Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9erfwLYKrqkPEiq1iVh4TE3yeWSCgWo15vbe6zEw4VyZ/0/3136382e3139352e3231302e302f32342d3332203d3e203631393337.roa
File:                     3136382e3139352e3231302e302f32342d3332203d3e203631393337.roa (raw, json)
Hash identifier:          nJ93LrzRg4sj232U1YM9OIPJyNCHWuBxHy63a0PqYRw=
Subject key identifier:   DE:A5:B3:49:12:1C:3A:56:2B:C7:73:FE:34:29:23:DF:11:CA:1C:D6
Certificate issuer:       /CN=AEA761DE82F8C8DD584B9ACB5385D06DFF717C84
Certificate serial:       241409F1954F55058872B7A5449950C278E7B816
Authority key identifier: AE:A7:61:DE:82:F8:C8:DD:58:4B:9A:CB:53:85:D0:6D:FF:71:7C:84
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AEA761DE82F8C8DD584B9ACB5385D06DFF717C84.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9erfwLYKrqkPEiq1iVh4TE3yeWSCgWo15vbe6zEw4VyZ/0/3136382e3139352e3231302e302f32342d3332203d3e203631393337.roa
Signing time:             Thu 18 Jan 2024 00:19:29 +0000
ROA not before:           Thu 18 Jan 2024 00:14:29 +0000
ROA not after:            Thu 16 Jan 2025 00:19:29 +0000
asID:                     61937
IP address blocks:        168.195.210.0/24 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:14:09:f1:95:4f:55:05:88:72:b7:a5:44:99:50:c2:78:e7:b8:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AEA761DE82F8C8DD584B9ACB5385D06DFF717C84
        Validity
            Not Before: Jan 18 00:14:29 2024 GMT
            Not After : Jan 16 00:19:29 2025 GMT
        Subject: CN=DEA5B349121C3A562BC773FE342923DF11CA1CD6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:56:35:d1:cd:19:87:26:07:f7:8f:f3:d7:6b:
                    8c:fe:4f:82:30:ab:ee:96:6a:22:f7:41:63:9b:e3:
                    54:5a:38:65:ac:94:5b:4e:a3:71:3c:3b:2a:4c:9e:
                    bf:ff:78:91:16:03:2b:a5:65:7e:ac:53:5f:0b:fb:
                    49:78:80:c3:00:f8:e1:92:b0:e6:41:30:43:29:a8:
                    75:84:18:9a:ad:8c:d0:53:b3:7c:c6:88:3d:cc:84:
                    b8:38:9a:f4:a2:95:fc:15:92:84:b6:46:37:3e:20:
                    10:59:0e:70:88:9b:2a:c9:ed:a7:00:fc:48:fb:87:
                    4a:50:13:c0:f3:43:e9:48:bd:1b:2d:f4:a4:9d:13:
                    c1:7f:53:47:1a:e8:43:32:3f:15:29:5b:12:db:ab:
                    8a:ba:e1:5d:81:e7:06:6e:07:9a:79:0b:69:30:36:
                    de:e7:6a:4f:5b:b6:1a:2b:93:03:8f:69:64:fe:78:
                    e1:38:fd:ce:52:ea:14:bd:47:c7:e7:5d:0a:50:69:
                    dd:7f:f6:7e:02:eb:28:69:56:88:40:4c:d3:7c:68:
                    d7:f6:55:0e:f8:58:71:68:4c:3d:3d:07:6f:62:1f:
                    52:50:35:9c:03:6c:74:97:19:e2:79:02:24:85:af:
                    c2:3d:6d:70:8a:40:8a:b7:d6:4d:5d:f8:5a:a9:39:
                    9c:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:A5:B3:49:12:1C:3A:56:2B:C7:73:FE:34:29:23:DF:11:CA:1C:D6
            X509v3 Authority Key Identifier:
                keyid:AE:A7:61:DE:82:F8:C8:DD:58:4B:9A:CB:53:85:D0:6D:FF:71:7C:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9erfwLYKrqkPEiq1iVh4TE3yeWSCgWo15vbe6zEw4VyZ/0/AEA761DE82F8C8DD584B9ACB5385D06DFF717C84.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AEA761DE82F8C8DD584B9ACB5385D06DFF717C84.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9erfwLYKrqkPEiq1iVh4TE3yeWSCgWo15vbe6zEw4VyZ/0/3136382e3139352e3231302e302f32342d3332203d3e203631393337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.195.210.0/24

    Signature Algorithm: sha256WithRSAEncryption
         23:ff:64:d2:6c:e4:f7:b8:99:3c:b5:73:a5:35:19:57:71:52:
         1a:9a:15:55:a7:2f:04:5b:c1:f4:71:78:dd:c9:e5:50:36:fa:
         7f:b3:8b:b5:bb:f2:0f:fd:de:49:19:35:65:c0:8a:42:33:d4:
         a9:5d:d5:17:1a:9c:fe:ed:53:42:46:71:7a:e1:d7:67:9d:78:
         d4:85:72:46:cd:ab:1c:5b:fe:be:e4:9c:64:ba:71:a8:ec:7f:
         8f:90:82:cd:56:30:01:04:ec:52:60:66:a4:2f:8f:12:41:14:
         ed:30:59:d0:17:4b:33:ab:a0:df:7d:02:0c:5d:f7:3c:94:e6:
         f1:ef:c4:3b:9f:a6:8f:e1:57:b0:7c:e8:cd:e3:ee:a6:33:9c:
         06:3e:87:35:93:03:bc:64:26:21:a1:ca:88:79:b7:ff:24:43:
         f4:5c:90:e7:47:6f:d8:ad:d9:cf:2c:e1:16:34:1c:a1:1b:c3:
         4f:52:a4:10:b7:55:45:4d:d2:9e:96:2d:05:7f:45:ef:0f:7e:
         b4:50:4e:45:12:4f:d2:46:cd:3a:7e:fa:5d:a8:5f:29:ce:ef:
         63:28:45:95:39:8d:ba:b7:3b:f5:18:e3:0a:11:e2:e0:50:0b:
         38:13:de:ed:4a:11:9b:1f:46:da:10:66:1c:32:88:2c:8a:e1:
         71:d2:38:75
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUJBQJ8ZVPVQWIcrelRJlQwnjnuBYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUVBNzYxREU4MkY4QzhERDU4NEI5QUNCNTM4NUQwNkRG
RjcxN0M4NDAeFw0yNDAxMTgwMDE0MjlaFw0yNTAxMTYwMDE5MjlaMDMxMTAvBgNV
BAMTKERFQTVCMzQ5MTIxQzNBNTYyQkM3NzNGRTM0MjkyM0RGMTFDQTFDRDYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWVjXRzRmHJgf3j/PXa4z+T4Iw
q+6WaiL3QWOb41RaOGWslFtOo3E8OypMnr//eJEWAyulZX6sU18L+0l4gMMA+OGS
sOZBMEMpqHWEGJqtjNBTs3zGiD3MhLg4mvSilfwVkoS2Rjc+IBBZDnCImyrJ7acA
/Ej7h0pQE8DzQ+lIvRst9KSdE8F/U0ca6EMyPxUpWxLbq4q64V2B5wZuB5p5C2kw
Nt7nak9bthorkwOPaWT+eOE4/c5S6hS9R8fnXQpQad1/9n4C6yhpVohATNN8aNf2
VQ74WHFoTD09B29iH1JQNZwDbHSXGeJ5AiSFr8I9bXCKQIq31k1d+FqpOZw7AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU3qWzSRIcOlYrx3P+NCkj3xHKHNYwHwYDVR0j
BBgwFoAUrqdh3oL4yN1YS5rLU4XQbf9xfIQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOWVyZndMWUtycWtQRWlxMWlWaDRURTN5ZVdTQ2dXbzE1dmJlNnpFdzRW
eVovMC9BRUE3NjFERTgyRjhDOERENTg0QjlBQ0I1Mzg1RDA2REZGNzE3Qzg0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0FFQTc2MURFODJGOEM4REQ1
ODRCOUFDQjUzODVEMDZERkY3MTdDODQuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzllcmZ3TFlLcnFrUEVpcTFpVmg0VEUzeWVXU0NnV28xNXZiZTZ6RXc0VnlaLzAv
MzEzNjM4MmUzMTM5MzUyZTMyMzEzMDJlMzAyZjMyMzQyZDMzMzIyMDNkM2UyMDM2
MzEzOTMzMzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBACow9IwDQYJKoZIhvcNAQELBQADggEBACP/ZNJs
5Pe4mTy1c6U1GVdxUhqaFVWnLwRbwfRxeN3J5VA2+n+zi7W78g/93kkZNWXAikIz
1Kld1RcanP7tU0JGcXrh12edeNSFckbNqxxb/r7knGS6cajsf4+Qgs1WMAEE7FJg
ZqQvjxJBFO0wWdAXSzOroN99Agxd9zyU5vHvxDufpo/hV7B86M3j7qYznAY+hzWT
A7xkJiGhyoh5t/8kQ/RckOdHb9it2c8s4RY0HKEbw09SpBC3VUVN0p6WLQV/Re8P
frRQTkUST9JGzTp++l2oXynO72MoRZU5jbq3O/UY4woR4uBQCzgT3u1KEZsfRtoQ
ZhwyiCyK4XHSOHU=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:05 2024 by rpki-client on console-fra.rpki-client.org