Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6aFyUzsQv515RBuYaapg7ot8v2yBWytcpfn57shREgHY/0/3136382e3139352e3231322e302f32322d3234203d3e20323635343338.roa
File:                     3136382e3139352e3231322e302f32322d3234203d3e20323635343338.roa (raw, json)
Hash identifier:          UXPLExOk8Bs/rPT/ivJFy18GMVAezaKE2nJ6B0Jyb/Q=
Subject key identifier:   97:3D:EA:8B:55:F1:2D:D5:DE:3A:EE:FE:9A:C9:92:A3:72:F9:8D:8A
Certificate issuer:       /CN=F195F9C596ADB608642A133DA471E40CFD879710
Certificate serial:       16C2B0483DD6988F13CAE805AFE7C4423AF3DA73
Authority key identifier: F1:95:F9:C5:96:AD:B6:08:64:2A:13:3D:A4:71:E4:0C:FD:87:97:10
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F195F9C596ADB608642A133DA471E40CFD879710.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6aFyUzsQv515RBuYaapg7ot8v2yBWytcpfn57shREgHY/0/3136382e3139352e3231322e302f32322d3234203d3e20323635343338.roa
Signing time:             Mon 27 Mar 2023 13:14:58 +0000
ROA not before:           Mon 27 Mar 2023 13:09:58 +0000
ROA not after:            Mon 25 Mar 2024 13:14:58 +0000
asID:                     265438
IP address blocks:        168.195.212.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:c2:b0:48:3d:d6:98:8f:13:ca:e8:05:af:e7:c4:42:3a:f3:da:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F195F9C596ADB608642A133DA471E40CFD879710
        Validity
            Not Before: Mar 27 13:09:58 2023 GMT
            Not After : Mar 25 13:14:58 2024 GMT
        Subject: CN=973DEA8B55F12DD5DE3AEEFE9AC992A372F98D8A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:8e:16:a7:41:b5:ba:71:57:40:70:0b:8e:f8:
                    1f:6b:03:0c:ca:22:d8:8e:61:d8:fc:89:27:8e:3b:
                    5b:28:ea:83:32:66:80:0d:bb:4c:bf:4f:29:47:b7:
                    3f:5a:4e:b1:08:f4:0f:16:9f:03:8d:55:7c:cb:d5:
                    fb:96:45:4e:29:f7:bb:61:59:a5:3a:6c:4d:90:b0:
                    e8:d2:e0:c5:50:6e:5e:5c:e5:0e:19:eb:2d:fb:3f:
                    6f:23:f8:28:64:89:49:c8:2c:27:82:a5:7d:e3:ad:
                    49:d2:47:bc:8d:9b:b2:cf:f8:69:ce:ec:ac:f1:b9:
                    22:60:37:93:1d:dc:b5:13:a5:c7:e5:35:19:5b:49:
                    59:25:27:38:41:ec:87:e7:b9:f2:77:26:06:f9:70:
                    b8:0d:d3:4d:6a:3f:51:a6:79:1d:5d:73:bc:5e:b9:
                    fd:7c:33:8e:6c:35:27:9f:6e:75:cd:c9:51:ec:8e:
                    f1:9b:0a:69:a4:9d:88:fa:26:22:5c:47:64:77:ae:
                    5a:a1:9a:ef:19:5d:7e:b5:a8:43:c0:34:5c:c0:e5:
                    70:e0:65:1c:13:57:4d:7a:ce:47:5e:bc:68:87:3d:
                    d1:f5:b7:9f:ca:ad:8f:5f:bc:5c:22:9a:7e:ea:54:
                    b5:12:52:6d:e2:8b:c3:00:22:fa:86:0f:d9:b3:4a:
                    87:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:3D:EA:8B:55:F1:2D:D5:DE:3A:EE:FE:9A:C9:92:A3:72:F9:8D:8A
            X509v3 Authority Key Identifier:
                keyid:F1:95:F9:C5:96:AD:B6:08:64:2A:13:3D:A4:71:E4:0C:FD:87:97:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6aFyUzsQv515RBuYaapg7ot8v2yBWytcpfn57shREgHY/0/F195F9C596ADB608642A133DA471E40CFD879710.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F195F9C596ADB608642A133DA471E40CFD879710.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6aFyUzsQv515RBuYaapg7ot8v2yBWytcpfn57shREgHY/0/3136382e3139352e3231322e302f32322d3234203d3e20323635343338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.195.212.0/22

    Signature Algorithm: sha256WithRSAEncryption
         40:3e:3e:dc:0f:13:34:a2:e7:9c:77:a3:4e:a1:2e:52:ee:1a:
         1d:e2:79:9e:1b:2d:e1:b1:15:e6:e7:fd:b3:a8:3a:3e:fe:dd:
         84:68:77:69:94:a1:7a:1b:a0:69:e4:87:a2:15:84:34:4e:8c:
         91:06:b8:c4:96:7f:8b:9c:87:55:5d:3d:ad:52:55:6f:3d:e7:
         02:11:01:98:df:30:52:be:6b:2f:dc:e9:0d:88:e2:b4:26:59:
         34:5d:d4:77:ca:8c:a7:ea:17:d5:58:2a:90:b7:d7:cf:b6:09:
         fd:60:74:c6:ca:f8:fc:52:f6:6c:c0:e4:6b:61:e1:fb:ca:37:
         1a:4e:4c:2c:a5:04:2c:36:a4:15:19:1d:10:77:24:9c:b5:53:
         b1:0b:c1:df:ef:04:8d:d2:26:66:c9:e2:3f:f2:1d:c0:65:38:
         c3:58:0a:41:5c:8c:a1:cf:09:1c:e4:d0:81:6b:8b:08:e3:7f:
         e2:98:55:9d:29:19:d4:02:2d:93:1e:38:be:c6:5f:2d:da:4b:
         6f:48:f4:c5:ad:cf:af:50:41:92:65:f7:31:54:9b:1c:d9:1d:
         6a:ea:29:f5:5d:94:05:4f:95:90:95:0d:07:07:e4:43:b7:d6:
         66:3a:13:51:7f:b5:90:1f:38:b6:f2:2c:43:47:5c:c7:28:7a:
         ff:73:ec:e7
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUFsKwSD3WmI8TyugFr+fEQjrz2nMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjE5NUY5QzU5NkFEQjYwODY0MkExMzNEQTQ3MUU0MENG
RDg3OTcxMDAeFw0yMzAzMjcxMzA5NThaFw0yNDAzMjUxMzE0NThaMDMxMTAvBgNV
BAMTKDk3M0RFQThCNTVGMTJERDVERTNBRUVGRTlBQzk5MkEzNzJGOThEOEEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpjhanQbW6cVdAcAuO+B9rAwzK
ItiOYdj8iSeOO1so6oMyZoANu0y/TylHtz9aTrEI9A8WnwONVXzL1fuWRU4p97th
WaU6bE2QsOjS4MVQbl5c5Q4Z6y37P28j+ChkiUnILCeCpX3jrUnSR7yNm7LP+GnO
7KzxuSJgN5Md3LUTpcflNRlbSVklJzhB7IfnufJ3Jgb5cLgN001qP1GmeR1dc7xe
uf18M45sNSefbnXNyVHsjvGbCmmknYj6JiJcR2R3rlqhmu8ZXX61qEPANFzA5XDg
ZRwTV016zkdevGiHPdH1t5/KrY9fvFwimn7qVLUSUm3ii8MAIvqGD9mzSocnAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUlz3qi1XxLdXeOu7+msmSo3L5jYowHwYDVR0j
BBgwFoAU8ZX5xZattghkKhM9pHHkDP2HlxAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNmFGeVV6c1F2NTE1UkJ1WWFhcGc3b3Q4djJ5Qld5dGNwZm41N3NoUkVn
SFkvMC9GMTk1RjlDNTk2QURCNjA4NjQyQTEzM0RBNDcxRTQwQ0ZEODc5NzEwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0YxOTVGOUM1OTZBREI2MDg2
NDJBMTMzREE0NzFFNDBDRkQ4Nzk3MTAuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzZhRnlVenNRdjUxNVJCdVlhYXBnN290OHYyeUJXeXRjcGZuNTdzaFJFZ0hZLzAv
MzEzNjM4MmUzMTM5MzUyZTMyMzEzMjJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDMy
MzYzNTM0MzMzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAqjD1DANBgkqhkiG9w0BAQsFAAOCAQEAQD4+
3A8TNKLnnHejTqEuUu4aHeJ5nhst4bEV5uf9s6g6Pv7dhGh3aZShehugaeSHohWE
NE6MkQa4xJZ/i5yHVV09rVJVbz3nAhEBmN8wUr5rL9zpDYjitCZZNF3Ud8qMp+oX
1VgqkLfXz7YJ/WB0xsr4/FL2bMDka2Hh+8o3Gk5MLKUELDakFRkdEHcknLVTsQvB
3+8EjdImZsniP/IdwGU4w1gKQVyMoc8JHOTQgWuLCON/4phVnSkZ1AItkx44vsZf
LdpLb0j0xa3Pr1BBkmX3MVSbHNkdauop9V2UBU+VkJUNBwfkQ7fWZjoTUX+1kB84
tvIsQ0dcxyh6/3Ps5w==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:16 2024 by rpki-client on console-ams.rpki-client.org