Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/84qQtB9gKeTooNN3Jq223AgQSJ4dt1KMixqrPxnU73tJ/0/3136372e3234392e3136302e302f32332d3233203d3e20323635313834.roa
File:                     3136372e3234392e3136302e302f32332d3233203d3e20323635313834.roa (raw, json)
Hash identifier:          qa7yqkRU7PnSS6OueDiRRxWhTPPVqDB+M99rTAHzwvI=
Subject key identifier:   E3:A8:6D:EC:1B:AC:EE:78:B6:13:74:89:67:18:C5:78:DC:95:9F:A7
Certificate issuer:       /CN=2B9940D968C1B623E26643DE1361C10DB3EB7A8A
Certificate serial:       0E49A2D45A80BD926A8416B257935CD6BD704B5D
Authority key identifier: 2B:99:40:D9:68:C1:B6:23:E2:66:43:DE:13:61:C1:0D:B3:EB:7A:8A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2B9940D968C1B623E26643DE1361C10DB3EB7A8A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/84qQtB9gKeTooNN3Jq223AgQSJ4dt1KMixqrPxnU73tJ/0/3136372e3234392e3136302e302f32332d3233203d3e20323635313834.roa
Signing time:             Thu 15 Dec 2022 18:33:57 +0000
ROA not before:           Thu 15 Dec 2022 18:28:57 +0000
ROA not after:            Thu 14 Dec 2023 18:33:57 +0000
asID:                     265184
IP address blocks:        167.249.160.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:49:a2:d4:5a:80:bd:92:6a:84:16:b2:57:93:5c:d6:bd:70:4b:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2B9940D968C1B623E26643DE1361C10DB3EB7A8A
        Validity
            Not Before: Dec 15 18:28:57 2022 GMT
            Not After : Dec 14 18:33:57 2023 GMT
        Subject: CN=E3A86DEC1BACEE78B61374896718C578DC959FA7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:1a:c7:f8:97:b2:a1:43:b4:9e:c2:ab:a2:aa:
                    dd:2f:4f:32:0f:0f:e0:1c:6c:1d:66:67:21:a2:ee:
                    f4:18:1f:56:b1:70:ba:88:f9:31:85:8f:c1:c8:11:
                    ed:0c:c6:24:ac:a4:c4:f9:b1:79:12:6a:9c:00:e0:
                    4e:57:41:92:2b:06:e6:2a:0e:83:89:c9:ea:74:64:
                    bb:fa:f3:0c:4c:a1:b1:79:34:8b:c9:55:a0:49:73:
                    36:a4:f5:30:94:b4:5a:d8:87:fa:89:06:c5:e1:61:
                    58:25:1f:9a:1e:36:c8:fb:f2:a8:8c:ac:7d:5c:3c:
                    43:cf:d2:04:f6:54:e2:96:81:c6:c2:27:80:86:cd:
                    31:eb:fe:55:06:91:bb:93:81:30:72:01:fb:8b:21:
                    2a:61:6b:da:c7:09:75:56:5b:73:e5:0e:7b:ee:7f:
                    3d:e6:2b:2f:52:de:02:4a:0a:ef:5f:ce:c6:f9:2a:
                    46:f5:9a:4a:30:85:95:41:f7:d7:00:b0:55:81:65:
                    bb:66:6a:17:99:87:61:a9:08:56:ab:19:86:66:c3:
                    47:a4:8b:8c:fd:2b:00:f9:40:8c:be:f9:8a:f3:6a:
                    06:45:f3:52:06:98:a6:2d:b7:44:80:22:55:91:c4:
                    3f:a9:89:39:c7:7b:25:1c:10:49:4b:eb:02:81:ba:
                    16:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:A8:6D:EC:1B:AC:EE:78:B6:13:74:89:67:18:C5:78:DC:95:9F:A7
            X509v3 Authority Key Identifier:
                keyid:2B:99:40:D9:68:C1:B6:23:E2:66:43:DE:13:61:C1:0D:B3:EB:7A:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/84qQtB9gKeTooNN3Jq223AgQSJ4dt1KMixqrPxnU73tJ/0/2B9940D968C1B623E26643DE1361C10DB3EB7A8A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2B9940D968C1B623E26643DE1361C10DB3EB7A8A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/84qQtB9gKeTooNN3Jq223AgQSJ4dt1KMixqrPxnU73tJ/0/3136372e3234392e3136302e302f32332d3233203d3e20323635313834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.249.160.0/23

    Signature Algorithm: sha256WithRSAEncryption
         30:0a:b9:7c:a4:01:33:90:03:ae:e9:77:ac:9b:e6:f0:70:2a:
         be:d2:69:2f:fd:48:3c:0b:48:6e:57:4c:23:39:e3:6a:4b:f4:
         b8:fa:26:6d:99:cc:fc:19:35:9f:9a:b1:e1:f5:5f:fd:29:93:
         cf:3b:32:29:8e:2a:07:e7:3a:1d:f7:aa:ce:0b:62:07:d1:08:
         51:b0:28:93:c0:84:93:df:81:88:98:8c:b8:d4:2a:57:51:4f:
         69:34:45:8b:7f:6f:59:a3:bf:ab:30:9d:ba:e9:b4:ed:f9:c8:
         e0:67:dc:13:9e:e0:49:6d:ba:a9:52:6e:bf:da:e8:62:03:cc:
         85:be:3e:99:55:7f:a8:69:6e:de:9f:e6:9b:a8:35:01:e5:30:
         4c:24:2e:4f:b4:79:9f:d0:a2:1d:0b:98:6d:e8:bb:a3:11:aa:
         26:ac:9e:6e:c5:03:ac:b3:ce:b1:ab:96:e1:ff:6e:02:4e:d2:
         81:35:c3:97:d3:43:75:49:35:ac:a0:80:67:8b:87:1f:b8:82:
         9e:94:42:18:46:fb:d1:1b:20:fb:de:37:ba:ff:a1:28:ce:dd:
         dd:0d:82:8b:eb:73:11:2e:60:01:0e:3e:6c:85:4c:d4:a6:99:
         fe:fe:7a:45:73:d6:93:ff:69:b9:ee:ae:57:cc:2d:a9:d0:db:
         8e:86:b0:50
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUDkmi1FqAvZJqhBayV5Nc1r1wS10wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkI5OTQwRDk2OEMxQjYyM0UyNjY0M0RFMTM2MUMxMERC
M0VCN0E4QTAeFw0yMjEyMTUxODI4NTdaFw0yMzEyMTQxODMzNTdaMDMxMTAvBgNV
BAMTKEUzQTg2REVDMUJBQ0VFNzhCNjEzNzQ4OTY3MThDNTc4REM5NTlGQTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCeGsf4l7KhQ7Sewquiqt0vTzIP
D+AcbB1mZyGi7vQYH1axcLqI+TGFj8HIEe0MxiSspMT5sXkSapwA4E5XQZIrBuYq
DoOJyep0ZLv68wxMobF5NIvJVaBJczak9TCUtFrYh/qJBsXhYVglH5oeNsj78qiM
rH1cPEPP0gT2VOKWgcbCJ4CGzTHr/lUGkbuTgTByAfuLISpha9rHCXVWW3PlDnvu
fz3mKy9S3gJKCu9fzsb5Kkb1mkowhZVB99cAsFWBZbtmaheZh2GpCFarGYZmw0ek
i4z9KwD5QIy++YrzagZF81IGmKYtt0SAIlWRxD+piTnHeyUcEElL6wKBuhaRAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQU46ht7Bus7ni2E3SJZxjFeNyVn6cwHwYDVR0j
BBgwFoAUK5lA2WjBtiPiZkPeE2HBDbPreoowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vODRxUXRCOWdLZVRvb05OM0pxMjIzQWdRU0o0ZHQxS01peHFyUHhuVTcz
dEovMC8yQjk5NDBEOTY4QzFCNjIzRTI2NjQzREUxMzYxQzEwREIzRUI3QThBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzJCOTk0MEQ5NjhDMUI2MjNF
MjY2NDNERTEzNjFDMTBEQjNFQjdBOEEuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
Lzg0cVF0QjlnS2VUb29OTjNKcTIyM0FnUVNKNGR0MUtNaXhxclB4blU3M3RKLzAv
MzEzNjM3MmUzMjM0MzkyZTMxMzYzMDJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDMy
MzYzNTMxMzgzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAaf5oDANBgkqhkiG9w0BAQsFAAOCAQEAMAq5
fKQBM5ADrul3rJvm8HAqvtJpL/1IPAtIbldMIznjakv0uPombZnM/Bk1n5qx4fVf
/SmTzzsyKY4qB+c6HfeqzgtiB9EIUbAok8CEk9+BiJiMuNQqV1FPaTRFi39vWaO/
qzCduum07fnI4GfcE57gSW26qVJuv9roYgPMhb4+mVV/qGlu3p/mm6g1AeUwTCQu
T7R5n9CiHQuYbei7oxGqJqyebsUDrLPOsauW4f9uAk7SgTXDl9NDdUk1rKCAZ4uH
H7iCnpRCGEb70Rsg+943uv+hKM7d3Q2Ci+tzES5gAQ4+bIVM1KaZ/v56RXPWk/9p
ue6uV8wtqdDbjoawUA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:56 2024 by rpki-client on console-fra.rpki-client.org