Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/3136382e3233322e3135322e302f32332d3233203d3e20323632323933.roa
File:                     3136382e3233322e3135322e302f32332d3233203d3e20323632323933.roa (raw, json)
Hash identifier:          ZMaaEXl7LwRW70KxRWwnto3gktovZedOtkS4J08rwa8=
Subject key identifier:   83:00:2F:1F:41:FC:D7:41:45:BF:77:59:1A:D3:8A:70:74:1D:88:49
Certificate issuer:       /CN=1A01AD3383BFA38B76F1CA139958102A17AF0391
Certificate serial:       2817552E31B3A73909A70185E2A8A2937908FE3F
Authority key identifier: 1A:01:AD:33:83:BF:A3:8B:76:F1:CA:13:99:58:10:2A:17:AF:03:91
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1A01AD3383BFA38B76F1CA139958102A17AF0391.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/3136382e3233322e3135322e302f32332d3233203d3e20323632323933.roa
Signing time:             Tue 02 Jan 2024 21:16:35 +0000
ROA not before:           Tue 02 Jan 2024 21:11:35 +0000
ROA not after:            Tue 31 Dec 2024 21:16:35 +0000
asID:                     262293
IP address blocks:        168.232.152.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:17:55:2e:31:b3:a7:39:09:a7:01:85:e2:a8:a2:93:79:08:fe:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1A01AD3383BFA38B76F1CA139958102A17AF0391
        Validity
            Not Before: Jan  2 21:11:35 2024 GMT
            Not After : Dec 31 21:16:35 2024 GMT
        Subject: CN=83002F1F41FCD74145BF77591AD38A70741D8849
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:0b:a5:ef:69:70:36:f5:fb:b5:0a:55:6d:46:
                    4e:85:43:d0:ad:04:6f:04:cf:bf:c3:92:33:b0:db:
                    5c:9f:a6:13:a9:3b:76:e4:02:75:a6:90:b2:f0:3c:
                    87:1d:23:b4:ed:63:ae:ef:32:b5:37:24:ec:66:50:
                    94:9f:36:22:36:e5:d5:a3:82:e1:eb:19:21:c5:f4:
                    b1:56:89:93:b0:24:e1:cd:1e:13:a9:bc:fc:47:51:
                    05:47:a7:ac:31:5f:98:cf:fb:a2:d4:26:14:59:de:
                    b3:66:dd:e2:7a:b6:36:da:3e:7c:b7:df:de:00:a8:
                    17:8e:af:a7:b6:72:13:b0:03:6e:f1:24:c4:0b:7a:
                    0d:7f:ce:68:51:b6:95:97:92:55:75:1c:77:c3:0d:
                    0a:c0:ad:8b:f9:23:68:77:45:45:77:22:e3:d4:7b:
                    26:bc:e7:aa:7f:db:bf:76:2f:6c:04:91:74:97:db:
                    f1:ac:7b:a6:5a:fe:e9:ed:e8:c7:34:13:39:2b:0e:
                    9f:37:75:7a:41:cc:17:ee:90:3c:79:d6:79:50:63:
                    4d:d4:6b:46:79:a7:19:3b:7d:b4:76:73:62:1a:f0:
                    96:f0:5f:f1:91:e0:78:c8:d4:d7:12:97:2d:fd:e8:
                    c1:f6:e3:a8:23:1b:d4:5b:c1:0e:a1:52:f8:5b:4d:
                    62:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:00:2F:1F:41:FC:D7:41:45:BF:77:59:1A:D3:8A:70:74:1D:88:49
            X509v3 Authority Key Identifier:
                keyid:1A:01:AD:33:83:BF:A3:8B:76:F1:CA:13:99:58:10:2A:17:AF:03:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/1A01AD3383BFA38B76F1CA139958102A17AF0391.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1A01AD3383BFA38B76F1CA139958102A17AF0391.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/3136382e3233322e3135322e302f32332d3233203d3e20323632323933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.232.152.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2b:2a:60:d7:53:b2:0a:56:cd:a8:43:5c:f4:cd:46:e7:1a:15:
         d2:cc:0f:5f:b9:1a:92:b3:ff:1c:e9:85:27:e2:37:7e:34:e2:
         2e:e5:85:53:e6:8d:bd:3e:87:6a:12:b7:a6:93:9a:c8:2e:e1:
         ce:00:19:cf:83:fc:76:39:3b:ef:38:30:f5:21:42:82:3d:cf:
         ca:68:6c:b6:00:85:ca:40:b0:ef:32:2c:fc:8b:b4:c0:64:9e:
         90:c2:87:64:0d:64:40:bb:ae:4d:ee:2f:ee:a3:8e:cb:1c:27:
         5c:7c:8f:e2:6c:e8:8d:3f:e6:83:e3:d7:b6:72:0c:39:03:fc:
         74:64:5d:49:d1:ee:55:ef:da:f5:e1:72:4a:be:f0:a2:0e:25:
         8e:1f:63:01:90:62:bd:33:09:f3:50:c3:de:8a:cd:29:de:76:
         fb:37:74:8f:93:ad:6f:7b:69:cf:06:c2:bc:03:85:78:6c:b4:
         fd:74:bc:7f:55:22:10:77:83:3d:43:a2:40:f6:0b:45:6c:be:
         74:00:12:af:bf:73:d3:6b:22:9c:53:14:87:c7:81:77:a9:38:
         bd:19:52:5b:93:05:fe:16:8c:2a:c8:cc:01:88:fc:59:a8:78:
         6e:bd:a2:97:db:59:bd:7d:bc:f2:7b:34:6b:e8:49:17:70:12:
         a7:73:3e:31
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUKBdVLjGzpzkJpwGF4qiik3kI/j8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUEwMUFEMzM4M0JGQTM4Qjc2RjFDQTEzOTk1ODEwMkEx
N0FGMDM5MTAeFw0yNDAxMDIyMTExMzVaFw0yNDEyMzEyMTE2MzVaMDMxMTAvBgNV
BAMTKDgzMDAyRjFGNDFGQ0Q3NDE0NUJGNzc1OTFBRDM4QTcwNzQxRDg4NDkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaC6XvaXA29fu1ClVtRk6FQ9Ct
BG8Ez7/DkjOw21yfphOpO3bkAnWmkLLwPIcdI7TtY67vMrU3JOxmUJSfNiI25dWj
guHrGSHF9LFWiZOwJOHNHhOpvPxHUQVHp6wxX5jP+6LUJhRZ3rNm3eJ6tjbaPny3
394AqBeOr6e2chOwA27xJMQLeg1/zmhRtpWXklV1HHfDDQrArYv5I2h3RUV3IuPU
eya856p/2792L2wEkXSX2/Gse6Za/unt6Mc0EzkrDp83dXpBzBfukDx51nlQY03U
a0Z5pxk7fbR2c2Ia8JbwX/GR4HjI1NcSly396MH246gjG9RbwQ6hUvhbTWJHAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUgwAvH0H810FFv3dZGtOKcHQdiEkwHwYDVR0j
BBgwFoAUGgGtM4O/o4t28coTmVgQKhevA5EwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQXpyeUE1M3ZyZ3RRd3hFTkFjdzRzOXhFZlF2cmh6VEdUS243V1ZYTERk
SGgvMC8xQTAxQUQzMzgzQkZBMzhCNzZGMUNBMTM5OTU4MTAyQTE3QUYwMzkxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzFBMDFBRDMzODNCRkEzOEI3
NkYxQ0ExMzk5NTgxMDJBMTdBRjAzOTEuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0F6cnlBNTN2cmd0UXd4RU5BY3c0czl4RWZRdnJoelRHVEtuN1dWWExEZEhoLzAv
MzEzNjM4MmUzMjMzMzIyZTMxMzUzMjJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDMy
MzYzMjMyMzkzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAajomDANBgkqhkiG9w0BAQsFAAOCAQEAKypg
11OyClbNqENc9M1G5xoV0swPX7kakrP/HOmFJ+I3fjTiLuWFU+aNvT6HahK3ppOa
yC7hzgAZz4P8djk77zgw9SFCgj3PymhstgCFykCw7zIs/Iu0wGSekMKHZA1kQLuu
Te4v7qOOyxwnXHyP4mzojT/mg+PXtnIMOQP8dGRdSdHuVe/a9eFySr7wog4ljh9j
AZBivTMJ81DD3orNKd52+zd0j5Otb3tpzwbCvAOFeGy0/XS8f1UiEHeDPUOiQPYL
RWy+dAASr79z02sinFMUh8eBd6k4vRlSW5MF/haMKsjMAYj8Wah4br2il9tZvX28
8ns0a+hJF3ASp3M+MQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:14 2024 by rpki-client on console-fra.rpki-client.org