Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7Vhv5c4ZEhaf8ALZANuRtpGjrjY5n3dE4T2xvk6gvqrL/3/3136382e3139342e3136342e302f32342d3234203d3e20323635333933.roa
File:                     3136382e3139342e3136342e302f32342d3234203d3e20323635333933.roa (raw, json)
Hash identifier:          BkYm+y4+JBbgr9N3on3a/wVoec66FwcJfwCfti53BUI=
Subject key identifier:   41:19:4B:3E:B5:E9:46:73:67:E3:B1:44:00:4D:2B:FF:E9:EA:88:69
Certificate issuer:       /CN=EC682C741A777F706745E6705BE4FAC8CE53C496
Certificate serial:       0707EB76B2ABA101256892BC43A439A73C3A8FC0
Authority key identifier: EC:68:2C:74:1A:77:7F:70:67:45:E6:70:5B:E4:FA:C8:CE:53:C4:96
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EC682C741A777F706745E6705BE4FAC8CE53C496.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7Vhv5c4ZEhaf8ALZANuRtpGjrjY5n3dE4T2xvk6gvqrL/3/3136382e3139342e3136342e302f32342d3234203d3e20323635333933.roa
Signing time:             Mon 29 Jan 2024 22:13:00 +0000
ROA not before:           Mon 29 Jan 2024 22:08:00 +0000
ROA not after:            Mon 27 Jan 2025 22:13:00 +0000
asID:                     265393
IP address blocks:        168.194.164.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:07:eb:76:b2:ab:a1:01:25:68:92:bc:43:a4:39:a7:3c:3a:8f:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EC682C741A777F706745E6705BE4FAC8CE53C496
        Validity
            Not Before: Jan 29 22:08:00 2024 GMT
            Not After : Jan 27 22:13:00 2025 GMT
        Subject: CN=41194B3EB5E9467367E3B144004D2BFFE9EA8869
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:0f:90:4c:d3:6d:b8:4e:55:38:18:53:1d:0e:
                    5c:a5:53:54:5e:dd:47:0c:93:a8:9a:eb:3b:bc:2a:
                    ba:35:2d:68:b2:57:34:c9:4d:6b:83:77:29:16:63:
                    e8:f8:dc:1b:7a:75:77:0c:83:ca:27:43:88:5c:e0:
                    59:01:32:72:26:bb:6e:6c:c3:ea:e1:3a:35:9e:d3:
                    a0:42:71:b3:c5:3c:47:ed:4d:74:a9:71:03:e2:40:
                    7e:85:b3:2f:c2:39:b5:e8:4d:50:b7:42:e1:d2:0e:
                    ae:5d:45:41:56:83:26:68:8f:9f:b1:fa:17:53:e1:
                    90:96:c6:93:95:06:6b:83:56:10:38:42:05:59:6d:
                    96:09:c7:75:31:f4:48:d7:89:ca:ef:00:c9:ec:2b:
                    63:2e:c5:90:12:40:2c:c5:8c:8e:90:d1:e5:56:9b:
                    f4:d6:cb:fd:34:d0:3d:c7:d7:cb:3d:e4:88:44:63:
                    d3:a5:c9:f0:3f:90:5b:48:06:1e:77:b9:95:cb:64:
                    53:1f:42:ba:a1:66:45:b3:a7:5a:66:d0:2e:43:a1:
                    1a:af:b1:23:d1:65:c0:16:50:48:7c:61:4b:a2:5c:
                    b6:fe:b0:60:6c:c3:ae:c8:e0:93:dd:ac:8e:c7:5a:
                    4b:56:bc:95:0d:3e:72:ee:7a:b2:8e:b9:2e:5a:17:
                    c5:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:19:4B:3E:B5:E9:46:73:67:E3:B1:44:00:4D:2B:FF:E9:EA:88:69
            X509v3 Authority Key Identifier:
                keyid:EC:68:2C:74:1A:77:7F:70:67:45:E6:70:5B:E4:FA:C8:CE:53:C4:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7Vhv5c4ZEhaf8ALZANuRtpGjrjY5n3dE4T2xvk6gvqrL/3/EC682C741A777F706745E6705BE4FAC8CE53C496.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EC682C741A777F706745E6705BE4FAC8CE53C496.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7Vhv5c4ZEhaf8ALZANuRtpGjrjY5n3dE4T2xvk6gvqrL/3/3136382e3139342e3136342e302f32342d3234203d3e20323635333933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.194.164.0/24

    Signature Algorithm: sha256WithRSAEncryption
         71:26:3f:42:44:cd:0e:8a:4b:a5:80:76:85:89:7f:d1:01:ef:
         12:4f:99:55:18:a5:46:01:57:aa:18:5a:ea:a0:5c:d1:c5:7c:
         0e:a5:8b:74:f0:4c:ec:7c:ba:aa:78:36:db:c5:34:cc:a0:cf:
         86:7c:d3:2c:6c:bb:bf:36:80:8a:8f:3d:db:e7:cb:c8:95:b2:
         9d:5e:04:43:12:58:6b:3b:28:f9:03:43:7e:b0:93:5d:26:0c:
         5a:df:3e:97:b6:cf:0f:eb:0e:e4:0c:8e:62:ad:b2:d5:9a:9e:
         63:71:44:77:79:e8:9c:ae:ad:ac:1d:c7:4a:b4:c1:62:05:1b:
         5f:d0:12:1d:1f:3d:8d:f6:75:8e:c9:8e:89:66:72:e2:a8:31:
         21:3c:c2:be:dc:fa:e9:d9:f7:25:ab:e2:d5:83:86:ff:d0:b8:
         45:53:28:fd:19:4a:fa:af:eb:27:cd:7d:79:37:30:10:74:0f:
         58:f4:be:6d:24:09:4e:87:ff:ef:f0:72:ad:f1:02:99:8c:0d:
         bb:89:ed:40:ba:b9:c7:43:75:9b:90:e4:4c:03:94:fc:79:4f:
         6d:27:6a:2f:27:fd:4c:67:90:58:e3:ad:c8:d0:74:35:2b:5d:
         8a:06:6b:03:94:f4:ff:08:8d:b4:e6:22:7f:21:30:cb:65:4c:
         e5:4c:6b:95
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUBwfrdrKroQElaJK8Q6Q5pzw6j8AwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUM2ODJDNzQxQTc3N0Y3MDY3NDVFNjcwNUJFNEZBQzhD
RTUzQzQ5NjAeFw0yNDAxMjkyMjA4MDBaFw0yNTAxMjcyMjEzMDBaMDMxMTAvBgNV
BAMTKDQxMTk0QjNFQjVFOTQ2NzM2N0UzQjE0NDAwNEQyQkZGRTlFQTg4NjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8D5BM0224TlU4GFMdDlylU1Re
3UcMk6ia6zu8Kro1LWiyVzTJTWuDdykWY+j43Bt6dXcMg8onQ4hc4FkBMnImu25s
w+rhOjWe06BCcbPFPEftTXSpcQPiQH6Fsy/CObXoTVC3QuHSDq5dRUFWgyZoj5+x
+hdT4ZCWxpOVBmuDVhA4QgVZbZYJx3Ux9EjXicrvAMnsK2MuxZASQCzFjI6Q0eVW
m/TWy/000D3H18s95IhEY9OlyfA/kFtIBh53uZXLZFMfQrqhZkWzp1pm0C5DoRqv
sSPRZcAWUEh8YUuiXLb+sGBsw67I4JPdrI7HWktWvJUNPnLuerKOuS5aF8XPAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUQRlLPrXpRnNn47FEAE0r/+nqiGkwHwYDVR0j
BBgwFoAU7GgsdBp3f3BnReZwW+T6yM5TxJYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vN1ZodjVjNFpFaGFmOEFMWkFOdVJ0cEdqcmpZNW4zZEU0VDJ4dms2Z3Zx
ckwvMy9FQzY4MkM3NDFBNzc3RjcwNjc0NUU2NzA1QkU0RkFDOENFNTNDNDk2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0VDNjgyQzc0MUE3NzdGNzA2
NzQ1RTY3MDVCRTRGQUM4Q0U1M0M0OTYuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzdWaHY1YzRaRWhhZjhBTFpBTnVSdHBHanJqWTVuM2RFNFQyeHZrNmd2cXJMLzMv
MzEzNjM4MmUzMTM5MzQyZTMxMzYzNDJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzYzNTMzMzkzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAKjCpDANBgkqhkiG9w0BAQsFAAOCAQEAcSY/
QkTNDopLpYB2hYl/0QHvEk+ZVRilRgFXqhha6qBc0cV8DqWLdPBM7Hy6qng228U0
zKDPhnzTLGy7vzaAio892+fLyJWynV4EQxJYazso+QNDfrCTXSYMWt8+l7bPD+sO
5AyOYq2y1ZqeY3FEd3nonK6trB3HSrTBYgUbX9ASHR89jfZ1jsmOiWZy4qgxITzC
vtz66dn3Javi1YOG/9C4RVMo/RlK+q/rJ819eTcwEHQPWPS+bSQJTof/7/ByrfEC
mYwNu4ntQLq5x0N1m5DkTAOU/HlPbSdqLyf9TGeQWOOtyNB0NStdigZrA5T0/wiN
tOYifyEwy2VM5UxrlQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:54 2024 by rpki-client on console-fra.rpki-client.org