Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CPBgxJeXp5rNbdL2SYbEKGUAf5cvhqMzBF3T7dPn3HUm/0/3136382e3232382e31362e302f32322d3232203d3e20323633303537.roa
File:                     3136382e3232382e31362e302f32322d3232203d3e20323633303537.roa (raw, json)
Hash identifier:          KRvMUJeu2qsBfBWdKD//tI+rOAg7L+AIQZ3UDcD4zrs=
Subject key identifier:   19:39:3E:E0:EF:97:61:EB:30:44:5F:E3:66:F9:0B:DA:A5:D7:9F:F9
Certificate issuer:       /CN=C21F0113A7A311E6D682C1938972619E614335EC
Certificate serial:       1DF3E3C6F2010D2FAE75183FD95A25BC23A2B995
Authority key identifier: C2:1F:01:13:A7:A3:11:E6:D6:82:C1:93:89:72:61:9E:61:43:35:EC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C21F0113A7A311E6D682C1938972619E614335EC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CPBgxJeXp5rNbdL2SYbEKGUAf5cvhqMzBF3T7dPn3HUm/0/3136382e3232382e31362e302f32322d3232203d3e20323633303537.roa
Signing time:             Fri 13 May 2022 20:07:44 +0000
ROA not before:           Fri 13 May 2022 20:02:44 +0000
ROA not after:            Fri 12 May 2023 20:07:44 +0000
asID:                     263057
IP address blocks:        168.228.16.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:f3:e3:c6:f2:01:0d:2f:ae:75:18:3f:d9:5a:25:bc:23:a2:b9:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C21F0113A7A311E6D682C1938972619E614335EC
        Validity
            Not Before: May 13 20:02:44 2022 GMT
            Not After : May 12 20:07:44 2023 GMT
        Subject: CN=19393EE0EF9761EB30445FE366F90BDAA5D79FF9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:90:8c:01:2b:b4:46:6e:59:dc:51:b6:64:1d:
                    b1:ae:36:d2:8a:64:1e:83:f3:23:4f:c1:89:3f:93:
                    cd:b7:9a:e7:7f:2f:aa:96:40:9d:aa:be:39:62:ea:
                    e7:a7:ee:b6:58:2a:24:b9:ca:4b:80:25:11:71:68:
                    44:7b:df:5f:d0:33:6c:54:db:63:d4:c8:2a:cc:ad:
                    6c:49:07:1f:99:d6:c2:57:eb:76:e6:6a:fe:89:2d:
                    34:a3:21:3a:85:d7:f5:c4:cc:fd:d5:08:b9:5a:30:
                    61:2a:02:57:26:ee:7e:ec:fa:2d:de:d0:6f:a8:7d:
                    99:6b:88:23:c5:9d:fe:83:f9:f5:77:8b:a0:a4:7f:
                    04:34:0d:9a:f0:47:24:4d:bc:e4:f8:6c:03:b7:84:
                    d4:3b:d5:ac:35:0a:3f:8b:9a:a0:a1:ae:a5:47:e5:
                    fc:cf:4f:8d:6d:fa:ed:b1:19:f9:8f:77:3b:4e:1f:
                    cc:24:83:73:87:a0:c7:97:60:76:ac:ff:7a:b9:11:
                    b5:a8:37:64:20:9f:53:bd:80:3e:33:66:73:e3:ad:
                    87:b8:67:b5:80:b3:bd:94:9c:28:ac:8c:61:60:61:
                    cd:53:c5:29:ad:96:3a:04:b4:b1:09:4b:a6:bf:6c:
                    19:5a:ce:c9:9f:3f:a3:4a:b1:32:1c:eb:b0:c0:48:
                    96:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:39:3E:E0:EF:97:61:EB:30:44:5F:E3:66:F9:0B:DA:A5:D7:9F:F9
            X509v3 Authority Key Identifier:
                keyid:C2:1F:01:13:A7:A3:11:E6:D6:82:C1:93:89:72:61:9E:61:43:35:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CPBgxJeXp5rNbdL2SYbEKGUAf5cvhqMzBF3T7dPn3HUm/0/C21F0113A7A311E6D682C1938972619E614335EC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C21F0113A7A311E6D682C1938972619E614335EC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CPBgxJeXp5rNbdL2SYbEKGUAf5cvhqMzBF3T7dPn3HUm/0/3136382e3232382e31362e302f32322d3232203d3e20323633303537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.228.16.0/22

    Signature Algorithm: sha256WithRSAEncryption
         54:8e:b8:fa:ab:48:63:06:97:c2:a8:fc:c2:27:dd:e7:d9:06:
         5f:33:9f:76:22:67:57:ff:49:68:b0:5f:f1:91:40:01:61:6f:
         9f:7c:8e:04:86:c6:0a:4b:77:21:5c:a3:df:12:fc:8a:fc:cb:
         b8:7a:cd:4b:50:2c:5b:24:2c:c7:51:f9:9f:d0:eb:a1:e4:10:
         c5:72:44:54:8e:34:7a:1a:bc:5c:3b:51:e3:ff:53:98:9b:fd:
         bb:4f:09:7f:ea:ee:ee:66:15:7e:1b:ad:f1:9f:eb:e5:e7:50:
         dc:85:23:c8:8f:0f:33:99:d7:6e:08:40:63:9e:2b:a8:18:35:
         57:7f:f1:b9:b1:b4:ec:a0:6a:d4:fb:86:a7:57:e4:6f:17:1e:
         6d:82:d3:a6:fe:b4:01:92:35:25:b3:98:d3:4b:74:9e:db:59:
         ef:2a:dd:50:a6:ad:f7:c7:c7:55:77:2b:85:b3:ad:3c:b1:ec:
         65:bc:6f:e8:45:a5:24:e3:f6:56:b1:75:c9:82:ce:fe:a3:fe:
         df:60:4e:77:2e:79:34:9f:b7:87:70:24:6d:bd:58:96:7f:85:
         6e:ca:07:94:1c:64:29:18:00:ec:ff:de:3a:c7:da:61:87:39:
         74:74:af:29:bd:89:4e:d8:f5:6d:1c:22:b2:ce:33:51:a2:e6:
         42:8b:cb:c8
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUHfPjxvIBDS+udRg/2VolvCOiuZUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzIxRjAxMTNBN0EzMTFFNkQ2ODJDMTkzODk3MjYxOUU2
MTQzMzVFQzAeFw0yMjA1MTMyMDAyNDRaFw0yMzA1MTIyMDA3NDRaMDMxMTAvBgNV
BAMTKDE5MzkzRUUwRUY5NzYxRUIzMDQ0NUZFMzY2RjkwQkRBQTVENzlGRjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgkIwBK7RGblncUbZkHbGuNtKK
ZB6D8yNPwYk/k823mud/L6qWQJ2qvjli6uen7rZYKiS5ykuAJRFxaER731/QM2xU
22PUyCrMrWxJBx+Z1sJX63bmav6JLTSjITqF1/XEzP3VCLlaMGEqAlcm7n7s+i3e
0G+ofZlriCPFnf6D+fV3i6CkfwQ0DZrwRyRNvOT4bAO3hNQ71aw1Cj+LmqChrqVH
5fzPT41t+u2xGfmPdztOH8wkg3OHoMeXYHas/3q5EbWoN2Qgn1O9gD4zZnPjrYe4
Z7WAs72UnCisjGFgYc1TxSmtljoEtLEJS6a/bBlazsmfP6NKsTIc67DASJbBAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUGTk+4O+XYeswRF/jZvkL2qXXn/kwHwYDVR0j
BBgwFoAUwh8BE6ejEebWgsGTiXJhnmFDNewwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ1BCZ3hKZVhwNXJOYmRMMlNZYkVLR1VBZjVjdmhxTXpCRjNUN2RQbjNI
VW0vMC9DMjFGMDExM0E3QTMxMUU2RDY4MkMxOTM4OTcyNjE5RTYxNDMzNUVDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0MyMUYwMTEzQTdBMzExRTZE
NjgyQzE5Mzg5NzI2MTlFNjE0MzM1RUMuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0NQQmd4SmVYcDVyTmJkTDJTWWJFS0dVQWY1Y3ZocU16QkYzVDdkUG4zSFVtLzAv
MzEzNjM4MmUzMjMyMzgyZTMxMzYyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzMjM2
MzMzMDM1Mzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAKo5BAwDQYJKoZIhvcNAQELBQADggEBAFSOuPqr
SGMGl8Ko/MIn3efZBl8zn3YiZ1f/SWiwX/GRQAFhb598jgSGxgpLdyFco98S/Ir8
y7h6zUtQLFskLMdR+Z/Q66HkEMVyRFSONHoavFw7UeP/U5ib/btPCX/q7u5mFX4b
rfGf6+XnUNyFI8iPDzOZ124IQGOeK6gYNVd/8bmxtOygatT7hqdX5G8XHm2C06b+
tAGSNSWzmNNLdJ7bWe8q3VCmrffHx1V3K4WzrTyx7GW8b+hFpSTj9laxdcmCzv6j
/t9gTncueTSft4dwJG29WJZ/hW7KB5QcZCkYAOz/3jrH2mGHOXR0rym9iU7Y9W0c
IrLOM1Gi5kKLy8g=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:23 2024 by rpki-client on console-fra.rpki-client.org