Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CJDXqV71b7HsTZBtcETZVrX12mfZryuTxx5tdAY5td4b/0/3136382e3139352e39362e302f32322d3232203d3e20323635343137.roa
File:                     3136382e3139352e39362e302f32322d3232203d3e20323635343137.roa (raw, json)
Hash identifier:          Nr5y20eKEU2OxS2eU7+isph/4TZyaXya/C2WLKuM8Jc=
Subject key identifier:   AF:45:DA:3D:C0:A6:BB:A6:57:9E:7C:A6:26:C5:0F:88:3D:1C:99:8D
Certificate issuer:       /CN=56C2AD0DC13921E310E1DD1BF33A22DA9BA74DE0
Certificate serial:       521CA88AF01C81F24BA5897D88B1E39F4B44EED0
Authority key identifier: 56:C2:AD:0D:C1:39:21:E3:10:E1:DD:1B:F3:3A:22:DA:9B:A7:4D:E0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/56C2AD0DC13921E310E1DD1BF33A22DA9BA74DE0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CJDXqV71b7HsTZBtcETZVrX12mfZryuTxx5tdAY5td4b/0/3136382e3139352e39362e302f32322d3232203d3e20323635343137.roa
Signing time:             Thu 29 Jun 2023 20:00:02 +0000
ROA not before:           Thu 29 Jun 2023 19:55:02 +0000
ROA not after:            Thu 27 Jun 2024 20:00:02 +0000
asID:                     265417
IP address blocks:        168.195.96.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:1c:a8:8a:f0:1c:81:f2:4b:a5:89:7d:88:b1:e3:9f:4b:44:ee:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56C2AD0DC13921E310E1DD1BF33A22DA9BA74DE0
        Validity
            Not Before: Jun 29 19:55:02 2023 GMT
            Not After : Jun 27 20:00:02 2024 GMT
        Subject: CN=3082010A0282010100B7D92AAF3ED83C45A4529C9F4813033E96353027C4F61E7B2FDA1BF91A898BFA6ACD51FB6929F9EA7F88FE0C1E8807C26A4EB2C2B80CDD86FDCC06A829FF25A9013A390B6338181D5668504B2067065A6E2847754171535CCBEC051120437A4510A85C88497682E04E68EB424704DB2CB72E45B8568B59FEDC9893B6B8290CF68162A468F734B24310320881C23E4C3A30AFEE8723642C5AD880F86FA889FB7BF39506B62121DA86607846EEC721DBE06371229C68EFE26B5A560DC0518C89C1B4BE974A28202CD5818A7CC64CBC294330F3E0D5F3AB6C082893C5285C35EFC162E79B7DD77C50BF1B2A3A27746F35B04DD566E281045DCB7F49F66CFDC240170203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:d9:2a:af:3e:d8:3c:45:a4:52:9c:9f:48:13:
                    03:3e:96:35:30:27:c4:f6:1e:7b:2f:da:1b:f9:1a:
                    89:8b:fa:6a:cd:51:fb:69:29:f9:ea:7f:88:fe:0c:
                    1e:88:07:c2:6a:4e:b2:c2:b8:0c:dd:86:fd:cc:06:
                    a8:29:ff:25:a9:01:3a:39:0b:63:38:18:1d:56:68:
                    50:4b:20:67:06:5a:6e:28:47:75:41:71:53:5c:cb:
                    ec:05:11:20:43:7a:45:10:a8:5c:88:49:76:82:e0:
                    4e:68:eb:42:47:04:db:2c:b7:2e:45:b8:56:8b:59:
                    fe:dc:98:93:b6:b8:29:0c:f6:81:62:a4:68:f7:34:
                    b2:43:10:32:08:81:c2:3e:4c:3a:30:af:ee:87:23:
                    64:2c:5a:d8:80:f8:6f:a8:89:fb:7b:f3:95:06:b6:
                    21:21:da:86:60:78:46:ee:c7:21:db:e0:63:71:22:
                    9c:68:ef:e2:6b:5a:56:0d:c0:51:8c:89:c1:b4:be:
                    97:4a:28:20:2c:d5:81:8a:7c:c6:4c:bc:29:43:30:
                    f3:e0:d5:f3:ab:6c:08:28:93:c5:28:5c:35:ef:c1:
                    62:e7:9b:7d:d7:7c:50:bf:1b:2a:3a:27:74:6f:35:
                    b0:4d:d5:66:e2:81:04:5d:cb:7f:49:f6:6c:fd:c2:
                    40:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:45:DA:3D:C0:A6:BB:A6:57:9E:7C:A6:26:C5:0F:88:3D:1C:99:8D
            X509v3 Authority Key Identifier:
                keyid:56:C2:AD:0D:C1:39:21:E3:10:E1:DD:1B:F3:3A:22:DA:9B:A7:4D:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CJDXqV71b7HsTZBtcETZVrX12mfZryuTxx5tdAY5td4b/0/56C2AD0DC13921E310E1DD1BF33A22DA9BA74DE0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/56C2AD0DC13921E310E1DD1BF33A22DA9BA74DE0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CJDXqV71b7HsTZBtcETZVrX12mfZryuTxx5tdAY5td4b/0/3136382e3139352e39362e302f32322d3232203d3e20323635343137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.195.96.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b0:42:19:39:5e:72:3b:c7:df:d9:de:f6:65:40:e7:fa:2d:db:
         b2:73:c7:ba:64:ae:51:4d:31:3a:3c:e9:3a:f7:8e:2f:17:12:
         7d:a2:6c:0d:5b:7a:7a:b1:9f:f5:02:eb:68:9b:a0:01:3a:4d:
         3f:ea:28:b4:82:11:c3:d4:5b:37:0d:87:46:df:dc:2a:79:3a:
         1d:82:35:e0:bb:a0:c7:93:ea:28:bb:f9:9b:a6:f5:28:6e:f4:
         00:e9:48:6f:89:bd:68:d6:bd:20:23:f5:bd:70:6d:f5:00:dd:
         0e:2d:c6:7a:4b:a1:50:9a:1b:2a:db:70:80:69:72:ae:92:14:
         47:0f:2c:4b:60:bc:75:6a:b8:e9:20:1d:b1:d4:61:b6:d3:4f:
         0c:7c:4a:03:ae:f7:59:29:fc:0d:96:d8:2a:c0:02:a7:c1:0c:
         ae:06:e4:85:a5:3c:31:02:10:9b:ea:22:cb:9c:77:a2:20:dc:
         3f:79:7a:a3:2c:c9:3a:54:12:88:d1:3c:63:ab:85:e1:25:15:
         4a:08:a7:6d:ce:27:23:86:70:0f:e8:66:35:40:ff:10:42:00:
         06:c2:b0:82:96:13:88:aa:a9:45:9d:6c:8c:af:57:cb:2f:fa:
         8b:89:b0:69:21:4c:4c:b6:79:5b:63:24:ee:96:37:d6:6d:e0:
         a4:41:aa:20
-----BEGIN CERTIFICATE-----
MIIHQzCCBiugAwIBAgIUUhyoivAcgfJLpYl9iLHjn0tE7tAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTZDMkFEMERDMTM5MjFFMzEwRTFERDFCRjMzQTIyREE5
QkE3NERFMDAeFw0yMzA2MjkxOTU1MDJaFw0yNDA2MjcyMDAwMDJaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQjdEOTJBQUYzRUQ4M0M0NUE0
NTI5QzlGNDgxMzAzM0U5NjM1MzAyN0M0RjYxRTdCMkZEQTFCRjkxQTg5OEJGQTZB
Q0Q1MUZCNjkyOUY5RUE3Rjg4RkUwQzFFODgwN0MyNkE0RUIyQzJCODBDREQ4NkZE
Q0MwNkE4MjlGRjI1QTkwMTNBMzkwQjYzMzgxODFENTY2ODUwNEIyMDY3MDY1QTZF
Mjg0Nzc1NDE3MTUzNUNDQkVDMDUxMTIwNDM3QTQ1MTBBODVDODg0OTc2ODJFMDRF
NjhFQjQyNDcwNERCMkNCNzJFNDVCODU2OEI1OUZFREM5ODkzQjZCODI5MENGNjgx
NjJBNDY4RjczNEIyNDMxMDMyMDg4MUMyM0U0QzNBMzBBRkVFODcyMzY0MkM1QUQ4
ODBGODZGQTg4OUZCN0JGMzk1MDZCNjIxMjFEQTg2NjA3ODQ2RUVDNzIxREJFMDYz
NzEyMjlDNjhFRkUyNkI1QTU2MERDMDUxOEM4OUMxQjRCRTk3NEEyODIwMkNENTgx
OEE3Q0M2NENCQzI5NDMzMEYzRTBENUYzQUI2QzA4Mjg5M0M1Mjg1QzM1RUZDMTYy
RTc5QjdERDc3QzUwQkYxQjJBM0EyNzc0NkYzNUIwNERENTY2RTI4MTA0NURDQjdG
NDlGNjZDRkRDMjQwMTcwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAt9kqrz7YPEWkUpyfSBMDPpY1MCfE9h57L9ob+RqJi/pqzVH7aSn5
6n+I/gweiAfCak6ywrgM3Yb9zAaoKf8lqQE6OQtjOBgdVmhQSyBnBlpuKEd1QXFT
XMvsBREgQ3pFEKhciEl2guBOaOtCRwTbLLcuRbhWi1n+3JiTtrgpDPaBYqRo9zSy
QxAyCIHCPkw6MK/uhyNkLFrYgPhvqIn7e/OVBrYhIdqGYHhG7sch2+BjcSKcaO/i
a1pWDcBRjInBtL6XSiggLNWBinzGTLwpQzDz4NXzq2wIKJPFKFw178Fi55t913xQ
vxsqOid0bzWwTdVm4oEEXct/SfZs/cJAFwIDAQABo4ICUTCCAk0wHQYDVR0OBBYE
FK9F2j3AprumV558pibFD4g9HJmNMB8GA1UdIwQYMBaAFFbCrQ3BOSHjEOHdG/M6
Itqbp03gMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0NKRFhxVjcxYjdIc1Ra
QnRjRVRaVnJYMTJtZlpyeXVUeHg1dGRBWTV0ZDRiLzAvNTZDMkFEMERDMTM5MjFF
MzEwRTFERDFCRjMzQTIyREE5QkE3NERFMC5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC81NkMyQUQwREMxMzkyMUUzMTBFMUREMUJGMzNBMjJEQTlCQTc0
REUwLmNlcjCBrgYIKwYBBQUHAQsEgaEwgZ4wgZsGCCsGAQUFBzALhoGOcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9DSkRYcVY3MWI3SHNUWkJ0Y0VU
WlZyWDEybWZacnl1VHh4NXRkQVk1dGQ0Yi8wLzMxMzYzODJlMzEzOTM1MmUzOTM2
MmUzMDJmMzIzMjJkMzIzMjIwM2QzZTIwMzIzNjM1MzQzMTM3LnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC
qMNgMA0GCSqGSIb3DQEBCwUAA4IBAQCwQhk5XnI7x9/Z3vZlQOf6Lduyc8e6ZK5R
TTE6POk6944vFxJ9omwNW3p6sZ/1Autom6ABOk0/6ii0ghHD1Fs3DYdG39wqeTod
gjXgu6DHk+oou/mbpvUobvQA6Uhvib1o1r0gI/W9cG31AN0OLcZ6S6FQmhsq23CA
aXKukhRHDyxLYLx1arjpIB2x1GG2008MfEoDrvdZKfwNltgqwAKnwQyuBuSFpTwx
AhCb6iLLnHeiINw/eXqjLMk6VBKI0Txjq4XhJRVKCKdtzicjhnAP6GY1QP8QQgAG
wrCClhOIqqlFnWyMr1fLL/qLibBpIUxMtnlbYyTuljfWbeCkQaog
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:23 2024 by rpki-client on console-fra.rpki-client.org