Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/0/3136382e3233322e3233362e302f32322d3232203d3e203139323030.roa
File:                     3136382e3233322e3233362e302f32322d3232203d3e203139323030.roa (raw, json)
Hash identifier:          bh5SBNVKNFK8+4PW0sYXxB1jLkRmpcVNQLw4eW9zFdk=
Subject key identifier:   EC:FA:CD:60:01:C8:A1:66:04:E0:68:7F:0A:35:63:5D:41:1A:36:96
Certificate issuer:       /CN=ECEBEB7C0E0F4639015227747394BADA3C6E75D5
Certificate serial:       3709D4F8126AB3FFC344CD88EB1E27370CB3CCF1
Authority key identifier: EC:EB:EB:7C:0E:0F:46:39:01:52:27:74:73:94:BA:DA:3C:6E:75:D5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/ECEBEB7C0E0F4639015227747394BADA3C6E75D5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/0/3136382e3233322e3233362e302f32322d3232203d3e203139323030.roa
Signing time:             Fri 30 Jun 2023 19:00:00 +0000
ROA not before:           Fri 30 Jun 2023 18:55:00 +0000
ROA not after:            Fri 28 Jun 2024 19:00:00 +0000
asID:                     19200
IP address blocks:        168.232.236.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:09:d4:f8:12:6a:b3:ff:c3:44:cd:88:eb:1e:27:37:0c:b3:cc:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ECEBEB7C0E0F4639015227747394BADA3C6E75D5
        Validity
            Not Before: Jun 30 18:55:00 2023 GMT
            Not After : Jun 28 19:00:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:49:88:3d:d3:75:2a:51:0b:c6:7d:0f:4f:6d:
                    76:e4:53:8b:83:3f:7b:4a:be:b0:a1:b7:8e:4d:19:
                    30:19:c0:dc:b7:fd:7a:5e:b7:eb:ca:88:0c:04:30:
                    29:2e:fe:15:52:f1:83:65:c6:af:30:18:c6:0f:b5:
                    91:41:75:ab:36:0a:22:35:d7:8c:11:4f:a2:02:15:
                    65:f2:a8:50:99:e6:54:30:80:f8:5c:5d:33:58:6a:
                    d0:5c:31:66:94:de:9d:5b:81:09:f4:85:d3:06:08:
                    13:a8:65:77:44:b9:63:52:95:ac:d5:68:82:0d:76:
                    2a:61:ff:73:d7:ce:89:b9:02:6b:d1:50:15:31:32:
                    e1:69:c6:b7:10:85:82:b8:37:c2:87:43:5a:ca:e9:
                    45:b2:da:4f:13:af:ae:00:15:d6:00:be:b7:51:9e:
                    f6:79:23:0f:6f:51:ea:94:33:21:5d:f4:e6:e5:53:
                    7a:04:bd:42:52:97:ac:c3:c0:61:52:4d:b7:a2:2c:
                    47:9c:fb:91:93:3f:38:26:a0:36:12:38:ff:2e:5a:
                    fc:53:92:d7:4a:0e:87:76:0e:8b:c7:32:5a:a1:19:
                    ad:a9:e5:3f:05:a8:75:47:4f:df:60:38:ec:a0:21:
                    bd:15:9a:14:51:ff:d3:46:66:89:0c:7f:12:8d:39:
                    ef:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:FA:CD:60:01:C8:A1:66:04:E0:68:7F:0A:35:63:5D:41:1A:36:96
            X509v3 Authority Key Identifier:
                keyid:EC:EB:EB:7C:0E:0F:46:39:01:52:27:74:73:94:BA:DA:3C:6E:75:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/0/ECEBEB7C0E0F4639015227747394BADA3C6E75D5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/ECEBEB7C0E0F4639015227747394BADA3C6E75D5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/0/3136382e3233322e3233362e302f32322d3232203d3e203139323030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.232.236.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a5:5c:20:29:d8:1d:65:b5:a4:bc:a9:7a:17:99:7b:53:aa:83:
         18:60:eb:c8:aa:b2:1b:cf:52:56:a1:9b:0a:fe:85:55:86:83:
         08:4d:d7:c4:92:fa:97:bf:d3:fb:c2:f8:28:31:3b:aa:04:49:
         57:65:78:fe:8e:ef:3f:f4:6d:c1:ce:49:34:31:43:55:49:4f:
         06:24:43:05:30:be:3f:09:78:0d:db:3c:db:3f:40:4f:6f:85:
         34:bc:6c:0e:ea:41:b0:d8:e3:88:0c:ae:94:78:9d:49:f2:6f:
         ff:a9:a4:71:33:66:14:a9:ab:d6:b4:7a:fd:77:fc:c7:57:38:
         28:1a:dc:38:ab:10:10:bd:b0:eb:62:a6:22:74:a0:94:cf:a5:
         0d:2d:f2:7a:b4:79:00:98:c8:77:3b:45:2b:13:5a:bb:be:c6:
         17:1a:2a:a6:6f:9e:07:c2:19:ab:3c:df:6e:9a:92:8f:c1:8f:
         7d:36:15:5e:13:a8:7d:12:e3:f1:76:db:42:49:c9:d4:6e:d8:
         3a:d2:3e:1d:78:6b:fa:21:08:bb:51:39:5c:ec:e0:70:6c:0c:
         01:97:0e:bb:39:bd:75:ca:a0:ea:b6:0c:36:a4:77:85:f7:05:
         62:25:d7:f3:3d:06:ca:8e:9a:1c:9b:fc:65:c5:c2:7f:5d:06:
         54:31:f5:cc
-----BEGIN CERTIFICATE-----
MIIHQzCCBiugAwIBAgIUNwnU+BJqs//DRM2I6x4nNwyzzPEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUNFQkVCN0MwRTBGNDYzOTAxNTIyNzc0NzM5NEJBREEz
QzZFNzVENTAeFw0yMzA2MzAxODU1MDBaFw0yNDA2MjgxOTAwMDBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwRDM0OTg4M0REMzc1MkE1MTBC
QzY3RDBGNEY2RDc2RTQ1MzhCODMzRjdCNEFCRUIwQTFCNzhFNEQxOTMwMTlDMERD
QjdGRDdBNUVCN0VCQ0E4ODBDMDQzMDI5MkVGRTE1NTJGMTgzNjVDNkFGMzAxOEM2
MEZCNTkxNDE3NUFCMzYwQTIyMzVENzhDMTE0RkEyMDIxNTY1RjJBODUwOTlFNjU0
MzA4MEY4NUM1RDMzNTg2QUQwNUMzMTY2OTRERTlENUI4MTA5RjQ4NUQzMDYwODEz
QTg2NTc3NDRCOTYzNTI5NUFDRDU2ODgyMEQ3NjJBNjFGRjczRDdDRTg5QjkwMjZC
RDE1MDE1MzEzMkUxNjlDNkI3MTA4NTgyQjgzN0MyODc0MzVBQ0FFOTQ1QjJEQTRG
MTNBRkFFMDAxNUQ2MDBCRUI3NTE5RUY2NzkyMzBGNkY1MUVBOTQzMzIxNURGNEU2
RTU1MzdBMDRCRDQyNTI5N0FDQzNDMDYxNTI0REI3QTIyQzQ3OUNGQjkxOTMzRjM4
MjZBMDM2MTIzOEZGMkU1QUZDNTM5MkQ3NEEwRTg3NzYwRThCQzczMjVBQTExOUFE
QTlFNTNGMDVBODc1NDc0RkRGNjAzOEVDQTAyMUJEMTU5QTE0NTFGRkQzNDY2Njg5
MEM3RjEyOEQzOUVGMkIwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEA00mIPdN1KlELxn0PT2125FOLgz97Sr6wobeOTRkwGcDct/16Xrfr
yogMBDApLv4VUvGDZcavMBjGD7WRQXWrNgoiNdeMEU+iAhVl8qhQmeZUMID4XF0z
WGrQXDFmlN6dW4EJ9IXTBggTqGV3RLljUpWs1WiCDXYqYf9z186JuQJr0VAVMTLh
aca3EIWCuDfCh0NayulFstpPE6+uABXWAL63UZ72eSMPb1HqlDMhXfTm5VN6BL1C
Upesw8BhUk23oixHnPuRkz84JqA2Ejj/Llr8U5LXSg6Hdg6LxzJaoRmtqeU/Bah1
R0/fYDjsoCG9FZoUUf/TRmaJDH8SjTnvKwIDAQABo4ICUTCCAk0wHQYDVR0OBBYE
FOz6zWAByKFmBOBofwo1Y11BGjaWMB8GA1UdIwQYMBaAFOzr63wOD0Y5AVIndHOU
uto8bnXVMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzhFYjRBR2pmTlk5emQ3
dEJtd2hUWExUSnlGRkFGelVGcVBnZUhVQ04xU3dhLzAvRUNFQkVCN0MwRTBGNDYz
OTAxNTIyNzc0NzM5NEJBREEzQzZFNzVENS5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC9FQ0VCRUI3QzBFMEY0NjM5MDE1MjI3NzQ3Mzk0QkFEQTNDNkU3
NUQ1LmNlcjCBrgYIKwYBBQUHAQsEgaEwgZ4wgZsGCCsGAQUFBzALhoGOcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby84RWI0QUdqZk5ZOXpkN3RCbXdo
VFhMVEp5RkZBRnpVRnFQZ2VIVUNOMVN3YS8wLzMxMzYzODJlMzIzMzMyMmUzMjMz
MzYyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzMTM5MzIzMDMwLnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC
qOjsMA0GCSqGSIb3DQEBCwUAA4IBAQClXCAp2B1ltaS8qXoXmXtTqoMYYOvIqrIb
z1JWoZsK/oVVhoMITdfEkvqXv9P7wvgoMTuqBElXZXj+ju8/9G3Bzkk0MUNVSU8G
JEMFML4/CXgN2zzbP0BPb4U0vGwO6kGw2OOIDK6UeJ1J8m//qaRxM2YUqavWtHr9
d/zHVzgoGtw4qxAQvbDrYqYidKCUz6UNLfJ6tHkAmMh3O0UrE1q7vsYXGiqmb54H
whmrPN9umpKPwY99NhVeE6h9EuPxdttCScnUbtg60j4deGv6IQi7UTlc7OBwbAwB
lw67Ob11yqDqtgw2pHeF9wViJdfzPQbKjpocm/xlxcJ/XQZUMfXM
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:57 2024 by rpki-client on console-fra.rpki-client.org