Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BuKiLExJDfzSpp2UcUBZsSx2FkHuburd45jSGakkjKb4/0/3136382e3139372e3134382e302f32322d3234203d3e20323635343833.roa
File:                     3136382e3139372e3134382e302f32322d3234203d3e20323635343833.roa (raw, json)
Hash identifier:          7FrGyRh2W6bmmPNmScKcn8eXnvqIFgyaZRbt0oozJhQ=
Subject key identifier:   20:53:3A:00:F7:B4:FA:76:90:28:58:02:49:04:02:A9:71:49:F1:9B
Certificate issuer:       /CN=328AA38E163EEBE8441252AEA3C2B4B6FF738DA3
Certificate serial:       49FFA10D4FCDDED9098C64F963C9F763D4F166F6
Authority key identifier: 32:8A:A3:8E:16:3E:EB:E8:44:12:52:AE:A3:C2:B4:B6:FF:73:8D:A3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/328AA38E163EEBE8441252AEA3C2B4B6FF738DA3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BuKiLExJDfzSpp2UcUBZsSx2FkHuburd45jSGakkjKb4/0/3136382e3139372e3134382e302f32322d3234203d3e20323635343833.roa
Signing time:             Tue 22 Aug 2023 15:25:42 +0000
ROA not before:           Tue 22 Aug 2023 15:20:42 +0000
ROA not after:            Tue 20 Aug 2024 15:25:42 +0000
asID:                     265483
IP address blocks:        168.197.148.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:ff:a1:0d:4f:cd:de:d9:09:8c:64:f9:63:c9:f7:63:d4:f1:66:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=328AA38E163EEBE8441252AEA3C2B4B6FF738DA3
        Validity
            Not Before: Aug 22 15:20:42 2023 GMT
            Not After : Aug 20 15:25:42 2024 GMT
        Subject: CN=20533A00F7B4FA7690285802490402A97149F19B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:06:67:9d:13:4b:b8:1e:f4:30:c3:0d:54:af:
                    29:27:a8:01:01:34:8c:27:d0:a3:f8:1a:79:63:36:
                    d2:7d:0d:e9:74:53:70:9d:50:ef:77:3d:e3:95:d1:
                    cf:cb:f7:f2:d3:80:82:1e:7f:ae:21:87:fa:e2:28:
                    1e:db:7f:c8:86:94:30:72:d6:e9:7f:37:40:99:f4:
                    fe:19:81:1a:79:16:ea:93:e8:ad:14:8f:0b:3f:6b:
                    3a:f9:c9:00:cd:54:93:74:37:d0:4c:02:9b:6c:8e:
                    32:f0:86:18:6f:69:e4:9f:e6:93:fc:3f:58:6f:33:
                    7e:bf:aa:5b:5b:79:a9:83:0a:cb:a9:b0:a9:36:cd:
                    df:63:82:60:f3:cb:8e:0c:2f:0b:97:a2:5b:3c:1f:
                    ac:6b:b4:c0:0f:39:75:76:c4:18:b6:8b:d6:c3:a8:
                    b0:57:f4:aa:7b:50:02:6e:41:54:e3:35:32:6f:33:
                    58:a5:af:54:88:0f:3f:8d:db:97:28:5c:51:52:4b:
                    87:d2:7f:24:b2:df:e2:d6:b8:cc:bb:1b:61:ac:f2:
                    c3:62:92:ee:16:cc:f6:f3:5e:33:8d:d5:6b:08:b5:
                    3f:9d:f9:f3:28:94:66:86:97:41:44:db:ea:33:35:
                    7c:65:56:63:ae:f1:14:58:80:38:24:dd:32:8d:23:
                    ed:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:53:3A:00:F7:B4:FA:76:90:28:58:02:49:04:02:A9:71:49:F1:9B
            X509v3 Authority Key Identifier:
                keyid:32:8A:A3:8E:16:3E:EB:E8:44:12:52:AE:A3:C2:B4:B6:FF:73:8D:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BuKiLExJDfzSpp2UcUBZsSx2FkHuburd45jSGakkjKb4/0/328AA38E163EEBE8441252AEA3C2B4B6FF738DA3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/328AA38E163EEBE8441252AEA3C2B4B6FF738DA3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BuKiLExJDfzSpp2UcUBZsSx2FkHuburd45jSGakkjKb4/0/3136382e3139372e3134382e302f32322d3234203d3e20323635343833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.197.148.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2e:c2:97:36:58:bf:93:c8:55:6d:a8:f2:af:0f:92:f3:64:60:
         03:de:31:7c:d0:6d:0b:df:fe:c3:61:a3:3c:a6:f8:5f:90:24:
         3b:ee:05:61:a8:24:51:bd:20:47:5d:9a:3e:65:7d:e1:aa:7a:
         60:a8:f3:3b:ce:58:be:be:59:23:5f:af:8f:10:e1:5c:41:39:
         72:be:b8:86:05:89:68:b4:77:a2:8f:e7:51:33:28:00:af:d9:
         5f:f5:37:85:84:ce:b2:00:7f:14:f9:80:6a:d9:2d:72:8b:3b:
         e4:b4:af:a2:97:d5:ad:fc:f6:c4:0b:8e:2c:01:6d:94:71:6b:
         bd:5f:56:38:3e:80:b3:bd:ba:47:5d:4d:34:b9:82:c3:fe:b1:
         4b:46:90:67:13:ac:9c:79:ab:83:a3:f7:5d:78:ac:20:79:f0:
         0d:a0:6a:b2:a9:a8:d4:65:69:40:1e:a9:57:03:50:c8:52:30:
         3c:d6:bb:e2:26:8f:bd:f0:fe:13:54:ed:92:3f:0c:df:13:8e:
         04:9d:14:0f:2f:a5:28:79:97:85:09:fd:a7:44:e8:e0:22:f0:
         c4:57:2d:f4:4d:cd:b0:d8:80:41:95:db:5d:56:a9:f1:ff:04:
         49:91:25:63:ab:3c:e7:a2:79:42:fb:00:e1:63:ef:9b:36:22:
         5f:a8:32:30
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUSf+hDU/N3tkJjGT5Y8n3Y9TxZvYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzI4QUEzOEUxNjNFRUJFODQ0MTI1MkFFQTNDMkI0QjZG
RjczOERBMzAeFw0yMzA4MjIxNTIwNDJaFw0yNDA4MjAxNTI1NDJaMDMxMTAvBgNV
BAMTKDIwNTMzQTAwRjdCNEZBNzY5MDI4NTgwMjQ5MDQwMkE5NzE0OUYxOUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFBmedE0u4HvQwww1UryknqAEB
NIwn0KP4GnljNtJ9Del0U3CdUO93PeOV0c/L9/LTgIIef64hh/riKB7bf8iGlDBy
1ul/N0CZ9P4ZgRp5FuqT6K0Ujws/azr5yQDNVJN0N9BMAptsjjLwhhhvaeSf5pP8
P1hvM36/qltbeamDCsupsKk2zd9jgmDzy44MLwuXols8H6xrtMAPOXV2xBi2i9bD
qLBX9Kp7UAJuQVTjNTJvM1ilr1SIDz+N25coXFFSS4fSfySy3+LWuMy7G2Gs8sNi
ku4WzPbzXjON1WsItT+d+fMolGaGl0FE2+ozNXxlVmOu8RRYgDgk3TKNI+19AgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUIFM6APe0+naQKFgCSQQCqXFJ8ZswHwYDVR0j
BBgwFoAUMoqjjhY+6+hEElKuo8K0tv9zjaMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQnVLaUxFeEpEZnpTcHAyVWNVQlpzU3gyRmtIdWJ1cmQ0NWpTR2Fra2pL
YjQvMC8zMjhBQTM4RTE2M0VFQkU4NDQxMjUyQUVBM0MyQjRCNkZGNzM4REEzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzMyOEFBMzhFMTYzRUVCRTg0
NDEyNTJBRUEzQzJCNEI2RkY3MzhEQTMuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0J1S2lMRXhKRGZ6U3BwMlVjVUJac1N4MkZrSHVidXJkNDVqU0dha2tqS2I0LzAv
MzEzNjM4MmUzMTM5MzcyZTMxMzQzODJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDMy
MzYzNTM0MzgzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAqjFlDANBgkqhkiG9w0BAQsFAAOCAQEALsKX
Nli/k8hVbajyrw+S82RgA94xfNBtC9/+w2GjPKb4X5AkO+4FYagkUb0gR12aPmV9
4ap6YKjzO85Yvr5ZI1+vjxDhXEE5cr64hgWJaLR3oo/nUTMoAK/ZX/U3hYTOsgB/
FPmAatktcos75LSvopfVrfz2xAuOLAFtlHFrvV9WOD6As726R11NNLmCw/6xS0aQ
ZxOsnHmrg6P3XXisIHnwDaBqsqmo1GVpQB6pVwNQyFIwPNa74iaPvfD+E1Ttkj8M
3xOOBJ0UDy+lKHmXhQn9p0To4CLwxFct9E3NsNiAQZXbXVap8f8ESZElY6s856J5
QvsA4WPvmzYiX6gyMA==
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:01:36 2025 by rpki-client