Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9nAecW6K5ucz7ZdS3Hztykz9XvWXTmHVupvhJF9bcaqm/0/3136382e3138312e3232302e302f32322d3234203d3e20323633393138.roa
File:                     3136382e3138312e3232302e302f32322d3234203d3e20323633393138.roa (raw, json)
Hash identifier:          5kAwAFm6NBZ90x+WuGUQW9mW5BzaRV9t7/XtQqVI1WI=
Subject key identifier:   41:DB:67:AE:2F:D5:5F:29:02:25:F3:B1:C3:C8:6E:45:47:00:D3:BC
Certificate issuer:       /CN=AB49A4379BEF7213EEA326989186DC4319EF4C4B
Certificate serial:       15D2FC2A601C345D6997A0367EB26EE7C69707AB
Authority key identifier: AB:49:A4:37:9B:EF:72:13:EE:A3:26:98:91:86:DC:43:19:EF:4C:4B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AB49A4379BEF7213EEA326989186DC4319EF4C4B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9nAecW6K5ucz7ZdS3Hztykz9XvWXTmHVupvhJF9bcaqm/0/3136382e3138312e3232302e302f32322d3234203d3e20323633393138.roa
Signing time:             Tue 10 Oct 2023 21:00:01 +0000
ROA not before:           Tue 10 Oct 2023 20:55:01 +0000
ROA not after:            Tue 08 Oct 2024 21:00:01 +0000
asID:                     263918
IP address blocks:        168.181.220.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:d2:fc:2a:60:1c:34:5d:69:97:a0:36:7e:b2:6e:e7:c6:97:07:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AB49A4379BEF7213EEA326989186DC4319EF4C4B
        Validity
            Not Before: Oct 10 20:55:01 2023 GMT
            Not After : Oct  8 21:00:01 2024 GMT
        Subject: CN=3082010A0282010100C7939A296F6AB47753089CBAC5B9E71D37DF13A5344F42F1419AAF175117B8A7E71BCD47F3AAE753B9BB595B76509FB4D2D02F9681CF2B7194D8783711EAA13C92EB786A2C1D01535DCCE3325A0F50442B736E08B33A109A9D57BF0357C5F0A276E6E8B702FFF6B38594E6DBC235E4A3933D5CE8746F599656450A1DE7F03C36F6077D7CD9D4D96D5C50702FC617E78AD2D5DDD8735248405D3212198FF2EAD0FE3CFDE92F78E2B93F962F40D2FE0360A69038354982DCBA41CD85D6F6CFA0CACC198D6F2405C82E8485F39FE5E5FC456A1CAECBC2A746173B033BDCB836F5B9CD06D0CB7E88D35D708041A26C55358841A976A98678C2C9BF2A33FB0051AF4F0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:93:9a:29:6f:6a:b4:77:53:08:9c:ba:c5:b9:
                    e7:1d:37:df:13:a5:34:4f:42:f1:41:9a:af:17:51:
                    17:b8:a7:e7:1b:cd:47:f3:aa:e7:53:b9:bb:59:5b:
                    76:50:9f:b4:d2:d0:2f:96:81:cf:2b:71:94:d8:78:
                    37:11:ea:a1:3c:92:eb:78:6a:2c:1d:01:53:5d:cc:
                    e3:32:5a:0f:50:44:2b:73:6e:08:b3:3a:10:9a:9d:
                    57:bf:03:57:c5:f0:a2:76:e6:e8:b7:02:ff:f6:b3:
                    85:94:e6:db:c2:35:e4:a3:93:3d:5c:e8:74:6f:59:
                    96:56:45:0a:1d:e7:f0:3c:36:f6:07:7d:7c:d9:d4:
                    d9:6d:5c:50:70:2f:c6:17:e7:8a:d2:d5:dd:d8:73:
                    52:48:40:5d:32:12:19:8f:f2:ea:d0:fe:3c:fd:e9:
                    2f:78:e2:b9:3f:96:2f:40:d2:fe:03:60:a6:90:38:
                    35:49:82:dc:ba:41:cd:85:d6:f6:cf:a0:ca:cc:19:
                    8d:6f:24:05:c8:2e:84:85:f3:9f:e5:e5:fc:45:6a:
                    1c:ae:cb:c2:a7:46:17:3b:03:3b:dc:b8:36:f5:b9:
                    cd:06:d0:cb:7e:88:d3:5d:70:80:41:a2:6c:55:35:
                    88:41:a9:76:a9:86:78:c2:c9:bf:2a:33:fb:00:51:
                    af:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:DB:67:AE:2F:D5:5F:29:02:25:F3:B1:C3:C8:6E:45:47:00:D3:BC
            X509v3 Authority Key Identifier:
                keyid:AB:49:A4:37:9B:EF:72:13:EE:A3:26:98:91:86:DC:43:19:EF:4C:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9nAecW6K5ucz7ZdS3Hztykz9XvWXTmHVupvhJF9bcaqm/0/AB49A4379BEF7213EEA326989186DC4319EF4C4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AB49A4379BEF7213EEA326989186DC4319EF4C4B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9nAecW6K5ucz7ZdS3Hztykz9XvWXTmHVupvhJF9bcaqm/0/3136382e3138312e3232302e302f32322d3234203d3e20323633393138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.181.220.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8c:90:7f:49:16:ea:bc:68:6a:bc:ab:58:bb:8d:c7:de:32:8a:
         91:16:22:86:58:b1:d3:07:90:74:1e:42:be:06:0a:c7:3f:28:
         d7:b0:c0:fa:c4:59:ca:49:75:d1:68:41:e5:b1:8f:90:63:82:
         fd:85:49:d3:64:88:11:dc:53:7e:8a:83:13:09:53:94:00:07:
         c5:c6:24:b2:cc:48:7c:0f:32:93:60:68:ce:23:b7:9f:7e:06:
         50:89:ca:ad:35:1d:ef:58:69:fb:19:46:05:21:34:a7:92:11:
         d5:f3:9d:34:e4:19:5e:7c:1e:2e:68:c8:09:46:c5:94:26:ac:
         ab:b9:ac:8d:96:04:bf:ea:ce:ee:05:c6:75:5d:2c:b4:4c:22:
         07:fe:dd:e1:ec:1f:67:b9:18:fe:1b:98:14:f7:73:94:26:34:
         6e:03:a9:35:5a:1d:1a:08:44:e7:62:85:af:a8:75:a9:f8:59:
         12:2d:b6:c4:cf:29:00:59:5b:55:20:86:f6:7e:a1:02:6d:5b:
         cf:f0:51:5c:35:7d:a8:cf:15:68:ec:14:5e:30:b8:00:f1:a0:
         25:4a:58:c5:74:ac:e3:9a:2d:63:f8:6c:ab:00:8f:b7:99:df:
         14:d7:9a:ec:df:fa:cb:c8:2a:fb:33:cc:97:16:45:7b:1a:97:
         96:d0:b0:22
-----BEGIN CERTIFICATE-----
MIIHRTCCBi2gAwIBAgIUFdL8KmAcNF1pl6A2frJu58aXB6swDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUI0OUE0Mzc5QkVGNzIxM0VFQTMyNjk4OTE4NkRDNDMx
OUVGNEM0QjAeFw0yMzEwMTAyMDU1MDFaFw0yNDEwMDgyMTAwMDFaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQzc5MzlBMjk2RjZBQjQ3NzUz
MDg5Q0JBQzVCOUU3MUQzN0RGMTNBNTM0NEY0MkYxNDE5QUFGMTc1MTE3QjhBN0U3
MUJDRDQ3RjNBQUU3NTNCOUJCNTk1Qjc2NTA5RkI0RDJEMDJGOTY4MUNGMkI3MTk0
RDg3ODM3MTFFQUExM0M5MkVCNzg2QTJDMUQwMTUzNURDQ0UzMzI1QTBGNTA0NDJC
NzM2RTA4QjMzQTEwOUE5RDU3QkYwMzU3QzVGMEEyNzZFNkU4QjcwMkZGRjZCMzg1
OTRFNkRCQzIzNUU0QTM5MzNENUNFODc0NkY1OTk2NTY0NTBBMURFN0YwM0MzNkY2
MDc3RDdDRDlENEQ5NkQ1QzUwNzAyRkM2MTdFNzhBRDJENURERDg3MzUyNDg0MDVE
MzIxMjE5OEZGMkVBRDBGRTNDRkRFOTJGNzhFMkI5M0Y5NjJGNDBEMkZFMDM2MEE2
OTAzODM1NDk4MkRDQkE0MUNEODVENkY2Q0ZBMENBQ0MxOThENkYyNDA1QzgyRTg0
ODVGMzlGRTVFNUZDNDU2QTFDQUVDQkMyQTc0NjE3M0IwMzNCRENCODM2RjVCOUNE
MDZEMENCN0U4OEQzNUQ3MDgwNDFBMjZDNTUzNTg4NDFBOTc2QTk4Njc4QzJDOUJG
MkEzM0ZCMDA1MUFGNEYwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAx5OaKW9qtHdTCJy6xbnnHTffE6U0T0LxQZqvF1EXuKfnG81H86rn
U7m7WVt2UJ+00tAvloHPK3GU2Hg3EeqhPJLreGosHQFTXczjMloPUEQrc24IszoQ
mp1XvwNXxfCidubotwL/9rOFlObbwjXko5M9XOh0b1mWVkUKHefwPDb2B3182dTZ
bVxQcC/GF+eK0tXd2HNSSEBdMhIZj/Lq0P48/ekveOK5P5YvQNL+A2CmkDg1SYLc
ukHNhdb2z6DKzBmNbyQFyC6EhfOf5eX8RWocrsvCp0YXOwM73Lg29bnNBtDLfojT
XXCAQaJsVTWIQal2qYZ4wsm/KjP7AFGvTwIDAQABo4ICUzCCAk8wHQYDVR0OBBYE
FEHbZ64v1V8pAiXzscPIbkVHANO8MB8GA1UdIwQYMBaAFKtJpDeb73IT7qMmmJGG
3EMZ70xLMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzluQWVjVzZLNXVjejda
ZFMzSHp0eWt6OVh2V1hUbUhWdXB2aEpGOWJjYXFtLzAvQUI0OUE0Mzc5QkVGNzIx
M0VFQTMyNjk4OTE4NkRDNDMxOUVGNEM0Qi5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC9BQjQ5QTQzNzlCRUY3MjEzRUVBMzI2OTg5MTg2REM0MzE5RUY0
QzRCLmNlcjCBsAYIKwYBBQUHAQsEgaMwgaAwgZ0GCCsGAQUFBzALhoGQcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby85bkFlY1c2SzV1Y3o3WmRTM0h6
dHlrejlYdldYVG1IVnVwdmhKRjliY2FxbS8wLzMxMzYzODJlMzEzODMxMmUzMjMy
MzAyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM2MzMzOTMxMzgucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAKotdwwDQYJKoZIhvcNAQELBQADggEBAIyQf0kW6rxoaryrWLuNx94yipEWIoZY
sdMHkHQeQr4GCsc/KNewwPrEWcpJddFoQeWxj5Bjgv2FSdNkiBHcU36KgxMJU5QA
B8XGJLLMSHwPMpNgaM4jt59+BlCJyq01He9YafsZRgUhNKeSEdXznTTkGV58Hi5o
yAlGxZQmrKu5rI2WBL/qzu4FxnVdLLRMIgf+3eHsH2e5GP4bmBT3c5QmNG4DqTVa
HRoIROdiha+odan4WRIttsTPKQBZW1UghvZ+oQJtW8/wUVw1fajPFWjsFF4wuADx
oCVKWMV0rOOaLWP4bKsAj7eZ3xTXmuzf+svIKvszzJcWRXsal5bQsCI=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:12 2024 by rpki-client on console-ams.rpki-client.org