Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8vy2RcViXpe2PXdx93YYLEhLLBq4pPdBKh9QY6b2Y6mg/0/3136382e3230352e3134382e302f32322d3234203d3e20323634333831.roa
File:                     3136382e3230352e3134382e302f32322d3234203d3e20323634333831.roa (raw, json)
Hash identifier:          cB040xzECEjjxVY3s5fBcnEL4BWWW2IxJSSm518GWDg=
Subject key identifier:   3C:E2:B3:5A:80:3A:16:CA:00:3C:55:6B:48:BF:C1:92:53:66:B8:A2
Certificate issuer:       /CN=9B200BCD91DFF47750BD2C67A02D2E1F476C8232
Certificate serial:       60477E12EF734DB8ED67BFAA678864EED2B9BA93
Authority key identifier: 9B:20:0B:CD:91:DF:F4:77:50:BD:2C:67:A0:2D:2E:1F:47:6C:82:32
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9B200BCD91DFF47750BD2C67A02D2E1F476C8232.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8vy2RcViXpe2PXdx93YYLEhLLBq4pPdBKh9QY6b2Y6mg/0/3136382e3230352e3134382e302f32322d3234203d3e20323634333831.roa
Signing time:             Thu 15 Jun 2023 21:20:59 +0000
ROA not before:           Thu 15 Jun 2023 21:15:59 +0000
ROA not after:            Thu 13 Jun 2024 21:20:59 +0000
asID:                     264381
IP address blocks:        168.205.148.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:47:7e:12:ef:73:4d:b8:ed:67:bf:aa:67:88:64:ee:d2:b9:ba:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9B200BCD91DFF47750BD2C67A02D2E1F476C8232
        Validity
            Not Before: Jun 15 21:15:59 2023 GMT
            Not After : Jun 13 21:20:59 2024 GMT
        Subject: CN=3CE2B35A803A16CA003C556B48BFC1925366B8A2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:2f:80:ac:16:5e:4b:d5:30:90:e4:f0:8d:84:
                    10:cb:e4:18:fe:b3:53:21:90:69:39:ab:4f:ea:f0:
                    f6:bb:b1:1e:06:f4:71:35:97:b5:7f:2e:62:05:2f:
                    68:1e:08:9e:89:25:46:cd:97:66:61:3f:be:5f:27:
                    8e:71:9c:a8:de:9d:61:7c:24:41:f6:f2:45:9e:4e:
                    d9:51:63:ff:af:50:e4:47:a1:fd:6f:ec:5a:55:3d:
                    3e:d5:20:43:34:07:99:d6:30:17:4f:8a:b8:d0:ae:
                    8d:6b:df:92:e2:d0:47:4b:d4:4f:6e:cf:21:72:ff:
                    66:00:30:2f:14:51:82:3c:ab:e3:38:fe:6c:ad:32:
                    1c:f1:25:91:26:ac:47:5b:25:a0:d8:e3:b9:48:10:
                    6f:f1:d6:1a:f0:77:83:e5:19:d3:c9:31:8b:c0:29:
                    34:9e:4f:87:c7:8e:9b:06:c4:da:06:af:71:68:2c:
                    9f:55:95:61:a8:a3:79:13:07:b1:a0:98:46:0a:11:
                    4b:22:31:dc:65:e0:f9:1c:46:2f:99:7a:15:68:82:
                    7d:aa:76:43:7b:12:aa:14:28:ca:4c:dc:5f:9c:be:
                    6e:c5:12:70:1c:f9:94:1b:7c:a9:e8:51:c2:d3:5f:
                    13:93:ae:39:0a:08:fd:f8:e0:0a:b6:d3:82:6a:20:
                    6a:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:E2:B3:5A:80:3A:16:CA:00:3C:55:6B:48:BF:C1:92:53:66:B8:A2
            X509v3 Authority Key Identifier:
                keyid:9B:20:0B:CD:91:DF:F4:77:50:BD:2C:67:A0:2D:2E:1F:47:6C:82:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8vy2RcViXpe2PXdx93YYLEhLLBq4pPdBKh9QY6b2Y6mg/0/9B200BCD91DFF47750BD2C67A02D2E1F476C8232.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9B200BCD91DFF47750BD2C67A02D2E1F476C8232.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8vy2RcViXpe2PXdx93YYLEhLLBq4pPdBKh9QY6b2Y6mg/0/3136382e3230352e3134382e302f32322d3234203d3e20323634333831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.205.148.0/22

    Signature Algorithm: sha256WithRSAEncryption
         24:c0:63:07:96:d2:46:e1:b0:c5:55:cf:01:f3:1e:ff:8f:73:
         d9:4f:80:e6:8a:5c:dd:eb:99:41:68:52:ac:80:45:25:36:c0:
         eb:06:70:9a:6e:70:31:c6:69:aa:ca:d7:e7:b5:39:e3:f8:93:
         ac:cc:88:1d:b7:ef:74:5f:ff:c0:2e:4c:87:39:28:e9:39:30:
         5d:bb:55:fd:cf:c5:a4:d0:94:bc:cb:45:26:4f:87:63:5d:64:
         d4:29:1e:f7:d1:93:f0:7e:4c:72:ab:9e:79:de:92:6f:a5:83:
         2c:6b:46:f3:fa:0b:81:e3:a8:0e:88:f4:dc:75:f9:44:86:72:
         fe:59:48:4d:32:eb:c0:1d:41:ad:3f:f0:cc:c2:de:9a:b0:3b:
         72:60:93:93:22:45:d3:be:8a:65:2a:b7:d8:9e:55:17:e3:0b:
         3a:4c:79:83:54:9a:4e:12:fd:d8:25:ec:76:6d:58:d0:f1:89:
         5e:d7:40:73:55:9e:8e:ec:c3:ad:1b:01:15:63:db:e3:c1:09:
         dc:e5:1a:ab:3c:09:54:57:9d:58:a8:ff:0c:19:74:64:b1:ac:
         95:1e:ec:b3:93:2d:cf:87:7c:e5:8c:c5:f7:9e:04:b7:d4:63:
         04:f7:c4:db:d9:b6:1b:ee:66:5d:55:9c:25:38:2a:ee:a5:46:
         ff:fd:d8:60
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUYEd+Eu9zTbjtZ7+qZ4hk7tK5upMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUIyMDBCQ0Q5MURGRjQ3NzUwQkQyQzY3QTAyRDJFMUY0
NzZDODIzMjAeFw0yMzA2MTUyMTE1NTlaFw0yNDA2MTMyMTIwNTlaMDMxMTAvBgNV
BAMTKDNDRTJCMzVBODAzQTE2Q0EwMDNDNTU2QjQ4QkZDMTkyNTM2NkI4QTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5L4CsFl5L1TCQ5PCNhBDL5Bj+
s1MhkGk5q0/q8Pa7sR4G9HE1l7V/LmIFL2geCJ6JJUbNl2ZhP75fJ45xnKjenWF8
JEH28kWeTtlRY/+vUORHof1v7FpVPT7VIEM0B5nWMBdPirjQro1r35Li0EdL1E9u
zyFy/2YAMC8UUYI8q+M4/mytMhzxJZEmrEdbJaDY47lIEG/x1hrwd4PlGdPJMYvA
KTSeT4fHjpsGxNoGr3FoLJ9VlWGoo3kTB7GgmEYKEUsiMdxl4PkcRi+ZehVogn2q
dkN7EqoUKMpM3F+cvm7FEnAc+ZQbfKnoUcLTXxOTrjkKCP344Aq204JqIGqPAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUPOKzWoA6FsoAPFVrSL/BklNmuKIwHwYDVR0j
BBgwFoAUmyALzZHf9HdQvSxnoC0uH0dsgjIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOHZ5MlJjVmlYcGUyUFhkeDkzWVlMRWhMTEJxNHBQZEJLaDlRWTZiMlk2
bWcvMC85QjIwMEJDRDkxREZGNDc3NTBCRDJDNjdBMDJEMkUxRjQ3NkM4MjMyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzlCMjAwQkNEOTFERkY0Nzc1
MEJEMkM2N0EwMkQyRTFGNDc2QzgyMzIuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
Lzh2eTJSY1ZpWHBlMlBYZHg5M1lZTEVoTExCcTRwUGRCS2g5UVk2YjJZNm1nLzAv
MzEzNjM4MmUzMjMwMzUyZTMxMzQzODJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDMy
MzYzNDMzMzgzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAqjNlDANBgkqhkiG9w0BAQsFAAOCAQEAJMBj
B5bSRuGwxVXPAfMe/49z2U+A5opc3euZQWhSrIBFJTbA6wZwmm5wMcZpqsrX57U5
4/iTrMyIHbfvdF//wC5Mhzko6TkwXbtV/c/FpNCUvMtFJk+HY11k1Cke99GT8H5M
cqueed6Sb6WDLGtG8/oLgeOoDoj03HX5RIZy/llITTLrwB1BrT/wzMLemrA7cmCT
kyJF076KZSq32J5VF+MLOkx5g1SaThL92CXsdm1Y0PGJXtdAc1WejuzDrRsBFWPb
48EJ3OUaqzwJVFedWKj/DBl0ZLGslR7ss5Mtz4d85YzF954Et9RjBPfE29m2G+5m
XVWcJTgq7qVG//3YYA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:06 2024 by rpki-client on console-ams.rpki-client.org