Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7Vhv5c4ZEhaf8ALZANuRtpGjrjY5n3dE4T2xvk6gvqrL/2/3136382e3139342e3136352e302f32342d3234203d3e20323635333933.roa
File:                     3136382e3139342e3136352e302f32342d3234203d3e20323635333933.roa (raw, json)
Hash identifier:          7W2r+tth1SV2+ADaI1tgNf3gOEn0IlbrXAXDEVP9d0w=
Subject key identifier:   FB:C1:26:97:90:B2:B1:B4:72:99:AF:01:1E:DB:E4:10:E8:78:E9:A2
Certificate issuer:       /CN=997C15C2A44451CDBD2E1A86BDF8E5CE95CC6A1C
Certificate serial:       6DCBE1205463ED63D799CF2E11913EB8B1CF7657
Authority key identifier: 99:7C:15:C2:A4:44:51:CD:BD:2E:1A:86:BD:F8:E5:CE:95:CC:6A:1C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/997C15C2A44451CDBD2E1A86BDF8E5CE95CC6A1C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7Vhv5c4ZEhaf8ALZANuRtpGjrjY5n3dE4T2xvk6gvqrL/2/3136382e3139342e3136352e302f32342d3234203d3e20323635333933.roa
Signing time:             Mon 15 Jan 2024 00:20:35 +0000
ROA not before:           Mon 15 Jan 2024 00:15:35 +0000
ROA not after:            Mon 13 Jan 2025 00:20:35 +0000
asID:                     265393
IP address blocks:        168.194.165.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:cb:e1:20:54:63:ed:63:d7:99:cf:2e:11:91:3e:b8:b1:cf:76:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=997C15C2A44451CDBD2E1A86BDF8E5CE95CC6A1C
        Validity
            Not Before: Jan 15 00:15:35 2024 GMT
            Not After : Jan 13 00:20:35 2025 GMT
        Subject: CN=FBC1269790B2B1B47299AF011EDBE410E878E9A2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:61:81:93:0d:6d:dc:cc:11:58:09:01:29:46:
                    2b:d7:da:a8:d8:2d:7d:85:ac:93:cc:cc:35:a3:a9:
                    cd:61:45:a3:c2:24:fe:33:d3:41:d1:ae:b8:f4:c7:
                    42:ee:13:28:cd:61:8a:7f:aa:77:a3:68:c7:2a:61:
                    9a:d5:62:45:8f:06:1c:bd:5e:ac:14:7c:94:b0:aa:
                    a0:c7:2c:f9:fa:0b:c6:c7:5a:41:66:34:70:4f:16:
                    c6:41:1a:51:72:70:3b:43:8e:61:43:1f:3c:76:b5:
                    a2:ee:f9:ba:27:e4:c2:95:01:7b:38:72:3d:c0:c5:
                    b8:7a:c5:aa:58:e5:e6:70:a9:a8:84:54:62:9d:10:
                    4d:31:2c:d8:ff:dc:43:4b:c1:0e:3b:09:f9:7c:c2:
                    f0:31:d4:b0:41:eb:ae:ef:fc:d3:cb:ba:72:98:65:
                    e0:c0:95:d9:9c:d1:58:97:34:0d:48:3c:dc:3a:71:
                    94:70:8e:44:fc:5e:17:e7:7f:53:d7:02:2f:33:91:
                    dc:e8:e8:0a:10:e6:dd:46:94:0c:fe:61:50:9a:0a:
                    a2:cb:95:59:27:c5:c5:49:19:37:10:27:04:81:c4:
                    1b:c8:49:9f:11:e0:09:9f:9d:c2:d1:c5:ec:1d:15:
                    87:d7:2f:43:d7:7b:55:12:1f:17:21:60:1e:6d:6d:
                    70:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:C1:26:97:90:B2:B1:B4:72:99:AF:01:1E:DB:E4:10:E8:78:E9:A2
            X509v3 Authority Key Identifier:
                keyid:99:7C:15:C2:A4:44:51:CD:BD:2E:1A:86:BD:F8:E5:CE:95:CC:6A:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7Vhv5c4ZEhaf8ALZANuRtpGjrjY5n3dE4T2xvk6gvqrL/2/997C15C2A44451CDBD2E1A86BDF8E5CE95CC6A1C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/997C15C2A44451CDBD2E1A86BDF8E5CE95CC6A1C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7Vhv5c4ZEhaf8ALZANuRtpGjrjY5n3dE4T2xvk6gvqrL/2/3136382e3139342e3136352e302f32342d3234203d3e20323635333933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.194.165.0/24

    Signature Algorithm: sha256WithRSAEncryption
         80:01:08:a5:4b:e4:d0:a7:7e:fc:28:ad:a3:a5:5f:2d:04:16:
         08:19:f8:59:c2:af:55:13:98:03:23:ef:07:22:df:aa:34:b9:
         a8:36:45:8e:e1:07:d3:26:e6:86:ed:1c:a7:1a:d8:1c:05:d3:
         57:e4:73:7e:71:40:c7:79:5c:1b:fd:28:17:56:d7:cc:79:30:
         4d:0f:0c:e8:f0:23:7a:70:5b:f7:24:b5:45:84:7f:b8:39:c8:
         cb:c5:60:71:19:57:58:a2:21:80:51:94:80:65:dc:19:99:5a:
         4f:a1:bb:a8:f2:07:7e:01:ea:c7:28:b9:d8:8a:75:4d:69:06:
         53:5d:fd:25:b1:a5:41:d3:27:85:7e:04:4d:21:ce:11:a1:25:
         0d:7e:b0:a3:7f:2f:5c:cc:94:72:c9:94:98:c8:53:fe:a8:0e:
         d4:ad:ad:25:b4:e7:7f:90:b5:f1:68:8a:1b:b4:8d:5c:18:94:
         e1:a0:db:87:a7:fb:c7:a3:fc:8d:62:61:90:23:5f:3e:00:b6:
         b3:74:a5:ec:07:a0:76:e9:fa:75:7a:e6:51:67:45:64:38:f2:
         e3:7d:9b:96:04:b0:39:d3:ec:28:fc:47:f2:43:c5:90:58:3c:
         de:e7:1e:50:0a:9d:14:d6:12:65:1a:34:74:8b:df:4b:d9:3b:
         e0:cf:f1:ca
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUbcvhIFRj7WPXmc8uEZE+uLHPdlcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTk3QzE1QzJBNDQ0NTFDREJEMkUxQTg2QkRGOEU1Q0U5
NUNDNkExQzAeFw0yNDAxMTUwMDE1MzVaFw0yNTAxMTMwMDIwMzVaMDMxMTAvBgNV
BAMTKEZCQzEyNjk3OTBCMkIxQjQ3Mjk5QUYwMTFFREJFNDEwRTg3OEU5QTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpYYGTDW3czBFYCQEpRivX2qjY
LX2FrJPMzDWjqc1hRaPCJP4z00HRrrj0x0LuEyjNYYp/qnejaMcqYZrVYkWPBhy9
XqwUfJSwqqDHLPn6C8bHWkFmNHBPFsZBGlFycDtDjmFDHzx2taLu+bon5MKVAXs4
cj3Axbh6xapY5eZwqaiEVGKdEE0xLNj/3ENLwQ47Cfl8wvAx1LBB667v/NPLunKY
ZeDAldmc0ViXNA1IPNw6cZRwjkT8Xhfnf1PXAi8zkdzo6AoQ5t1GlAz+YVCaCqLL
lVknxcVJGTcQJwSBxBvISZ8R4AmfncLRxewdFYfXL0PXe1USHxchYB5tbXDLAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQU+8Eml5CysbRyma8BHtvkEOh46aIwHwYDVR0j
BBgwFoAUmXwVwqREUc29LhqGvfjlzpXMahwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vN1ZodjVjNFpFaGFmOEFMWkFOdVJ0cEdqcmpZNW4zZEU0VDJ4dms2Z3Zx
ckwvMi85OTdDMTVDMkE0NDQ1MUNEQkQyRTFBODZCREY4RTVDRTk1Q0M2QTFDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzk5N0MxNUMyQTQ0NDUxQ0RC
RDJFMUE4NkJERjhFNUNFOTVDQzZBMUMuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzdWaHY1YzRaRWhhZjhBTFpBTnVSdHBHanJqWTVuM2RFNFQyeHZrNmd2cXJMLzIv
MzEzNjM4MmUzMTM5MzQyZTMxMzYzNTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzYzNTMzMzkzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAKjCpTANBgkqhkiG9w0BAQsFAAOCAQEAgAEI
pUvk0Kd+/Cito6VfLQQWCBn4WcKvVROYAyPvByLfqjS5qDZFjuEH0ybmhu0cpxrY
HAXTV+RzfnFAx3lcG/0oF1bXzHkwTQ8M6PAjenBb9yS1RYR/uDnIy8VgcRlXWKIh
gFGUgGXcGZlaT6G7qPIHfgHqxyi52Ip1TWkGU139JbGlQdMnhX4ETSHOEaElDX6w
o38vXMyUcsmUmMhT/qgO1K2tJbTnf5C18WiKG7SNXBiU4aDbh6f7x6P8jWJhkCNf
PgC2s3Sl7Aegdun6dXrmUWdFZDjy432blgSwOdPsKPxH8kPFkFg83uceUAqdFNYS
ZRo0dIvfS9k74M/xyg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:54 2024 by rpki-client on console-fra.rpki-client.org