Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BzWL6DcvcB4YQ8A5ZDMp3i3LS2EWBSzh2PwrgZdDuWWB/1/3137392e39362e3136302e302f32312d3234203d3e203532363337.roa
File:                     3137392e39362e3136302e302f32312d3234203d3e203532363337.roa (raw, json)
Hash identifier:          86+OzJ+CUVNvFQMSiwkxCubWQTJgNhdW3zUb3s01sFc=
Subject key identifier:   BC:CE:22:39:83:E9:D7:F0:25:36:8D:7D:3B:EC:A5:89:81:02:A0:50
Certificate issuer:       /CN=65957368ED64EBC667C549743F4EF7F7D715D062
Certificate serial:       2BAB9273683F04D212078A590948FB15F1335942
Authority key identifier: 65:95:73:68:ED:64:EB:C6:67:C5:49:74:3F:4E:F7:F7:D7:15:D0:62
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/65957368ED64EBC667C549743F4EF7F7D715D062.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BzWL6DcvcB4YQ8A5ZDMp3i3LS2EWBSzh2PwrgZdDuWWB/1/3137392e39362e3136302e302f32312d3234203d3e203532363337.roa
Signing time:             Wed 06 Dec 2023 05:00:00 +0000
ROA not before:           Wed 06 Dec 2023 04:55:00 +0000
ROA not after:            Wed 04 Dec 2024 05:00:00 +0000
asID:                     52637
IP address blocks:        179.96.160.0/21 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:ab:92:73:68:3f:04:d2:12:07:8a:59:09:48:fb:15:f1:33:59:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65957368ED64EBC667C549743F4EF7F7D715D062
        Validity
            Not Before: Dec  6 04:55:00 2023 GMT
            Not After : Dec  4 05:00:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:27:7a:74:96:47:14:ba:c4:9c:4e:1f:48:e3:
                    f9:19:f4:21:7f:63:2f:1b:57:37:da:63:0d:f2:0a:
                    00:47:e4:38:cc:fb:32:4e:9d:c7:ec:01:58:b0:5c:
                    15:e1:73:d1:08:16:48:1a:bf:a0:19:6d:06:cb:bd:
                    4c:c7:a6:d0:91:62:bb:e8:d6:86:99:21:89:10:20:
                    f3:c5:a4:55:a0:4b:eb:2b:64:72:77:11:a1:9e:a8:
                    93:1d:32:39:a9:00:98:b2:c8:1d:d3:e0:c1:29:16:
                    47:9f:c1:0d:84:9f:90:30:20:5b:cb:0c:cb:ad:cd:
                    f9:85:4b:a9:fd:5c:ce:05:ef:f0:c7:74:19:cf:8d:
                    3c:83:df:fb:31:ae:6e:e5:a4:bb:47:12:f7:e5:2b:
                    24:a3:1c:3d:75:72:68:d9:b0:fb:3e:49:44:25:b0:
                    d6:78:03:fa:98:4e:02:d7:84:93:67:86:60:79:07:
                    e2:d2:14:7e:18:56:d3:a7:8b:11:1a:3d:25:76:72:
                    27:a1:19:f5:c4:9d:53:40:b5:bd:47:52:ac:7b:65:
                    f2:38:ce:11:57:f5:3c:9f:02:09:1c:12:ad:65:3c:
                    8d:30:76:fd:56:8e:51:23:e1:8f:3c:33:ec:3d:79:
                    64:97:ce:49:23:51:9d:9c:59:f9:18:7d:cb:c9:5e:
                    e1:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:CE:22:39:83:E9:D7:F0:25:36:8D:7D:3B:EC:A5:89:81:02:A0:50
            X509v3 Authority Key Identifier:
                keyid:65:95:73:68:ED:64:EB:C6:67:C5:49:74:3F:4E:F7:F7:D7:15:D0:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BzWL6DcvcB4YQ8A5ZDMp3i3LS2EWBSzh2PwrgZdDuWWB/1/65957368ED64EBC667C549743F4EF7F7D715D062.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/65957368ED64EBC667C549743F4EF7F7D715D062.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BzWL6DcvcB4YQ8A5ZDMp3i3LS2EWBSzh2PwrgZdDuWWB/1/3137392e39362e3136302e302f32312d3234203d3e203532363337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.96.160.0/21

    Signature Algorithm: sha256WithRSAEncryption
         99:25:8f:0d:c1:b4:0a:f9:1d:4d:a5:0d:91:25:33:62:ac:6d:
         c3:45:ee:5f:df:66:62:91:24:ae:56:76:42:44:b9:20:ac:fb:
         a8:a3:2b:3d:f1:cc:31:f1:df:fd:ba:3a:fc:33:64:05:94:e2:
         72:3c:11:73:6f:76:44:cd:d4:fb:6e:89:8e:54:ce:ec:bb:04:
         61:45:11:7c:5c:0c:9f:52:6c:83:30:a9:57:23:ab:c0:fc:10:
         12:9e:5a:5f:60:df:8c:58:37:71:01:90:c3:d7:3f:d0:b3:c4:
         39:e6:c1:f9:dd:5d:eb:a4:0a:4a:3a:fb:43:eb:dc:8d:73:61:
         fe:11:05:4c:60:29:a2:61:17:0f:b3:31:e6:0f:c7:a2:07:d0:
         82:de:24:6b:c5:48:d2:52:ce:f0:1b:86:9e:e4:08:59:83:8c:
         b3:75:df:e3:19:de:18:9b:c8:bf:c5:48:3e:66:ec:e4:9b:cc:
         3b:75:06:e1:54:11:56:7d:13:82:65:6f:65:49:80:ce:62:92:
         d6:6a:df:28:3c:57:3f:9b:48:a3:71:09:8b:e3:84:66:78:ee:
         42:8c:04:e3:cd:4f:aa:fd:93:89:a4:f5:42:f3:af:b5:d5:6e:
         8a:a4:03:a3:77:fa:c6:de:78:0f:32:6f:d0:3e:f2:86:57:78:
         4b:93:cc:2c
-----BEGIN CERTIFICATE-----
MIIHQTCCBimgAwIBAgIUK6uSc2g/BNISB4pZCUj7FfEzWUIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjU5NTczNjhFRDY0RUJDNjY3QzU0OTc0M0Y0RUY3RjdE
NzE1RDA2MjAeFw0yMzEyMDYwNDU1MDBaFw0yNDEyMDQwNTAwMDBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQkUyNzdBNzQ5NjQ3MTRCQUM0
OUM0RTFGNDhFM0Y5MTlGNDIxN0Y2MzJGMUI1NzM3REE2MzBERjIwQTAwNDdFNDM4
Q0NGQjMyNEU5REM3RUMwMTU4QjA1QzE1RTE3M0QxMDgxNjQ4MUFCRkEwMTk2RDA2
Q0JCRDRDQzdBNkQwOTE2MkJCRThENjg2OTkyMTg5MTAyMEYzQzVBNDU1QTA0QkVC
MkI2NDcyNzcxMUExOUVBODkzMUQzMjM5QTkwMDk4QjJDODFERDNFMEMxMjkxNjQ3
OUZDMTBEODQ5RjkwMzAyMDVCQ0IwQ0NCQURDREY5ODU0QkE5RkQ1Q0NFMDVFRkYw
Qzc3NDE5Q0Y4RDNDODNERkZCMzFBRTZFRTVBNEJCNDcxMkY3RTUyQjI0QTMxQzNE
NzU3MjY4RDlCMEZCM0U0OTQ0MjVCMEQ2NzgwM0ZBOTg0RTAyRDc4NDkzNjc4NjYw
NzkwN0UyRDIxNDdFMTg1NkQzQTc4QjExMUEzRDI1NzY3MjI3QTExOUY1QzQ5RDUz
NDBCNUJENDc1MkFDN0I2NUYyMzhDRTExNTdGNTNDOUYwMjA5MUMxMkFENjUzQzhE
MzA3NkZENTY4RTUxMjNFMThGM0MzM0VDM0Q3OTY0OTdDRTQ5MjM1MTlEOUM1OUY5
MTg3RENCQzk1RUUxRUYwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAvid6dJZHFLrEnE4fSOP5GfQhf2MvG1c32mMN8goAR+Q4zPsyTp3H
7AFYsFwV4XPRCBZIGr+gGW0Gy71Mx6bQkWK76NaGmSGJECDzxaRVoEvrK2RydxGh
nqiTHTI5qQCYssgd0+DBKRZHn8ENhJ+QMCBbywzLrc35hUup/VzOBe/wx3QZz408
g9/7Ma5u5aS7RxL35Sskoxw9dXJo2bD7PklEJbDWeAP6mE4C14STZ4ZgeQfi0hR+
GFbTp4sRGj0ldnInoRn1xJ1TQLW9R1Kse2XyOM4RV/U8nwIJHBKtZTyNMHb9Vo5R
I+GPPDPsPXlkl85JI1GdnFn5GH3LyV7h7wIDAQABo4ICTzCCAkswHQYDVR0OBBYE
FLzOIjmD6dfwJTaNfTvspYmBAqBQMB8GA1UdIwQYMBaAFGWVc2jtZOvGZ8VJdD9O
9/fXFdBiMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0J6V0w2RGN2Y0I0WVE4
QTVaRE1wM2kzTFMyRVdCU3poMlB3cmdaZER1V1dCLzEvNjU5NTczNjhFRDY0RUJD
NjY3QzU0OTc0M0Y0RUY3RjdENzE1RDA2Mi5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC82NTk1NzM2OEVENjRFQkM2NjdDNTQ5NzQzRjRFRjdGN0Q3MTVE
MDYyLmNlcjCBrAYIKwYBBQUHAQsEgZ8wgZwwgZkGCCsGAQUFBzALhoGMcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9CeldMNkRjdmNCNFlROEE1WkRN
cDNpM0xTMkVXQlN6aDJQd3JnWmREdVdXQi8xLzMxMzczOTJlMzkzNjJlMzEzNjMw
MmUzMDJmMzIzMTJkMzIzNDIwM2QzZTIwMzUzMjM2MzMzNy5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEA7Ng
oDANBgkqhkiG9w0BAQsFAAOCAQEAmSWPDcG0CvkdTaUNkSUzYqxtw0XuX99mYpEk
rlZ2QkS5IKz7qKMrPfHMMfHf/bo6/DNkBZTicjwRc292RM3U+26JjlTO7LsEYUUR
fFwMn1JsgzCpVyOrwPwQEp5aX2DfjFg3cQGQw9c/0LPEOebB+d1d66QKSjr7Q+vc
jXNh/hEFTGApomEXD7Mx5g/HogfQgt4ka8VI0lLO8BuGnuQIWYOMs3Xf4xneGJvI
v8VIPmbs5JvMO3UG4VQRVn0TgmVvZUmAzmKS1mrfKDxXP5tIo3EJi+OEZnjuQowE
481Pqv2TiaT1QvOvtdVuiqQDo3f6xt54DzJv0D7yhld4S5PMLA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:02 2024 by rpki-client on console-ams.rpki-client.org