Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CDmX15BxbZz24Gn7UoNByrgZRwdqqLjN4qMUs4cNsgPa/0/3136382e302e3139322e302f32332d3233203d3e20323634333539.roa
File:                     3136382e302e3139322e302f32332d3233203d3e20323634333539.roa (raw, json)
Hash identifier:          v2zT1NtYvIUYF3jufFvhQ8Blibw4OQ9U1P6G0R/8FsI=
Subject key identifier:   B5:F4:81:F8:AD:E7:23:1A:31:FC:5A:00:1C:F5:7E:7C:8A:EA:9A:F2
Certificate issuer:       /CN=DE0C1916D2E4544B38F207918D9A749469991A0B
Certificate serial:       3F6BB21EA28A84CEC292EBC742236EE5362FD029
Authority key identifier: DE:0C:19:16:D2:E4:54:4B:38:F2:07:91:8D:9A:74:94:69:99:1A:0B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DE0C1916D2E4544B38F207918D9A749469991A0B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CDmX15BxbZz24Gn7UoNByrgZRwdqqLjN4qMUs4cNsgPa/0/3136382e302e3139322e302f32332d3233203d3e20323634333539.roa
Signing time:             Wed 10 Jan 2024 19:09:24 +0000
ROA not before:           Wed 10 Jan 2024 19:04:24 +0000
ROA not after:            Wed 08 Jan 2025 19:09:24 +0000
asID:                     264359
IP address blocks:        168.0.192.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:6b:b2:1e:a2:8a:84:ce:c2:92:eb:c7:42:23:6e:e5:36:2f:d0:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DE0C1916D2E4544B38F207918D9A749469991A0B
        Validity
            Not Before: Jan 10 19:04:24 2024 GMT
            Not After : Jan  8 19:09:24 2025 GMT
        Subject: CN=B5F481F8ADE7231A31FC5A001CF57E7C8AEA9AF2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:59:d0:99:a4:9c:93:3b:ec:be:af:5b:65:23:
                    37:59:00:f5:df:74:ec:32:04:6e:53:65:ec:88:65:
                    bc:63:af:b4:1f:37:a5:e1:12:3f:d8:f6:fb:a9:19:
                    e8:0c:31:a0:9f:19:b1:60:f8:35:38:8d:8e:77:1f:
                    7b:cd:73:d2:1d:e5:71:3a:65:7f:ae:ec:ac:fa:2c:
                    ed:f4:fe:96:0b:b0:68:b8:c1:55:d5:cf:2c:c2:0f:
                    8a:7a:08:ef:cc:46:dd:7b:7c:25:95:4b:c0:b3:f9:
                    0a:a4:8d:2d:78:78:ac:d9:df:05:96:0f:bc:6b:4c:
                    fd:28:39:8f:25:00:8c:bd:c6:cc:ea:95:aa:d0:2e:
                    b4:9c:0c:12:41:7a:73:59:5d:66:c3:4a:8a:75:67:
                    6a:2a:14:39:26:a0:78:59:b4:28:87:f1:f6:d6:be:
                    cb:7c:e1:e0:f1:16:12:bf:70:18:4c:73:bf:19:59:
                    82:53:2a:64:f0:d2:97:23:ca:1f:45:74:a5:96:e3:
                    4a:84:f0:e6:71:02:46:10:3f:4f:3d:2e:a3:84:8e:
                    84:53:15:bb:23:53:ad:39:a6:b4:e5:51:4b:98:60:
                    03:3e:ea:f4:dc:3d:88:62:01:dc:67:5a:03:de:06:
                    81:f5:11:10:34:03:52:d2:10:bd:ba:ca:f4:92:bc:
                    ff:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:F4:81:F8:AD:E7:23:1A:31:FC:5A:00:1C:F5:7E:7C:8A:EA:9A:F2
            X509v3 Authority Key Identifier:
                keyid:DE:0C:19:16:D2:E4:54:4B:38:F2:07:91:8D:9A:74:94:69:99:1A:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CDmX15BxbZz24Gn7UoNByrgZRwdqqLjN4qMUs4cNsgPa/0/DE0C1916D2E4544B38F207918D9A749469991A0B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DE0C1916D2E4544B38F207918D9A749469991A0B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CDmX15BxbZz24Gn7UoNByrgZRwdqqLjN4qMUs4cNsgPa/0/3136382e302e3139322e302f32332d3233203d3e20323634333539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.0.192.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a9:b4:81:e0:f4:4f:ce:e7:6a:04:48:f6:6c:0f:4a:df:87:68:
         77:0a:32:0e:43:b7:5e:c6:31:e3:c7:ef:5a:92:e4:a4:fb:39:
         a8:fe:10:de:c5:e4:23:74:57:33:77:6d:01:93:a4:46:38:17:
         97:be:7f:39:b2:0e:a8:e4:49:f1:97:f0:ea:44:59:12:79:4e:
         8a:11:74:34:61:7d:59:d1:9b:80:7f:8e:35:94:47:79:42:36:
         e7:c9:32:84:2c:13:7e:5f:22:82:4a:d6:40:60:8e:21:f6:56:
         c5:4b:29:a1:55:08:ce:70:34:f4:68:a8:95:dc:79:8d:dd:6c:
         72:0b:c0:2e:b0:af:d6:86:6d:00:dd:4e:8a:53:d1:b2:13:bf:
         96:52:fd:dc:1c:7f:b3:0f:f0:ff:a9:aa:13:68:3a:20:35:52:
         cd:40:00:25:ff:51:bd:b5:16:71:68:ce:ae:c4:4c:ed:28:70:
         e9:22:cc:a6:15:e7:18:14:dd:d7:4a:7b:15:b9:33:6e:d4:09:
         eb:60:e3:74:a0:cd:74:f0:70:48:7d:b6:fa:ef:14:b7:a8:45:
         02:9a:8d:d8:6b:2c:34:c2:16:ad:a3:00:de:e2:8f:ac:04:55:
         7b:ba:e1:ef:47:6b:e0:64:c3:a4:ed:96:ed:b0:3a:79:80:dd:
         8e:4a:6c:c5
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUP2uyHqKKhM7CkuvHQiNu5TYv0CkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoREUwQzE5MTZEMkU0NTQ0QjM4RjIwNzkxOEQ5QTc0OTQ2
OTk5MUEwQjAeFw0yNDAxMTAxOTA0MjRaFw0yNTAxMDgxOTA5MjRaMDMxMTAvBgNV
BAMTKEI1RjQ4MUY4QURFNzIzMUEzMUZDNUEwMDFDRjU3RTdDOEFFQTlBRjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgWdCZpJyTO+y+r1tlIzdZAPXf
dOwyBG5TZeyIZbxjr7QfN6XhEj/Y9vupGegMMaCfGbFg+DU4jY53H3vNc9Id5XE6
ZX+u7Kz6LO30/pYLsGi4wVXVzyzCD4p6CO/MRt17fCWVS8Cz+QqkjS14eKzZ3wWW
D7xrTP0oOY8lAIy9xszqlarQLrScDBJBenNZXWbDSop1Z2oqFDkmoHhZtCiH8fbW
vst84eDxFhK/cBhMc78ZWYJTKmTw0pcjyh9FdKWW40qE8OZxAkYQP089LqOEjoRT
FbsjU605prTlUUuYYAM+6vTcPYhiAdxnWgPeBoH1ERA0A1LSEL26yvSSvP//AgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUtfSB+K3nIxox/FoAHPV+fIrqmvIwHwYDVR0j
BBgwFoAU3gwZFtLkVEs48geRjZp0lGmZGgswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ0RtWDE1QnhiWnoyNEduN1VvTkJ5cmdaUndkcXFMak40cU1VczRjTnNn
UGEvMC9ERTBDMTkxNkQyRTQ1NDRCMzhGMjA3OTE4RDlBNzQ5NDY5OTkxQTBCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0RFMEMxOTE2RDJFNDU0NEIz
OEYyMDc5MThEOUE3NDk0Njk5OTFBMEIuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0NEbVgxNUJ4Ylp6MjRHbjdVb05CeXJnWlJ3ZHFxTGpONHFNVXM0Y05zZ1BhLzAv
MzEzNjM4MmUzMDJlMzEzOTMyMmUzMDJmMzIzMzJkMzIzMzIwM2QzZTIwMzIzNjM0
MzMzNTM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQBqADAMA0GCSqGSIb3DQEBCwUAA4IBAQCptIHg9E/O
52oESPZsD0rfh2h3CjIOQ7dexjHjx+9akuSk+zmo/hDexeQjdFczd20Bk6RGOBeX
vn85sg6o5Enxl/DqRFkSeU6KEXQ0YX1Z0ZuAf441lEd5QjbnyTKELBN+XyKCStZA
YI4h9lbFSymhVQjOcDT0aKiV3HmN3WxyC8AusK/Whm0A3U6KU9GyE7+WUv3cHH+z
D/D/qaoTaDogNVLNQAAl/1G9tRZxaM6uxEztKHDpIsymFecYFN3XSnsVuTNu1Anr
YON0oM108HBIfbb67xS3qEUCmo3Yayw0whatowDe4o+sBFV7uuHvR2vgZMOk7Zbt
sDp5gN2OSmzF
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:04 2024 by rpki-client on console-ams.rpki-client.org