Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6aFyUzsQv515RBuYaapg7ot8v2yBWytcpfn57shREgHY/0/3136382e3139352e3231322e302f32322d3232203d3e20323635343338.roa
File:                     3136382e3139352e3231322e302f32322d3232203d3e20323635343338.roa (raw, json)
Hash identifier:          RDMOcWGKhuhPSvhO+q0JQWVdpw41CN8zLYGYTqKl8/U=
Subject key identifier:   C1:A7:87:68:70:82:6E:C7:C9:29:D7:D2:2B:D4:8F:1F:93:60:84:3C
Certificate issuer:       /CN=F195F9C596ADB608642A133DA471E40CFD879710
Certificate serial:       7427D993379D49F0A41314FEE34D636F7B3B0D7A
Authority key identifier: F1:95:F9:C5:96:AD:B6:08:64:2A:13:3D:A4:71:E4:0C:FD:87:97:10
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F195F9C596ADB608642A133DA471E40CFD879710.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6aFyUzsQv515RBuYaapg7ot8v2yBWytcpfn57shREgHY/0/3136382e3139352e3231322e302f32322d3232203d3e20323635343338.roa
Signing time:             Tue 21 Nov 2023 15:56:06 +0000
ROA not before:           Tue 21 Nov 2023 15:51:06 +0000
ROA not after:            Tue 19 Nov 2024 15:56:06 +0000
asID:                     265438
IP address blocks:        168.195.212.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:27:d9:93:37:9d:49:f0:a4:13:14:fe:e3:4d:63:6f:7b:3b:0d:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F195F9C596ADB608642A133DA471E40CFD879710
        Validity
            Not Before: Nov 21 15:51:06 2023 GMT
            Not After : Nov 19 15:56:06 2024 GMT
        Subject: CN=C1A7876870826EC7C929D7D22BD48F1F9360843C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:82:48:99:39:2a:9f:44:69:4e:a4:bb:98:b3:
                    cc:21:23:01:a6:a8:31:4b:3a:09:7f:79:59:e4:28:
                    d0:4f:cf:22:94:4a:f0:6b:f0:73:ed:54:33:23:af:
                    cd:0a:c2:e8:49:95:79:51:35:5d:dc:57:a0:03:76:
                    89:40:3d:b5:9b:53:fa:a4:55:0a:ab:a6:04:d1:1c:
                    8b:9c:5e:3b:d0:b0:a0:ea:23:dc:ca:fa:bb:50:22:
                    c9:54:46:0d:08:05:40:96:28:22:f2:97:66:7e:8c:
                    05:e2:e7:ee:89:8e:16:42:6b:ef:b5:18:9b:00:bd:
                    c2:1e:79:04:dc:0c:90:4d:86:92:ba:f7:9b:cb:3d:
                    01:44:df:ec:80:16:33:26:fd:7b:26:e1:90:78:71:
                    bf:0f:84:39:2f:c6:77:da:34:b1:8a:b2:ae:7c:dc:
                    c4:7c:ba:59:f0:d1:f2:94:26:c0:bb:6d:6b:8c:a6:
                    af:66:e4:cc:a9:c6:29:ca:d6:b0:4f:b6:c7:93:ca:
                    2b:32:26:c7:f8:78:1c:6b:3d:60:6a:c3:9f:46:fe:
                    e5:0a:95:a4:c4:6a:c6:76:29:a0:45:c3:fc:75:82:
                    fb:13:22:5e:f2:18:b8:16:a2:1f:02:dd:af:cd:1d:
                    2b:08:06:7d:07:05:be:47:66:b4:1e:08:9d:b1:a1:
                    5b:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:A7:87:68:70:82:6E:C7:C9:29:D7:D2:2B:D4:8F:1F:93:60:84:3C
            X509v3 Authority Key Identifier:
                keyid:F1:95:F9:C5:96:AD:B6:08:64:2A:13:3D:A4:71:E4:0C:FD:87:97:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6aFyUzsQv515RBuYaapg7ot8v2yBWytcpfn57shREgHY/0/F195F9C596ADB608642A133DA471E40CFD879710.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F195F9C596ADB608642A133DA471E40CFD879710.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6aFyUzsQv515RBuYaapg7ot8v2yBWytcpfn57shREgHY/0/3136382e3139352e3231322e302f32322d3232203d3e20323635343338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.195.212.0/22

    Signature Algorithm: sha256WithRSAEncryption
         74:65:9a:ab:59:81:22:fc:b6:af:cb:47:12:f9:a2:4f:c4:1e:
         4c:5f:33:49:6c:69:30:5d:de:66:23:50:8f:9c:37:79:96:de:
         17:59:84:aa:ca:33:56:39:9d:8b:c1:ce:99:38:eb:9a:94:d4:
         41:5b:55:25:ab:dc:a0:76:12:ee:41:6a:ce:b8:31:b8:8d:f2:
         79:0b:4d:40:38:5d:f0:c6:7d:dd:fb:b1:1a:0d:c9:ae:7e:2f:
         2f:c5:ed:71:81:b9:72:f4:3f:8c:07:08:b7:d4:53:42:9d:7c:
         62:58:fd:ea:38:eb:11:de:0e:40:55:07:c1:3e:ca:9a:9d:d6:
         f5:40:47:77:61:c2:a7:90:cd:50:81:24:ab:b8:a5:8c:de:5b:
         aa:b3:bf:fa:c0:37:dc:20:30:65:70:f0:ff:e4:94:98:86:30:
         02:ff:ec:7d:aa:3b:87:f8:4a:36:6a:cb:00:31:5f:0e:4a:bd:
         2d:78:a2:78:3f:f4:73:ba:40:34:33:ed:f8:b3:78:26:ab:b4:
         b6:a1:52:db:03:57:ed:bd:55:a7:7e:38:d2:ae:eb:d8:e8:43:
         ca:81:18:a0:8e:ad:2c:58:22:64:80:ab:fb:ab:ed:f5:4e:7a:
         40:20:03:58:94:c8:ec:ae:29:41:01:79:39:77:35:4e:d5:a2:
         26:e6:3a:60
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUdCfZkzedSfCkExT+401jb3s7DXowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjE5NUY5QzU5NkFEQjYwODY0MkExMzNEQTQ3MUU0MENG
RDg3OTcxMDAeFw0yMzExMjExNTUxMDZaFw0yNDExMTkxNTU2MDZaMDMxMTAvBgNV
BAMTKEMxQTc4NzY4NzA4MjZFQzdDOTI5RDdEMjJCRDQ4RjFGOTM2MDg0M0MwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFgkiZOSqfRGlOpLuYs8whIwGm
qDFLOgl/eVnkKNBPzyKUSvBr8HPtVDMjr80KwuhJlXlRNV3cV6ADdolAPbWbU/qk
VQqrpgTRHIucXjvQsKDqI9zK+rtQIslURg0IBUCWKCLyl2Z+jAXi5+6JjhZCa++1
GJsAvcIeeQTcDJBNhpK695vLPQFE3+yAFjMm/Xsm4ZB4cb8PhDkvxnfaNLGKsq58
3MR8ulnw0fKUJsC7bWuMpq9m5MypxinK1rBPtseTyisyJsf4eBxrPWBqw59G/uUK
laTEasZ2KaBFw/x1gvsTIl7yGLgWoh8C3a/NHSsIBn0HBb5HZrQeCJ2xoVsLAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUwaeHaHCCbsfJKdfSK9SPH5NghDwwHwYDVR0j
BBgwFoAU8ZX5xZattghkKhM9pHHkDP2HlxAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNmFGeVV6c1F2NTE1UkJ1WWFhcGc3b3Q4djJ5Qld5dGNwZm41N3NoUkVn
SFkvMC9GMTk1RjlDNTk2QURCNjA4NjQyQTEzM0RBNDcxRTQwQ0ZEODc5NzEwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0YxOTVGOUM1OTZBREI2MDg2
NDJBMTMzREE0NzFFNDBDRkQ4Nzk3MTAuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzZhRnlVenNRdjUxNVJCdVlhYXBnN290OHYyeUJXeXRjcGZuNTdzaFJFZ0hZLzAv
MzEzNjM4MmUzMTM5MzUyZTMyMzEzMjJlMzAyZjMyMzIyZDMyMzIyMDNkM2UyMDMy
MzYzNTM0MzMzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAqjD1DANBgkqhkiG9w0BAQsFAAOCAQEAdGWa
q1mBIvy2r8tHEvmiT8QeTF8zSWxpMF3eZiNQj5w3eZbeF1mEqsozVjmdi8HOmTjr
mpTUQVtVJavcoHYS7kFqzrgxuI3yeQtNQDhd8MZ93fuxGg3Jrn4vL8XtcYG5cvQ/
jAcIt9RTQp18Ylj96jjrEd4OQFUHwT7Kmp3W9UBHd2HCp5DNUIEkq7iljN5bqrO/
+sA33CAwZXDw/+SUmIYwAv/sfao7h/hKNmrLADFfDkq9LXiieD/0c7pANDPt+LN4
Jqu0tqFS2wNX7b1Vp3440q7r2OhDyoEYoI6tLFgiZICr+6vt9U56QCADWJTI7K4p
QQF5OXc1TtWiJuY6YA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:47 2024 by rpki-client on console-fra.rpki-client.org