Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6ZG7fZoNxeaapeGYgiUT3WMb14FDoqRnxwuJzKn7d42H/0/3136382e3232382e322e302f32332d3233203d3e20323634383934.roa
File:                     3136382e3232382e322e302f32332d3233203d3e20323634383934.roa (raw, json)
Hash identifier:          f+2zEJb+JpmJCcmECgrfAH6YIc6547AwOPgReGzam6A=
Subject key identifier:   36:E3:2E:4C:50:B7:C1:F2:52:2B:0F:D7:A3:6F:C8:32:A5:9C:50:CC
Certificate issuer:       /CN=256738B27EE60E87B5745BCBFA1CCFA02F9033B5
Certificate serial:       69C272376EA6A9BD5DD41143C60FCF592B6C51B5
Authority key identifier: 25:67:38:B2:7E:E6:0E:87:B5:74:5B:CB:FA:1C:CF:A0:2F:90:33:B5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/256738B27EE60E87B5745BCBFA1CCFA02F9033B5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6ZG7fZoNxeaapeGYgiUT3WMb14FDoqRnxwuJzKn7d42H/0/3136382e3232382e322e302f32332d3233203d3e20323634383934.roa
Signing time:             Tue 25 Jul 2023 22:21:50 +0000
ROA not before:           Tue 25 Jul 2023 22:16:50 +0000
ROA not after:            Tue 23 Jul 2024 22:21:50 +0000
asID:                     264894
IP address blocks:        168.228.2.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:c2:72:37:6e:a6:a9:bd:5d:d4:11:43:c6:0f:cf:59:2b:6c:51:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=256738B27EE60E87B5745BCBFA1CCFA02F9033B5
        Validity
            Not Before: Jul 25 22:16:50 2023 GMT
            Not After : Jul 23 22:21:50 2024 GMT
        Subject: CN=36E32E4C50B7C1F2522B0FD7A36FC832A59C50CC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:32:ff:d4:0a:18:94:25:d2:49:c9:91:62:58:
                    e4:74:8e:b3:ac:8d:dd:8d:93:67:6b:60:e2:0f:91:
                    7a:84:4d:12:f5:be:d5:21:f5:c4:90:d2:65:46:73:
                    5b:57:dc:24:ea:3b:d2:b6:d7:1c:81:dd:f2:81:86:
                    36:bd:5c:1a:bd:d3:e0:77:5a:9a:92:d0:69:af:90:
                    c1:f2:e8:85:e6:ed:de:15:e3:07:e8:6a:e1:a2:a1:
                    ad:2f:0d:c4:df:c7:6a:e2:4c:d0:63:7e:2c:7a:ed:
                    b2:8a:12:b9:7c:19:1a:b4:b2:0d:12:75:07:e4:db:
                    66:85:37:82:b2:e2:91:34:80:3b:58:f1:0f:e8:6a:
                    56:ba:22:02:dd:b4:6b:6e:1c:9a:35:4b:55:55:d2:
                    a8:55:cd:65:5f:0a:e1:bf:98:ed:b5:78:c1:da:15:
                    fd:6f:e1:a6:00:05:50:67:ca:a7:46:f6:f8:ba:de:
                    30:68:14:61:47:80:5a:9e:32:ed:c0:4f:00:62:b8:
                    ac:59:b4:66:6b:7f:ef:62:5f:fc:24:a0:03:07:51:
                    ac:9c:68:41:86:a3:9c:0b:91:c6:c5:69:37:38:a3:
                    eb:49:3d:aa:4f:9b:23:37:51:ed:24:62:1a:28:1e:
                    c7:db:89:68:d7:b6:6e:cd:ad:a5:7a:c7:57:21:8d:
                    54:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:E3:2E:4C:50:B7:C1:F2:52:2B:0F:D7:A3:6F:C8:32:A5:9C:50:CC
            X509v3 Authority Key Identifier:
                keyid:25:67:38:B2:7E:E6:0E:87:B5:74:5B:CB:FA:1C:CF:A0:2F:90:33:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6ZG7fZoNxeaapeGYgiUT3WMb14FDoqRnxwuJzKn7d42H/0/256738B27EE60E87B5745BCBFA1CCFA02F9033B5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/256738B27EE60E87B5745BCBFA1CCFA02F9033B5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6ZG7fZoNxeaapeGYgiUT3WMb14FDoqRnxwuJzKn7d42H/0/3136382e3232382e322e302f32332d3233203d3e20323634383934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.228.2.0/23

    Signature Algorithm: sha256WithRSAEncryption
         bf:a9:5f:2d:d4:5b:92:dd:a4:4d:ef:82:75:d4:0c:54:3d:7e:
         d7:18:b9:46:61:ad:6e:75:b1:01:7a:19:f4:22:ec:1a:a5:3d:
         bd:aa:40:2c:8f:e9:40:91:0b:9e:f0:6f:39:90:40:6c:1f:54:
         c4:e6:15:c0:21:41:f6:f8:26:ad:3b:f0:8e:8e:df:50:1d:f4:
         44:3f:68:2e:e7:c1:17:4c:9a:28:93:ee:f7:0f:51:39:77:39:
         0c:26:ac:08:49:b5:e6:33:7a:5a:34:34:3e:d3:ce:c3:af:63:
         36:ff:ca:2c:9e:3d:23:63:92:2e:8b:b2:05:16:2a:c0:bc:2a:
         71:95:bb:95:8a:89:e7:d3:96:13:38:92:43:ec:dc:3c:1e:bc:
         3e:c3:95:19:df:d8:44:86:11:e2:0b:36:f9:58:44:6a:62:43:
         d8:2c:f3:77:e9:ac:c1:fe:13:3a:74:5a:ab:6b:0b:5b:8d:60:
         a5:90:05:55:f8:b2:c7:0a:41:99:a7:21:b5:23:e4:c8:69:0a:
         c5:72:2c:5b:0d:e0:a4:5c:35:e5:d1:e6:08:56:17:d8:12:07:
         12:e2:3f:bf:9f:7b:45:7d:6f:74:fe:37:84:a6:85:d4:1c:63:
         62:f8:b2:d8:29:aa:7e:18:96:1c:8d:20:e1:fd:70:f1:72:2a:
         6d:50:4c:55
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUacJyN26mqb1d1BFDxg/PWStsUbUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjU2NzM4QjI3RUU2MEU4N0I1NzQ1QkNCRkExQ0NGQTAy
RjkwMzNCNTAeFw0yMzA3MjUyMjE2NTBaFw0yNDA3MjMyMjIxNTBaMDMxMTAvBgNV
BAMTKDM2RTMyRTRDNTBCN0MxRjI1MjJCMEZEN0EzNkZDODMyQTU5QzUwQ0MwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfMv/UChiUJdJJyZFiWOR0jrOs
jd2Nk2drYOIPkXqETRL1vtUh9cSQ0mVGc1tX3CTqO9K21xyB3fKBhja9XBq90+B3
WpqS0GmvkMHy6IXm7d4V4wfoauGioa0vDcTfx2riTNBjfix67bKKErl8GRq0sg0S
dQfk22aFN4Ky4pE0gDtY8Q/oala6IgLdtGtuHJo1S1VV0qhVzWVfCuG/mO21eMHa
Ff1v4aYABVBnyqdG9vi63jBoFGFHgFqeMu3ATwBiuKxZtGZrf+9iX/wkoAMHUayc
aEGGo5wLkcbFaTc4o+tJPapPmyM3Ue0kYhooHsfbiWjXtm7NraV6x1chjVSNAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUNuMuTFC3wfJSKw/Xo2/IMqWcUMwwHwYDVR0j
BBgwFoAUJWc4sn7mDoe1dFvL+hzPoC+QM7UwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNlpHN2Zab054ZWFhcGVHWWdpVVQzV01iMTRGRG9xUm54d3VKektuN2Q0
MkgvMC8yNTY3MzhCMjdFRTYwRTg3QjU3NDVCQ0JGQTFDQ0ZBMDJGOTAzM0I1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzI1NjczOEIyN0VFNjBFODdC
NTc0NUJDQkZBMUNDRkEwMkY5MDMzQjUuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzZaRzdmWm9OeGVhYXBlR1lnaVVUM1dNYjE0RkRvcVJueHd1SnpLbjdkNDJILzAv
MzEzNjM4MmUzMjMyMzgyZTMyMmUzMDJmMzIzMzJkMzIzMzIwM2QzZTIwMzIzNjM0
MzgzOTM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQBqOQCMA0GCSqGSIb3DQEBCwUAA4IBAQC/qV8t1FuS
3aRN74J11AxUPX7XGLlGYa1udbEBehn0IuwapT29qkAsj+lAkQue8G85kEBsH1TE
5hXAIUH2+CatO/COjt9QHfREP2gu58EXTJook+73D1E5dzkMJqwISbXmM3paNDQ+
087Dr2M2/8osnj0jY5Iui7IFFirAvCpxlbuVionn05YTOJJD7Nw8Hrw+w5UZ39hE
hhHiCzb5WERqYkPYLPN36azB/hM6dFqrawtbjWClkAVV+LLHCkGZpyG1I+TIaQrF
cixbDeCkXDXl0eYIVhfYEgcS4j+/n3tFfW90/jeEpoXUHGNi+LLYKap+GJYcjSDh
/XDxciptUExV
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:47 2024 by rpki-client on console-fra.rpki-client.org