Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7QbFALBm5DY5jxXJcJkqX5WXGGjxGdbBRmoTChNSk4gt/0/3136382e39302e3133322e302f32322d3332203d3e20323635323837.roa
File:                     3136382e39302e3133322e302f32322d3332203d3e20323635323837.roa (raw, json)
Hash identifier:          FY6hhtqCHgy8+C/OcaGcw++PhYW8fDBMp4LOjYYusOM=
Subject key identifier:   B2:01:DB:95:11:25:35:49:34:AB:EA:6B:02:04:90:FE:31:85:21:8B
Certificate issuer:       /CN=0916D6C778F2155181CCB182FAE52AE013341E40
Certificate serial:       58A82DE0DA0F1C6FBF3AAF9540AB55F1B667DC8F
Authority key identifier: 09:16:D6:C7:78:F2:15:51:81:CC:B1:82:FA:E5:2A:E0:13:34:1E:40
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0916D6C778F2155181CCB182FAE52AE013341E40.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7QbFALBm5DY5jxXJcJkqX5WXGGjxGdbBRmoTChNSk4gt/0/3136382e39302e3133322e302f32322d3332203d3e20323635323837.roa
Signing time:             Tue 23 May 2023 19:14:45 +0000
ROA not before:           Tue 23 May 2023 19:09:45 +0000
ROA not after:            Tue 21 May 2024 19:14:45 +0000
asID:                     265287
IP address blocks:        168.90.132.0/22 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:a8:2d:e0:da:0f:1c:6f:bf:3a:af:95:40:ab:55:f1:b6:67:dc:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0916D6C778F2155181CCB182FAE52AE013341E40
        Validity
            Not Before: May 23 19:09:45 2023 GMT
            Not After : May 21 19:14:45 2024 GMT
        Subject: CN=B201DB951125354934ABEA6B020490FE3185218B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:92:21:e0:45:4a:c6:4b:8a:96:87:c8:72:c3:
                    49:84:53:5c:46:b6:3c:7f:79:cb:a3:d4:c4:1f:d2:
                    0f:9c:97:68:31:b7:19:76:c5:9e:83:34:d3:36:c1:
                    c0:55:11:29:89:f5:d1:da:f8:61:f7:db:3e:99:af:
                    3b:12:3e:f2:4c:fa:4e:dc:d6:6a:38:50:d5:f9:31:
                    87:e1:83:51:a4:57:02:55:f2:54:87:d3:72:ac:1c:
                    02:56:9f:2d:6b:b0:0e:ff:2d:f4:f3:de:55:f2:77:
                    62:dc:35:04:7a:56:57:47:13:aa:f4:cc:53:a8:ac:
                    83:cf:2d:f3:6a:a9:7b:de:e9:f5:9f:48:87:70:43:
                    27:06:e9:fc:30:27:7f:46:7f:a6:70:78:07:f2:be:
                    e4:3b:19:24:43:b0:b2:c9:35:28:5e:00:c9:9a:7b:
                    54:64:f6:e7:00:40:d6:02:39:33:66:10:b4:79:a8:
                    75:b2:26:ec:e2:a8:14:23:4f:5d:bc:e9:97:37:06:
                    bf:64:f1:95:5c:1b:7a:0c:e3:60:5e:92:82:fb:ae:
                    69:76:f4:66:8a:fc:70:c7:f1:ae:cc:bb:bf:99:cd:
                    ed:a1:77:6b:00:ad:83:5f:d4:a1:8c:8d:c6:b2:07:
                    e1:1b:39:b9:2a:8b:4f:94:97:3f:82:6d:62:52:21:
                    d7:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:01:DB:95:11:25:35:49:34:AB:EA:6B:02:04:90:FE:31:85:21:8B
            X509v3 Authority Key Identifier:
                keyid:09:16:D6:C7:78:F2:15:51:81:CC:B1:82:FA:E5:2A:E0:13:34:1E:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7QbFALBm5DY5jxXJcJkqX5WXGGjxGdbBRmoTChNSk4gt/0/0916D6C778F2155181CCB182FAE52AE013341E40.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0916D6C778F2155181CCB182FAE52AE013341E40.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7QbFALBm5DY5jxXJcJkqX5WXGGjxGdbBRmoTChNSk4gt/0/3136382e39302e3133322e302f32322d3332203d3e20323635323837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.90.132.0/22

    Signature Algorithm: sha256WithRSAEncryption
         97:c4:fc:87:20:f8:c9:55:87:11:2d:0a:c4:61:85:d3:4e:ac:
         e1:ae:a8:f8:39:90:01:af:2a:e9:fa:b3:40:77:31:76:a3:60:
         0e:64:8c:4e:bd:76:67:34:68:38:00:c0:8d:b7:c1:a3:42:5a:
         8f:0b:a4:ae:88:d4:15:cc:44:e0:c6:73:55:de:cc:6f:49:3a:
         c4:8c:1e:c3:5b:5e:ac:1b:e5:b7:4e:5a:e4:a1:e0:c8:c4:8d:
         ce:88:db:d0:e7:89:97:7e:97:db:a9:11:d1:53:a0:2c:b0:37:
         0f:f8:d9:d8:34:eb:4f:0f:16:5d:86:c1:b1:34:2f:d4:e4:46:
         3f:77:49:e3:2e:b8:1d:a5:46:aa:ca:20:60:25:03:8c:b7:1f:
         f6:f2:17:3f:b9:0b:c0:cd:23:ce:22:d8:d4:cc:2b:40:6b:d3:
         8f:d5:e6:ed:ff:be:3b:80:21:c9:8d:a5:9f:7f:b7:5d:9c:10:
         5b:3b:d0:af:ab:0f:80:d2:fc:a0:1c:0a:13:e5:0d:38:9e:d8:
         b9:39:7c:ce:78:9e:9e:30:6d:9a:4b:23:b7:17:79:4f:58:7e:
         ab:51:a8:f1:a4:22:d4:ec:57:36:53:88:6c:8f:fd:05:3b:93:
         0c:bd:6f:93:a2:51:d7:84:79:b2:99:11:88:e6:37:fa:a1:7b:
         c5:38:4e:82
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUWKgt4NoPHG+/Oq+VQKtV8bZn3I8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDkxNkQ2Qzc3OEYyMTU1MTgxQ0NCMTgyRkFFNTJBRTAx
MzM0MUU0MDAeFw0yMzA1MjMxOTA5NDVaFw0yNDA1MjExOTE0NDVaMDMxMTAvBgNV
BAMTKEIyMDFEQjk1MTEyNTM1NDkzNEFCRUE2QjAyMDQ5MEZFMzE4NTIxOEIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJkiHgRUrGS4qWh8hyw0mEU1xG
tjx/ecuj1MQf0g+cl2gxtxl2xZ6DNNM2wcBVESmJ9dHa+GH32z6ZrzsSPvJM+k7c
1mo4UNX5MYfhg1GkVwJV8lSH03KsHAJWny1rsA7/LfTz3lXyd2LcNQR6VldHE6r0
zFOorIPPLfNqqXve6fWfSIdwQycG6fwwJ39Gf6ZweAfyvuQ7GSRDsLLJNSheAMma
e1Rk9ucAQNYCOTNmELR5qHWyJuziqBQjT1286Zc3Br9k8ZVcG3oM42BekoL7rml2
9GaK/HDH8a7Mu7+Zze2hd2sArYNf1KGMjcayB+EbObkqi0+Ulz+CbWJSIdd5AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUsgHblRElNUk0q+prAgSQ/jGFIYswHwYDVR0j
BBgwFoAUCRbWx3jyFVGBzLGC+uUq4BM0HkAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vN1FiRkFMQm01RFk1anhYSmNKa3FYNVdYR0dqeEdkYkJSbW9UQ2hOU2s0
Z3QvMC8wOTE2RDZDNzc4RjIxNTUxODFDQ0IxODJGQUU1MkFFMDEzMzQxRTQwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzA5MTZENkM3NzhGMjE1NTE4
MUNDQjE4MkZBRTUyQUUwMTMzNDFFNDAuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzdRYkZBTEJtNURZNWp4WEpjSmtxWDVXWEdHanhHZGJCUm1vVENoTlNrNGd0LzAv
MzEzNjM4MmUzOTMwMmUzMTMzMzIyZTMwMmYzMjMyMmQzMzMyMjAzZDNlMjAzMjM2
MzUzMjM4Mzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAKoWoQwDQYJKoZIhvcNAQELBQADggEBAJfE/Icg
+MlVhxEtCsRhhdNOrOGuqPg5kAGvKun6s0B3MXajYA5kjE69dmc0aDgAwI23waNC
Wo8LpK6I1BXMRODGc1XezG9JOsSMHsNbXqwb5bdOWuSh4MjEjc6I29DniZd+l9up
EdFToCywNw/42dg0608PFl2GwbE0L9TkRj93SeMuuB2lRqrKIGAlA4y3H/byFz+5
C8DNI84i2NTMK0Br04/V5u3/vjuAIcmNpZ9/t12cEFs70K+rD4DS/KAcChPlDTie
2Lk5fM54np4wbZpLI7cXeU9YfqtRqPGkItTsVzZTiGyP/QU7kwy9b5OiUdeEebKZ
EYjmN/qhe8U4ToI=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:54 2024 by rpki-client on console-fra.rpki-client.org