Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ARyNxJ93JKe7ssb7xKi6NN1cMsFp81FwMoGwRYZB7gxu/0/3136382e3139372e3232302e302f32322d3232203d3e20323634323937.roa
File:                     3136382e3139372e3232302e302f32322d3232203d3e20323634323937.roa (raw, json)
Hash identifier:          lzUPEhrSJkfacU5lLwUpHZACj3UqUEVpBO0e3HxhKo0=
Subject key identifier:   53:8F:4A:B2:6B:18:F8:E6:7D:94:6F:8D:65:C2:1B:DC:45:7C:BC:16
Certificate issuer:       /CN=29C49981A06E753E7D8BA04379CF1A6C4CE85950
Certificate serial:       3F5C6151F8AD13C4F29B25B5A84983265D337295
Authority key identifier: 29:C4:99:81:A0:6E:75:3E:7D:8B:A0:43:79:CF:1A:6C:4C:E8:59:50
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/29C49981A06E753E7D8BA04379CF1A6C4CE85950.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ARyNxJ93JKe7ssb7xKi6NN1cMsFp81FwMoGwRYZB7gxu/0/3136382e3139372e3232302e302f32322d3232203d3e20323634323937.roa
Signing time:             Thu 10 Nov 2022 16:27:03 +0000
ROA not before:           Thu 10 Nov 2022 16:22:03 +0000
ROA not after:            Thu 09 Nov 2023 16:27:03 +0000
asID:                     264297
IP address blocks:        168.197.220.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:5c:61:51:f8:ad:13:c4:f2:9b:25:b5:a8:49:83:26:5d:33:72:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29C49981A06E753E7D8BA04379CF1A6C4CE85950
        Validity
            Not Before: Nov 10 16:22:03 2022 GMT
            Not After : Nov  9 16:27:03 2023 GMT
        Subject: CN=538F4AB26B18F8E67D946F8D65C21BDC457CBC16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:82:2e:6e:07:4a:0b:d9:a0:50:f6:e2:c9:c3:
                    79:b0:43:35:b2:1a:db:03:b3:85:f6:23:c9:1a:9a:
                    79:38:67:f3:ee:1d:34:33:e4:f6:15:1a:19:18:41:
                    e3:29:a0:03:e9:4c:e8:94:c9:31:a1:11:47:51:62:
                    9e:11:7d:18:20:87:22:7c:c6:26:ae:49:a4:e9:16:
                    ae:e9:67:6c:b5:be:0c:52:8e:5a:0a:9a:18:32:3e:
                    d7:fc:5f:86:ca:33:7f:a9:b8:0c:82:da:06:17:c4:
                    ec:24:5f:22:75:17:79:91:d9:89:a8:cb:0c:14:29:
                    07:cd:ac:fb:ea:c4:3c:60:37:1e:6e:3f:ab:f2:fb:
                    a6:f6:0a:99:c7:6c:23:1c:10:a7:65:0f:21:91:27:
                    c3:f4:39:22:af:9f:22:89:17:1d:d4:a5:43:2f:40:
                    80:82:89:ae:1b:5e:0a:12:92:b1:6b:bb:e3:75:51:
                    57:f9:26:17:be:89:47:c5:41:b5:d9:9f:72:80:af:
                    9e:5f:7e:d6:95:80:e3:4a:e3:0c:a2:2e:31:8c:f9:
                    8c:81:b0:89:e0:d6:7f:53:9f:58:87:ef:0a:03:c2:
                    be:b8:3f:f0:fa:94:b6:e1:d0:37:d1:2f:61:a6:91:
                    50:77:de:9d:9d:3b:50:4c:40:73:da:aa:21:dd:66:
                    48:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:8F:4A:B2:6B:18:F8:E6:7D:94:6F:8D:65:C2:1B:DC:45:7C:BC:16
            X509v3 Authority Key Identifier:
                keyid:29:C4:99:81:A0:6E:75:3E:7D:8B:A0:43:79:CF:1A:6C:4C:E8:59:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ARyNxJ93JKe7ssb7xKi6NN1cMsFp81FwMoGwRYZB7gxu/0/29C49981A06E753E7D8BA04379CF1A6C4CE85950.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/29C49981A06E753E7D8BA04379CF1A6C4CE85950.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ARyNxJ93JKe7ssb7xKi6NN1cMsFp81FwMoGwRYZB7gxu/0/3136382e3139372e3232302e302f32322d3232203d3e20323634323937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.197.220.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2b:97:8f:3d:29:2f:95:2b:b8:7c:fc:31:2f:7c:4c:11:79:2a:
         52:cb:3f:61:43:b9:50:97:79:1a:55:ed:e1:59:8c:d7:c0:94:
         b2:41:9b:8f:7d:6e:4c:84:f2:8f:9b:6e:ee:c9:2b:cf:73:74:
         4b:7d:49:54:5e:a0:dd:91:65:14:87:ad:1f:0f:ef:85:7d:33:
         37:dc:39:56:7c:9a:54:a5:db:26:b7:16:68:bc:3a:28:4f:ec:
         b4:e9:9b:b0:85:9b:4b:3a:52:e1:bd:cb:57:39:55:9d:1c:e2:
         40:03:d9:88:c1:b4:3e:af:0f:98:21:7f:d6:27:96:83:83:3e:
         60:a0:03:fa:7f:bb:bd:c5:61:41:d5:b9:f4:d0:05:28:b2:ab:
         6a:f6:a1:66:9c:1d:ff:86:df:c5:7f:49:75:e9:b0:63:c1:2a:
         16:3b:30:d1:7e:80:f7:26:ce:7e:2e:93:6c:e4:6c:f7:22:d3:
         b9:a2:bc:ad:ac:ee:78:c8:87:b3:f1:3a:a7:85:7c:eb:d8:bb:
         67:0b:0b:17:71:ca:0e:28:43:b5:d1:8a:90:a8:66:5e:3e:21:
         89:12:58:f5:ee:83:a4:66:72:5f:5e:0e:cd:7f:f8:00:4e:0b:
         79:a1:2a:46:f6:d1:91:55:85:44:c3:e3:6e:47:63:b4:cb:55:
         b0:f7:51:b1
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUP1xhUfitE8TymyW1qEmDJl0zcpUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjlDNDk5ODFBMDZFNzUzRTdEOEJBMDQzNzlDRjFBNkM0
Q0U4NTk1MDAeFw0yMjExMTAxNjIyMDNaFw0yMzExMDkxNjI3MDNaMDMxMTAvBgNV
BAMTKDUzOEY0QUIyNkIxOEY4RTY3RDk0NkY4RDY1QzIxQkRDNDU3Q0JDMTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLgi5uB0oL2aBQ9uLJw3mwQzWy
GtsDs4X2I8kamnk4Z/PuHTQz5PYVGhkYQeMpoAPpTOiUyTGhEUdRYp4RfRgghyJ8
xiauSaTpFq7pZ2y1vgxSjloKmhgyPtf8X4bKM3+puAyC2gYXxOwkXyJ1F3mR2Ymo
ywwUKQfNrPvqxDxgNx5uP6vy+6b2CpnHbCMcEKdlDyGRJ8P0OSKvnyKJFx3UpUMv
QICCia4bXgoSkrFru+N1UVf5Jhe+iUfFQbXZn3KAr55fftaVgONK4wyiLjGM+YyB
sIng1n9Tn1iH7woDwr64P/D6lLbh0DfRL2GmkVB33p2dO1BMQHPaqiHdZkhDAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUU49KsmsY+OZ9lG+NZcIb3EV8vBYwHwYDVR0j
BBgwFoAUKcSZgaBudT59i6BDec8abEzoWVAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQVJ5TnhKOTNKS2U3c3NiN3hLaTZOTjFjTXNGcDgxRndNb0d3UllaQjdn
eHUvMC8yOUM0OTk4MUEwNkU3NTNFN0Q4QkEwNDM3OUNGMUE2QzRDRTg1OTUwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzI5QzQ5OTgxQTA2RTc1M0U3
RDhCQTA0Mzc5Q0YxQTZDNENFODU5NTAuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0FSeU54SjkzSktlN3NzYjd4S2k2Tk4xY01zRnA4MUZ3TW9Hd1JZWkI3Z3h1LzAv
MzEzNjM4MmUzMTM5MzcyZTMyMzIzMDJlMzAyZjMyMzIyZDMyMzIyMDNkM2UyMDMy
MzYzNDMyMzkzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAqjF3DANBgkqhkiG9w0BAQsFAAOCAQEAK5eP
PSkvlSu4fPwxL3xMEXkqUss/YUO5UJd5GlXt4VmM18CUskGbj31uTITyj5tu7skr
z3N0S31JVF6g3ZFlFIetHw/vhX0zN9w5VnyaVKXbJrcWaLw6KE/stOmbsIWbSzpS
4b3LVzlVnRziQAPZiMG0Pq8PmCF/1ieWg4M+YKAD+n+7vcVhQdW59NAFKLKravah
Zpwd/4bfxX9JdemwY8EqFjsw0X6A9ybOfi6TbORs9yLTuaK8razueMiHs/E6p4V8
69i7ZwsLF3HKDihDtdGKkKhmXj4hiRJY9e6DpGZyX14OzX/4AE4LeaEqRvbRkVWF
RMPjbkdjtMtVsPdRsQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:12 2024 by rpki-client on console-fra.rpki-client.org