Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BhU3QhMatjWXAo2XE3U93zLSGHGcBEGZrrd617gMap4z/0/3136372e3234392e38382e302f32332d3233203d3e20323731313334.roa
File:                     3136372e3234392e38382e302f32332d3233203d3e20323731313334.roa (raw, json)
Hash identifier:          0aPwzWQdG/OGs55aNO/gAF41UTxHlz6zl1qtea9qIKQ=
Subject key identifier:   E0:EE:51:FE:5F:8A:7D:CC:6C:63:EA:64:19:35:E0:9E:AB:A9:53:EA
Certificate issuer:       /CN=33043F790D6A918A5EB28C4B3D04D8805609D0B7
Certificate serial:       22C9B7705D473E54F10C321C7AF2B1AAF52BEAFE
Authority key identifier: 33:04:3F:79:0D:6A:91:8A:5E:B2:8C:4B:3D:04:D8:80:56:09:D0:B7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/33043F790D6A918A5EB28C4B3D04D8805609D0B7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BhU3QhMatjWXAo2XE3U93zLSGHGcBEGZrrd617gMap4z/0/3136372e3234392e38382e302f32332d3233203d3e20323731313334.roa
Signing time:             Sat 10 Jun 2023 22:26:40 +0000
ROA not before:           Sat 10 Jun 2023 22:21:40 +0000
ROA not after:            Sat 08 Jun 2024 22:26:40 +0000
asID:                     271134
IP address blocks:        167.249.88.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:c9:b7:70:5d:47:3e:54:f1:0c:32:1c:7a:f2:b1:aa:f5:2b:ea:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=33043F790D6A918A5EB28C4B3D04D8805609D0B7
        Validity
            Not Before: Jun 10 22:21:40 2023 GMT
            Not After : Jun  8 22:26:40 2024 GMT
        Subject: CN=E0EE51FE5F8A7DCC6C63EA641935E09EABA953EA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:9b:05:4e:f1:8d:55:2a:a7:14:0c:30:2d:08:
                    07:87:b0:85:8d:df:25:93:c2:31:14:b5:d3:db:aa:
                    d6:a3:73:54:0d:33:8d:d1:20:8e:c8:89:9c:94:15:
                    a0:a4:9c:53:01:fc:2d:c9:60:78:7c:a6:16:1a:59:
                    95:5e:94:11:3d:12:f5:c8:0b:97:73:a6:96:39:28:
                    11:ba:b9:9d:2e:f5:8c:85:cd:46:60:2f:d0:17:92:
                    3c:b8:f7:4f:41:ff:0a:75:d8:9f:aa:15:6c:7f:36:
                    41:7b:39:11:45:9c:72:3c:d5:21:87:9a:a0:e5:24:
                    a0:46:17:b7:9f:c5:8a:fc:81:45:51:89:45:ae:ae:
                    83:ec:3e:62:39:69:ff:b5:40:c1:02:5d:96:c1:3e:
                    70:6c:46:29:86:7c:38:80:b5:a5:ed:37:0a:a3:da:
                    ed:f8:d4:81:04:b1:29:1b:0d:57:2b:55:17:ff:48:
                    48:0b:33:be:80:e5:8b:53:3a:38:54:bb:9f:28:6b:
                    88:c3:4e:49:b7:aa:59:c4:87:67:4b:3a:1e:a4:98:
                    8b:d6:39:c5:55:e9:c4:6b:2a:fd:49:86:b9:31:16:
                    8a:5d:34:57:09:ee:74:69:ea:fd:24:19:c3:28:57:
                    fe:14:a9:2e:bb:b9:25:85:26:72:1c:54:c9:a3:af:
                    c6:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:EE:51:FE:5F:8A:7D:CC:6C:63:EA:64:19:35:E0:9E:AB:A9:53:EA
            X509v3 Authority Key Identifier:
                keyid:33:04:3F:79:0D:6A:91:8A:5E:B2:8C:4B:3D:04:D8:80:56:09:D0:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BhU3QhMatjWXAo2XE3U93zLSGHGcBEGZrrd617gMap4z/0/33043F790D6A918A5EB28C4B3D04D8805609D0B7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/33043F790D6A918A5EB28C4B3D04D8805609D0B7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BhU3QhMatjWXAo2XE3U93zLSGHGcBEGZrrd617gMap4z/0/3136372e3234392e38382e302f32332d3233203d3e20323731313334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.249.88.0/23

    Signature Algorithm: sha256WithRSAEncryption
         bb:02:66:fa:3e:1f:b8:aa:af:43:f0:5b:b0:d7:a6:c1:b9:fe:
         4c:18:8a:ef:2f:98:82:5d:39:7d:f2:33:8c:94:29:ac:00:03:
         47:5b:38:b4:f4:fd:90:83:99:14:66:c8:09:5a:91:2f:f9:80:
         43:e0:c2:00:3f:f4:d1:53:91:78:f3:36:09:cb:2e:2f:7b:68:
         1b:ac:c8:a7:8c:07:35:6d:76:84:7c:bc:38:63:18:d2:77:00:
         9d:6a:55:f7:6c:a6:0b:83:6f:b8:ae:8b:3f:e2:a5:ac:ff:13:
         85:ad:7e:c6:3d:6c:d9:ec:87:b0:8e:53:c2:81:39:63:8d:6e:
         e9:cb:55:0b:bd:ff:a2:5f:f1:76:b9:d1:fd:82:10:2a:66:01:
         2f:c3:96:d6:1f:0b:33:27:d9:45:3b:50:d4:ad:ba:63:e2:f5:
         65:e2:23:5e:c0:0d:98:93:bf:82:2a:7e:7c:54:b1:ff:49:e6:
         47:1e:02:de:1e:e2:e7:59:79:f7:83:65:c0:e4:ea:16:25:88:
         0b:34:1b:d0:79:cf:2f:46:f8:c1:cc:33:c1:b2:65:69:a0:4b:
         1e:ab:d8:d0:aa:33:de:a4:af:a0:1e:ce:17:ea:02:ef:d9:b0:
         63:e5:f1:1f:d1:4d:c6:8d:9a:2c:48:1f:2f:54:ee:65:28:8b:
         23:e5:00:4f
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUIsm3cF1HPlTxDDIcevKxqvUr6v4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzMwNDNGNzkwRDZBOTE4QTVFQjI4QzRCM0QwNEQ4ODA1
NjA5RDBCNzAeFw0yMzA2MTAyMjIxNDBaFw0yNDA2MDgyMjI2NDBaMDMxMTAvBgNV
BAMTKEUwRUU1MUZFNUY4QTdEQ0M2QzYzRUE2NDE5MzVFMDlFQUJBOTUzRUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMmwVO8Y1VKqcUDDAtCAeHsIWN
3yWTwjEUtdPbqtajc1QNM43RII7IiZyUFaCknFMB/C3JYHh8phYaWZVelBE9EvXI
C5dzppY5KBG6uZ0u9YyFzUZgL9AXkjy4909B/wp12J+qFWx/NkF7ORFFnHI81SGH
mqDlJKBGF7efxYr8gUVRiUWuroPsPmI5af+1QMECXZbBPnBsRimGfDiAtaXtNwqj
2u341IEEsSkbDVcrVRf/SEgLM76A5YtTOjhUu58oa4jDTkm3qlnEh2dLOh6kmIvW
OcVV6cRrKv1JhrkxFopdNFcJ7nRp6v0kGcMoV/4UqS67uSWFJnIcVMmjr8Y/AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU4O5R/l+KfcxsY+pkGTXgnqupU+owHwYDVR0j
BBgwFoAUMwQ/eQ1qkYpesoxLPQTYgFYJ0LcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQmhVM1FoTWF0aldYQW8yWEUzVTkzekxTR0hHY0JFR1pycmQ2MTdnTWFw
NHovMC8zMzA0M0Y3OTBENkE5MThBNUVCMjhDNEIzRDA0RDg4MDU2MDlEMEI3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzMzMDQzRjc5MEQ2QTkxOEE1
RUIyOEM0QjNEMDREODgwNTYwOUQwQjcuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0JoVTNRaE1hdGpXWEFvMlhFM1U5M3pMU0dIR2NCRUdacnJkNjE3Z01hcDR6LzAv
MzEzNjM3MmUzMjM0MzkyZTM4MzgyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzMjM3
MzEzMTMzMzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAGn+VgwDQYJKoZIhvcNAQELBQADggEBALsCZvo+
H7iqr0PwW7DXpsG5/kwYiu8vmIJdOX3yM4yUKawAA0dbOLT0/ZCDmRRmyAlakS/5
gEPgwgA/9NFTkXjzNgnLLi97aBusyKeMBzVtdoR8vDhjGNJ3AJ1qVfdspguDb7iu
iz/ipaz/E4WtfsY9bNnsh7COU8KBOWONbunLVQu9/6Jf8Xa50f2CECpmAS/DltYf
CzMn2UU7UNStumPi9WXiI17ADZiTv4IqfnxUsf9J5kceAt4e4udZefeDZcDk6hYl
iAs0G9B5zy9G+MHMM8GyZWmgSx6r2NCqM96kr6AezhfqAu/ZsGPl8R/RTcaNmixI
Hy9U7mUoiyPlAE8=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:57 2024 by rpki-client on console-ams.rpki-client.org