Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5L33C9wACnTmqze7cHVok79UHX3NB55xUsXabjxqHsfb/0/3136382e3132312e3137362e302f32322d3234203d3e20323635333135.roa
File:                     3136382e3132312e3137362e302f32322d3234203d3e20323635333135.roa (raw, json)
Hash identifier:          q5ECsMHfle5RjYBsvK0e0EjDjdJBk/SazpwUHTCduKQ=
Subject key identifier:   98:0B:1D:17:E4:B8:BC:16:17:EC:08:9A:50:47:56:02:38:DE:C6:F6
Certificate issuer:       /CN=3BE74639A548CCC5CC56F44AA6C4FFEECCE73F0C
Certificate serial:       4698A530B017F944C8B92BB2811EE6D81CB0A55C
Authority key identifier: 3B:E7:46:39:A5:48:CC:C5:CC:56:F4:4A:A6:C4:FF:EE:CC:E7:3F:0C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3BE74639A548CCC5CC56F44AA6C4FFEECCE73F0C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5L33C9wACnTmqze7cHVok79UHX3NB55xUsXabjxqHsfb/0/3136382e3132312e3137362e302f32322d3234203d3e20323635333135.roa
Signing time:             Sun 10 Sep 2023 21:00:03 +0000
ROA not before:           Sun 10 Sep 2023 20:55:03 +0000
ROA not after:            Sun 08 Sep 2024 21:00:03 +0000
asID:                     265315
IP address blocks:        168.121.176.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:98:a5:30:b0:17:f9:44:c8:b9:2b:b2:81:1e:e6:d8:1c:b0:a5:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3BE74639A548CCC5CC56F44AA6C4FFEECCE73F0C
        Validity
            Not Before: Sep 10 20:55:03 2023 GMT
            Not After : Sep  8 21:00:03 2024 GMT
        Subject: CN=3082010A0282010100C8C800DB75A898C7C3FA280B77543F746D4B5CFDBA135F255DA6C1CAE4149EAF62005EAB6D4AB64708215E910142071110A291635A8524F2E1C7508171706D89E885A5F1A70639D7F997841CB7C3FAE6DDEEDB60BC257822A0CA67AD880FDF5F9F430E510EB8F39992CCB3372129ECEBE7F6E330171EA31E915AFE419D16E62FFFA9602E303470A7B5B3E9C2391B65B9F8E2FCD8CE91A79FE0BC5B078420DF80107A75FD0F932FFB4D2BF164494DA9F8B04B762B232CFED1FCDC49E2946E99A8797503BFF01B319D752AFB68DFB8CABE18F0E3B68982D17EC34D018F0D4E8804C3ACC185F73B0A81BE5B3D7ECD14BF3607DFC5D240DB570E994CEC68CCE7032D0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:c8:00:db:75:a8:98:c7:c3:fa:28:0b:77:54:
                    3f:74:6d:4b:5c:fd:ba:13:5f:25:5d:a6:c1:ca:e4:
                    14:9e:af:62:00:5e:ab:6d:4a:b6:47:08:21:5e:91:
                    01:42:07:11:10:a2:91:63:5a:85:24:f2:e1:c7:50:
                    81:71:70:6d:89:e8:85:a5:f1:a7:06:39:d7:f9:97:
                    84:1c:b7:c3:fa:e6:dd:ee:db:60:bc:25:78:22:a0:
                    ca:67:ad:88:0f:df:5f:9f:43:0e:51:0e:b8:f3:99:
                    92:cc:b3:37:21:29:ec:eb:e7:f6:e3:30:17:1e:a3:
                    1e:91:5a:fe:41:9d:16:e6:2f:ff:a9:60:2e:30:34:
                    70:a7:b5:b3:e9:c2:39:1b:65:b9:f8:e2:fc:d8:ce:
                    91:a7:9f:e0:bc:5b:07:84:20:df:80:10:7a:75:fd:
                    0f:93:2f:fb:4d:2b:f1:64:49:4d:a9:f8:b0:4b:76:
                    2b:23:2c:fe:d1:fc:dc:49:e2:94:6e:99:a8:79:75:
                    03:bf:f0:1b:31:9d:75:2a:fb:68:df:b8:ca:be:18:
                    f0:e3:b6:89:82:d1:7e:c3:4d:01:8f:0d:4e:88:04:
                    c3:ac:c1:85:f7:3b:0a:81:be:5b:3d:7e:cd:14:bf:
                    36:07:df:c5:d2:40:db:57:0e:99:4c:ec:68:cc:e7:
                    03:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:0B:1D:17:E4:B8:BC:16:17:EC:08:9A:50:47:56:02:38:DE:C6:F6
            X509v3 Authority Key Identifier:
                keyid:3B:E7:46:39:A5:48:CC:C5:CC:56:F4:4A:A6:C4:FF:EE:CC:E7:3F:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5L33C9wACnTmqze7cHVok79UHX3NB55xUsXabjxqHsfb/0/3BE74639A548CCC5CC56F44AA6C4FFEECCE73F0C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3BE74639A548CCC5CC56F44AA6C4FFEECCE73F0C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5L33C9wACnTmqze7cHVok79UHX3NB55xUsXabjxqHsfb/0/3136382e3132312e3137362e302f32322d3234203d3e20323635333135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.121.176.0/22

    Signature Algorithm: sha256WithRSAEncryption
         38:eb:34:3b:86:1d:b8:b1:e4:22:93:8e:f4:65:01:c4:e1:7a:
         7b:0f:1c:69:dd:f8:7b:3b:a5:cc:58:52:65:41:4f:bc:b7:34:
         5e:6d:c7:b7:62:43:48:6d:be:c7:78:3a:9b:8f:0b:20:27:45:
         f5:00:6e:ca:c5:9a:cd:e2:ec:77:27:15:4e:5c:cd:d7:9c:0e:
         7d:2d:2e:22:7a:2d:39:64:f2:69:ec:c2:c2:6d:4a:f6:ed:cf:
         41:9d:71:b0:91:1a:34:4b:f2:58:a4:1a:e1:b1:e3:6d:33:5f:
         da:cd:5e:c1:43:69:bc:0f:59:69:35:e6:aa:e2:7d:60:a4:c5:
         b8:1c:15:37:92:04:9d:f9:07:3d:5b:7b:cd:a3:82:6b:93:d9:
         dc:c6:e0:6a:2b:24:25:99:96:74:f4:c6:d1:e9:e3:c1:8b:96:
         a1:9c:7b:31:9d:60:74:92:d8:1e:d5:ff:69:3c:35:6c:79:13:
         f3:48:14:b7:d7:b8:29:ca:08:b2:84:0f:a0:c8:5d:0a:f9:66:
         29:bf:39:bc:72:3e:e7:57:e3:4f:60:b1:9c:5d:19:3b:3f:b4:
         5b:01:84:a2:98:37:ef:dc:7e:f6:47:0a:bf:6b:1b:90:9a:55:
         a8:39:c4:bc:b2:49:dc:b0:5c:c2:b3:28:94:7b:a4:42:50:17:
         2f:92:26:34
-----BEGIN CERTIFICATE-----
MIIHRTCCBi2gAwIBAgIURpilMLAX+UTIuSuygR7m2BywpVwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0JFNzQ2MzlBNTQ4Q0NDNUNDNTZGNDRBQTZDNEZGRUVD
Q0U3M0YwQzAeFw0yMzA5MTAyMDU1MDNaFw0yNDA5MDgyMTAwMDNaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQzhDODAwREI3NUE4OThDN0Mz
RkEyODBCNzc1NDNGNzQ2RDRCNUNGREJBMTM1RjI1NURBNkMxQ0FFNDE0OUVBRjYy
MDA1RUFCNkQ0QUI2NDcwODIxNUU5MTAxNDIwNzExMTBBMjkxNjM1QTg1MjRGMkUx
Qzc1MDgxNzE3MDZEODlFODg1QTVGMUE3MDYzOUQ3Rjk5Nzg0MUNCN0MzRkFFNkRE
RUVEQjYwQkMyNTc4MjJBMENBNjdBRDg4MEZERjVGOUY0MzBFNTEwRUI4RjM5OTky
Q0NCMzM3MjEyOUVDRUJFN0Y2RTMzMDE3MUVBMzFFOTE1QUZFNDE5RDE2RTYyRkZG
QTk2MDJFMzAzNDcwQTdCNUIzRTlDMjM5MUI2NUI5RjhFMkZDRDhDRTkxQTc5RkUw
QkM1QjA3ODQyMERGODAxMDdBNzVGRDBGOTMyRkZCNEQyQkYxNjQ0OTREQTlGOEIw
NEI3NjJCMjMyQ0ZFRDFGQ0RDNDlFMjk0NkU5OUE4Nzk3NTAzQkZGMDFCMzE5RDc1
MkFGQjY4REZCOENBQkUxOEYwRTNCNjg5ODJEMTdFQzM0RDAxOEYwRDRFODgwNEMz
QUNDMTg1RjczQjBBODFCRTVCM0Q3RUNEMTRCRjM2MDdERkM1RDI0MERCNTcwRTk5
NENFQzY4Q0NFNzAzMkQwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAyMgA23WomMfD+igLd1Q/dG1LXP26E18lXabByuQUnq9iAF6rbUq2
RwghXpEBQgcREKKRY1qFJPLhx1CBcXBtieiFpfGnBjnX+ZeEHLfD+ubd7ttgvCV4
IqDKZ62ID99fn0MOUQ6485mSzLM3ISns6+f24zAXHqMekVr+QZ0W5i//qWAuMDRw
p7Wz6cI5G2W5+OL82M6Rp5/gvFsHhCDfgBB6df0Pky/7TSvxZElNqfiwS3YrIyz+
0fzcSeKUbpmoeXUDv/AbMZ11Kvto37jKvhjw47aJgtF+w00Bjw1OiATDrMGF9zsK
gb5bPX7NFL82B9/F0kDbVw6ZTOxozOcDLQIDAQABo4ICUzCCAk8wHQYDVR0OBBYE
FJgLHRfkuLwWF+wImlBHVgI43sb2MB8GA1UdIwQYMBaAFDvnRjmlSMzFzFb0SqbE
/+7M5z8MMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzVMMzNDOXdBQ25UbXF6
ZTdjSFZvazc5VUhYM05CNTV4VXNYYWJqeHFIc2ZiLzAvM0JFNzQ2MzlBNTQ4Q0ND
NUNDNTZGNDRBQTZDNEZGRUVDQ0U3M0YwQy5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC8zQkU3NDYzOUE1NDhDQ0M1Q0M1NkY0NEFBNkM0RkZFRUNDRTcz
RjBDLmNlcjCBsAYIKwYBBQUHAQsEgaMwgaAwgZ0GCCsGAQUFBzALhoGQcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby81TDMzQzl3QUNuVG1xemU3Y0hW
b2s3OVVIWDNOQjU1eFVzWGFianhxSHNmYi8wLzMxMzYzODJlMzEzMjMxMmUzMTM3
MzYyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM2MzUzMzMxMzUucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAKoebAwDQYJKoZIhvcNAQELBQADggEBADjrNDuGHbix5CKTjvRlAcThensPHGnd
+Hs7pcxYUmVBT7y3NF5tx7diQ0htvsd4OpuPCyAnRfUAbsrFms3i7HcnFU5czdec
Dn0tLiJ6LTlk8mnswsJtSvbtz0GdcbCRGjRL8likGuGx420zX9rNXsFDabwPWWk1
5qrifWCkxbgcFTeSBJ35Bz1be82jgmuT2dzG4GorJCWZlnT0xtHp48GLlqGcezGd
YHSS2B7V/2k8NWx5E/NIFLfXuCnKCLKED6DIXQr5Zim/ObxyPudX409gsZxdGTs/
tFsBhKKYN+/cfvZHCr9rG5CaVag5xLyySdywXMKzKJR7pEJQFy+SJjQ=
-----END CERTIFICATE-----
Generated at Sun Feb 16 21:54:55 2025 by rpki-client