Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8YNnQuA5MGYj1JWpEPxUTKHY9fGiivdt7YbCyaBintDq/1/3136342e3136332e302e302f32322d3233203d3e20323635393333.roa
File:                     3136342e3136332e302e302f32322d3233203d3e20323635393333.roa (raw, json)
Hash identifier:          hSDUCEtD5lK2sLQGwnxawGSJMAp/kgEbmAU571W0D9U=
Subject key identifier:   DA:16:9C:30:51:95:F2:24:F8:0F:5C:65:CB:C5:84:6F:0A:EF:61:71
Certificate issuer:       /CN=37FD977CDE44223390A6F44F0C91E67DE37D0E6E
Certificate serial:       7A10556F68A71FFE5DF16383888C599AAB393551
Authority key identifier: 37:FD:97:7C:DE:44:22:33:90:A6:F4:4F:0C:91:E6:7D:E3:7D:0E:6E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/37FD977CDE44223390A6F44F0C91E67DE37D0E6E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8YNnQuA5MGYj1JWpEPxUTKHY9fGiivdt7YbCyaBintDq/1/3136342e3136332e302e302f32322d3233203d3e20323635393333.roa
Signing time:             Tue 19 Sep 2023 13:27:18 +0000
ROA not before:           Tue 19 Sep 2023 13:22:18 +0000
ROA not after:            Tue 17 Sep 2024 13:27:18 +0000
asID:                     265933
IP address blocks:        164.163.0.0/22 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:10:55:6f:68:a7:1f:fe:5d:f1:63:83:88:8c:59:9a:ab:39:35:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37FD977CDE44223390A6F44F0C91E67DE37D0E6E
        Validity
            Not Before: Sep 19 13:22:18 2023 GMT
            Not After : Sep 17 13:27:18 2024 GMT
        Subject: CN=DA169C305195F224F80F5C65CBC5846F0AEF6171
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:5c:d4:a1:d7:60:a6:7f:8e:37:d3:04:14:7e:
                    be:33:c1:06:d0:71:bd:0a:fd:91:08:04:52:61:29:
                    c2:5b:84:b6:3e:3e:fe:2a:df:43:42:18:fb:5c:2b:
                    a2:8d:e9:38:13:f4:e9:4d:25:93:5c:a7:9a:b1:2f:
                    6d:7a:a7:cf:a1:67:b5:d9:c4:3d:23:71:a0:bd:5f:
                    f4:cd:4c:5c:e1:95:6f:d1:86:1f:59:ff:be:06:a9:
                    69:fb:0c:74:10:84:0c:ca:91:3f:bc:19:a1:da:e7:
                    2b:19:1a:1d:7d:90:25:46:0d:a4:2b:5a:53:06:12:
                    b2:1a:cb:8e:e2:0b:c7:d3:21:3a:cd:e7:96:b1:2f:
                    46:86:ed:43:1e:43:83:5b:ec:e9:e5:f1:0e:a8:8a:
                    ac:0a:36:7e:e5:95:6b:a5:12:fc:af:ca:bb:ea:1e:
                    8a:e6:02:11:b5:0e:5a:60:b0:2f:c0:31:71:17:cf:
                    ff:b0:0f:7e:85:6d:2a:1a:37:6f:34:ae:80:b6:25:
                    08:9d:37:d3:8d:90:c6:c8:30:19:cb:a8:fd:d3:f5:
                    a3:d0:71:e5:e4:1b:d7:69:2b:62:d5:6e:7f:eb:52:
                    79:2e:b1:79:8c:82:5a:d3:d1:a1:f2:35:08:38:78:
                    aa:7c:b7:66:c4:03:f4:cc:df:fd:3a:71:37:d6:57:
                    a4:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:16:9C:30:51:95:F2:24:F8:0F:5C:65:CB:C5:84:6F:0A:EF:61:71
            X509v3 Authority Key Identifier:
                keyid:37:FD:97:7C:DE:44:22:33:90:A6:F4:4F:0C:91:E6:7D:E3:7D:0E:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8YNnQuA5MGYj1JWpEPxUTKHY9fGiivdt7YbCyaBintDq/1/37FD977CDE44223390A6F44F0C91E67DE37D0E6E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/37FD977CDE44223390A6F44F0C91E67DE37D0E6E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8YNnQuA5MGYj1JWpEPxUTKHY9fGiivdt7YbCyaBintDq/1/3136342e3136332e302e302f32322d3233203d3e20323635393333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.163.0.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9d:33:13:a5:94:89:b8:e9:89:ef:d6:23:1b:1d:cd:d8:95:0f:
         84:c3:40:07:b0:83:50:da:bb:ae:4f:68:bc:1b:9a:87:c8:22:
         bc:9b:b1:27:c5:11:61:c0:fe:99:4e:25:37:91:40:dd:5c:cb:
         51:a9:b1:f5:76:86:a5:69:0c:7a:2f:db:f2:ce:e7:03:5a:6c:
         ec:87:bd:4c:21:a5:8b:a0:4e:46:82:92:43:45:7f:f0:e4:8a:
         78:07:3a:ff:e3:66:2c:64:2a:75:63:33:b1:94:1e:aa:e4:4f:
         87:c2:98:e4:d8:b6:0f:a4:07:70:96:64:ab:59:f8:0a:95:96:
         64:4c:4f:14:2e:66:aa:30:46:1f:46:29:c0:c4:80:d6:a3:37:
         cc:45:14:5f:3e:30:a0:d3:65:dc:6e:f8:a5:9e:73:f2:e5:26:
         b5:9c:c2:37:b2:2d:85:85:e1:0f:b4:23:0a:68:75:6e:e6:7c:
         6b:b9:e0:09:e9:8e:a8:bd:9e:87:82:71:88:02:7c:6c:db:5e:
         0e:46:1d:3c:71:ba:be:b9:2f:24:59:50:e2:c1:c2:67:ca:b1:
         d2:d6:f7:64:fb:1a:49:ea:c3:d4:fe:a2:eb:e6:28:6f:60:7e:
         5b:63:a1:07:c9:c4:f9:35:a4:60:84:4b:97:9d:80:90:3f:b7:
         af:ea:4e:6e
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUehBVb2inH/5d8WODiIxZmqs5NVEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzdGRDk3N0NERTQ0MjIzMzkwQTZGNDRGMEM5MUU2N0RF
MzdEMEU2RTAeFw0yMzA5MTkxMzIyMThaFw0yNDA5MTcxMzI3MThaMDMxMTAvBgNV
BAMTKERBMTY5QzMwNTE5NUYyMjRGODBGNUM2NUNCQzU4NDZGMEFFRjYxNzEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwXNSh12Cmf4430wQUfr4zwQbQ
cb0K/ZEIBFJhKcJbhLY+Pv4q30NCGPtcK6KN6TgT9OlNJZNcp5qxL216p8+hZ7XZ
xD0jcaC9X/TNTFzhlW/Rhh9Z/74GqWn7DHQQhAzKkT+8GaHa5ysZGh19kCVGDaQr
WlMGErIay47iC8fTITrN55axL0aG7UMeQ4Nb7Onl8Q6oiqwKNn7llWulEvyvyrvq
HormAhG1DlpgsC/AMXEXz/+wD36FbSoaN280roC2JQidN9ONkMbIMBnLqP3T9aPQ
ceXkG9dpK2LVbn/rUnkusXmMglrT0aHyNQg4eKp8t2bEA/TM3/06cTfWV6T/AgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQU2hacMFGV8iT4D1xly8WEbwrvYXEwHwYDVR0j
BBgwFoAUN/2XfN5EIjOQpvRPDJHmfeN9Dm4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOFlOblF1QTVNR1lqMUpXcEVQeFVUS0hZOWZHaWl2ZHQ3WWJDeWFCaW50
RHEvMS8zN0ZEOTc3Q0RFNDQyMjMzOTBBNkY0NEYwQzkxRTY3REUzN0QwRTZFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzM3RkQ5NzdDREU0NDIyMzM5
MEE2RjQ0RjBDOTFFNjdERTM3RDBFNkUuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzhZTm5RdUE1TUdZajFKV3BFUHhVVEtIWTlmR2lpdmR0N1liQ3lhQmludERxLzEv
MzEzNjM0MmUzMTM2MzMyZTMwMmUzMDJmMzIzMjJkMzIzMzIwM2QzZTIwMzIzNjM1
MzkzMzMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCpKMAMA0GCSqGSIb3DQEBCwUAA4IBAQCdMxOllIm4
6Ynv1iMbHc3YlQ+Ew0AHsINQ2ruuT2i8G5qHyCK8m7EnxRFhwP6ZTiU3kUDdXMtR
qbH1doalaQx6L9vyzucDWmzsh71MIaWLoE5GgpJDRX/w5Ip4Bzr/42YsZCp1YzOx
lB6q5E+Hwpjk2LYPpAdwlmSrWfgKlZZkTE8ULmaqMEYfRinAxIDWozfMRRRfPjCg
02XcbvilnnPy5Sa1nMI3si2FheEPtCMKaHVu5nxrueAJ6Y6ovZ6HgnGIAnxs214O
Rh08cbq+uS8kWVDiwcJnyrHS1vdk+xpJ6sPU/qLr5ihvYH5bY6EHycT5NaRghEuX
nYCQP7ev6k5u
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:02 2024 by rpki-client on console-ams.rpki-client.org