Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BGSePrnMXjvpMiPAGrfesHmzo4L18133VDKeAPQUJJo8/0/3136382e3139342e3130342e302f32322d3332203d3e20323634353238.roa
File:                     3136382e3139342e3130342e302f32322d3332203d3e20323634353238.roa (raw, json)
Hash identifier:          et6AJsRW+hvPQz8dVedMqS1lCdI10X9p1TWtEt/RWbU=
Subject key identifier:   72:43:16:E5:D4:76:FF:FB:AC:DD:78:0F:3C:77:E0:AA:72:AD:BE:B6
Certificate issuer:       /CN=8FF87EDB9468A99F9D101093DB5A1114C028F32C
Certificate serial:       7E19D8EDEEEAD718491F50FBB345D2CAF26D89D8
Authority key identifier: 8F:F8:7E:DB:94:68:A9:9F:9D:10:10:93:DB:5A:11:14:C0:28:F3:2C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8FF87EDB9468A99F9D101093DB5A1114C028F32C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BGSePrnMXjvpMiPAGrfesHmzo4L18133VDKeAPQUJJo8/0/3136382e3139342e3130342e302f32322d3332203d3e20323634353238.roa
Signing time:             Mon 12 Feb 2024 18:38:00 +0000
ROA not before:           Mon 12 Feb 2024 18:33:00 +0000
ROA not after:            Mon 10 Feb 2025 18:38:00 +0000
asID:                     264528
IP address blocks:        168.194.104.0/22 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:19:d8:ed:ee:ea:d7:18:49:1f:50:fb:b3:45:d2:ca:f2:6d:89:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8FF87EDB9468A99F9D101093DB5A1114C028F32C
        Validity
            Not Before: Feb 12 18:33:00 2024 GMT
            Not After : Feb 10 18:38:00 2025 GMT
        Subject: CN=724316E5D476FFFBACDD780F3C77E0AA72ADBEB6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:ef:93:93:7e:3f:b6:a1:1b:d2:ba:22:af:42:
                    00:82:d0:d2:9a:57:2b:55:1d:37:35:b1:b0:5b:78:
                    41:f5:67:8a:f9:39:52:91:f3:28:de:eb:30:07:85:
                    af:8b:8e:6f:7f:de:5b:5f:9a:f9:61:0e:05:77:21:
                    ff:f8:45:71:f3:d6:5f:bc:d9:58:c6:e4:75:ff:3a:
                    ed:4f:c1:65:37:a1:ed:10:fc:67:bc:73:79:41:a8:
                    c0:dd:a2:d0:fe:2c:75:86:76:f8:e6:8b:0a:90:b9:
                    9b:95:73:c5:dd:3e:88:ce:3e:99:1a:da:bf:16:13:
                    33:31:fc:b5:57:45:35:15:e9:30:da:e2:8c:b3:13:
                    39:3b:43:68:40:8d:f5:50:85:35:21:3d:43:30:50:
                    20:6b:41:0d:8e:4b:da:31:83:b3:19:b1:aa:d6:8e:
                    40:b4:09:48:ee:d7:a6:91:72:90:74:24:9c:a5:0b:
                    c1:3b:ad:20:18:af:49:50:f6:c6:29:c9:f6:63:ff:
                    95:69:ef:24:12:2a:9c:7b:9c:ef:4a:c4:48:05:c6:
                    46:e7:24:5a:6e:59:0f:cb:25:b6:62:d6:59:8c:e3:
                    26:39:36:78:fa:7e:86:29:d5:45:ea:30:80:97:28:
                    39:05:cf:31:c7:c1:79:36:95:94:76:91:da:6d:ec:
                    72:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:43:16:E5:D4:76:FF:FB:AC:DD:78:0F:3C:77:E0:AA:72:AD:BE:B6
            X509v3 Authority Key Identifier:
                keyid:8F:F8:7E:DB:94:68:A9:9F:9D:10:10:93:DB:5A:11:14:C0:28:F3:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BGSePrnMXjvpMiPAGrfesHmzo4L18133VDKeAPQUJJo8/0/8FF87EDB9468A99F9D101093DB5A1114C028F32C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8FF87EDB9468A99F9D101093DB5A1114C028F32C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BGSePrnMXjvpMiPAGrfesHmzo4L18133VDKeAPQUJJo8/0/3136382e3139342e3130342e302f32322d3332203d3e20323634353238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.194.104.0/22

    Signature Algorithm: sha256WithRSAEncryption
         14:a3:d7:91:37:63:14:ec:57:94:4a:bd:49:43:db:3e:ef:fb:
         b3:bf:09:8b:7d:86:a6:3b:fc:c5:58:ea:32:6f:88:1f:e6:a3:
         39:af:5c:af:09:4a:a1:6e:ae:89:fd:c5:94:87:4a:3f:40:2b:
         b8:d5:72:d6:e0:94:6b:97:64:2e:45:c7:b0:23:cb:a8:15:57:
         72:0c:93:4e:b3:9a:03:ef:29:9b:78:b6:c5:6d:7d:33:66:95:
         22:ef:c1:fb:8d:f0:4f:d8:40:1c:19:7d:6f:93:7c:2a:4b:1c:
         2e:5e:f4:39:44:51:26:6e:36:74:95:d4:67:8d:5b:51:af:70:
         49:a2:50:4f:6a:f1:dd:7f:8f:67:c4:45:8b:dc:86:38:fe:d3:
         37:76:af:e0:ab:5f:cc:ec:2a:7e:7d:c8:69:dc:8e:fb:eb:42:
         28:82:d8:8a:6b:66:42:78:a6:c4:af:e6:7e:d0:9b:d7:e3:b2:
         8c:b6:1a:74:e4:9f:48:37:45:f1:56:cd:10:74:97:c8:31:1e:
         2f:a3:bb:8e:de:1b:1f:d8:b6:9c:f7:38:0a:72:46:56:37:c7:
         65:aa:a4:14:75:80:e4:ba:d8:b3:37:22:6c:7f:71:9c:82:68:
         29:8b:6b:a2:72:e5:0c:37:78:6a:50:10:cd:e9:a1:cc:2f:42:
         eb:be:01:38
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUfhnY7e7q1xhJH1D7s0XSyvJtidgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEZGODdFREI5NDY4QTk5RjlEMTAxMDkzREI1QTExMTRD
MDI4RjMyQzAeFw0yNDAyMTIxODMzMDBaFw0yNTAyMTAxODM4MDBaMDMxMTAvBgNV
BAMTKDcyNDMxNkU1RDQ3NkZGRkJBQ0RENzgwRjNDNzdFMEFBNzJBREJFQjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCV75OTfj+2oRvSuiKvQgCC0NKa
VytVHTc1sbBbeEH1Z4r5OVKR8yje6zAHha+Ljm9/3ltfmvlhDgV3If/4RXHz1l+8
2VjG5HX/Ou1PwWU3oe0Q/Ge8c3lBqMDdotD+LHWGdvjmiwqQuZuVc8XdPojOPpka
2r8WEzMx/LVXRTUV6TDa4oyzEzk7Q2hAjfVQhTUhPUMwUCBrQQ2OS9oxg7MZsarW
jkC0CUju16aRcpB0JJylC8E7rSAYr0lQ9sYpyfZj/5Vp7yQSKpx7nO9KxEgFxkbn
JFpuWQ/LJbZi1lmM4yY5Nnj6foYp1UXqMICXKDkFzzHHwXk2lZR2kdpt7HJ9AgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUckMW5dR2//us3XgPPHfgqnKtvrYwHwYDVR0j
BBgwFoAUj/h+25RoqZ+dEBCT21oRFMAo8ywwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQkdTZVBybk1YanZwTWlQQUdyZmVzSG16bzRMMTgxMzNWREtlQVBRVUpK
bzgvMC84RkY4N0VEQjk0NjhBOTlGOUQxMDEwOTNEQjVBMTExNEMwMjhGMzJDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzhGRjg3RURCOTQ2OEE5OUY5
RDEwMTA5M0RCNUExMTE0QzAyOEYzMkMuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0JHU2VQcm5NWGp2cE1pUEFHcmZlc0htem80TDE4MTMzVkRLZUFQUVVKSm84LzAv
MzEzNjM4MmUzMTM5MzQyZTMxMzAzNDJlMzAyZjMyMzIyZDMzMzIyMDNkM2UyMDMy
MzYzNDM1MzIzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAqjCaDANBgkqhkiG9w0BAQsFAAOCAQEAFKPX
kTdjFOxXlEq9SUPbPu/7s78Ji32Gpjv8xVjqMm+IH+ajOa9crwlKoW6uif3FlIdK
P0AruNVy1uCUa5dkLkXHsCPLqBVXcgyTTrOaA+8pm3i2xW19M2aVIu/B+43wT9hA
HBl9b5N8KkscLl70OURRJm42dJXUZ41bUa9wSaJQT2rx3X+PZ8RFi9yGOP7TN3av
4KtfzOwqfn3IadyO++tCKILYimtmQnimxK/mftCb1+OyjLYadOSfSDdF8VbNEHSX
yDEeL6O7jt4bH9i2nPc4CnJGVjfHZaqkFHWA5LrYszcibH9xnIJoKYtronLlDDd4
alAQzemhzC9C674BOA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:18 2024 by rpki-client on console-fra.rpki-client.org