Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7XRnwhyWhQEXayRnmj846Aij2LYfJLhQaZUrc53rMDgb/0/3136382e3139362e3232332e302f32342d3234203d3e20323635343632.roa
File:                     3136382e3139362e3232332e302f32342d3234203d3e20323635343632.roa (raw, json)
Hash identifier:          Bc8BPLxjNKe5JEBz10wIKfw24nlohJx8B7fIVctUx1g=
Subject key identifier:   71:0D:A3:12:5D:33:78:C0:72:86:A4:11:FC:87:76:9E:93:0B:2D:DF
Certificate issuer:       /CN=1BD78CF68D71E5E540716C9B42A8969E9BE28F22
Certificate serial:       6C69847978AAEF03E5BEFC292748CB7951E5BFAA
Authority key identifier: 1B:D7:8C:F6:8D:71:E5:E5:40:71:6C:9B:42:A8:96:9E:9B:E2:8F:22
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1BD78CF68D71E5E540716C9B42A8969E9BE28F22.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7XRnwhyWhQEXayRnmj846Aij2LYfJLhQaZUrc53rMDgb/0/3136382e3139362e3232332e302f32342d3234203d3e20323635343632.roa
Signing time:             Thu 31 Aug 2023 20:32:06 +0000
ROA not before:           Thu 31 Aug 2023 20:27:06 +0000
ROA not after:            Thu 29 Aug 2024 20:32:06 +0000
asID:                     265462
IP address blocks:        168.196.223.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:69:84:79:78:aa:ef:03:e5:be:fc:29:27:48:cb:79:51:e5:bf:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1BD78CF68D71E5E540716C9B42A8969E9BE28F22
        Validity
            Not Before: Aug 31 20:27:06 2023 GMT
            Not After : Aug 29 20:32:06 2024 GMT
        Subject: CN=710DA3125D3378C07286A411FC87769E930B2DDF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:7f:ab:e7:fb:1d:76:a7:26:02:f0:1e:75:fc:
                    77:cc:29:23:bf:38:a6:ef:a5:70:05:b7:29:12:9a:
                    97:a9:e3:52:0a:e7:4a:f4:e9:17:b0:d2:ea:df:5a:
                    14:5b:6b:c3:e6:24:b1:75:81:f9:71:7e:91:cf:41:
                    1b:eb:1f:e2:95:dd:e2:5d:ac:c7:83:0f:7f:de:2b:
                    90:a7:52:95:3b:54:8a:91:25:7e:6d:b1:44:eb:73:
                    b1:b9:62:0f:d2:e1:e3:5f:09:70:43:b2:22:6d:0f:
                    a2:4b:1a:32:5c:08:3a:42:bd:2d:d7:ad:71:5f:47:
                    e5:5d:fc:5f:ed:59:23:40:6a:90:29:05:d2:64:70:
                    f0:47:15:92:ec:c1:76:d2:65:21:03:66:b2:c1:00:
                    f7:99:59:67:19:ec:f5:c6:6e:93:de:3c:66:5b:c6:
                    fe:c1:bc:66:ac:d7:e2:cf:43:d1:a4:c2:3b:20:04:
                    3a:b6:0a:0c:ac:be:4f:da:50:fe:2c:9a:88:e9:f9:
                    0d:66:2b:21:21:11:1d:e9:a8:95:e3:f9:f3:67:2e:
                    4a:ac:ef:93:28:b8:4b:b8:35:02:a2:ee:ce:80:c1:
                    cd:d7:d1:ec:32:c0:f7:64:64:30:58:d3:85:69:8a:
                    bd:ae:97:69:45:14:c6:66:5d:32:b9:a5:9b:e2:63:
                    e9:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:0D:A3:12:5D:33:78:C0:72:86:A4:11:FC:87:76:9E:93:0B:2D:DF
            X509v3 Authority Key Identifier:
                keyid:1B:D7:8C:F6:8D:71:E5:E5:40:71:6C:9B:42:A8:96:9E:9B:E2:8F:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7XRnwhyWhQEXayRnmj846Aij2LYfJLhQaZUrc53rMDgb/0/1BD78CF68D71E5E540716C9B42A8969E9BE28F22.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1BD78CF68D71E5E540716C9B42A8969E9BE28F22.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7XRnwhyWhQEXayRnmj846Aij2LYfJLhQaZUrc53rMDgb/0/3136382e3139362e3232332e302f32342d3234203d3e20323635343632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.196.223.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0c:6c:63:e8:f3:26:c1:68:54:3d:05:8b:41:b1:64:9f:b3:26:
         e4:d2:34:cb:7a:97:10:81:4b:3a:6b:d5:ed:41:d8:ba:48:3a:
         39:82:62:77:5f:99:52:aa:10:de:aa:b5:ed:fe:5e:1a:6f:c4:
         38:ee:5f:bd:5a:b5:f5:6a:e0:7d:83:99:c1:54:b4:6c:8d:f1:
         5e:7c:3a:f8:9c:34:bd:19:4f:c5:18:4f:60:f1:60:1d:52:2c:
         bf:80:a2:6d:cd:98:da:f3:61:61:b0:df:66:b4:47:b9:8f:32:
         4b:7b:c7:35:b8:80:11:91:e9:56:8f:5e:f5:b6:f3:9e:89:a4:
         ec:c9:30:8d:f4:e5:a1:18:e2:54:9b:50:f3:7d:d5:7c:fa:0f:
         dd:d7:c2:90:42:0e:33:3f:5e:b8:40:53:67:b6:6d:d3:09:8e:
         13:01:2e:85:c9:ea:8c:e5:da:2d:3e:23:1a:ca:75:d0:b8:de:
         66:31:d3:93:d9:3a:69:0e:5c:5d:90:17:d7:99:af:1a:66:7e:
         b4:1d:be:d6:9d:93:cd:60:27:81:bd:9b:d9:62:71:b1:7d:7b:
         06:a1:c1:e3:f2:68:cd:05:d9:e7:33:43:77:8e:a3:40:94:72:
         d8:43:f8:68:0e:6c:2d:f7:54:56:f2:98:83:c0:87:cc:3d:02:
         73:3c:42:69
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUbGmEeXiq7wPlvvwpJ0jLeVHlv6owDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUJENzhDRjY4RDcxRTVFNTQwNzE2QzlCNDJBODk2OUU5
QkUyOEYyMjAeFw0yMzA4MzEyMDI3MDZaFw0yNDA4MjkyMDMyMDZaMDMxMTAvBgNV
BAMTKDcxMERBMzEyNUQzMzc4QzA3Mjg2QTQxMUZDODc3NjlFOTMwQjJEREYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJf6vn+x12pyYC8B51/HfMKSO/
OKbvpXAFtykSmpep41IK50r06Rew0urfWhRba8PmJLF1gflxfpHPQRvrH+KV3eJd
rMeDD3/eK5CnUpU7VIqRJX5tsUTrc7G5Yg/S4eNfCXBDsiJtD6JLGjJcCDpCvS3X
rXFfR+Vd/F/tWSNAapApBdJkcPBHFZLswXbSZSEDZrLBAPeZWWcZ7PXGbpPePGZb
xv7BvGas1+LPQ9GkwjsgBDq2Cgysvk/aUP4smojp+Q1mKyEhER3pqJXj+fNnLkqs
75MouEu4NQKi7s6Awc3X0ewywPdkZDBY04Vpir2ul2lFFMZmXTK5pZviY+mxAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUcQ2jEl0zeMByhqQR/Id2npMLLd8wHwYDVR0j
BBgwFoAUG9eM9o1x5eVAcWybQqiWnpvijyIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vN1hSbndoeVdoUUVYYXlSbm1qODQ2QWlqMkxZZkpMaFFhWlVyYzUzck1E
Z2IvMC8xQkQ3OENGNjhENzFFNUU1NDA3MTZDOUI0MkE4OTY5RTlCRTI4RjIyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzFCRDc4Q0Y2OEQ3MUU1RTU0
MDcxNkM5QjQyQTg5NjlFOUJFMjhGMjIuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzdYUm53aHlXaFFFWGF5Um5tajg0NkFpajJMWWZKTGhRYVpVcmM1M3JNRGdiLzAv
MzEzNjM4MmUzMTM5MzYyZTMyMzIzMzJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzYzNTM0MzYzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAKjE3zANBgkqhkiG9w0BAQsFAAOCAQEADGxj
6PMmwWhUPQWLQbFkn7Mm5NI0y3qXEIFLOmvV7UHYukg6OYJid1+ZUqoQ3qq17f5e
Gm/EOO5fvVq19WrgfYOZwVS0bI3xXnw6+Jw0vRlPxRhPYPFgHVIsv4Cibc2Y2vNh
YbDfZrRHuY8yS3vHNbiAEZHpVo9e9bbznomk7MkwjfTloRjiVJtQ833VfPoP3dfC
kEIOMz9euEBTZ7Zt0wmOEwEuhcnqjOXaLT4jGsp10LjeZjHTk9k6aQ5cXZAX15mv
GmZ+tB2+1p2TzWAngb2b2WJxsX17BqHB4/JozQXZ5zNDd46jQJRy2EP4aA5sLfdU
VvKYg8CHzD0CczxCaQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:41 2024 by rpki-client on console-ams.rpki-client.org