Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ABenM6BHaU2mxnjxwaHapbNMfRaYrNKuMjDtRivn4jcX/0/3136382e3233322e3139382e302f32332d3234203d3e20323634393438.roa
File:                     3136382e3233322e3139382e302f32332d3234203d3e20323634393438.roa (raw, json)
Hash identifier:          H2bpF1CbYtqeXGdRxlqeGajgv0HlS9JWcG+siIRdWNM=
Subject key identifier:   03:DB:FE:9B:3A:B7:16:F1:11:F3:56:53:EA:91:AF:2A:18:17:E4:97
Certificate issuer:       /CN=34E288B10C10C07A459D7CD2AC88EC89BBEEA970
Certificate serial:       542DE00AA6F037BC2F56A565E5851F5ACBC0884A
Authority key identifier: 34:E2:88:B1:0C:10:C0:7A:45:9D:7C:D2:AC:88:EC:89:BB:EE:A9:70
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/34E288B10C10C07A459D7CD2AC88EC89BBEEA970.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ABenM6BHaU2mxnjxwaHapbNMfRaYrNKuMjDtRivn4jcX/0/3136382e3233322e3139382e302f32332d3234203d3e20323634393438.roa
Signing time:             Tue 01 Nov 2022 11:11:24 +0000
ROA not before:           Tue 01 Nov 2022 11:06:24 +0000
ROA not after:            Tue 31 Oct 2023 11:11:24 +0000
asID:                     264948
IP address blocks:        168.232.198.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:2d:e0:0a:a6:f0:37:bc:2f:56:a5:65:e5:85:1f:5a:cb:c0:88:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34E288B10C10C07A459D7CD2AC88EC89BBEEA970
        Validity
            Not Before: Nov  1 11:06:24 2022 GMT
            Not After : Oct 31 11:11:24 2023 GMT
        Subject: CN=03DBFE9B3AB716F111F35653EA91AF2A1817E497
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:68:9c:b3:91:45:fe:1a:85:e1:cd:30:9f:28:
                    96:59:4f:5c:39:5e:fc:a2:04:cb:79:b2:43:d0:e1:
                    32:7a:6e:e6:8d:f6:5a:7a:0b:af:88:fd:16:23:29:
                    70:c0:1e:7c:6b:50:c5:ed:0b:ae:07:5d:d6:e5:af:
                    0e:29:a1:7b:c7:0d:f2:1d:a2:50:ad:b9:93:36:86:
                    38:4e:46:38:81:a9:37:d4:0f:9e:fa:b1:4b:a2:59:
                    4d:de:37:62:f0:1c:7b:7d:35:9f:99:6f:f3:05:52:
                    38:13:29:33:7c:05:02:d0:46:5b:ca:54:ab:cd:89:
                    ce:c8:ed:bf:09:ed:b1:a9:a2:16:d9:d0:a3:b9:01:
                    fd:df:7e:e8:e9:d6:fd:45:2e:0f:3f:06:9e:80:ea:
                    46:ae:54:6f:07:a2:06:aa:6c:5d:dc:be:68:33:b1:
                    99:db:be:79:c0:7f:81:ba:0e:eb:d4:74:81:72:eb:
                    c2:6c:92:d7:34:ac:0a:2b:c8:a9:4e:8c:b6:ea:58:
                    4b:5a:9e:f4:d2:4c:6c:07:9c:89:c2:6d:87:cb:47:
                    97:65:89:28:de:85:47:d2:78:77:9f:73:c0:b6:4f:
                    86:ef:26:2a:08:82:12:22:46:6b:97:b0:69:68:20:
                    17:3a:cc:4e:80:ff:b1:63:07:4c:04:f6:81:90:62:
                    ac:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:DB:FE:9B:3A:B7:16:F1:11:F3:56:53:EA:91:AF:2A:18:17:E4:97
            X509v3 Authority Key Identifier:
                keyid:34:E2:88:B1:0C:10:C0:7A:45:9D:7C:D2:AC:88:EC:89:BB:EE:A9:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ABenM6BHaU2mxnjxwaHapbNMfRaYrNKuMjDtRivn4jcX/0/34E288B10C10C07A459D7CD2AC88EC89BBEEA970.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/34E288B10C10C07A459D7CD2AC88EC89BBEEA970.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ABenM6BHaU2mxnjxwaHapbNMfRaYrNKuMjDtRivn4jcX/0/3136382e3233322e3139382e302f32332d3234203d3e20323634393438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.232.198.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3d:61:1f:ee:9b:40:3d:1e:06:29:44:f0:02:ef:1c:9f:bc:db:
         74:b5:92:eb:ff:da:88:0f:1c:58:eb:11:3b:7b:3c:df:07:3d:
         66:22:a6:d5:28:06:48:86:4a:55:87:b7:c7:f2:d2:93:0f:6d:
         c1:de:f7:d6:54:b5:cb:32:61:e1:da:3c:ca:fe:16:d2:a5:c1:
         d7:f6:48:e6:43:0c:71:10:27:c0:90:2b:24:87:85:09:0a:4b:
         46:8a:ea:58:37:6a:3f:02:ce:25:b7:1e:9d:bd:4b:88:ca:5b:
         1c:fb:55:a6:a0:2e:c6:64:2d:04:b4:08:53:fa:1b:d1:17:5b:
         dc:8a:da:72:69:c5:93:e2:97:45:a8:57:cb:e6:56:2e:3b:d1:
         5c:33:69:83:e1:d4:b2:24:95:24:67:f9:74:86:ea:59:6c:ee:
         0e:f4:ae:f5:a4:60:ff:3b:43:f8:20:7e:ea:eb:01:35:7e:3b:
         03:c3:89:48:bf:3a:5a:16:61:cc:52:55:fe:31:98:fc:97:16:
         d4:a7:68:ba:98:55:41:41:80:e2:15:40:58:2b:c7:57:aa:64:
         56:a3:d9:70:ae:c9:11:15:2e:a2:68:22:87:a9:1a:90:30:3e:
         27:c2:a1:c6:ae:b4:2a:da:8b:93:86:95:c9:0e:55:d5:63:d7:
         c5:ea:88:d3
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUVC3gCqbwN7wvVqVl5YUfWsvAiEowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzRFMjg4QjEwQzEwQzA3QTQ1OUQ3Q0QyQUM4OEVDODlC
QkVFQTk3MDAeFw0yMjExMDExMTA2MjRaFw0yMzEwMzExMTExMjRaMDMxMTAvBgNV
BAMTKDAzREJGRTlCM0FCNzE2RjExMUYzNTY1M0VBOTFBRjJBMTgxN0U0OTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSaJyzkUX+GoXhzTCfKJZZT1w5
XvyiBMt5skPQ4TJ6buaN9lp6C6+I/RYjKXDAHnxrUMXtC64HXdblrw4poXvHDfId
olCtuZM2hjhORjiBqTfUD576sUuiWU3eN2LwHHt9NZ+Zb/MFUjgTKTN8BQLQRlvK
VKvNic7I7b8J7bGpohbZ0KO5Af3ffujp1v1FLg8/Bp6A6kauVG8HogaqbF3cvmgz
sZnbvnnAf4G6DuvUdIFy68Jsktc0rAoryKlOjLbqWEtanvTSTGwHnInCbYfLR5dl
iSjehUfSeHefc8C2T4bvJioIghIiRmuXsGloIBc6zE6A/7FjB0wE9oGQYqxnAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUA9v+mzq3FvER81ZT6pGvKhgX5JcwHwYDVR0j
BBgwFoAUNOKIsQwQwHpFnXzSrIjsibvuqXAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQUJlbk02QkhhVTJteG5qeHdhSGFwYk5NZlJhWXJOS3VNakR0Uml2bjRq
Y1gvMC8zNEUyODhCMTBDMTBDMDdBNDU5RDdDRDJBQzg4RUM4OUJCRUVBOTcwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzM0RTI4OEIxMEMxMEMwN0E0
NTlEN0NEMkFDODhFQzg5QkJFRUE5NzAuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0FCZW5NNkJIYVUybXhuanh3YUhhcGJOTWZSYVlyTkt1TWpEdFJpdm40amNYLzAv
MzEzNjM4MmUzMjMzMzIyZTMxMzkzODJlMzAyZjMyMzMyZDMyMzQyMDNkM2UyMDMy
MzYzNDM5MzQzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAajoxjANBgkqhkiG9w0BAQsFAAOCAQEAPWEf
7ptAPR4GKUTwAu8cn7zbdLWS6//aiA8cWOsRO3s83wc9ZiKm1SgGSIZKVYe3x/LS
kw9twd731lS1yzJh4do8yv4W0qXB1/ZI5kMMcRAnwJArJIeFCQpLRorqWDdqPwLO
Jbcenb1LiMpbHPtVpqAuxmQtBLQIU/ob0Rdb3IracmnFk+KXRahXy+ZWLjvRXDNp
g+HUsiSVJGf5dIbqWWzuDvSu9aRg/ztD+CB+6usBNX47A8OJSL86WhZhzFJV/jGY
/JcW1KdouphVQUGA4hVAWCvHV6pkVqPZcK7JERUuomgih6kakDA+J8Khxq60KtqL
k4aVyQ5V1WPXxeqI0w==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:11 2024 by rpki-client on console-fra.rpki-client.org