Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7WFqUnjSvvLje5QQr5UpuGCyruLpgbnCcvc4q3uQDx3H/0/3136382e3233322e302e302f32322d3332203d3e20323634393233.roa
File:                     3136382e3233322e302e302f32322d3332203d3e20323634393233.roa (raw, json)
Hash identifier:          jhgVftfNlAA3Vr/Teu19M52pIBly3Me6apXC+sA3gdk=
Subject key identifier:   36:D8:C4:10:F4:A6:7E:82:D6:D1:56:2A:C0:AF:F7:D6:0F:53:49:D6
Certificate issuer:       /CN=9E54D69054206DEF8B1FF13819043F54681F0EED
Certificate serial:       54FCB47C5A46705356DD55AFA552D1C06EE0EE29
Authority key identifier: 9E:54:D6:90:54:20:6D:EF:8B:1F:F1:38:19:04:3F:54:68:1F:0E:ED
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9E54D69054206DEF8B1FF13819043F54681F0EED.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7WFqUnjSvvLje5QQr5UpuGCyruLpgbnCcvc4q3uQDx3H/0/3136382e3233322e302e302f32322d3332203d3e20323634393233.roa
Signing time:             Sun 24 Mar 2024 16:15:33 +0000
ROA not before:           Sun 24 Mar 2024 16:10:33 +0000
ROA not after:            Sun 23 Mar 2025 16:15:33 +0000
asID:                     264923
IP address blocks:        168.232.0.0/22 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:fc:b4:7c:5a:46:70:53:56:dd:55:af:a5:52:d1:c0:6e:e0:ee:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9E54D69054206DEF8B1FF13819043F54681F0EED
        Validity
            Not Before: Mar 24 16:10:33 2024 GMT
            Not After : Mar 23 16:15:33 2025 GMT
        Subject: CN=36D8C410F4A67E82D6D1562AC0AFF7D60F5349D6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:c0:03:5c:4d:b7:33:58:8b:5b:9d:32:b5:ed:
                    9c:a5:a0:a4:21:a8:6b:c3:e1:04:93:dd:c4:f4:57:
                    55:06:dc:9d:b2:45:a6:f5:f8:9e:e5:6c:ec:e6:86:
                    41:37:fe:d0:bd:2d:51:db:1b:c1:83:df:e4:76:4b:
                    92:00:45:b1:cc:d3:e8:f2:fa:72:dc:13:e5:88:fe:
                    8d:d8:9e:f9:9b:e3:a1:11:8a:bd:98:64:0c:b0:bb:
                    6e:11:e7:10:64:ed:d5:58:c3:71:23:6a:55:69:a3:
                    05:7d:2c:f2:1c:02:25:04:11:f8:1a:46:9c:90:60:
                    b9:c7:f8:71:de:0f:3e:c4:b3:d1:f2:19:be:c7:a1:
                    29:c6:b6:3e:0f:f5:ff:98:44:bb:11:21:06:24:0a:
                    47:a3:d6:13:5a:d6:0a:b0:35:50:d2:d4:f0:62:11:
                    a2:c9:33:d8:7c:60:c9:0b:fd:7c:5a:2a:8e:c9:f4:
                    36:a9:18:a9:d0:72:ff:d0:b6:06:a8:f6:20:6d:0a:
                    6b:e7:92:e5:ec:30:e0:48:5c:30:80:84:8e:e4:92:
                    30:bf:a0:c4:a8:eb:ea:e0:8b:60:32:28:cd:59:c8:
                    62:a4:a4:ae:1a:9d:49:88:12:31:11:f3:eb:f8:47:
                    c2:a1:d6:5a:0c:52:89:8f:47:8b:54:00:96:c9:0f:
                    71:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:D8:C4:10:F4:A6:7E:82:D6:D1:56:2A:C0:AF:F7:D6:0F:53:49:D6
            X509v3 Authority Key Identifier:
                keyid:9E:54:D6:90:54:20:6D:EF:8B:1F:F1:38:19:04:3F:54:68:1F:0E:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7WFqUnjSvvLje5QQr5UpuGCyruLpgbnCcvc4q3uQDx3H/0/9E54D69054206DEF8B1FF13819043F54681F0EED.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9E54D69054206DEF8B1FF13819043F54681F0EED.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7WFqUnjSvvLje5QQr5UpuGCyruLpgbnCcvc4q3uQDx3H/0/3136382e3233322e302e302f32322d3332203d3e20323634393233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.232.0.0/22

    Signature Algorithm: sha256WithRSAEncryption
         22:9d:87:04:24:d6:3c:cb:5f:a2:14:9d:5a:e8:59:50:21:e1:
         4d:48:5d:05:81:18:19:5c:c1:54:11:8d:55:70:df:e5:b5:c0:
         df:b0:2e:99:94:5f:9f:4f:81:d6:1c:4f:3e:94:fb:e4:b2:8d:
         89:f7:73:52:1d:31:cc:25:d1:5e:53:a5:05:a9:2c:cb:79:d9:
         15:14:11:7c:70:15:66:41:30:f9:bf:64:7d:24:2a:56:cd:2c:
         55:6e:37:21:a6:34:4f:5f:b6:30:13:5f:08:a4:3b:1f:5c:44:
         50:22:7d:41:16:bb:fc:63:1c:28:a1:cd:06:cd:ca:84:e9:82:
         93:a1:5a:5b:bc:71:e0:ee:8d:bf:b4:c5:13:c2:3b:28:35:e2:
         2e:38:c3:68:18:40:3d:e5:39:24:34:05:a9:64:d0:6b:54:91:
         a4:61:53:d4:56:dd:56:4b:90:46:ea:46:48:c5:35:f7:2d:1b:
         a1:71:d6:2d:12:b2:51:0d:b4:6d:79:c2:72:a3:d4:e1:4d:9d:
         ec:e5:10:d9:29:46:a1:8f:3c:1d:d2:d2:78:09:44:3b:79:12:
         fc:ad:08:3a:b0:9d:6a:ce:4f:9f:d8:78:17:eb:19:92:22:dc:
         d0:25:ee:78:9f:e4:5e:35:84:1e:25:88:b4:81:9a:16:98:95:
         5a:0b:2f:17
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUVPy0fFpGcFNW3VWvpVLRwG7g7ikwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUU1NEQ2OTA1NDIwNkRFRjhCMUZGMTM4MTkwNDNGNTQ2
ODFGMEVFRDAeFw0yNDAzMjQxNjEwMzNaFw0yNTAzMjMxNjE1MzNaMDMxMTAvBgNV
BAMTKDM2RDhDNDEwRjRBNjdFODJENkQxNTYyQUMwQUZGN0Q2MEY1MzQ5RDYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZwANcTbczWItbnTK17ZyloKQh
qGvD4QST3cT0V1UG3J2yRab1+J7lbOzmhkE3/tC9LVHbG8GD3+R2S5IARbHM0+jy
+nLcE+WI/o3Ynvmb46ERir2YZAywu24R5xBk7dVYw3EjalVpowV9LPIcAiUEEfga
RpyQYLnH+HHeDz7Es9HyGb7HoSnGtj4P9f+YRLsRIQYkCkej1hNa1gqwNVDS1PBi
EaLJM9h8YMkL/XxaKo7J9DapGKnQcv/Qtgao9iBtCmvnkuXsMOBIXDCAhI7kkjC/
oMSo6+rgi2AyKM1ZyGKkpK4anUmIEjER8+v4R8Kh1loMUomPR4tUAJbJD3FzAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUNtjEEPSmfoLW0VYqwK/31g9TSdYwHwYDVR0j
BBgwFoAUnlTWkFQgbe+LH/E4GQQ/VGgfDu0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vN1dGcVVualN2dkxqZTVRUXI1VXB1R0N5cnVMcGdibkNjdmM0cTN1UUR4
M0gvMC85RTU0RDY5MDU0MjA2REVGOEIxRkYxMzgxOTA0M0Y1NDY4MUYwRUVELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzlFNTRENjkwNTQyMDZERUY4
QjFGRjEzODE5MDQzRjU0NjgxRjBFRUQuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzdXRnFVbmpTdnZMamU1UVFyNVVwdUdDeXJ1THBnYm5DY3ZjNHEzdVFEeDNILzAv
MzEzNjM4MmUzMjMzMzIyZTMwMmUzMDJmMzIzMjJkMzMzMjIwM2QzZTIwMzIzNjM0
MzkzMjMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCqOgAMA0GCSqGSIb3DQEBCwUAA4IBAQAinYcEJNY8
y1+iFJ1a6FlQIeFNSF0FgRgZXMFUEY1VcN/ltcDfsC6ZlF+fT4HWHE8+lPvkso2J
93NSHTHMJdFeU6UFqSzLedkVFBF8cBVmQTD5v2R9JCpWzSxVbjchpjRPX7YwE18I
pDsfXERQIn1BFrv8Yxwooc0GzcqE6YKToVpbvHHg7o2/tMUTwjsoNeIuOMNoGEA9
5TkkNAWpZNBrVJGkYVPUVt1WS5BG6kZIxTX3LRuhcdYtErJRDbRtecJyo9ThTZ3s
5RDZKUahjzwd0tJ4CUQ7eRL8rQg6sJ1qzk+f2HgX6xmSItzQJe54n+ReNYQeJYi0
gZoWmJVaCy8X
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:41 2024 by rpki-client on console-ams.rpki-client.org