Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/0/3136382e3232382e3235322e302f32322d3232203d3e2032373136.roa
File:                     3136382e3232382e3235322e302f32322d3232203d3e2032373136.roa (raw, json)
Hash identifier:          mSYP54cpLHGqKUq4cue/XScKw9d1h3AZ+LJiCVDhlNE=
Subject key identifier:   25:F3:5B:5D:9D:5A:9A:C4:75:05:EF:A1:BB:C1:B8:A8:4D:D7:D7:76
Certificate issuer:       /CN=ECEBEB7C0E0F4639015227747394BADA3C6E75D5
Certificate serial:       2501A7A3AF41B39DC2FF0D8D80208BD876187469
Authority key identifier: EC:EB:EB:7C:0E:0F:46:39:01:52:27:74:73:94:BA:DA:3C:6E:75:D5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/ECEBEB7C0E0F4639015227747394BADA3C6E75D5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/0/3136382e3232382e3235322e302f32322d3232203d3e2032373136.roa
Signing time:             Fri 07 Jul 2023 15:00:00 +0000
ROA not before:           Fri 07 Jul 2023 14:55:00 +0000
ROA not after:            Fri 05 Jul 2024 15:00:00 +0000
asID:                     2716
IP address blocks:        168.228.252.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:01:a7:a3:af:41:b3:9d:c2:ff:0d:8d:80:20:8b:d8:76:18:74:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ECEBEB7C0E0F4639015227747394BADA3C6E75D5
        Validity
            Not Before: Jul  7 14:55:00 2023 GMT
            Not After : Jul  5 15:00:00 2024 GMT
        Subject: CN=3082010A0282010100C76B8ACB3D90DE0CDC60296C6A59CCCA38F86ABB834375A0ED8CAABD752A7F541B0902F1FF012DEF809968C5C23F453DD443A158F37260B49D88E8999769835AE8F03C42CC02F663FFEC0E2989F8948AC7F5880512E18F11C58F9AA5F981F78E91090E9029F206D05383581B53EABD8A992EE9F4FACAD18BA96D38A9FA2DDBAED245F19CBC13EC2E4BD3933A40DD8A7C22AE08855B675E0E2A91888F45CA913C0AB9B6052EB47A47F421FD46EE7E0BA5FE5E24E08CA06C82BAA152A577E60D973432A55F6607FF3C4C42D2B025A1C4717FF3F8637B60B14A47A3D14DDF95A2BBD10DFAAC5F02F2599962B766763247C87254E33DB41C271DA3299D0334CA7DED0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:6b:8a:cb:3d:90:de:0c:dc:60:29:6c:6a:59:
                    cc:ca:38:f8:6a:bb:83:43:75:a0:ed:8c:aa:bd:75:
                    2a:7f:54:1b:09:02:f1:ff:01:2d:ef:80:99:68:c5:
                    c2:3f:45:3d:d4:43:a1:58:f3:72:60:b4:9d:88:e8:
                    99:97:69:83:5a:e8:f0:3c:42:cc:02:f6:63:ff:ec:
                    0e:29:89:f8:94:8a:c7:f5:88:05:12:e1:8f:11:c5:
                    8f:9a:a5:f9:81:f7:8e:91:09:0e:90:29:f2:06:d0:
                    53:83:58:1b:53:ea:bd:8a:99:2e:e9:f4:fa:ca:d1:
                    8b:a9:6d:38:a9:fa:2d:db:ae:d2:45:f1:9c:bc:13:
                    ec:2e:4b:d3:93:3a:40:dd:8a:7c:22:ae:08:85:5b:
                    67:5e:0e:2a:91:88:8f:45:ca:91:3c:0a:b9:b6:05:
                    2e:b4:7a:47:f4:21:fd:46:ee:7e:0b:a5:fe:5e:24:
                    e0:8c:a0:6c:82:ba:a1:52:a5:77:e6:0d:97:34:32:
                    a5:5f:66:07:ff:3c:4c:42:d2:b0:25:a1:c4:71:7f:
                    f3:f8:63:7b:60:b1:4a:47:a3:d1:4d:df:95:a2:bb:
                    d1:0d:fa:ac:5f:02:f2:59:99:62:b7:66:76:32:47:
                    c8:72:54:e3:3d:b4:1c:27:1d:a3:29:9d:03:34:ca:
                    7d:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:F3:5B:5D:9D:5A:9A:C4:75:05:EF:A1:BB:C1:B8:A8:4D:D7:D7:76
            X509v3 Authority Key Identifier:
                keyid:EC:EB:EB:7C:0E:0F:46:39:01:52:27:74:73:94:BA:DA:3C:6E:75:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/0/ECEBEB7C0E0F4639015227747394BADA3C6E75D5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/ECEBEB7C0E0F4639015227747394BADA3C6E75D5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/0/3136382e3232382e3235322e302f32322d3232203d3e2032373136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.228.252.0/22

    Signature Algorithm: sha256WithRSAEncryption
         71:63:c3:ad:e5:13:68:92:e3:28:c3:55:cf:72:b3:bb:db:1e:
         54:ef:4a:34:5d:88:0d:a2:a0:53:bb:fd:bd:db:4d:62:4a:50:
         79:f6:0a:fd:ec:17:e2:69:09:d9:3c:69:52:26:31:00:ab:e7:
         26:a0:78:03:d0:8b:4f:df:dd:a4:af:ab:eb:5e:7e:58:72:53:
         58:ad:e9:b3:66:5e:09:c5:84:c7:63:4b:dd:19:cb:40:6c:bb:
         01:53:7b:c1:ce:c2:0f:13:6b:ad:c6:71:c6:6f:ca:d9:9d:72:
         b1:27:ab:8b:fb:f1:54:46:d6:0a:78:cc:0c:52:ef:28:2e:4c:
         9a:a6:62:2d:42:ce:c9:dd:fb:30:88:b0:77:d5:df:f5:7f:41:
         ba:e5:58:85:4a:3f:f7:b6:2b:02:db:1a:e9:ae:37:03:dd:22:
         1c:9b:03:53:af:21:7a:53:05:f8:67:b0:9c:c0:6f:e2:40:5c:
         37:f8:2b:52:60:ee:3e:63:e0:a9:cb:c7:6e:6e:e1:f7:f6:7a:
         c8:a5:54:30:1d:06:ff:a7:12:da:f7:0e:33:a0:68:57:94:d8:
         f7:92:b4:30:83:29:9a:01:9c:ea:5e:db:09:bd:0a:fb:35:8d:
         d0:2f:89:06:50:b6:12:9a:02:16:1f:6d:38:38:c3:8b:4a:ed:
         a7:58:7e:e2
-----BEGIN CERTIFICATE-----
MIIHQTCCBimgAwIBAgIUJQGno69Bs53C/w2NgCCL2HYYdGkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUNFQkVCN0MwRTBGNDYzOTAxNTIyNzc0NzM5NEJBREEz
QzZFNzVENTAeFw0yMzA3MDcxNDU1MDBaFw0yNDA3MDUxNTAwMDBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQzc2QjhBQ0IzRDkwREUwQ0RD
NjAyOTZDNkE1OUNDQ0EzOEY4NkFCQjgzNDM3NUEwRUQ4Q0FBQkQ3NTJBN0Y1NDFC
MDkwMkYxRkYwMTJERUY4MDk5NjhDNUMyM0Y0NTNERDQ0M0ExNThGMzcyNjBCNDlE
ODhFODk5OTc2OTgzNUFFOEYwM0M0MkNDMDJGNjYzRkZFQzBFMjk4OUY4OTQ4QUM3
RjU4ODA1MTJFMThGMTFDNThGOUFBNUY5ODFGNzhFOTEwOTBFOTAyOUYyMDZEMDUz
ODM1ODFCNTNFQUJEOEE5OTJFRTlGNEZBQ0FEMThCQTk2RDM4QTlGQTJEREJBRUQy
NDVGMTlDQkMxM0VDMkU0QkQzOTMzQTQwREQ4QTdDMjJBRTA4ODU1QjY3NUUwRTJB
OTE4ODhGNDVDQTkxM0MwQUI5QjYwNTJFQjQ3QTQ3RjQyMUZENDZFRTdFMEJBNUZF
NUUyNEUwOENBMDZDODJCQUExNTJBNTc3RTYwRDk3MzQzMkE1NUY2NjA3RkYzQzRD
NDJEMkIwMjVBMUM0NzE3RkYzRjg2MzdCNjBCMTRBNDdBM0QxNERERjk1QTJCQkQx
MERGQUFDNUYwMkYyNTk5OTYyQjc2Njc2MzI0N0M4NzI1NEUzM0RCNDFDMjcxREEz
Mjk5RDAzMzRDQTdERUQwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAx2uKyz2Q3gzcYClsalnMyjj4aruDQ3Wg7YyqvXUqf1QbCQLx/wEt
74CZaMXCP0U91EOhWPNyYLSdiOiZl2mDWujwPELMAvZj/+wOKYn4lIrH9YgFEuGP
EcWPmqX5gfeOkQkOkCnyBtBTg1gbU+q9ipku6fT6ytGLqW04qfot267SRfGcvBPs
LkvTkzpA3Yp8Iq4IhVtnXg4qkYiPRcqRPAq5tgUutHpH9CH9Ru5+C6X+XiTgjKBs
grqhUqV35g2XNDKlX2YH/zxMQtKwJaHEcX/z+GN7YLFKR6PRTd+VorvRDfqsXwLy
WZlit2Z2MkfIclTjPbQcJx2jKZ0DNMp97QIDAQABo4ICTzCCAkswHQYDVR0OBBYE
FCXzW12dWprEdQXvobvBuKhN19d2MB8GA1UdIwQYMBaAFOzr63wOD0Y5AVIndHOU
uto8bnXVMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzhFYjRBR2pmTlk5emQ3
dEJtd2hUWExUSnlGRkFGelVGcVBnZUhVQ04xU3dhLzAvRUNFQkVCN0MwRTBGNDYz
OTAxNTIyNzc0NzM5NEJBREEzQzZFNzVENS5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC9FQ0VCRUI3QzBFMEY0NjM5MDE1MjI3NzQ3Mzk0QkFEQTNDNkU3
NUQ1LmNlcjCBrAYIKwYBBQUHAQsEgZ8wgZwwgZkGCCsGAQUFBzALhoGMcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby84RWI0QUdqZk5ZOXpkN3RCbXdo
VFhMVEp5RkZBRnpVRnFQZ2VIVUNOMVN3YS8wLzMxMzYzODJlMzIzMjM4MmUzMjM1
MzIyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzMjM3MzEzNi5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAqjk
/DANBgkqhkiG9w0BAQsFAAOCAQEAcWPDreUTaJLjKMNVz3Kzu9seVO9KNF2IDaKg
U7v9vdtNYkpQefYK/ewX4mkJ2TxpUiYxAKvnJqB4A9CLT9/dpK+r615+WHJTWK3p
s2ZeCcWEx2NL3RnLQGy7AVN7wc7CDxNrrcZxxm/K2Z1ysSeri/vxVEbWCnjMDFLv
KC5MmqZiLULOyd37MIiwd9Xf9X9BuuVYhUo/97YrAtsa6a43A90iHJsDU68helMF
+GewnMBv4kBcN/grUmDuPmPgqcvHbm7h9/Z6yKVUMB0G/6cS2vcOM6BoV5TY95K0
MIMpmgGc6l7bCb0K+zWN0C+JBlC2EpoCFh9tODjDi0rtp1h+4g==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:57 2024 by rpki-client on console-fra.rpki-client.org