Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6zXwMvombKfH19pyvhQC24buLCwCUDP87kV5tS3PbyFc/0/3136382e3139352e3135362e302f32322d3234203d3e20323731303237.roa
File:                     3136382e3139352e3135362e302f32322d3234203d3e20323731303237.roa (raw, json)
Hash identifier:          TBeCIAZ824/725Nh0ORzPJOSL6GpwGXeqJuFJVLLKvw=
Subject key identifier:   78:16:10:DD:1A:9B:82:ED:4A:8C:51:21:78:95:F2:E5:21:F5:EF:3A
Certificate issuer:       /CN=7B6DE9E075C8AFDBCA50A9344C921BA39A6F3199
Certificate serial:       20E81AD0AACB35EAE3A855AFBC139320DDC3BBBA
Authority key identifier: 7B:6D:E9:E0:75:C8:AF:DB:CA:50:A9:34:4C:92:1B:A3:9A:6F:31:99
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7B6DE9E075C8AFDBCA50A9344C921BA39A6F3199.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6zXwMvombKfH19pyvhQC24buLCwCUDP87kV5tS3PbyFc/0/3136382e3139352e3135362e302f32322d3234203d3e20323731303237.roa
Signing time:             Mon 04 Mar 2024 19:12:01 +0000
ROA not before:           Mon 04 Mar 2024 19:07:01 +0000
ROA not after:            Mon 03 Mar 2025 19:12:01 +0000
asID:                     271027
IP address blocks:        168.195.156.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:e8:1a:d0:aa:cb:35:ea:e3:a8:55:af:bc:13:93:20:dd:c3:bb:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7B6DE9E075C8AFDBCA50A9344C921BA39A6F3199
        Validity
            Not Before: Mar  4 19:07:01 2024 GMT
            Not After : Mar  3 19:12:01 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:ff:b7:04:24:b9:99:68:d2:0f:ed:a3:3d:1b:
                    6e:b1:ca:52:ae:0b:4b:1e:81:d7:31:67:10:74:20:
                    68:bc:f0:bb:a6:0c:4d:0f:81:f2:92:b5:be:7c:2f:
                    73:03:81:e2:69:99:29:15:0e:ba:d6:ee:57:8d:d3:
                    06:45:55:ff:e2:0a:dc:eb:3f:9e:50:49:94:8a:15:
                    29:22:fd:5c:05:97:cb:b1:65:dd:93:7e:f4:7c:c3:
                    03:09:ee:83:29:96:1f:8f:8a:64:ec:9c:cc:e0:af:
                    0a:2b:4e:84:40:ba:53:2e:a1:51:32:70:49:7b:3d:
                    04:59:1c:e9:ea:0e:7e:16:91:84:0b:49:9c:a0:10:
                    ce:c4:66:4e:63:2a:fb:57:a2:eb:b2:25:f0:b6:f3:
                    1f:a3:02:13:38:d8:9a:aa:9a:ad:42:b4:3b:5b:f6:
                    4d:15:e7:e4:5c:d7:b4:d8:4c:d7:6a:ce:2e:bf:66:
                    59:67:5e:74:b2:b2:ea:a0:55:27:10:6a:d2:79:67:
                    ca:14:1e:63:7b:b1:80:dd:06:ec:d2:20:58:85:07:
                    3f:50:7b:8b:76:f7:35:0b:38:b7:63:c3:f0:d6:69:
                    14:13:79:b9:ad:b8:79:fa:7a:95:6c:3e:6f:d1:c0:
                    78:b2:c2:a6:2a:62:17:ff:32:d7:c7:75:41:83:01:
                    bf:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:16:10:DD:1A:9B:82:ED:4A:8C:51:21:78:95:F2:E5:21:F5:EF:3A
            X509v3 Authority Key Identifier:
                keyid:7B:6D:E9:E0:75:C8:AF:DB:CA:50:A9:34:4C:92:1B:A3:9A:6F:31:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6zXwMvombKfH19pyvhQC24buLCwCUDP87kV5tS3PbyFc/0/7B6DE9E075C8AFDBCA50A9344C921BA39A6F3199.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7B6DE9E075C8AFDBCA50A9344C921BA39A6F3199.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6zXwMvombKfH19pyvhQC24buLCwCUDP87kV5tS3PbyFc/0/3136382e3139352e3135362e302f32322d3234203d3e20323731303237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.195.156.0/22

    Signature Algorithm: sha256WithRSAEncryption
         13:d8:25:bf:d3:b0:3d:50:e2:ea:1c:7f:33:58:64:ab:2e:b4:
         34:dc:96:c9:b8:c2:c5:60:aa:66:74:c7:2d:ad:57:83:71:45:
         ac:7e:bb:04:4d:6d:53:eb:f2:49:85:0e:e6:50:42:52:3f:1d:
         b0:c3:e9:65:be:02:c3:a7:97:38:67:dc:44:86:c9:87:c5:04:
         04:11:3a:44:09:82:fc:3c:55:61:db:fb:44:15:56:7f:82:58:
         74:d6:6f:6e:7b:46:69:4b:6f:13:a5:a8:8f:f7:57:43:4b:2e:
         1a:cb:fe:ef:6a:d4:01:a2:a3:1b:ec:38:9f:89:25:27:9e:40:
         a6:9a:3b:6a:e8:c1:59:de:8a:94:7f:f7:d3:f1:3b:1c:b2:d8:
         0f:b8:73:51:b7:32:1f:77:0d:ef:97:87:b3:36:e6:f2:d9:11:
         a9:71:eb:0f:ae:3a:61:af:d2:db:0c:9b:a6:40:cd:f5:86:32:
         f2:07:2f:b4:28:15:f0:aa:bc:25:22:ed:ce:7b:f7:7e:9d:90:
         b2:5e:0c:8e:5f:1a:cf:60:27:2c:1a:b4:84:9b:2b:f3:5c:c9:
         44:28:9d:ef:50:7c:79:73:49:83:d5:b6:61:2a:61:19:a4:2f:
         ab:6b:d3:bd:56:4f:7f:3d:34:e7:08:27:54:9f:b2:89:40:5c:
         e4:a6:ec:42
-----BEGIN CERTIFICATE-----
MIIHRTCCBi2gAwIBAgIUIOga0KrLNerjqFWvvBOTIN3Du7owDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0I2REU5RTA3NUM4QUZEQkNBNTBBOTM0NEM5MjFCQTM5
QTZGMzE5OTAeFw0yNDAzMDQxOTA3MDFaFw0yNTAzMDMxOTEyMDFaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQTZGRkI3MDQyNEI5OTk2OEQy
MEZFREEzM0QxQjZFQjFDQTUyQUUwQjRCMUU4MUQ3MzE2NzEwNzQyMDY4QkNGMEJC
QTYwQzREMEY4MUYyOTJCNUJFN0MyRjczMDM4MUUyNjk5OTI5MTUwRUJBRDZFRTU3
OEREMzA2NDU1NUZGRTIwQURDRUIzRjlFNTA0OTk0OEExNTI5MjJGRDVDMDU5N0NC
QjE2NUREOTM3RUY0N0NDMzAzMDlFRTgzMjk5NjFGOEY4QTY0RUM5Q0NDRTBBRjBB
MkI0RTg0NDBCQTUzMkVBMTUxMzI3MDQ5N0IzRDA0NTkxQ0U5RUEwRTdFMTY5MTg0
MEI0OTlDQTAxMENFQzQ2NjRFNjMyQUZCNTdBMkVCQjIyNUYwQjZGMzFGQTMwMjEz
MzhEODlBQUE5QUFENDJCNDNCNUJGNjREMTVFN0U0NUNEN0I0RDg0Q0Q3NkFDRTJF
QkY2NjU5Njc1RTc0QjJCMkVBQTA1NTI3MTA2QUQyNzk2N0NBMTQxRTYzN0JCMTgw
REQwNkVDRDIyMDU4ODUwNzNGNTA3QjhCNzZGNzM1MEIzOEI3NjNDM0YwRDY2OTE0
MTM3OUI5QURCODc5RkE3QTk1NkMzRTZGRDFDMDc4QjJDMkE2MkE2MjE3RkYzMkQ3
Qzc3NTQxODMwMUJGNTkwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEApv+3BCS5mWjSD+2jPRtuscpSrgtLHoHXMWcQdCBovPC7pgxND4Hy
krW+fC9zA4HiaZkpFQ661u5XjdMGRVX/4grc6z+eUEmUihUpIv1cBZfLsWXdk370
fMMDCe6DKZYfj4pk7JzM4K8KK06EQLpTLqFRMnBJez0EWRzp6g5+FpGEC0mcoBDO
xGZOYyr7V6LrsiXwtvMfowITONiaqpqtQrQ7W/ZNFefkXNe02EzXas4uv2ZZZ150
srLqoFUnEGrSeWfKFB5je7GA3Qbs0iBYhQc/UHuLdvc1Czi3Y8Pw1mkUE3m5rbh5
+nqVbD5v0cB4ssKmKmIX/zLXx3VBgwG/WQIDAQABo4ICUzCCAk8wHQYDVR0OBBYE
FHgWEN0am4LtSoxRIXiV8uUh9e86MB8GA1UdIwQYMBaAFHtt6eB1yK/bylCpNEyS
G6OabzGZMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzZ6WHdNdm9tYktmSDE5
cHl2aFFDMjRidUxDd0NVRFA4N2tWNXRTM1BieUZjLzAvN0I2REU5RTA3NUM4QUZE
QkNBNTBBOTM0NEM5MjFCQTM5QTZGMzE5OS5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC83QjZERTlFMDc1QzhBRkRCQ0E1MEE5MzQ0QzkyMUJBMzlBNkYz
MTk5LmNlcjCBsAYIKwYBBQUHAQsEgaMwgaAwgZ0GCCsGAQUFBzALhoGQcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby82elh3TXZvbWJLZkgxOXB5dmhR
QzI0YnVMQ3dDVURQODdrVjV0UzNQYnlGYy8wLzMxMzYzODJlMzEzOTM1MmUzMTM1
MzYyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM3MzEzMDMyMzcucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAKow5wwDQYJKoZIhvcNAQELBQADggEBABPYJb/TsD1Q4uocfzNYZKsutDTclsm4
wsVgqmZ0xy2tV4NxRax+uwRNbVPr8kmFDuZQQlI/HbDD6WW+AsOnlzhn3ESGyYfF
BAQROkQJgvw8VWHb+0QVVn+CWHTWb257RmlLbxOlqI/3V0NLLhrL/u9q1AGioxvs
OJ+JJSeeQKaaO2rowVneipR/99PxOxyy2A+4c1G3Mh93De+Xh7M25vLZEalx6w+u
OmGv0tsMm6ZAzfWGMvIHL7QoFfCqvCUi7c57936dkLJeDI5fGs9gJywatISbK/Nc
yUQone9QfHlzSYPVtmEqYRmkL6tr071WT389NOcIJ1SfsolAXOSm7EI=
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:47 2024 by rpki-client on console-fra.rpki-client.org