Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9dtNNg6boVL5pkXGh3Ms9Ko9LDPP6sALCQFVaiazn6kb/1/3136382e3230352e3132382e302f32322d3232203d3e20323635333635.roa
File:                     3136382e3230352e3132382e302f32322d3232203d3e20323635333635.roa (raw, json)
Hash identifier:          ySXXJkyQWmMtSHZujhzvBv+V/pZL9CMgD6XFRO5eD7o=
Subject key identifier:   26:87:03:6C:EE:07:A3:45:67:07:E9:BF:30:F2:82:A8:E5:1D:A5:14
Certificate issuer:       /CN=3ED26604F180666257EA8C65758E6A93C0EA50F8
Certificate serial:       663D8BA6B6D35CACE659F6DD38DCA258C6428BA8
Authority key identifier: 3E:D2:66:04:F1:80:66:62:57:EA:8C:65:75:8E:6A:93:C0:EA:50:F8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3ED26604F180666257EA8C65758E6A93C0EA50F8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9dtNNg6boVL5pkXGh3Ms9Ko9LDPP6sALCQFVaiazn6kb/1/3136382e3230352e3132382e302f32322d3232203d3e20323635333635.roa
Signing time:             Wed 03 Apr 2024 18:30:48 +0000
ROA not before:           Wed 03 Apr 2024 18:25:48 +0000
ROA not after:            Wed 02 Apr 2025 18:30:48 +0000
asID:                     265365
IP address blocks:        168.205.128.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:3d:8b:a6:b6:d3:5c:ac:e6:59:f6:dd:38:dc:a2:58:c6:42:8b:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3ED26604F180666257EA8C65758E6A93C0EA50F8
        Validity
            Not Before: Apr  3 18:25:48 2024 GMT
            Not After : Apr  2 18:30:48 2025 GMT
        Subject: CN=2687036CEE07A3456707E9BF30F282A8E51DA514
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:fa:54:94:b4:02:6f:fd:d6:40:1e:4d:66:db:
                    74:9d:32:aa:9b:66:08:fd:d4:b6:7e:91:b9:30:ab:
                    22:8b:e5:7b:0b:0b:88:e8:59:ca:c6:d1:47:1d:74:
                    c5:d6:b5:0d:df:b9:e2:26:6b:f0:c4:96:12:66:90:
                    b8:a2:ed:67:c5:9f:3e:09:d1:9b:74:b6:fa:95:f2:
                    d7:f3:ff:15:70:42:38:8f:0a:26:04:14:d1:96:20:
                    03:c2:16:ef:a1:d9:fd:04:86:c5:3c:6d:e0:96:ec:
                    2b:70:f3:89:ac:cd:7b:6e:97:ca:cb:7d:0a:5f:d5:
                    ba:11:7d:95:68:37:4a:6f:86:94:5b:9b:09:c3:ca:
                    f4:d2:2e:65:97:a7:b8:8b:19:f7:58:a0:59:54:84:
                    f9:ee:f8:62:8a:d6:f2:1e:51:9d:91:4e:f5:4e:61:
                    cc:b1:01:58:04:9f:ab:e9:a4:e5:b0:49:05:f8:0a:
                    13:b8:fe:03:d1:31:99:09:eb:75:00:95:9a:a3:f0:
                    f9:4f:dc:95:d1:28:f8:49:30:43:fc:21:a5:30:1f:
                    78:2b:1b:4b:f8:91:ee:d4:2c:cd:81:06:9b:90:cf:
                    93:cf:3f:78:e4:28:6b:b3:7a:a3:76:79:02:90:7a:
                    1b:3f:e3:e5:e7:d8:54:56:d6:e2:5c:b4:18:9b:ba:
                    04:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:87:03:6C:EE:07:A3:45:67:07:E9:BF:30:F2:82:A8:E5:1D:A5:14
            X509v3 Authority Key Identifier:
                keyid:3E:D2:66:04:F1:80:66:62:57:EA:8C:65:75:8E:6A:93:C0:EA:50:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9dtNNg6boVL5pkXGh3Ms9Ko9LDPP6sALCQFVaiazn6kb/1/3ED26604F180666257EA8C65758E6A93C0EA50F8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3ED26604F180666257EA8C65758E6A93C0EA50F8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9dtNNg6boVL5pkXGh3Ms9Ko9LDPP6sALCQFVaiazn6kb/1/3136382e3230352e3132382e302f32322d3232203d3e20323635333635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.205.128.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4b:fa:9f:75:fc:b1:0c:0e:d3:ac:05:3a:18:e3:f4:df:94:8e:
         99:19:e4:39:4e:11:23:66:51:15:36:e0:d6:78:73:bd:ca:65:
         5a:c5:4f:00:8e:72:85:90:46:b5:62:ff:0f:08:bc:b2:3c:79:
         e5:b9:4e:3a:3f:5a:9f:43:4a:80:ad:67:ae:22:05:75:07:83:
         f4:47:5f:ce:cf:82:51:21:0d:76:24:e9:ce:47:09:56:d7:d0:
         d3:f0:a5:c5:c0:be:fc:b3:12:b8:5f:79:f1:5f:c2:98:ca:4e:
         56:53:35:b1:a3:e6:15:d9:70:f1:a6:58:df:bb:04:bf:f3:12:
         b8:3c:43:30:a7:d1:72:f6:de:d3:a3:bb:39:81:9f:40:fb:42:
         66:c8:c9:a2:37:e7:aa:73:85:cf:17:92:87:55:bc:fd:c5:64:
         d4:d6:dd:13:e5:44:0e:ac:63:03:0a:bb:7a:2e:98:92:d9:23:
         ec:ea:af:ee:f0:e7:48:dc:ac:49:a7:a3:e7:35:b7:87:f5:49:
         e9:27:cf:4d:2c:55:5b:eb:6c:2c:be:0b:13:90:2e:2f:35:f2:
         20:40:45:f5:16:47:b4:5a:e9:1f:32:c4:23:12:a9:dc:1d:03:
         3d:db:aa:01:df:be:1f:91:ed:e3:72:90:33:4b:1a:88:f8:20:
         df:86:1c:05
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUZj2LprbTXKzmWfbdONyiWMZCi6gwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0VEMjY2MDRGMTgwNjY2MjU3RUE4QzY1NzU4RTZBOTND
MEVBNTBGODAeFw0yNDA0MDMxODI1NDhaFw0yNTA0MDIxODMwNDhaMDMxMTAvBgNV
BAMTKDI2ODcwMzZDRUUwN0EzNDU2NzA3RTlCRjMwRjI4MkE4RTUxREE1MTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDn+lSUtAJv/dZAHk1m23SdMqqb
Zgj91LZ+kbkwqyKL5XsLC4joWcrG0UcddMXWtQ3fueIma/DElhJmkLii7WfFnz4J
0Zt0tvqV8tfz/xVwQjiPCiYEFNGWIAPCFu+h2f0EhsU8beCW7Ctw84mszXtul8rL
fQpf1boRfZVoN0pvhpRbmwnDyvTSLmWXp7iLGfdYoFlUhPnu+GKK1vIeUZ2RTvVO
YcyxAVgEn6vppOWwSQX4ChO4/gPRMZkJ63UAlZqj8PlP3JXRKPhJMEP8IaUwH3gr
G0v4ke7ULM2BBpuQz5PPP3jkKGuzeqN2eQKQehs/4+Xn2FRW1uJctBibugSXAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUJocDbO4Ho0VnB+m/MPKCqOUdpRQwHwYDVR0j
BBgwFoAUPtJmBPGAZmJX6oxldY5qk8DqUPgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOWR0Tk5nNmJvVkw1cGtYR2gzTXM5S285TERQUDZzQUxDUUZWYWlhem42
a2IvMS8zRUQyNjYwNEYxODA2NjYyNTdFQThDNjU3NThFNkE5M0MwRUE1MEY4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzNFRDI2NjA0RjE4MDY2NjI1
N0VBOEM2NTc1OEU2QTkzQzBFQTUwRjguY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzlkdE5OZzZib1ZMNXBrWEdoM01zOUtvOUxEUFA2c0FMQ1FGVmFpYXpuNmtiLzEv
MzEzNjM4MmUzMjMwMzUyZTMxMzIzODJlMzAyZjMyMzIyZDMyMzIyMDNkM2UyMDMy
MzYzNTMzMzYzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAqjNgDANBgkqhkiG9w0BAQsFAAOCAQEAS/qf
dfyxDA7TrAU6GOP035SOmRnkOU4RI2ZRFTbg1nhzvcplWsVPAI5yhZBGtWL/Dwi8
sjx55blOOj9an0NKgK1nriIFdQeD9Edfzs+CUSENdiTpzkcJVtfQ0/ClxcC+/LMS
uF958V/CmMpOVlM1saPmFdlw8aZY37sEv/MSuDxDMKfRcvbe06O7OYGfQPtCZsjJ
ojfnqnOFzxeSh1W8/cVk1NbdE+VEDqxjAwq7ei6Yktkj7Oqv7vDnSNysSaej5zW3
h/VJ6SfPTSxVW+tsLL4LE5AuLzXyIEBF9RZHtFrpHzLEIxKp3B0DPduqAd++H5Ht
43KQM0saiPgg34YcBQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:05 2024 by rpki-client on console-fra.rpki-client.org