Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Avp9w8ghYcbVeDefvMDCChbYTGoepuXEnkYMqeQZP1PD/1/3139312e33362e3138382e302f32322d3232203d3e20323633333338.roa
File:                     3139312e33362e3138382e302f32322d3232203d3e20323633333338.roa (raw, json)
Hash identifier:          FnE1dwCjmwBGw+GoWRmeRnWjqNAZEoB45tK7MxW8zOQ=
Subject key identifier:   B5:D3:05:FF:09:EB:35:C2:CC:92:BB:61:E9:EE:5E:1D:93:15:34:BE
Certificate issuer:       /CN=B6DAAD32AAB94FC40A18437F7F452BF3069B37A8
Certificate serial:       3B9AE433A255BC6BA8E2CB88AD2EC962AE0CB9D1
Authority key identifier: B6:DA:AD:32:AA:B9:4F:C4:0A:18:43:7F:7F:45:2B:F3:06:9B:37:A8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B6DAAD32AAB94FC40A18437F7F452BF3069B37A8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Avp9w8ghYcbVeDefvMDCChbYTGoepuXEnkYMqeQZP1PD/1/3139312e33362e3138382e302f32322d3232203d3e20323633333338.roa
Signing time:             Tue 16 Apr 2024 11:41:47 +0000
ROA not before:           Tue 16 Apr 2024 11:36:47 +0000
ROA not after:            Tue 15 Apr 2025 11:41:47 +0000
asID:                     263338
IP address blocks:        191.36.188.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:9a:e4:33:a2:55:bc:6b:a8:e2:cb:88:ad:2e:c9:62:ae:0c:b9:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B6DAAD32AAB94FC40A18437F7F452BF3069B37A8
        Validity
            Not Before: Apr 16 11:36:47 2024 GMT
            Not After : Apr 15 11:41:47 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:b1:2e:1d:12:b6:32:a6:b7:ac:b7:4b:6e:73:
                    1d:74:59:51:94:1e:79:10:46:6e:a6:c9:e8:8b:78:
                    c4:f2:4a:7c:f6:3a:f5:ba:ed:8a:22:b9:85:d0:bd:
                    19:bc:08:f1:9b:5a:84:95:15:57:2a:bc:fc:70:07:
                    c4:31:df:9f:c7:90:ea:a3:69:f7:a6:42:5b:1c:e8:
                    d2:9f:74:0d:8f:43:0c:3b:80:b0:cf:03:90:66:31:
                    82:a0:dc:eb:4c:15:c4:6d:75:19:b4:71:ff:c3:2a:
                    ac:83:11:e2:50:01:45:11:f7:a6:12:62:b8:88:46:
                    7c:59:c7:2d:b4:78:ed:b0:da:40:c9:d1:cb:9b:42:
                    29:3b:fa:83:e6:a7:66:e3:94:3e:c6:f0:9b:ac:e7:
                    fe:e3:bd:7a:5e:22:ae:0a:f2:19:3d:1c:4a:17:84:
                    b8:65:6b:84:c1:ea:b0:41:40:b2:10:1e:d6:82:9a:
                    e4:07:18:18:81:36:ba:4c:19:51:15:93:8b:1c:53:
                    cb:3e:84:54:62:11:63:52:1a:54:15:79:4c:61:ed:
                    68:66:ac:32:94:48:b2:9c:9e:8c:14:16:4b:13:ce:
                    58:2e:03:a7:98:24:00:1e:75:43:59:78:c8:7e:12:
                    73:1d:c1:41:7e:0f:10:2e:d9:e3:af:cc:39:d9:06:
                    c8:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:D3:05:FF:09:EB:35:C2:CC:92:BB:61:E9:EE:5E:1D:93:15:34:BE
            X509v3 Authority Key Identifier:
                keyid:B6:DA:AD:32:AA:B9:4F:C4:0A:18:43:7F:7F:45:2B:F3:06:9B:37:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Avp9w8ghYcbVeDefvMDCChbYTGoepuXEnkYMqeQZP1PD/1/B6DAAD32AAB94FC40A18437F7F452BF3069B37A8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B6DAAD32AAB94FC40A18437F7F452BF3069B37A8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Avp9w8ghYcbVeDefvMDCChbYTGoepuXEnkYMqeQZP1PD/1/3139312e33362e3138382e302f32322d3232203d3e20323633333338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.36.188.0/22

    Signature Algorithm: sha256WithRSAEncryption
         16:c1:f3:ce:bb:34:33:5a:3d:7d:ac:66:2b:ca:f6:b5:6f:42:
         d6:3d:58:8d:6c:ed:32:04:b1:6a:59:40:ff:df:13:a2:ef:7e:
         7f:e4:73:10:e3:31:1b:50:02:95:aa:31:4f:a8:05:6e:09:9d:
         7a:01:9b:98:d9:b1:1c:bf:85:f2:79:58:1f:0d:e9:b9:63:9b:
         c5:27:20:c5:e3:12:b5:c7:2d:a9:e5:99:33:d2:07:6c:91:74:
         f6:a2:62:6d:34:50:b2:25:e8:43:ee:de:41:27:c9:b5:b5:ca:
         93:6f:65:95:4c:ed:12:a6:40:17:5b:bf:ab:14:e3:3b:7d:e6:
         f4:e6:08:f0:5d:a5:5b:c6:bc:6b:9b:e9:36:4a:21:12:4b:5e:
         ef:0a:e4:e9:6b:e5:01:ca:20:8b:d9:cb:52:7c:af:17:e0:7c:
         61:64:f1:0d:a7:64:b7:2e:90:84:60:53:de:ce:4f:4c:18:db:
         66:a0:04:c2:d2:13:95:71:c0:43:2f:7a:01:1b:61:51:af:48:
         d3:dd:8b:7e:c5:2f:2e:e0:cf:15:83:5e:f1:47:57:3e:e9:a5:
         de:34:26:5f:dc:88:3f:f8:d3:f5:43:14:06:3a:05:5b:57:e0:
         bf:49:db:7b:7b:12:dd:47:be:46:2b:bc:bc:0d:3f:73:d6:30:
         5b:bd:0f:1a
-----BEGIN CERTIFICATE-----
MIIHQzCCBiugAwIBAgIUO5rkM6JVvGuo4suIrS7JYq4MudEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjZEQUFEMzJBQUI5NEZDNDBBMTg0MzdGN0Y0NTJCRjMw
NjlCMzdBODAeFw0yNDA0MTYxMTM2NDdaFw0yNTA0MTUxMTQxNDdaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwRERCMTJFMUQxMkI2MzJBNkI3
QUNCNzRCNkU3MzFENzQ1OTUxOTQxRTc5MTA0NjZFQTZDOUU4OEI3OEM0RjI0QTdD
RjYzQUY1QkFFRDhBMjJCOTg1RDBCRDE5QkMwOEYxOUI1QTg0OTUxNTU3MkFCQ0ZD
NzAwN0M0MzFERjlGQzc5MEVBQTM2OUY3QTY0MjVCMUNFOEQyOUY3NDBEOEY0MzBD
M0I4MEIwQ0YwMzkwNjYzMTgyQTBEQ0VCNEMxNUM0NkQ3NTE5QjQ3MUZGQzMyQUFD
ODMxMUUyNTAwMTQ1MTFGN0E2MTI2MkI4ODg0NjdDNTlDNzJEQjQ3OEVEQjBEQTQw
QzlEMUNCOUI0MjI5M0JGQTgzRTZBNzY2RTM5NDNFQzZGMDlCQUNFN0ZFRTNCRDdB
NUUyMkFFMEFGMjE5M0QxQzRBMTc4NEI4NjU2Qjg0QzFFQUIwNDE0MEIyMTAxRUQ2
ODI5QUU0MDcxODE4ODEzNkJBNEMxOTUxMTU5MzhCMUM1M0NCM0U4NDU0NjIxMTYz
NTIxQTU0MTU3OTRDNjFFRDY4NjZBQzMyOTQ0OEIyOUM5RThDMTQxNjRCMTNDRTU4
MkUwM0E3OTgyNDAwMUU3NTQzNTk3OEM4N0UxMjczMURDMTQxN0UwRjEwMkVEOUUz
QUZDQzM5RDkwNkM4REYwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEA3bEuHRK2Mqa3rLdLbnMddFlRlB55EEZupsnoi3jE8kp89jr1uu2K
IrmF0L0ZvAjxm1qElRVXKrz8cAfEMd+fx5Dqo2n3pkJbHOjSn3QNj0MMO4CwzwOQ
ZjGCoNzrTBXEbXUZtHH/wyqsgxHiUAFFEfemEmK4iEZ8WccttHjtsNpAydHLm0Ip
O/qD5qdm45Q+xvCbrOf+4716XiKuCvIZPRxKF4S4ZWuEweqwQUCyEB7WgprkBxgY
gTa6TBlRFZOLHFPLPoRUYhFjUhpUFXlMYe1oZqwylEiynJ6MFBZLE85YLgOnmCQA
HnVDWXjIfhJzHcFBfg8QLtnjr8w52QbI3wIDAQABo4ICUTCCAk0wHQYDVR0OBBYE
FLXTBf8J6zXCzJK7YenuXh2TFTS+MB8GA1UdIwQYMBaAFLbarTKquU/EChhDf39F
K/MGmzeoMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0F2cDl3OGdoWWNiVmVE
ZWZ2TURDQ2hiWVRHb2VwdVhFbmtZTXFlUVpQMVBELzEvQjZEQUFEMzJBQUI5NEZD
NDBBMTg0MzdGN0Y0NTJCRjMwNjlCMzdBOC5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS9CNkRBQUQzMkFBQjk0RkM0MEExODQzN0Y3RjQ1MkJGMzA2OUIz
N0E4LmNlcjCBrgYIKwYBBQUHAQsEgaEwgZ4wgZsGCCsGAQUFBzALhoGOcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9BdnA5dzhnaFljYlZlRGVmdk1E
Q0NoYllUR29lcHVYRW5rWU1xZVFaUDFQRC8xLzMxMzkzMTJlMzMzNjJlMzEzODM4
MmUzMDJmMzIzMjJkMzIzMjIwM2QzZTIwMzIzNjMzMzMzMzM4LnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC
vyS8MA0GCSqGSIb3DQEBCwUAA4IBAQAWwfPOuzQzWj19rGYryva1b0LWPViNbO0y
BLFqWUD/3xOi735/5HMQ4zEbUAKVqjFPqAVuCZ16AZuY2bEcv4XyeVgfDem5Y5vF
JyDF4xK1xy2p5Zkz0gdskXT2omJtNFCyJehD7t5BJ8m1tcqTb2WVTO0SpkAXW7+r
FOM7feb05gjwXaVbxrxrm+k2SiESS17vCuTpa+UByiCL2ctSfK8X4HxhZPENp2S3
LpCEYFPezk9MGNtmoATC0hOVccBDL3oBG2FRr0jT3Yt+xS8u4M8Vg17xR1c+6aXe
NCZf3Ig/+NP1QxQGOgVbV+C/Sdt7exLdR75GK7y8DT9z1jBbvQ8a
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:36 2024 by rpki-client on console-ams.rpki-client.org