Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9XG6N9hSdXPFxb3jQUWYAwA97G22NFACc8wRM7GwpAJd/2/3136382e3138312e33362e302f32342d3234203d3e20323638313932.roa
File:                     3136382e3138312e33362e302f32342d3234203d3e20323638313932.roa (raw, json)
Hash identifier:          MsAfqAipg2lR65B7vnk+iU1iMfJ92koLKl2vp3+XGus=
Subject key identifier:   38:12:82:09:12:EF:FB:7F:2D:FC:30:EA:C5:62:1D:95:0E:18:40:8A
Certificate issuer:       /CN=DCA8042978431D2B4D15E54233868E8EBA0D1446
Certificate serial:       520DE4776C678C91D85472154939A30AE5825034
Authority key identifier: DC:A8:04:29:78:43:1D:2B:4D:15:E5:42:33:86:8E:8E:BA:0D:14:46
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DCA8042978431D2B4D15E54233868E8EBA0D1446.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9XG6N9hSdXPFxb3jQUWYAwA97G22NFACc8wRM7GwpAJd/2/3136382e3138312e33362e302f32342d3234203d3e20323638313932.roa
Signing time:             Mon 14 Aug 2023 15:58:33 +0000
ROA not before:           Mon 14 Aug 2023 15:53:33 +0000
ROA not after:            Mon 12 Aug 2024 15:58:33 +0000
asID:                     268192
IP address blocks:        168.181.36.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:0d:e4:77:6c:67:8c:91:d8:54:72:15:49:39:a3:0a:e5:82:50:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DCA8042978431D2B4D15E54233868E8EBA0D1446
        Validity
            Not Before: Aug 14 15:53:33 2023 GMT
            Not After : Aug 12 15:58:33 2024 GMT
        Subject: CN=3812820912EFFB7F2DFC30EAC5621D950E18408A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:67:b2:c4:ff:e3:6e:43:63:49:1f:b6:48:5b:
                    00:39:14:8c:10:96:90:72:73:c4:16:da:f0:45:b6:
                    67:ee:f5:b9:44:a6:60:5e:cd:f9:07:d5:45:11:67:
                    d9:54:d4:66:9f:c5:44:c2:6b:46:cd:50:e6:38:71:
                    d9:52:b2:df:51:62:9d:6f:62:95:5c:fd:a1:66:bb:
                    89:dd:b3:09:3e:03:ab:36:60:fb:23:f7:c7:7c:db:
                    c8:b9:22:2a:6a:85:12:10:f1:a8:c5:35:ef:9b:f9:
                    05:6e:bf:00:53:09:e6:a9:1b:67:21:b5:a6:da:20:
                    87:91:f6:58:47:82:4a:18:57:03:f4:e2:f0:6e:a3:
                    23:0a:51:71:fe:cd:d3:27:b8:f5:02:e8:bc:15:05:
                    58:9a:c6:e1:e8:85:6f:14:4e:51:17:51:66:82:a0:
                    8f:de:5b:53:a7:93:2b:19:3d:f7:be:dc:0a:68:a1:
                    9d:c0:f1:4d:e4:b7:8a:b8:e5:cd:ce:89:3a:98:1e:
                    2e:81:67:d0:dc:3f:5f:d8:d3:f5:46:f1:61:4d:a8:
                    d5:74:79:39:ed:28:4f:33:74:be:69:05:81:3b:3f:
                    da:67:0f:3f:82:52:3d:32:39:5b:a8:a2:68:b8:31:
                    38:42:8a:9c:ac:69:5e:ec:ae:5e:fc:52:be:42:56:
                    a1:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:12:82:09:12:EF:FB:7F:2D:FC:30:EA:C5:62:1D:95:0E:18:40:8A
            X509v3 Authority Key Identifier:
                keyid:DC:A8:04:29:78:43:1D:2B:4D:15:E5:42:33:86:8E:8E:BA:0D:14:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9XG6N9hSdXPFxb3jQUWYAwA97G22NFACc8wRM7GwpAJd/2/DCA8042978431D2B4D15E54233868E8EBA0D1446.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DCA8042978431D2B4D15E54233868E8EBA0D1446.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9XG6N9hSdXPFxb3jQUWYAwA97G22NFACc8wRM7GwpAJd/2/3136382e3138312e33362e302f32342d3234203d3e20323638313932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.181.36.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2a:02:ff:a6:61:3c:47:74:13:30:d4:f2:b7:5d:68:19:47:f8:
         05:3d:ff:2b:e8:b9:6d:70:70:b6:a2:dc:33:ae:9a:a4:df:db:
         a6:6c:27:9c:10:5a:8f:a5:3a:4c:96:9a:fe:2e:fe:6a:da:fc:
         dd:aa:c9:4c:f7:1f:fb:51:87:49:01:f1:81:9a:46:3c:da:6a:
         7e:ad:9d:8b:af:d1:09:02:ce:90:2f:c7:38:e0:5e:14:13:69:
         57:a0:84:69:81:56:c9:62:08:19:e0:43:a3:86:9e:14:7d:92:
         54:ed:f7:68:6e:c1:ec:fa:8c:af:9e:ff:8e:83:cc:fd:57:d8:
         2d:ee:67:5e:e9:ed:97:98:fb:16:f8:a7:9d:1a:73:55:df:b1:
         d5:81:47:a8:ef:88:c0:13:e0:69:23:86:8a:ce:b4:a7:bf:63:
         77:b2:1a:21:e2:64:05:a7:53:2e:2f:71:7f:1d:41:34:82:bc:
         2e:4e:b0:af:4f:27:02:b3:3b:46:f0:21:db:c4:b8:01:eb:b8:
         c9:b9:b3:cb:a8:d9:56:8a:43:bc:81:1e:e6:58:ad:ef:45:69:
         d8:23:d3:73:8b:12:53:2f:c9:43:7c:5f:ff:56:f7:9f:d0:e1:
         d7:6f:75:d3:3c:af:f3:93:6c:3d:be:5b:ef:16:df:f2:cc:df:
         3a:44:e9:3c
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUUg3kd2xnjJHYVHIVSTmjCuWCUDQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRENBODA0Mjk3ODQzMUQyQjREMTVFNTQyMzM4NjhFOEVC
QTBEMTQ0NjAeFw0yMzA4MTQxNTUzMzNaFw0yNDA4MTIxNTU4MzNaMDMxMTAvBgNV
BAMTKDM4MTI4MjA5MTJFRkZCN0YyREZDMzBFQUM1NjIxRDk1MEUxODQwOEEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRZ7LE/+NuQ2NJH7ZIWwA5FIwQ
lpByc8QW2vBFtmfu9blEpmBezfkH1UURZ9lU1GafxUTCa0bNUOY4cdlSst9RYp1v
YpVc/aFmu4ndswk+A6s2YPsj98d828i5IipqhRIQ8ajFNe+b+QVuvwBTCeapG2ch
tabaIIeR9lhHgkoYVwP04vBuoyMKUXH+zdMnuPUC6LwVBViaxuHohW8UTlEXUWaC
oI/eW1OnkysZPfe+3ApooZ3A8U3kt4q45c3OiTqYHi6BZ9DcP1/Y0/VG8WFNqNV0
eTntKE8zdL5pBYE7P9pnDz+CUj0yOVuoomi4MThCipysaV7srl78Ur5CVqHHAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUOBKCCRLv+38t/DDqxWIdlQ4YQIowHwYDVR0j
BBgwFoAU3KgEKXhDHStNFeVCM4aOjroNFEYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOVhHNk45aFNkWFBGeGIzalFVV1lBd0E5N0cyMk5GQUNjOHdSTTdHd3BB
SmQvMi9EQ0E4MDQyOTc4NDMxRDJCNEQxNUU1NDIzMzg2OEU4RUJBMEQxNDQ2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0RDQTgwNDI5Nzg0MzFEMkI0
RDE1RTU0MjMzODY4RThFQkEwRDE0NDYuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzlYRzZOOWhTZFhQRnhiM2pRVVdZQXdBOTdHMjJORkFDYzh3Uk03R3dwQUpkLzIv
MzEzNjM4MmUzMTM4MzEyZTMzMzYyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzgzMTM5MzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBACotSQwDQYJKoZIhvcNAQELBQADggEBACoC/6Zh
PEd0EzDU8rddaBlH+AU9/yvouW1wcLai3DOumqTf26ZsJ5wQWo+lOkyWmv4u/mra
/N2qyUz3H/tRh0kB8YGaRjzaan6tnYuv0QkCzpAvxzjgXhQTaVeghGmBVsliCBng
Q6OGnhR9klTt92huwez6jK+e/46DzP1X2C3uZ17p7ZeY+xb4p50ac1XfsdWBR6jv
iMAT4GkjhorOtKe/Y3eyGiHiZAWnUy4vcX8dQTSCvC5OsK9PJwKzO0bwIdvEuAHr
uMm5s8uo2VaKQ7yBHuZYre9Fadgj03OLElMvyUN8X/9W95/Q4ddvddM8r/OTbD2+
W+8W3/LM3zpE6Tw=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:05 2024 by rpki-client on console-fra.rpki-client.org