Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9dtNNg6boVL5pkXGh3Ms9Ko9LDPP6sALCQFVaiazn6kb/0/3136382e3230352e3133302e302f32332d3233203d3e20323635333635.roa
File:                     3136382e3230352e3133302e302f32332d3233203d3e20323635333635.roa (raw, json)
Hash identifier:          4Me/CWOeDz+8WuJwnbnoapnW6ivbpDSClwlFz9Lv9Ws=
Subject key identifier:   31:A3:5E:CF:90:95:21:C1:4A:B8:69:49:F0:A5:04:72:4D:F2:9E:1C
Certificate issuer:       /CN=4727970500C3714E7E9C8B4C19EAB96E9507EBC9
Certificate serial:       3B76FB0B2FC7DF54090ABFBD33A44905E1A8BD4B
Authority key identifier: 47:27:97:05:00:C3:71:4E:7E:9C:8B:4C:19:EA:B9:6E:95:07:EB:C9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4727970500C3714E7E9C8B4C19EAB96E9507EBC9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9dtNNg6boVL5pkXGh3Ms9Ko9LDPP6sALCQFVaiazn6kb/0/3136382e3230352e3133302e302f32332d3233203d3e20323635333635.roa
Signing time:             Sun 14 Jan 2024 12:00:00 +0000
ROA not before:           Sun 14 Jan 2024 11:55:00 +0000
ROA not after:            Sun 12 Jan 2025 12:00:00 +0000
asID:                     265365
IP address blocks:        168.205.130.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:76:fb:0b:2f:c7:df:54:09:0a:bf:bd:33:a4:49:05:e1:a8:bd:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4727970500C3714E7E9C8B4C19EAB96E9507EBC9
        Validity
            Not Before: Jan 14 11:55:00 2024 GMT
            Not After : Jan 12 12:00:00 2025 GMT
        Subject: CN=31A35ECF909521C14AB86949F0A504724DF29E1C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:6c:ab:b5:b6:7b:a1:17:ed:d7:d1:d6:29:b4:
                    32:17:86:e2:f3:b2:49:a4:a0:3c:5e:0c:ba:c1:e1:
                    95:9e:1e:b4:f4:ce:92:ec:b0:9f:4b:0d:0a:df:e5:
                    46:52:ef:37:93:19:b3:3c:94:44:33:71:5a:80:b8:
                    59:36:c1:22:30:d4:fc:b2:f7:4a:77:14:1d:32:45:
                    bc:dd:93:f9:2f:3c:57:60:24:b7:0a:ac:ac:5a:dc:
                    3a:7d:b2:ec:37:c1:46:2a:3e:3c:0c:ab:76:63:6b:
                    93:87:4b:33:ed:59:e6:2e:bc:65:05:eb:c5:a4:b7:
                    d2:1a:36:76:18:a7:2d:58:cf:37:9c:b4:5d:ce:9a:
                    62:62:49:12:a0:92:ed:2d:7a:07:d2:50:37:e5:80:
                    5f:4e:68:dd:43:90:1d:e7:8e:a9:c0:ca:4b:b6:65:
                    81:12:85:8d:72:f8:29:e8:68:93:e9:da:7b:bc:22:
                    9e:07:e7:cf:1c:72:ce:2c:bf:68:a9:40:55:28:de:
                    99:eb:0b:91:94:ec:7a:b1:8d:94:da:cc:08:d7:14:
                    96:2c:48:f2:9b:bf:04:84:af:91:d8:02:8a:f1:b9:
                    44:9d:52:dc:d4:bb:d2:e6:37:71:8d:55:c7:3a:39:
                    b0:a3:d7:eb:4a:b8:a1:ee:16:13:eb:b3:39:a4:9a:
                    04:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:A3:5E:CF:90:95:21:C1:4A:B8:69:49:F0:A5:04:72:4D:F2:9E:1C
            X509v3 Authority Key Identifier:
                keyid:47:27:97:05:00:C3:71:4E:7E:9C:8B:4C:19:EA:B9:6E:95:07:EB:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9dtNNg6boVL5pkXGh3Ms9Ko9LDPP6sALCQFVaiazn6kb/0/4727970500C3714E7E9C8B4C19EAB96E9507EBC9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4727970500C3714E7E9C8B4C19EAB96E9507EBC9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9dtNNg6boVL5pkXGh3Ms9Ko9LDPP6sALCQFVaiazn6kb/0/3136382e3230352e3133302e302f32332d3233203d3e20323635333635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.205.130.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5f:84:4c:0b:99:c9:42:85:b7:9e:1c:e5:a6:a6:ac:8e:92:6b:
         10:c0:f7:eb:60:d9:04:b3:f2:c1:4c:00:56:43:f0:61:12:c7:
         82:83:64:b1:be:32:89:7a:fe:92:67:5a:9f:24:b6:d8:f0:70:
         d0:84:39:45:3b:30:3a:bf:05:49:3c:2f:28:13:31:b6:9d:be:
         48:60:ad:48:65:f2:5f:bc:19:bc:9d:50:f5:e5:3a:72:54:88:
         c0:41:f1:7a:e4:de:fb:6e:69:fc:c0:02:b6:b7:94:11:ec:2e:
         8f:4a:b2:fc:46:43:cd:46:c2:fc:56:6e:4f:d1:9b:e1:dd:9b:
         b3:c8:8a:b4:d3:f5:c7:4e:55:31:60:1f:4e:28:07:5e:4f:16:
         3f:fa:b4:aa:45:09:1e:f2:47:7e:b7:89:65:3c:22:21:55:70:
         a8:3b:88:0e:2e:8e:3c:3f:d8:29:fd:d0:22:5b:8c:78:e2:5e:
         9e:05:eb:ef:73:66:6c:6e:ad:56:9c:37:34:0f:ff:e3:b3:6f:
         b6:dc:65:9b:55:8e:fa:08:8f:14:25:dc:a9:b4:34:de:6c:a9:
         04:45:be:0a:b7:ac:db:b4:73:bc:eb:6f:a1:61:c7:22:a9:6e:
         71:0d:e5:ef:cd:ea:e0:37:04:93:da:1d:4e:5e:e5:a5:cb:20:
         67:61:d5:e8
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUO3b7Cy/H31QJCr+9M6RJBeGovUswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDcyNzk3MDUwMEMzNzE0RTdFOUM4QjRDMTlFQUI5NkU5
NTA3RUJDOTAeFw0yNDAxMTQxMTU1MDBaFw0yNTAxMTIxMjAwMDBaMDMxMTAvBgNV
BAMTKDMxQTM1RUNGOTA5NTIxQzE0QUI4Njk0OUYwQTUwNDcyNERGMjlFMUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzbKu1tnuhF+3X0dYptDIXhuLz
skmkoDxeDLrB4ZWeHrT0zpLssJ9LDQrf5UZS7zeTGbM8lEQzcVqAuFk2wSIw1Pyy
90p3FB0yRbzdk/kvPFdgJLcKrKxa3Dp9suw3wUYqPjwMq3Zja5OHSzPtWeYuvGUF
68Wkt9IaNnYYpy1YzzectF3OmmJiSRKgku0tegfSUDflgF9OaN1DkB3njqnAyku2
ZYEShY1y+CnoaJPp2nu8Ip4H588ccs4sv2ipQFUo3pnrC5GU7HqxjZTazAjXFJYs
SPKbvwSEr5HYAorxuUSdUtzUu9LmN3GNVcc6ObCj1+tKuKHuFhPrszmkmgRBAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUMaNez5CVIcFKuGlJ8KUEck3ynhwwHwYDVR0j
BBgwFoAURyeXBQDDcU5+nItMGeq5bpUH68kwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOWR0Tk5nNmJvVkw1cGtYR2gzTXM5S285TERQUDZzQUxDUUZWYWlhem42
a2IvMC80NzI3OTcwNTAwQzM3MTRFN0U5QzhCNEMxOUVBQjk2RTk1MDdFQkM5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzQ3Mjc5NzA1MDBDMzcxNEU3
RTlDOEI0QzE5RUFCOTZFOTUwN0VCQzkuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzlkdE5OZzZib1ZMNXBrWEdoM01zOUtvOUxEUFA2c0FMQ1FGVmFpYXpuNmtiLzAv
MzEzNjM4MmUzMjMwMzUyZTMxMzMzMDJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDMy
MzYzNTMzMzYzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAajNgjANBgkqhkiG9w0BAQsFAAOCAQEAX4RM
C5nJQoW3nhzlpqasjpJrEMD362DZBLPywUwAVkPwYRLHgoNksb4yiXr+kmdanyS2
2PBw0IQ5RTswOr8FSTwvKBMxtp2+SGCtSGXyX7wZvJ1Q9eU6clSIwEHxeuTe+25p
/MACtreUEewuj0qy/EZDzUbC/FZuT9Gb4d2bs8iKtNP1x05VMWAfTigHXk8WP/q0
qkUJHvJHfreJZTwiIVVwqDuIDi6OPD/YKf3QIluMeOJengXr73NmbG6tVpw3NA//
47Nvttxlm1WO+giPFCXcqbQ03mypBEW+Cres27RzvOtvoWHHIqlucQ3l783q4DcE
k9odTl7lpcsgZ2HV6A==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:10 2024 by rpki-client on console-ams.rpki-client.org