Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8YNnQuA5MGYj1JWpEPxUTKHY9fGiivdt7YbCyaBintDq/0/3136342e3136332e302e302f32322d3332203d3e20323635393333.roa
File:                     3136342e3136332e302e302f32322d3332203d3e20323635393333.roa (raw, json)
Hash identifier:          zg3/WpkIUjzVzKw9Chnf/jg7fPOKYAmZhaPO2cJn1Zg=
Subject key identifier:   63:F3:09:4E:92:E6:28:9C:1D:61:7D:00:86:C4:E9:DA:DE:10:78:08
Certificate issuer:       /CN=02F6BC2B546E9EBC686FE1C223C0CF4F8FA24AA3
Certificate serial:       049189E80498FE4355B7D18B4F96CB5600C6F29C
Authority key identifier: 02:F6:BC:2B:54:6E:9E:BC:68:6F:E1:C2:23:C0:CF:4F:8F:A2:4A:A3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/02F6BC2B546E9EBC686FE1C223C0CF4F8FA24AA3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8YNnQuA5MGYj1JWpEPxUTKHY9fGiivdt7YbCyaBintDq/0/3136342e3136332e302e302f32322d3332203d3e20323635393333.roa
Signing time:             Mon 12 Feb 2024 13:53:27 +0000
ROA not before:           Mon 12 Feb 2024 13:48:27 +0000
ROA not after:            Mon 10 Feb 2025 13:53:27 +0000
asID:                     265933
IP address blocks:        164.163.0.0/22 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:91:89:e8:04:98:fe:43:55:b7:d1:8b:4f:96:cb:56:00:c6:f2:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02F6BC2B546E9EBC686FE1C223C0CF4F8FA24AA3
        Validity
            Not Before: Feb 12 13:48:27 2024 GMT
            Not After : Feb 10 13:53:27 2025 GMT
        Subject: CN=63F3094E92E6289C1D617D0086C4E9DADE107808
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:87:57:ce:8b:f4:6f:1e:9a:23:54:46:ec:48:
                    f8:cf:bd:94:f4:35:3a:88:bf:ab:79:d1:fa:ed:3f:
                    12:10:d1:6b:bd:be:41:ce:ed:f5:ee:12:cc:d2:82:
                    92:17:7b:63:32:f2:f5:19:1a:d7:a0:ad:74:7d:bb:
                    54:48:f4:4e:58:73:d9:61:c5:77:c5:4e:f8:b4:e0:
                    c1:ed:3a:65:9a:f4:72:cd:64:cb:c9:93:5a:56:ab:
                    9e:9c:de:b9:46:f5:cd:2c:37:e2:64:63:ca:20:ed:
                    b9:7c:58:28:35:23:af:60:cb:59:66:65:aa:ad:4f:
                    10:bc:88:9f:2d:0e:c9:0b:84:c0:27:43:cd:a6:93:
                    f1:f7:84:fe:31:b9:9b:bc:56:9f:37:32:6f:4b:1a:
                    09:3b:ec:7e:11:fc:1a:ae:40:7f:a7:84:29:a7:82:
                    78:09:42:bf:cf:ee:57:72:45:eb:2e:6e:98:15:62:
                    04:5a:60:41:99:de:41:a1:e4:63:97:57:34:23:61:
                    56:5f:60:86:28:f4:76:72:1c:0b:19:ad:4d:38:49:
                    8f:35:a1:35:39:14:7b:0c:47:6c:62:85:fa:3f:59:
                    c9:63:75:93:8f:8c:b1:80:43:5e:34:57:63:3a:87:
                    f6:b2:26:3f:db:86:6b:a4:ea:44:83:f3:c7:c0:26:
                    b5:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:F3:09:4E:92:E6:28:9C:1D:61:7D:00:86:C4:E9:DA:DE:10:78:08
            X509v3 Authority Key Identifier:
                keyid:02:F6:BC:2B:54:6E:9E:BC:68:6F:E1:C2:23:C0:CF:4F:8F:A2:4A:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8YNnQuA5MGYj1JWpEPxUTKHY9fGiivdt7YbCyaBintDq/0/02F6BC2B546E9EBC686FE1C223C0CF4F8FA24AA3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/02F6BC2B546E9EBC686FE1C223C0CF4F8FA24AA3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8YNnQuA5MGYj1JWpEPxUTKHY9fGiivdt7YbCyaBintDq/0/3136342e3136332e302e302f32322d3332203d3e20323635393333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.163.0.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2c:29:fc:a1:1f:c3:10:a2:57:be:61:20:ec:0e:cb:98:23:c9:
         69:71:45:e4:a8:73:41:fb:7a:3e:3c:e3:19:6d:ba:16:5c:d0:
         f0:d6:ee:e7:f7:59:9c:dd:a3:6d:ab:38:5b:0b:cc:5f:e0:37:
         f4:0f:3d:ff:31:0d:3d:4b:4b:fb:65:1d:6f:2d:90:03:d6:93:
         7b:b3:55:b7:57:02:51:52:ed:4b:e1:db:1f:2f:16:15:a9:13:
         fb:65:f6:4e:39:01:f6:96:d3:45:47:6b:a2:27:1d:6c:3a:1d:
         b8:ca:22:0b:35:b0:08:e8:fa:ee:e9:5d:a8:ef:fb:b7:e5:f8:
         d9:5f:4f:22:4d:77:8b:fc:3e:06:1a:f9:49:1c:9e:36:b1:bd:
         18:c4:d9:ad:61:83:6e:81:3c:83:d2:a4:4c:d0:71:2d:12:4a:
         9c:44:de:49:7f:f1:8b:b8:bb:93:e7:2b:92:21:97:3c:e1:f0:
         25:13:29:dd:38:c9:89:ec:0f:dc:96:de:49:d3:de:36:09:39:
         40:91:72:7b:61:b3:25:15:b3:e2:40:74:26:d6:23:03:76:01:
         0f:e7:fb:da:39:3d:a3:97:b2:c7:95:a3:d8:69:e6:aa:ac:e7:
         46:7d:ac:dc:89:ab:0b:d6:ab:e2:e9:4a:d1:30:ce:74:a8:29:
         0a:16:27:b9
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUBJGJ6ASY/kNVt9GLT5bLVgDG8pwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDJGNkJDMkI1NDZFOUVCQzY4NkZFMUMyMjNDMENGNEY4
RkEyNEFBMzAeFw0yNDAyMTIxMzQ4MjdaFw0yNTAyMTAxMzUzMjdaMDMxMTAvBgNV
BAMTKDYzRjMwOTRFOTJFNjI4OUMxRDYxN0QwMDg2QzRFOURBREUxMDc4MDgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQh1fOi/RvHpojVEbsSPjPvZT0
NTqIv6t50frtPxIQ0Wu9vkHO7fXuEszSgpIXe2My8vUZGtegrXR9u1RI9E5Yc9lh
xXfFTvi04MHtOmWa9HLNZMvJk1pWq56c3rlG9c0sN+JkY8og7bl8WCg1I69gy1lm
ZaqtTxC8iJ8tDskLhMAnQ82mk/H3hP4xuZu8Vp83Mm9LGgk77H4R/BquQH+nhCmn
gngJQr/P7ldyResubpgVYgRaYEGZ3kGh5GOXVzQjYVZfYIYo9HZyHAsZrU04SY81
oTU5FHsMR2xihfo/WcljdZOPjLGAQ140V2M6h/ayJj/bhmuk6kSD88fAJrX7AgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUY/MJTpLmKJwdYX0AhsTp2t4QeAgwHwYDVR0j
BBgwFoAUAva8K1Runrxob+HCI8DPT4+iSqMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOFlOblF1QTVNR1lqMUpXcEVQeFVUS0hZOWZHaWl2ZHQ3WWJDeWFCaW50
RHEvMC8wMkY2QkMyQjU0NkU5RUJDNjg2RkUxQzIyM0MwQ0Y0RjhGQTI0QUEzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzAyRjZCQzJCNTQ2RTlFQkM2
ODZGRTFDMjIzQzBDRjRGOEZBMjRBQTMuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzhZTm5RdUE1TUdZajFKV3BFUHhVVEtIWTlmR2lpdmR0N1liQ3lhQmludERxLzAv
MzEzNjM0MmUzMTM2MzMyZTMwMmUzMDJmMzIzMjJkMzMzMjIwM2QzZTIwMzIzNjM1
MzkzMzMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCpKMAMA0GCSqGSIb3DQEBCwUAA4IBAQAsKfyhH8MQ
ole+YSDsDsuYI8lpcUXkqHNB+3o+POMZbboWXNDw1u7n91mc3aNtqzhbC8xf4Df0
Dz3/MQ09S0v7ZR1vLZAD1pN7s1W3VwJRUu1L4dsfLxYVqRP7ZfZOOQH2ltNFR2ui
Jx1sOh24yiILNbAI6Pru6V2o7/u35fjZX08iTXeL/D4GGvlJHJ42sb0YxNmtYYNu
gTyD0qRM0HEtEkqcRN5Jf/GLuLuT5yuSIZc84fAlEyndOMmJ7A/clt5J0942CTlA
kXJ7YbMlFbPiQHQm1iMDdgEP5/vaOT2jl7LHlaPYaeaqrOdGfazciasL1qvi6UrR
MM50qCkKFie5
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:01 2024 by rpki-client on console-fra.rpki-client.org