Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ABenM6BHaU2mxnjxwaHapbNMfRaYrNKuMjDtRivn4jcX/0/3136382e3233322e3139362e302f32332d3233203d3e20323634393438.roa
File:                     3136382e3233322e3139362e302f32332d3233203d3e20323634393438.roa (raw, json)
Hash identifier:          kwWJbx/nWJRgQ62mMv2AkigIWGSqquQ05ohBHKE1MbE=
Subject key identifier:   DB:72:4E:0B:CD:5A:42:B2:9E:5A:A8:F9:8E:BE:1B:B0:C3:63:04:3A
Certificate issuer:       /CN=34E288B10C10C07A459D7CD2AC88EC89BBEEA970
Certificate serial:       4797B51565D56DBE9E13DEF7F07888775111283E
Authority key identifier: 34:E2:88:B1:0C:10:C0:7A:45:9D:7C:D2:AC:88:EC:89:BB:EE:A9:70
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/34E288B10C10C07A459D7CD2AC88EC89BBEEA970.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ABenM6BHaU2mxnjxwaHapbNMfRaYrNKuMjDtRivn4jcX/0/3136382e3233322e3139362e302f32332d3233203d3e20323634393438.roa
Signing time:             Wed 26 Oct 2022 12:40:11 +0000
ROA not before:           Wed 26 Oct 2022 12:35:11 +0000
ROA not after:            Wed 25 Oct 2023 12:40:11 +0000
asID:                     264948
IP address blocks:        168.232.196.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:97:b5:15:65:d5:6d:be:9e:13:de:f7:f0:78:88:77:51:11:28:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34E288B10C10C07A459D7CD2AC88EC89BBEEA970
        Validity
            Not Before: Oct 26 12:35:11 2022 GMT
            Not After : Oct 25 12:40:11 2023 GMT
        Subject: CN=DB724E0BCD5A42B29E5AA8F98EBE1BB0C363043A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:4b:6c:ce:9d:a9:6e:4b:0e:c8:36:1f:bf:5d:
                    a4:d4:1d:0a:63:f8:ce:2e:c5:f0:f9:b1:4f:f8:67:
                    04:a9:49:e4:60:ea:f9:6e:7b:67:0f:16:b0:ba:e2:
                    94:be:91:ad:94:d9:bb:6e:10:45:d1:bc:f9:88:9c:
                    2e:d7:1f:05:d3:d1:ad:0a:6b:01:f2:cf:4d:97:30:
                    a0:87:84:63:1b:8d:9e:9f:20:db:b3:5f:57:a1:8e:
                    71:36:95:fc:9f:18:be:94:70:fa:b2:2b:1b:1a:78:
                    80:e8:56:f9:c4:19:6d:22:4b:bb:92:cc:db:82:7e:
                    ea:8d:cc:f2:d5:09:93:90:50:91:60:f4:e5:2c:31:
                    16:61:44:78:82:36:19:2d:09:78:6d:d3:77:0d:47:
                    4b:b6:66:e1:2a:6a:8c:16:f8:59:e2:61:84:3c:8c:
                    72:31:30:e7:9c:35:3e:bf:06:5f:d2:6b:3a:23:77:
                    60:bd:a1:11:51:e7:df:a6:05:68:97:4f:7a:d1:29:
                    fa:ea:71:8a:71:f9:e5:38:20:4f:8b:60:0e:e7:1c:
                    f3:78:67:d7:6f:f4:7c:7e:a5:c4:a4:09:f9:5b:59:
                    f7:f1:b0:d2:6a:8c:f9:17:90:e7:1a:5e:75:36:d4:
                    9e:a4:07:aa:fb:5d:02:2e:6d:fa:d6:d6:2e:4e:e9:
                    6d:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:72:4E:0B:CD:5A:42:B2:9E:5A:A8:F9:8E:BE:1B:B0:C3:63:04:3A
            X509v3 Authority Key Identifier:
                keyid:34:E2:88:B1:0C:10:C0:7A:45:9D:7C:D2:AC:88:EC:89:BB:EE:A9:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ABenM6BHaU2mxnjxwaHapbNMfRaYrNKuMjDtRivn4jcX/0/34E288B10C10C07A459D7CD2AC88EC89BBEEA970.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/34E288B10C10C07A459D7CD2AC88EC89BBEEA970.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ABenM6BHaU2mxnjxwaHapbNMfRaYrNKuMjDtRivn4jcX/0/3136382e3233322e3139362e302f32332d3233203d3e20323634393438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.232.196.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5b:82:98:52:57:f5:e6:19:ac:32:10:91:03:3d:1e:92:5d:58:
         8a:7f:7b:73:51:06:38:4c:89:d0:a2:17:77:d3:c3:61:9a:74:
         b8:f2:45:2f:50:d2:1c:d1:9c:69:4b:87:2e:f7:e8:c0:6e:3e:
         26:13:db:82:c7:1e:9f:1f:f6:3e:03:72:9c:00:da:3c:d1:83:
         12:ee:7a:0e:3c:66:1b:fc:96:76:5e:ab:e5:a4:b7:3f:44:37:
         d5:d2:1f:c9:b1:01:0a:ba:27:68:00:33:fc:fa:24:21:e3:62:
         89:86:c4:7a:af:1d:4c:93:e2:5f:09:3d:88:2b:2f:f7:a3:cd:
         f1:b0:cf:3c:3d:cf:3d:d5:9c:d8:be:c9:91:ec:da:e4:84:8f:
         b7:4f:43:35:8d:30:a2:7c:dd:b4:2b:8b:14:f9:56:ac:37:d4:
         46:5c:c9:e2:34:e5:31:72:bb:f3:31:71:3d:6e:3c:24:bc:fc:
         61:f7:80:4b:de:a7:0f:ea:3f:46:bd:74:9b:0c:5e:09:72:62:
         3f:84:cc:65:e1:1d:66:14:e2:be:60:31:9d:16:17:fc:0a:7b:
         a1:65:86:19:80:2c:3d:e0:02:c2:21:f7:8f:a6:6e:f3:39:ed:
         be:40:a4:93:13:3d:9b:03:28:3c:b7:7c:37:16:4a:04:1b:42:
         75:83:7b:a2
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUR5e1FWXVbb6eE9738HiId1ERKD4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzRFMjg4QjEwQzEwQzA3QTQ1OUQ3Q0QyQUM4OEVDODlC
QkVFQTk3MDAeFw0yMjEwMjYxMjM1MTFaFw0yMzEwMjUxMjQwMTFaMDMxMTAvBgNV
BAMTKERCNzI0RTBCQ0Q1QTQyQjI5RTVBQThGOThFQkUxQkIwQzM2MzA0M0EwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMS2zOnaluSw7INh+/XaTUHQpj
+M4uxfD5sU/4ZwSpSeRg6vlue2cPFrC64pS+ka2U2btuEEXRvPmInC7XHwXT0a0K
awHyz02XMKCHhGMbjZ6fINuzX1ehjnE2lfyfGL6UcPqyKxsaeIDoVvnEGW0iS7uS
zNuCfuqNzPLVCZOQUJFg9OUsMRZhRHiCNhktCXht03cNR0u2ZuEqaowW+FniYYQ8
jHIxMOecNT6/Bl/Sazojd2C9oRFR59+mBWiXT3rRKfrqcYpx+eU4IE+LYA7nHPN4
Z9dv9Hx+pcSkCflbWffxsNJqjPkXkOcaXnU21J6kB6r7XQIubfrW1i5O6W1jAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQU23JOC81aQrKeWqj5jr4bsMNjBDowHwYDVR0j
BBgwFoAUNOKIsQwQwHpFnXzSrIjsibvuqXAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQUJlbk02QkhhVTJteG5qeHdhSGFwYk5NZlJhWXJOS3VNakR0Uml2bjRq
Y1gvMC8zNEUyODhCMTBDMTBDMDdBNDU5RDdDRDJBQzg4RUM4OUJCRUVBOTcwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzM0RTI4OEIxMEMxMEMwN0E0
NTlEN0NEMkFDODhFQzg5QkJFRUE5NzAuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0FCZW5NNkJIYVUybXhuanh3YUhhcGJOTWZSYVlyTkt1TWpEdFJpdm40amNYLzAv
MzEzNjM4MmUzMjMzMzIyZTMxMzkzNjJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDMy
MzYzNDM5MzQzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAajoxDANBgkqhkiG9w0BAQsFAAOCAQEAW4KY
Ulf15hmsMhCRAz0ekl1Yin97c1EGOEyJ0KIXd9PDYZp0uPJFL1DSHNGcaUuHLvfo
wG4+JhPbgscenx/2PgNynADaPNGDEu56DjxmG/yWdl6r5aS3P0Q31dIfybEBCron
aAAz/PokIeNiiYbEeq8dTJPiXwk9iCsv96PN8bDPPD3PPdWc2L7Jkeza5ISPt09D
NY0wonzdtCuLFPlWrDfURlzJ4jTlMXK78zFxPW48JLz8YfeAS96nD+o/Rr10mwxe
CXJiP4TMZeEdZhTivmAxnRYX/Ap7oWWGGYAsPeACwiH3j6Zu8zntvkCkkxM9mwMo
PLd8NxZKBBtCdYN7og==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:11 2024 by rpki-client on console-fra.rpki-client.org