Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/0/AS266262.roa
File:                     AS266262.roa (raw, json)
Hash identifier:          jnRvUHy+gGjrSoPZ95IVagv2ElsSgR5goYpWaKOCyrQ=
Subject key identifier:   F5:A9:75:25:2D:49:9F:BA:DD:EF:D0:2B:1C:DD:B6:04:96:96:2F:C1
Certificate issuer:       /CN=C68E4855E8AF4680CC3827C5F548D11AFEEC9178
Certificate serial:       318A02D1AE9AC4EE966EE7F87AB40236F2097437
Authority key identifier: C6:8E:48:55:E8:AF:46:80:CC:38:27:C5:F5:48:D1:1A:FE:EC:91:78
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C68E4855E8AF4680CC3827C5F548D11AFEEC9178.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/0/AS266262.roa
Signing time:             Wed 10 Apr 2024 22:48:53 +0000
ROA not before:           Wed 10 Apr 2024 22:43:53 +0000
ROA not after:            Wed 09 Apr 2025 22:48:53 +0000
asID:                     266262
IP address blocks:        192.140.104.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:8a:02:d1:ae:9a:c4:ee:96:6e:e7:f8:7a:b4:02:36:f2:09:74:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C68E4855E8AF4680CC3827C5F548D11AFEEC9178
        Validity
            Not Before: Apr 10 22:43:53 2024 GMT
            Not After : Apr  9 22:48:53 2025 GMT
        Subject: CN=F5A975252D499FBADDEFD02B1CDDB60496962FC1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:a4:47:79:b0:22:d3:a3:f8:19:ff:b7:fe:ed:
                    5e:85:2a:63:b4:e6:1b:76:31:f3:ba:c3:7e:77:1c:
                    bd:38:56:d7:89:0c:35:c1:c9:f2:0e:ca:d0:57:93:
                    87:38:a4:69:a4:03:8b:bc:a2:fe:25:1d:13:84:1d:
                    62:f6:16:fc:43:ac:f1:6c:83:b4:8b:57:f3:b1:91:
                    3b:cf:89:da:c9:84:b7:0f:21:fe:3d:ca:90:f0:4e:
                    99:5f:b7:a7:06:55:3b:97:98:a6:75:4e:e3:cb:f6:
                    3b:e0:2d:76:c9:cd:5b:12:fc:c7:0c:2f:9c:2c:1c:
                    0a:00:82:60:e9:3a:3b:a1:c1:12:cc:77:8a:57:9e:
                    b8:67:8f:8e:04:e5:1a:f1:e0:b5:79:19:9a:77:8e:
                    d9:27:24:39:31:76:18:42:61:ec:7a:6f:d7:5e:52:
                    9b:8f:21:3c:53:94:11:98:67:4b:d6:01:a1:c6:fc:
                    fb:63:72:69:15:cc:93:21:c1:56:61:6f:28:31:aa:
                    c7:5a:49:17:13:e3:09:1a:dd:f7:f1:66:9e:a8:58:
                    68:da:51:fa:41:99:6e:65:59:3c:b0:be:00:7b:98:
                    14:8c:06:3a:39:62:ee:09:f9:df:94:fd:e6:cc:e8:
                    9f:5b:ad:8c:e4:f4:5f:2b:ed:2c:c4:dd:8b:3a:2d:
                    51:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:A9:75:25:2D:49:9F:BA:DD:EF:D0:2B:1C:DD:B6:04:96:96:2F:C1
            X509v3 Authority Key Identifier:
                keyid:C6:8E:48:55:E8:AF:46:80:CC:38:27:C5:F5:48:D1:1A:FE:EC:91:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/0/C68E4855E8AF4680CC3827C5F548D11AFEEC9178.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C68E4855E8AF4680CC3827C5F548D11AFEEC9178.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/0/AS266262.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.140.104.0/22

    Signature Algorithm: sha256WithRSAEncryption
         20:70:68:0c:68:58:87:65:bd:c9:fc:b0:6e:09:d3:43:a4:c9:
         42:9f:fc:4a:40:6f:a9:6c:96:7f:08:98:b7:4b:08:25:bb:bf:
         5d:13:a4:6a:8b:0c:a1:21:14:bb:e9:bc:e6:14:41:c1:be:66:
         33:23:0f:84:09:4f:52:1e:68:cd:01:34:18:44:6a:14:15:83:
         82:f7:8d:56:38:47:71:fa:4e:33:a3:40:c6:21:e0:ff:34:e4:
         e0:fd:da:99:32:46:81:e3:d3:83:af:99:58:3e:4a:d9:d2:6c:
         ca:1a:f3:24:65:4d:5a:18:1f:c2:71:c0:6f:db:bd:87:e6:1f:
         90:bf:ae:92:af:68:0d:bb:d3:14:dc:ef:09:4c:e1:f0:3f:9b:
         a8:7e:ed:b5:d7:c5:c0:f8:56:27:a7:13:48:e2:62:52:f3:40:
         6c:b7:c8:1f:dd:f0:26:79:f5:e3:a8:57:e4:ec:68:50:2e:2e:
         90:e9:d5:c3:d8:b1:3c:08:50:42:1e:a4:20:04:55:ff:49:7a:
         fa:94:ea:99:5c:36:90:ab:d6:87:ee:5a:4a:dc:f0:37:cd:ca:
         e1:52:4d:7d:da:b4:ec:22:cd:08:d7:7b:da:c7:8c:19:39:8a:
         ce:47:ef:f4:02:a2:16:c2:7d:7d:6c:98:17:65:e1:fa:f5:0e:
         b5:f0:69:e6
-----BEGIN CERTIFICATE-----
MIIFEjCCA/qgAwIBAgIUMYoC0a6axO6Wbuf4erQCNvIJdDcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzY4RTQ4NTVFOEFGNDY4MENDMzgyN0M1RjU0OEQxMUFG
RUVDOTE3ODAeFw0yNDA0MTAyMjQzNTNaFw0yNTA0MDkyMjQ4NTNaMDMxMTAvBgNV
BAMTKEY1QTk3NTI1MkQ0OTlGQkFEREVGRDAyQjFDRERCNjA0OTY5NjJGQzEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzpEd5sCLTo/gZ/7f+7V6FKmO0
5ht2MfO6w353HL04VteJDDXByfIOytBXk4c4pGmkA4u8ov4lHROEHWL2FvxDrPFs
g7SLV/OxkTvPidrJhLcPIf49ypDwTplft6cGVTuXmKZ1TuPL9jvgLXbJzVsS/McM
L5wsHAoAgmDpOjuhwRLMd4pXnrhnj44E5Rrx4LV5GZp3jtknJDkxdhhCYex6b9de
UpuPITxTlBGYZ0vWAaHG/PtjcmkVzJMhwVZhbygxqsdaSRcT4wka3ffxZp6oWGja
UfpBmW5lWTywvgB7mBSMBjo5Yu4J+d+U/ebM6J9brYzk9F8r7SzE3Ys6LVGVAgMB
AAGjggIcMIICGDAdBgNVHQ4EFgQU9al1JS1Jn7rd79ArHN22BJaWL8EwHwYDVR0j
BBgwFoAUxo5IVeivRoDMOCfF9UjRGv7skXgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNjczcVlQU0syRFdXakNCYW1XaE5DN3JncnFoQ1FQQWpkR0hTZENabjlW
Nm8vMC9DNjhFNDg1NUU4QUY0NjgwQ0MzODI3QzVGNTQ4RDExQUZFRUM5MTc4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0M2OEU0ODU1RThBRjQ2ODBD
QzM4MjdDNUY1NDhEMTFBRkVFQzkxNzguY2VyMHoGCCsGAQUFBwELBG4wbDBqBggr
BgEFBQcwC4ZecnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby82NzNx
WVBTSzJEV1dqQ0JhbVdoTkM3cmdycWhDUVBBamRHSFNkQ1puOVY2by8wL0FTMjY2
MjYyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/
BBAwDjAMBAIAATAGAwQCwIxoMA0GCSqGSIb3DQEBCwUAA4IBAQAgcGgMaFiHZb3J
/LBuCdNDpMlCn/xKQG+pbJZ/CJi3Swglu79dE6RqiwyhIRS76bzmFEHBvmYzIw+E
CU9SHmjNATQYRGoUFYOC941WOEdx+k4zo0DGIeD/NOTg/dqZMkaB49ODr5lYPkrZ
0mzKGvMkZU1aGB/CccBv272H5h+Qv66Sr2gNu9MU3O8JTOHwP5uofu2118XA+FYn
pxNI4mJS80Bst8gf3fAmefXjqFfk7GhQLi6Q6dXD2LE8CFBCHqQgBFX/SXr6lOqZ
XDaQq9aH7lpK3PA3zcrhUk192rTsIs0I13vax4wZOYrOR+/0AqIWwn19bJgXZeH6
9Q618Gnm
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:45 2024 by rpki-client on console-fra.rpki-client.org