Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9XG6N9hSdXPFxb3jQUWYAwA97G22NFACc8wRM7GwpAJd/2/3136382e3138312e33382e302f32332d3233203d3e20323638313932.roa
File:                     3136382e3138312e33382e302f32332d3233203d3e20323638313932.roa (raw, json)
Hash identifier:          W2gALoCaNsv1wIPw1MYomoawawRyrPBq0PUIorFfgU8=
Subject key identifier:   F2:95:65:8C:14:46:44:48:80:C8:CE:7F:E1:D9:47:1C:89:0E:7F:CC
Certificate issuer:       /CN=DCA8042978431D2B4D15E54233868E8EBA0D1446
Certificate serial:       582B0743FFECD496C5809FA352EAD38E56336903
Authority key identifier: DC:A8:04:29:78:43:1D:2B:4D:15:E5:42:33:86:8E:8E:BA:0D:14:46
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DCA8042978431D2B4D15E54233868E8EBA0D1446.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9XG6N9hSdXPFxb3jQUWYAwA97G22NFACc8wRM7GwpAJd/2/3136382e3138312e33382e302f32332d3233203d3e20323638313932.roa
Signing time:             Mon 14 Aug 2023 15:58:37 +0000
ROA not before:           Mon 14 Aug 2023 15:53:37 +0000
ROA not after:            Mon 12 Aug 2024 15:58:37 +0000
asID:                     268192
IP address blocks:        168.181.38.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:2b:07:43:ff:ec:d4:96:c5:80:9f:a3:52:ea:d3:8e:56:33:69:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DCA8042978431D2B4D15E54233868E8EBA0D1446
        Validity
            Not Before: Aug 14 15:53:37 2023 GMT
            Not After : Aug 12 15:58:37 2024 GMT
        Subject: CN=F295658C1446444880C8CE7FE1D9471C890E7FCC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:f9:18:77:14:b1:bc:41:bc:1c:e0:c2:c4:31:
                    f4:de:f6:62:ac:0d:1d:99:da:46:8a:ec:a5:6a:09:
                    46:f6:0a:67:8d:88:53:2e:a6:59:91:4a:8a:2c:20:
                    ab:69:91:a4:c9:56:be:ae:ee:f7:3d:9f:81:1f:3e:
                    d6:54:17:b2:d9:ec:67:1a:e8:59:85:8f:7b:5b:3e:
                    1d:05:ac:f8:53:c7:f9:c7:a0:46:19:06:ee:0e:be:
                    6b:6f:a4:26:37:da:0f:ea:e6:24:d9:79:90:63:40:
                    44:0b:01:e8:32:9d:b7:15:d0:00:c8:b0:e2:b6:10:
                    35:47:d4:b3:dc:e9:20:d8:28:b8:2c:e8:a6:4e:4b:
                    2f:97:d0:e6:24:84:f2:5b:74:91:9c:74:b5:ea:b7:
                    43:20:76:4d:dc:8e:09:cc:61:db:78:1e:42:1e:78:
                    d9:3e:de:73:ed:a2:fe:45:bf:9d:24:80:cc:d1:a9:
                    9d:ff:41:da:a4:0f:33:3d:8a:4a:6e:cf:37:1d:73:
                    dc:88:19:2e:07:1d:56:c7:5e:72:c8:81:3c:0a:0d:
                    87:5f:b9:46:6d:9b:ba:4a:c5:cd:45:f7:00:9f:67:
                    73:46:9f:ad:d3:f8:67:fb:d6:1b:d8:24:bc:50:0d:
                    ad:ff:49:1a:de:09:ea:1a:ca:b0:2b:b8:8f:eb:4f:
                    07:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:95:65:8C:14:46:44:48:80:C8:CE:7F:E1:D9:47:1C:89:0E:7F:CC
            X509v3 Authority Key Identifier:
                keyid:DC:A8:04:29:78:43:1D:2B:4D:15:E5:42:33:86:8E:8E:BA:0D:14:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9XG6N9hSdXPFxb3jQUWYAwA97G22NFACc8wRM7GwpAJd/2/DCA8042978431D2B4D15E54233868E8EBA0D1446.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DCA8042978431D2B4D15E54233868E8EBA0D1446.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9XG6N9hSdXPFxb3jQUWYAwA97G22NFACc8wRM7GwpAJd/2/3136382e3138312e33382e302f32332d3233203d3e20323638313932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.181.38.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7a:42:df:eb:a2:3a:94:30:bd:52:a1:0c:15:62:8a:a2:6e:23:
         7f:a5:3b:10:c8:91:92:bf:d3:be:7f:ba:d4:e6:7a:86:8f:92:
         a9:b1:d2:88:64:c6:1f:40:2a:67:8b:41:88:c6:9f:f6:77:2e:
         aa:af:b6:85:9b:d1:f7:12:9a:f3:01:45:d5:a7:3f:d1:56:ec:
         7f:cd:f6:32:b2:ae:f0:7d:c4:0e:79:0a:d1:34:b4:d5:20:3e:
         50:00:fb:46:f2:ff:70:d2:ac:89:86:ac:ee:a7:7d:0f:49:dc:
         a9:aa:24:a1:40:af:c2:70:f0:49:f0:81:41:eb:52:be:76:f1:
         2f:f0:34:d0:ec:d4:88:0f:99:9c:b0:e4:9f:53:ea:4d:f2:0e:
         65:a3:59:a3:45:31:47:20:21:a7:3f:58:3c:36:27:b7:11:54:
         80:03:ec:04:9d:59:19:d7:13:a2:27:62:5b:e7:b0:50:5c:4f:
         56:df:f2:1a:08:50:0c:5c:de:22:69:9a:23:46:2b:d9:de:8c:
         92:24:e0:84:60:7b:2a:57:b8:c3:1c:f2:1d:a1:8d:0b:4b:aa:
         d5:a4:f0:b7:10:eb:85:72:ca:46:5a:a7:12:59:26:20:39:23:
         a4:df:dc:0c:7b:da:05:be:97:36:f3:04:5c:52:81:2e:7f:2e:
         42:d3:bd:47
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUWCsHQ//s1JbFgJ+jUurTjlYzaQMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRENBODA0Mjk3ODQzMUQyQjREMTVFNTQyMzM4NjhFOEVC
QTBEMTQ0NjAeFw0yMzA4MTQxNTUzMzdaFw0yNDA4MTIxNTU4MzdaMDMxMTAvBgNV
BAMTKEYyOTU2NThDMTQ0NjQ0NDg4MEM4Q0U3RkUxRDk0NzFDODkwRTdGQ0MwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCi+Rh3FLG8Qbwc4MLEMfTe9mKs
DR2Z2kaK7KVqCUb2CmeNiFMuplmRSoosIKtpkaTJVr6u7vc9n4EfPtZUF7LZ7Gca
6FmFj3tbPh0FrPhTx/nHoEYZBu4OvmtvpCY32g/q5iTZeZBjQEQLAegynbcV0ADI
sOK2EDVH1LPc6SDYKLgs6KZOSy+X0OYkhPJbdJGcdLXqt0Mgdk3cjgnMYdt4HkIe
eNk+3nPtov5Fv50kgMzRqZ3/QdqkDzM9ikpuzzcdc9yIGS4HHVbHXnLIgTwKDYdf
uUZtm7pKxc1F9wCfZ3NGn63T+Gf71hvYJLxQDa3/SRreCeoayrAruI/rTwfdAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU8pVljBRGREiAyM5/4dlHHIkOf8wwHwYDVR0j
BBgwFoAU3KgEKXhDHStNFeVCM4aOjroNFEYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOVhHNk45aFNkWFBGeGIzalFVV1lBd0E5N0cyMk5GQUNjOHdSTTdHd3BB
SmQvMi9EQ0E4MDQyOTc4NDMxRDJCNEQxNUU1NDIzMzg2OEU4RUJBMEQxNDQ2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0RDQTgwNDI5Nzg0MzFEMkI0
RDE1RTU0MjMzODY4RThFQkEwRDE0NDYuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzlYRzZOOWhTZFhQRnhiM2pRVVdZQXdBOTdHMjJORkFDYzh3Uk03R3dwQUpkLzIv
MzEzNjM4MmUzMTM4MzEyZTMzMzgyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzMjM2
MzgzMTM5MzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAGotSYwDQYJKoZIhvcNAQELBQADggEBAHpC3+ui
OpQwvVKhDBViiqJuI3+lOxDIkZK/075/utTmeoaPkqmx0ohkxh9AKmeLQYjGn/Z3
LqqvtoWb0fcSmvMBRdWnP9FW7H/N9jKyrvB9xA55CtE0tNUgPlAA+0by/3DSrImG
rO6nfQ9J3KmqJKFAr8Jw8EnwgUHrUr528S/wNNDs1IgPmZyw5J9T6k3yDmWjWaNF
MUcgIac/WDw2J7cRVIAD7ASdWRnXE6InYlvnsFBcT1bf8hoIUAxc3iJpmiNGK9ne
jJIk4IRgeypXuMMc8h2hjQtLqtWk8LcQ64VyykZapxJZJiA5I6Tf3Ax72gW+lzbz
BFxSgS5/LkLTvUc=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:05 2024 by rpki-client on console-fra.rpki-client.org