Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/73UwtARL2gGoXwnoq9TkX8Veu3QziussiXcHJPH1CXTj/0/3136382e3132312e3230302e302f32342d3234203d3e20323635303636.roa
File:                     3136382e3132312e3230302e302f32342d3234203d3e20323635303636.roa (raw, json)
Hash identifier:          I1rMRyAnOUeZmcXD4mYDxqYvvcW/+2dIfCHNb3y5fqU=
Subject key identifier:   56:33:FD:C3:C7:C5:C5:7F:2C:63:52:25:A6:0D:83:34:5B:19:34:CE
Certificate issuer:       /CN=1DFA20766D63768BAF34AD0AEE5C60BFC03EF988
Certificate serial:       459D265ECFBC88D19EC65EF11B931A9EEAF8A9F7
Authority key identifier: 1D:FA:20:76:6D:63:76:8B:AF:34:AD:0A:EE:5C:60:BF:C0:3E:F9:88
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1DFA20766D63768BAF34AD0AEE5C60BFC03EF988.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/73UwtARL2gGoXwnoq9TkX8Veu3QziussiXcHJPH1CXTj/0/3136382e3132312e3230302e302f32342d3234203d3e20323635303636.roa
Signing time:             Sat 05 Jun 2021 20:36:33 +0000
ROA not before:           Sat 05 Jun 2021 20:31:33 +0000
ROA not after:            Sat 04 Jun 2022 20:36:33 +0000
asID:                     265066
IP address blocks:        168.121.200.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:9d:26:5e:cf:bc:88:d1:9e:c6:5e:f1:1b:93:1a:9e:ea:f8:a9:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1DFA20766D63768BAF34AD0AEE5C60BFC03EF988
        Validity
            Not Before: Jun  5 20:31:33 2021 GMT
            Not After : Jun  4 20:36:33 2022 GMT
        Subject: CN=3082010A0282010100C3A9049321F2B8E8BE7DC60CE711E235EB963E4F82DC5249CAF49D935A677FF32A939A08ED41DC9AC2A004596AB969B3C0AE08DA8E4BB44FEE55A50D4DF4CBE6559AB144F386C122505B1D89C5728161BF9020A849431978242E7E7FB6C8D646C3CBF7519DB3F7D0B2CC89962C4B4D200B80987D5AF3A734149A6AA984519FA405DF84E619811CEA29FF622CCD3BEBCDB9B63736C66D9D63B2586553B9A4A97C778278917EC5D7BBB957B15548F108E768B43A8F36B97EA352FB2E6E3CD987802DBEAA21BC53760F7780FA46D360F67816C0F2206E4B12C5C973D7968C1BDF74EFEE0805D26768D7CA09583DECC4D2DD905D24A6C46122C5BF898582E90800C90203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:a9:04:93:21:f2:b8:e8:be:7d:c6:0c:e7:11:
                    e2:35:eb:96:3e:4f:82:dc:52:49:ca:f4:9d:93:5a:
                    67:7f:f3:2a:93:9a:08:ed:41:dc:9a:c2:a0:04:59:
                    6a:b9:69:b3:c0:ae:08:da:8e:4b:b4:4f:ee:55:a5:
                    0d:4d:f4:cb:e6:55:9a:b1:44:f3:86:c1:22:50:5b:
                    1d:89:c5:72:81:61:bf:90:20:a8:49:43:19:78:24:
                    2e:7e:7f:b6:c8:d6:46:c3:cb:f7:51:9d:b3:f7:d0:
                    b2:cc:89:96:2c:4b:4d:20:0b:80:98:7d:5a:f3:a7:
                    34:14:9a:6a:a9:84:51:9f:a4:05:df:84:e6:19:81:
                    1c:ea:29:ff:62:2c:cd:3b:eb:cd:b9:b6:37:36:c6:
                    6d:9d:63:b2:58:65:53:b9:a4:a9:7c:77:82:78:91:
                    7e:c5:d7:bb:b9:57:b1:55:48:f1:08:e7:68:b4:3a:
                    8f:36:b9:7e:a3:52:fb:2e:6e:3c:d9:87:80:2d:be:
                    aa:21:bc:53:76:0f:77:80:fa:46:d3:60:f6:78:16:
                    c0:f2:20:6e:4b:12:c5:c9:73:d7:96:8c:1b:df:74:
                    ef:ee:08:05:d2:67:68:d7:ca:09:58:3d:ec:c4:d2:
                    dd:90:5d:24:a6:c4:61:22:c5:bf:89:85:82:e9:08:
                    00:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:33:FD:C3:C7:C5:C5:7F:2C:63:52:25:A6:0D:83:34:5B:19:34:CE
            X509v3 Authority Key Identifier:
                keyid:1D:FA:20:76:6D:63:76:8B:AF:34:AD:0A:EE:5C:60:BF:C0:3E:F9:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/73UwtARL2gGoXwnoq9TkX8Veu3QziussiXcHJPH1CXTj/0/1DFA20766D63768BAF34AD0AEE5C60BFC03EF988.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1DFA20766D63768BAF34AD0AEE5C60BFC03EF988.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/73UwtARL2gGoXwnoq9TkX8Veu3QziussiXcHJPH1CXTj/0/3136382e3132312e3230302e302f32342d3234203d3e20323635303636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.121.200.0/24

    Signature Algorithm: sha256WithRSAEncryption
         70:ed:89:6c:d6:3b:33:e1:f4:2e:13:9b:a6:e6:f7:a0:8b:cc:
         fd:ee:b2:0c:0f:76:73:0e:19:29:f3:25:33:a0:17:0c:b0:ed:
         32:71:40:68:ef:2a:90:91:ae:bf:8d:f7:ce:0f:87:56:cf:10:
         30:6a:21:6c:cf:33:62:46:74:04:d3:71:90:17:f1:1f:ae:b9:
         be:03:a1:54:54:88:78:e2:c2:31:19:b0:cf:68:e1:08:3b:5a:
         ba:3b:ef:94:a0:65:aa:b6:bd:d3:d7:1f:db:04:33:63:00:99:
         b4:12:f5:38:bb:55:1d:59:81:d7:ae:53:13:b3:5b:5b:e8:f7:
         71:f3:2c:63:49:0d:9b:95:49:7c:be:09:da:6a:d2:b3:f3:71:
         d1:73:6a:08:62:8d:ef:0c:d6:2f:ed:40:b2:8f:47:78:4b:77:
         51:f0:8d:4d:5e:da:76:60:16:db:51:bf:a0:ec:f6:49:69:ef:
         05:41:02:f1:ad:51:78:3c:a6:f2:3f:7f:e9:c5:2f:d0:d1:02:
         cf:d7:d4:64:64:10:f4:43:a9:d1:52:33:09:8f:a5:b7:62:8f:
         c5:4f:09:81:40:58:17:35:48:0e:31:72:57:56:2f:91:ee:cc:
         c9:1a:b3:7b:15:ba:b5:17:ec:68:f1:a2:88:70:aa:f0:ea:47:
         5f:96:1b:a3
-----BEGIN CERTIFICATE-----
MIIHRTCCBi2gAwIBAgIURZ0mXs+8iNGexl7xG5Manur4qfcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMURGQTIwNzY2RDYzNzY4QkFGMzRBRDBBRUU1QzYwQkZD
MDNFRjk4ODAeFw0yMTA2MDUyMDMxMzNaFw0yMjA2MDQyMDM2MzNaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQzNBOTA0OTMyMUYyQjhFOEJF
N0RDNjBDRTcxMUUyMzVFQjk2M0U0RjgyREM1MjQ5Q0FGNDlEOTM1QTY3N0ZGMzJB
OTM5QTA4RUQ0MURDOUFDMkEwMDQ1OTZBQjk2OUIzQzBBRTA4REE4RTRCQjQ0RkVF
NTVBNTBENERGNENCRTY1NTlBQjE0NEYzODZDMTIyNTA1QjFEODlDNTcyODE2MUJG
OTAyMEE4NDk0MzE5NzgyNDJFN0U3RkI2QzhENjQ2QzNDQkY3NTE5REIzRjdEMEIy
Q0M4OTk2MkM0QjREMjAwQjgwOTg3RDVBRjNBNzM0MTQ5QTZBQTk4NDUxOUZBNDA1
REY4NEU2MTk4MTFDRUEyOUZGNjIyQ0NEM0JFQkNEQjlCNjM3MzZDNjZEOUQ2M0Iy
NTg2NTUzQjlBNEE5N0M3NzgyNzg5MTdFQzVEN0JCQjk1N0IxNTU0OEYxMDhFNzY4
QjQzQThGMzZCOTdFQTM1MkZCMkU2RTNDRDk4NzgwMkRCRUFBMjFCQzUzNzYwRjc3
ODBGQTQ2RDM2MEY2NzgxNkMwRjIyMDZFNEIxMkM1Qzk3M0Q3OTY4QzFCREY3NEVG
RUUwODA1RDI2NzY4RDdDQTA5NTgzREVDQzREMkREOTA1RDI0QTZDNDYxMjJDNUJG
ODk4NTgyRTkwODAwQzkwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAw6kEkyHyuOi+fcYM5xHiNeuWPk+C3FJJyvSdk1pnf/Mqk5oI7UHc
msKgBFlquWmzwK4I2o5LtE/uVaUNTfTL5lWasUTzhsEiUFsdicVygWG/kCCoSUMZ
eCQufn+2yNZGw8v3UZ2z99CyzImWLEtNIAuAmH1a86c0FJpqqYRRn6QF34TmGYEc
6in/YizNO+vNubY3NsZtnWOyWGVTuaSpfHeCeJF+xde7uVexVUjxCOdotDqPNrl+
o1L7Lm482YeALb6qIbxTdg93gPpG02D2eBbA8iBuSxLFyXPXlowb33Tv7ggF0mdo
18oJWD3sxNLdkF0kpsRhIsW/iYWC6QgAyQIDAQABo4ICUzCCAk8wHQYDVR0OBBYE
FFYz/cPHxcV/LGNSJaYNgzRbGTTOMB8GA1UdIwQYMBaAFB36IHZtY3aLrzStCu5c
YL/APvmIMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzczVXd0QVJMMmdHb1h3
bm9xOVRrWDhWZXUzUXppdXNzaVhjSEpQSDFDWFRqLzAvMURGQTIwNzY2RDYzNzY4
QkFGMzRBRDBBRUU1QzYwQkZDMDNFRjk4OC5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC8xREZBMjA3NjZENjM3NjhCQUYzNEFEMEFFRTVDNjBCRkMwM0VG
OTg4LmNlcjCBsAYIKwYBBQUHAQsEgaMwgaAwgZ0GCCsGAQUFBzALhoGQcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby83M1V3dEFSTDJnR29Yd25vcTlU
a1g4VmV1M1F6aXVzc2lYY0hKUEgxQ1hUai8wLzMxMzYzODJlMzEzMjMxMmUzMjMw
MzAyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2MzUzMDM2MzYucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BACoecgwDQYJKoZIhvcNAQELBQADggEBAHDtiWzWOzPh9C4Tm6bm96CLzP3usgwP
dnMOGSnzJTOgFwyw7TJxQGjvKpCRrr+N984Ph1bPEDBqIWzPM2JGdATTcZAX8R+u
ub4DoVRUiHjiwjEZsM9o4Qg7Wro775SgZaq2vdPXH9sEM2MAmbQS9Ti7VR1Zgdeu
UxOzW1vo93HzLGNJDZuVSXy+Cdpq0rPzcdFzaghije8M1i/tQLKPR3hLd1HwjU1e
2nZgFttRv6Ds9klp7wVBAvGtUXg8pvI/f+nFL9DRAs/X1GRkEPRDqdFSMwmPpbdi
j8VPCYFAWBc1SA4xcldWL5HuzMkas3sVurUX7GjxoohwqvDqR1+WG6M=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:49 2024 by rpki-client on console-fra.rpki-client.org