Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7A4P63b92RBGVckEt9xMzReYXGmJSuWCRJuFrNnHwo37/0/3136382e3139362e382e302f32322d3232203d3e20323634323431.roa
File:                     3136382e3139362e382e302f32322d3232203d3e20323634323431.roa (raw, json)
Hash identifier:          7uSLV2uchgviPKJQ4pGP44W54eHzPoCQJmMprCpQB+U=
Subject key identifier:   0C:51:EA:78:98:2C:49:51:27:4E:B6:ED:3E:3D:97:FA:44:99:A5:EA
Certificate issuer:       /CN=5F8FFB1FA6A12CA394255F5031399D9A137B3EC7
Certificate serial:       298F7579BFCB8CFE7DC972C8D2E1929ACD86132A
Authority key identifier: 5F:8F:FB:1F:A6:A1:2C:A3:94:25:5F:50:31:39:9D:9A:13:7B:3E:C7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5F8FFB1FA6A12CA394255F5031399D9A137B3EC7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7A4P63b92RBGVckEt9xMzReYXGmJSuWCRJuFrNnHwo37/0/3136382e3139362e382e302f32322d3232203d3e20323634323431.roa
Signing time:             Tue 28 Mar 2023 12:04:01 +0000
ROA not before:           Tue 28 Mar 2023 11:59:01 +0000
ROA not after:            Tue 26 Mar 2024 12:04:01 +0000
asID:                     264241
IP address blocks:        168.196.8.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:8f:75:79:bf:cb:8c:fe:7d:c9:72:c8:d2:e1:92:9a:cd:86:13:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5F8FFB1FA6A12CA394255F5031399D9A137B3EC7
        Validity
            Not Before: Mar 28 11:59:01 2023 GMT
            Not After : Mar 26 12:04:01 2024 GMT
        Subject: CN=0C51EA78982C4951274EB6ED3E3D97FA4499A5EA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:a5:51:32:46:de:ca:96:f1:a8:f5:81:53:d0:
                    81:63:be:1e:1f:f1:5d:d6:95:3f:a0:7d:6e:5f:e1:
                    f0:79:a3:0c:0a:94:f0:a5:41:c1:2d:d7:c1:38:d2:
                    c4:86:b6:00:9d:5c:73:71:51:0d:35:3e:cd:2d:75:
                    17:e7:26:01:c2:04:db:8c:e8:89:71:e8:b7:b4:1e:
                    37:d5:e8:29:1f:d7:9e:29:18:6a:86:bc:db:2c:c7:
                    92:19:8f:bd:ad:b9:1b:d5:14:cc:71:50:ad:6e:83:
                    ff:fb:a5:a5:be:a7:e2:76:eb:11:52:e3:f0:9a:30:
                    30:12:c0:3b:60:b0:96:81:83:9d:c2:84:53:1c:b0:
                    31:15:55:98:1e:fb:04:d5:f1:5d:08:f3:29:e3:47:
                    07:61:cc:63:9b:10:b2:53:62:15:b8:7b:40:a9:d2:
                    b9:ee:0c:49:91:bb:82:ff:26:8f:4f:70:48:c7:ef:
                    26:ee:4b:62:a8:90:46:1c:f6:79:50:83:52:d2:fd:
                    a0:a0:35:9b:49:2f:e0:b6:fe:21:dc:a7:82:80:e1:
                    29:08:2a:81:e2:bd:87:ea:0f:75:af:41:27:1b:e0:
                    4e:66:ad:b4:72:11:c3:a5:2e:24:73:c7:26:5e:46:
                    bc:c2:b7:be:9e:4d:c8:2b:98:9f:51:ff:4b:f8:8f:
                    ea:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:51:EA:78:98:2C:49:51:27:4E:B6:ED:3E:3D:97:FA:44:99:A5:EA
            X509v3 Authority Key Identifier:
                keyid:5F:8F:FB:1F:A6:A1:2C:A3:94:25:5F:50:31:39:9D:9A:13:7B:3E:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7A4P63b92RBGVckEt9xMzReYXGmJSuWCRJuFrNnHwo37/0/5F8FFB1FA6A12CA394255F5031399D9A137B3EC7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5F8FFB1FA6A12CA394255F5031399D9A137B3EC7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7A4P63b92RBGVckEt9xMzReYXGmJSuWCRJuFrNnHwo37/0/3136382e3139362e382e302f32322d3232203d3e20323634323431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.196.8.0/22

    Signature Algorithm: sha256WithRSAEncryption
         76:80:d6:32:70:af:ca:84:ba:56:b7:8d:0c:af:eb:cf:47:f0:
         13:c0:bc:0a:16:16:6d:43:4d:db:43:34:f7:2b:72:59:df:f5:
         75:29:c0:3d:10:ab:14:e7:62:bd:a7:e0:ee:8e:8e:ab:bc:b2:
         f5:f1:5d:73:c4:0b:64:d3:35:79:b8:2a:94:80:9c:aa:c0:53:
         52:c5:29:93:f6:b7:a4:28:0c:17:0e:6f:ff:2e:97:57:d7:66:
         54:44:ea:8a:15:1a:a1:d4:d1:58:8a:df:29:03:12:de:7f:8a:
         ce:75:3b:59:33:4d:18:2a:e4:e1:6c:02:c9:15:ef:23:b8:5a:
         0e:61:84:1e:d4:65:55:5b:ab:5d:c8:0b:db:30:76:85:29:43:
         91:4d:10:68:3d:d5:06:ea:00:b6:1a:87:65:50:73:28:15:9e:
         d5:ef:e6:11:a0:4b:8f:39:63:cf:ed:b6:ef:0a:d6:a6:d4:9b:
         45:75:c2:49:28:6e:de:ec:ac:c1:ab:5c:6c:20:21:57:d9:55:
         23:4d:98:bf:8a:01:58:82:c0:f5:1b:07:13:dc:95:0b:65:8d:
         76:ca:e3:f0:7b:87:89:98:9e:bc:5f:ec:d2:75:7e:65:54:95:
         6b:8c:94:19:d6:46:cf:af:b0:cc:99:89:73:c2:52:a4:ba:df:
         a2:2b:9a:a8
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUKY91eb/LjP59yXLI0uGSms2GEyowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUY4RkZCMUZBNkExMkNBMzk0MjU1RjUwMzEzOTlEOUEx
MzdCM0VDNzAeFw0yMzAzMjgxMTU5MDFaFw0yNDAzMjYxMjA0MDFaMDMxMTAvBgNV
BAMTKDBDNTFFQTc4OTgyQzQ5NTEyNzRFQjZFRDNFM0Q5N0ZBNDQ5OUE1RUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDapVEyRt7KlvGo9YFT0IFjvh4f
8V3WlT+gfW5f4fB5owwKlPClQcEt18E40sSGtgCdXHNxUQ01Ps0tdRfnJgHCBNuM
6Ilx6Le0HjfV6Ckf154pGGqGvNssx5IZj72tuRvVFMxxUK1ug//7paW+p+J26xFS
4/CaMDASwDtgsJaBg53ChFMcsDEVVZge+wTV8V0I8ynjRwdhzGObELJTYhW4e0Cp
0rnuDEmRu4L/Jo9PcEjH7ybuS2KokEYc9nlQg1LS/aCgNZtJL+C2/iHcp4KA4SkI
KoHivYfqD3WvQScb4E5mrbRyEcOlLiRzxyZeRrzCt76eTcgrmJ9R/0v4j+qJAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUDFHqeJgsSVEnTrbtPj2X+kSZpeowHwYDVR0j
BBgwFoAUX4/7H6ahLKOUJV9QMTmdmhN7PscwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vN0E0UDYzYjkyUkJHVmNrRXQ5eE16UmVZWEdtSlN1V0NSSnVGck5uSHdv
MzcvMC81RjhGRkIxRkE2QTEyQ0EzOTQyNTVGNTAzMTM5OUQ5QTEzN0IzRUM3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzVGOEZGQjFGQTZBMTJDQTM5
NDI1NUY1MDMxMzk5RDlBMTM3QjNFQzcuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzdBNFA2M2I5MlJCR1Zja0V0OXhNelJlWVhHbUpTdVdDUkp1RnJObkh3bzM3LzAv
MzEzNjM4MmUzMTM5MzYyZTM4MmUzMDJmMzIzMjJkMzIzMjIwM2QzZTIwMzIzNjM0
MzIzNDMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCqMQIMA0GCSqGSIb3DQEBCwUAA4IBAQB2gNYycK/K
hLpWt40Mr+vPR/ATwLwKFhZtQ03bQzT3K3JZ3/V1KcA9EKsU52K9p+Dujo6rvLL1
8V1zxAtk0zV5uCqUgJyqwFNSxSmT9rekKAwXDm//LpdX12ZUROqKFRqh1NFYit8p
AxLef4rOdTtZM00YKuThbALJFe8juFoOYYQe1GVVW6tdyAvbMHaFKUORTRBoPdUG
6gC2GodlUHMoFZ7V7+YRoEuPOWPP7bbvCtam1JtFdcJJKG7e7KzBq1xsICFX2VUj
TZi/igFYgsD1GwcT3JULZY12yuPwe4eJmJ68X+zSdX5lVJVrjJQZ1kbPr7DMmYlz
wlKkut+iK5qo
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:52 2024 by rpki-client on console-fra.rpki-client.org