Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5dktwpt3QEXn3oCWzptfJ1LzPKRHmKnKnkorK17yYjj/0/3136382e3139372e3135362e302f32332d3233203d3e203532373538.roa
File:                     3136382e3139372e3135362e302f32332d3233203d3e203532373538.roa (raw, json)
Hash identifier:          hrjFYsjuCcsQX2QBq2+ktG0W5mBJAbuvhm44LM/RGZw=
Subject key identifier:   41:8A:E5:17:19:47:9B:E4:A1:ED:F9:85:AA:F8:47:A1:9A:B3:F8:30
Certificate issuer:       /CN=EF531ED7D14F0D5A9816244417F263E1E521376E
Certificate serial:       02782358A6FAAA12FB0DA9C13E5E27F7D71B5568
Authority key identifier: EF:53:1E:D7:D1:4F:0D:5A:98:16:24:44:17:F2:63:E1:E5:21:37:6E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EF531ED7D14F0D5A9816244417F263E1E521376E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5dktwpt3QEXn3oCWzptfJ1LzPKRHmKnKnkorK17yYjj/0/3136382e3139372e3135362e302f32332d3233203d3e203532373538.roa
Signing time:             Mon 07 Feb 2022 12:09:33 +0000
ROA not before:           Mon 07 Feb 2022 12:04:33 +0000
ROA not after:            Mon 06 Feb 2023 12:09:33 +0000
asID:                     52758
IP address blocks:        168.197.156.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:78:23:58:a6:fa:aa:12:fb:0d:a9:c1:3e:5e:27:f7:d7:1b:55:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EF531ED7D14F0D5A9816244417F263E1E521376E
        Validity
            Not Before: Feb  7 12:04:33 2022 GMT
            Not After : Feb  6 12:09:33 2023 GMT
        Subject: CN=418AE51719479BE4A1EDF985AAF847A19AB3F830
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:8b:3a:93:70:4d:d8:67:12:c0:58:39:3d:d1:
                    2a:0f:ae:7f:89:f2:4c:cc:94:46:66:90:d0:04:59:
                    b4:51:9b:88:78:20:77:a3:8e:48:99:ed:d1:78:3b:
                    90:0f:f3:a0:c9:6f:e6:71:43:08:13:d9:20:e8:d0:
                    d6:65:99:c9:fd:7d:2b:11:09:41:09:1b:80:c2:01:
                    8c:17:1b:84:6b:62:ce:2a:65:0c:42:07:69:9e:28:
                    9e:24:d5:33:b5:18:cb:73:5b:5e:35:5d:3a:7e:fc:
                    3f:e7:f8:57:34:9b:e0:22:47:f5:84:be:93:87:db:
                    5d:c4:66:71:2c:04:01:68:4b:cf:5e:07:c3:11:ad:
                    06:0d:db:44:42:f9:57:cf:a5:e4:61:9d:a0:b4:70:
                    f9:bf:5c:79:4f:29:99:6e:4c:ea:d4:ba:0a:56:ee:
                    a0:7d:f7:f3:df:69:b8:09:89:b9:91:40:d7:0a:9b:
                    55:60:35:fe:79:b2:f1:ca:b4:f5:c7:e8:ec:1b:97:
                    73:f2:73:c3:8c:68:d8:d7:ba:09:66:df:5d:00:23:
                    42:64:b0:a1:59:fe:7e:fd:68:15:dd:62:6b:1a:9b:
                    41:1c:03:9b:37:bb:4c:95:a4:d1:bc:92:98:93:5f:
                    5b:52:1a:f3:52:9c:29:8e:6e:f2:52:bc:43:89:d7:
                    16:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:8A:E5:17:19:47:9B:E4:A1:ED:F9:85:AA:F8:47:A1:9A:B3:F8:30
            X509v3 Authority Key Identifier:
                keyid:EF:53:1E:D7:D1:4F:0D:5A:98:16:24:44:17:F2:63:E1:E5:21:37:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5dktwpt3QEXn3oCWzptfJ1LzPKRHmKnKnkorK17yYjj/0/EF531ED7D14F0D5A9816244417F263E1E521376E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EF531ED7D14F0D5A9816244417F263E1E521376E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5dktwpt3QEXn3oCWzptfJ1LzPKRHmKnKnkorK17yYjj/0/3136382e3139372e3135362e302f32332d3233203d3e203532373538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.197.156.0/23

    Signature Algorithm: sha256WithRSAEncryption
         d2:db:c1:73:99:72:99:c0:5a:31:0f:f6:2f:5b:71:d8:72:c6:
         f6:13:ef:8c:37:e8:21:63:8f:f7:24:3c:6f:4a:6d:25:57:ce:
         c2:d1:59:dd:50:3b:f9:aa:72:cb:bf:18:2e:6b:c1:75:32:b8:
         58:af:db:fe:b5:38:86:40:f5:44:f8:46:b1:26:2a:66:b4:96:
         e0:93:26:4c:54:3e:8a:f8:c7:66:18:22:c0:b8:77:9e:7c:d9:
         07:5a:cb:e1:8e:5e:c6:c4:ea:b1:f0:c7:28:1a:d2:ba:44:d5:
         11:95:c0:88:cc:e9:94:94:f7:e0:fd:05:c3:f7:69:e2:31:03:
         a6:f5:a0:13:75:37:cb:88:12:7c:69:4c:89:76:fb:0f:ce:aa:
         1e:a8:98:23:8f:04:a9:29:40:fa:01:af:ff:08:e4:b2:69:52:
         df:18:5a:18:1e:0a:3e:28:20:99:e5:61:1f:91:7d:fe:a4:2b:
         ef:56:84:40:af:81:8a:4a:52:72:1e:e3:58:c9:1d:63:b2:be:
         85:e0:15:2d:bc:28:ef:71:db:d1:d3:99:08:37:2f:88:d9:37:
         91:0d:e7:80:65:ff:ab:a8:63:c0:85:4b:3e:4d:38:fa:ec:c4:
         1e:55:d4:b9:99:31:7f:96:c7:28:f3:4c:f3:bf:43:53:20:3a:
         73:bd:02:69
-----BEGIN CERTIFICATE-----
MIIFRDCCBCygAwIBAgIUAngjWKb6qhL7DanBPl4n99cbVWgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUY1MzFFRDdEMTRGMEQ1QTk4MTYyNDQ0MTdGMjYzRTFF
NTIxMzc2RTAeFw0yMjAyMDcxMjA0MzNaFw0yMzAyMDYxMjA5MzNaMDMxMTAvBgNV
BAMTKDQxOEFFNTE3MTk0NzlCRTRBMUVERjk4NUFBRjg0N0ExOUFCM0Y4MzAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRizqTcE3YZxLAWDk90SoPrn+J
8kzMlEZmkNAEWbRRm4h4IHejjkiZ7dF4O5AP86DJb+ZxQwgT2SDo0NZlmcn9fSsR
CUEJG4DCAYwXG4RrYs4qZQxCB2meKJ4k1TO1GMtzW141XTp+/D/n+Fc0m+AiR/WE
vpOH213EZnEsBAFoS89eB8MRrQYN20RC+VfPpeRhnaC0cPm/XHlPKZluTOrUugpW
7qB99/PfabgJibmRQNcKm1VgNf55svHKtPXH6Owbl3Pyc8OMaNjXuglm310AI0Jk
sKFZ/n79aBXdYmsam0EcA5s3u0yVpNG8kpiTX1tSGvNSnCmObvJSvEOJ1xb5AgMB
AAGjggJOMIICSjAdBgNVHQ4EFgQUQYrlFxlHm+Sh7fmFqvhHoZqz+DAwHwYDVR0j
BBgwFoAU71Me19FPDVqYFiREF/Jj4eUhN24wDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby81ZGt0d3B0M1FFWG4zb0NXenB0ZkoxTHpQS1JIbUtuS25rb3JLMTd5WWpq
LzAvRUY1MzFFRDdEMTRGMEQ1QTk4MTYyNDQ0MTdGMjYzRTFFNTIxMzc2RS5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMC9FRjUzMUVEN0QxNEYwRDVBOTgx
NjI0NDQxN0YyNjNFMUU1MjEzNzZFLmNlcjCBrQYIKwYBBQUHAQsEgaAwgZ0wgZoG
CCsGAQUFBzALhoGNcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby81
ZGt0d3B0M1FFWG4zb0NXenB0ZkoxTHpQS1JIbUtuS25rb3JLMTd5WWpqLzAvMzEz
NjM4MmUzMTM5MzcyZTMxMzUzNjJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDM1MzIz
NzM1Mzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcB
Af8EEDAOMAwEAgABMAYDBAGoxZwwDQYJKoZIhvcNAQELBQADggEBANLbwXOZcpnA
WjEP9i9bcdhyxvYT74w36CFjj/ckPG9KbSVXzsLRWd1QO/mqcsu/GC5rwXUyuFiv
2/61OIZA9UT4RrEmKma0luCTJkxUPor4x2YYIsC4d5582Qday+GOXsbE6rHwxyga
0rpE1RGVwIjM6ZSU9+D9BcP3aeIxA6b1oBN1N8uIEnxpTIl2+w/Oqh6omCOPBKkp
QPoBr/8I5LJpUt8YWhgeCj4oIJnlYR+Rff6kK+9WhECvgYpKUnIe41jJHWOyvoXg
FS28KO9x29HTmQg3L4jZN5EN54Bl/6uoY8CFSz5NOPrsxB5V1LmZMX+WxyjzTPO/
Q1MgOnO9Amk=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:42 2024 by rpki-client on console-fra.rpki-client.org