62:39:d6:2d:b3:81:5d:34:77:f5:51:ee:18:
                    76:f7:8c:65:5a:48:50:dd:d0:f9:8c:42:32:b8:35:
                    b6:f5:b4:f6:28:59:bd:cd:5f:9f:73:ff:42:4c:a6:
                    e6:3e:ef:ec:aa:61:c7:9b:a7:be:1c:cd:ae:5c:49:
                    4d:42:33:32:fc:f5:65:1a:d0:a9:e0:13:29:76:f8:
                    3e:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:72:D7:6F:8C:61:51:6E:22:7D:FF:9E:1F:23:95:CD:AD:ED:BF:64
            X509v3 Authority Key Identifier:
                keyid:AE:BE:4A:8C:0B:91:8A:62:DC:00:B5:C6:39:1F:F5:B6:DD:E2:9A:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5EW1S5FsaMHi4NoZ9FyQuKyiyMxCuPg6UxiP6x5A7U4h/1/AEBE4A8C0B918A62DC00B5C6391FF5B6DDE29A0E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AEBE4A8C0B918A62DC00B5C6391FF5B6DDE29A0E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5EW1S5FsaMHi4NoZ9FyQuKyiyMxCuPg6UxiP6x5A7U4h/1/3136382e3139352e32382e302f32332d3233203d3e20323635343235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.195.28.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7a:b2:86:4d:7f:e7:83:79:fe:c0:89:d5:86:a0:11:2d:84:a9:
         58:94:db:28:90:ec:a3:a1:34:8c:d3:5d:a7:d6:f3:94:86:68:
         ed:83:27:f9:a0:dd:5e:23:e0:b9:2d:ce:a6:84:de:42:60:8c:
         c2:f2:b6:c1:77:33:b0:cf:50:e2:9c:85:7f:b8:71:e5:b2:10:
         35:2a:40:68:f9:66:40:df:4d:e9:a4:f5:34:a2:1c:bb:67:1a:
         fa:7e:9a:d2:4f:fe:f6:be:86:a9:75:98:c1:5d:a7:1e:f4:0d:
         08:79:22:13:6e:c7:30:b7:6b:b3:1c:10:1a:c1:30:d5:b8:c3:
         b9:25:f1:ae:3f:37:be:29:f9:9c:e7:3a:79:f6:01:d0:e8:3a:
         aa:cc:01:0a:d3:96:01:60:ee:04:9d:87:f7:97:b2:63:45:f6:
         b0:83:b2:2f:6d:36:d9:9a:d1:7e:1d:69:bd:80:21:dd:17:ff:
         86:dd:6f:3e:8f:ad:68:c1:d4:13:7b:a5:4f:4c:73:79:6c:b6:
         cd:2d:1a:2f:13:89:e9:00:be:74:2f:88:04:f1:be:b9:ab:19:
         5b:d5:a5:d7:77:60:e1:5c:e9:85:b2:e3:6b:79:f9:f5:a1:d8:
         b1:bb:12:9d:00:34:ae:09:3a:ef:68:a9:09:b6:9b:00:f9:02:
         5d:0e:65:10
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUB5I8yulTjeLbgrIh0mmFjskzctAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUVCRTRBOEMwQjkxOEE2MkRDMDBCNUM2MzkxRkY1QjZE
REUyOUEwRTAeFw0yMzA5MTIxODQwMDZaFw0yNDA5MTAxODQ1MDZaMDMxMTAvBgNV
BAMTKEQyNzJENzZGOEM2MTUxNkUyMjdERkY5RTFGMjM5NUNEQURFREJGNjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKD9ussvtnogqxfKfxnv3Ufwid
DLFmw9uouvjAf4Csf1ZZLNptK3sOL/E3+uM6rzaoHvetdmJISwC8Gx+b2MCk1X36
3EnPCaoA/pWPR0hgJZrOpSETXd35hlxoGwngtMA0nrW6Y1rQWj3OQ34ur05Z6hav
2ziqbtS5/MuD5kbmtH+EO+Or+K6BrhXDns36tinejMRavblaNDQFOeze4BA+In+i
5inGcC7Dak364MSiwvucaGo3YjnWLbOBXTR39VHuGHb3jGVaSFDd0PmMQjK4Nbb1
tPYoWb3NX59z/0JMpuY+7+yqYcebp74cza5cSU1CMzL89WUa0KngEyl2+D4/AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU0nLXb4xhUW4iff+eHyOVza3tv2QwHwYDVR0j
BBgwFoAUrr5KjAuRimLcALXGOR/1tt3img4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNUVXMVM1RnNhTUhpNE5vWjlGeVF1S3lpeU14Q3VQZzZVeGlQNng1QTdV
NGgvMS9BRUJFNEE4QzBCOTE4QTYyREMwMEI1QzYzOTFGRjVCNkRERTI5QTBFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0FFQkU0QThDMEI5MThBNjJE
QzAwQjVDNjM5MUZGNUI2RERFMjlBMEUuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzVFVzFTNUZzYU1IaTROb1o5RnlRdUt5aXlNeEN1UGc2VXhpUDZ4NUE3VTRoLzEv
MzEzNjM4MmUzMTM5MzUyZTMyMzgyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzMjM2
MzUzNDMyMzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAGowxwwDQYJKoZIhvcNAQELBQADggEBAHqyhk1/
54N5/sCJ1YagES2EqViU2yiQ7KOhNIzTXafW85SGaO2DJ/mg3V4j4LktzqaE3kJg
jMLytsF3M7DPUOKchX+4ceWyEDUqQGj5ZkDfTemk9TSiHLtnGvp+mtJP/va+hql1
mMFdpx70DQh5IhNuxzC3a7McEBrBMNW4w7kl8a4/N74p+ZznOnn2AdDoOqrMAQrT
lgFg7gSdh/eXsmNF9rCDsi9tNtma0X4dab2AId0X/4bdbz6PrWjB1BN7pU9Mc3ls
ts0tGi8TiekAvnQviATxvrmrGVvVpdd3YOFc6YWy42t5+fWh2LG7Ep0ANK4JOu9o
qQm2mwD5Al0OZRA=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:38 2024 by rpki-client on console-fra.rpki-client.org