Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CPBgxJeXp5rNbdL2SYbEKGUAf5cvhqMzBF3T7dPn3HUm/0/3136382e3232382e31382e302f32342d3234203d3e20323633303537.roa
File:                     3136382e3232382e31382e302f32342d3234203d3e20323633303537.roa (raw, json)
Hash identifier:          D23gaD6JdR3W18rQ7OVuZ28kVqjcx4dmXld6fqFo5vs=
Subject key identifier:   96:46:55:94:A7:D6:00:9E:A0:8E:DD:D5:B5:25:51:A1:97:14:3F:D9
Certificate issuer:       /CN=C21F0113A7A311E6D682C1938972619E614335EC
Certificate serial:       08515A6C90ECC0B5CF3B6D254FC551D6F3F9856F
Authority key identifier: C2:1F:01:13:A7:A3:11:E6:D6:82:C1:93:89:72:61:9E:61:43:35:EC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C21F0113A7A311E6D682C1938972619E614335EC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CPBgxJeXp5rNbdL2SYbEKGUAf5cvhqMzBF3T7dPn3HUm/0/3136382e3232382e31382e302f32342d3234203d3e20323633303537.roa
Signing time:             Fri 13 May 2022 20:08:12 +0000
ROA not before:           Fri 13 May 2022 20:03:12 +0000
ROA not after:            Fri 12 May 2023 20:08:12 +0000
asID:                     263057
IP address blocks:        168.228.18.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:51:5a:6c:90:ec:c0:b5:cf:3b:6d:25:4f:c5:51:d6:f3:f9:85:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C21F0113A7A311E6D682C1938972619E614335EC
        Validity
            Not Before: May 13 20:03:12 2022 GMT
            Not After : May 12 20:08:12 2023 GMT
        Subject: CN=96465594A7D6009EA08EDDD5B52551A197143FD9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:42:aa:92:60:da:24:3d:1c:ba:0b:bd:a5:0f:
                    eb:21:70:3a:ce:e4:a0:e2:d6:4b:c6:57:ee:4f:35:
                    9b:b6:e8:c5:b4:b5:5b:29:4b:2c:61:39:ee:0f:72:
                    d9:59:e6:e9:ed:25:94:bc:62:1b:a8:a1:f5:c1:06:
                    59:bd:db:3a:c1:22:80:1a:38:99:8a:fe:62:a9:57:
                    9d:91:40:85:d5:4d:bf:76:43:17:53:da:ea:1f:ff:
                    d0:d5:75:41:1a:20:61:b7:ca:1b:d1:0e:0c:c3:7b:
                    3c:86:6f:3d:0a:4b:ae:81:4f:a5:2d:7d:58:26:56:
                    34:03:7d:5c:de:73:4e:dd:56:83:36:6b:ae:16:92:
                    c3:2a:29:1b:e4:e1:2e:4d:7d:07:ce:40:8d:cf:89:
                    51:d4:8f:2f:b0:80:07:89:75:03:8a:bf:25:60:56:
                    65:99:35:57:ee:6d:14:0c:cb:bf:93:b8:33:f9:c2:
                    9b:89:7d:21:36:fc:51:2a:ff:60:5e:81:25:98:c9:
                    d9:0e:2a:b3:99:d5:e6:ae:60:81:26:b8:74:9d:f9:
                    26:13:f3:6d:42:56:0d:df:6d:cc:33:cd:fc:c9:5a:
                    44:d4:cb:00:13:12:9a:7f:c8:01:ec:d8:c4:76:23:
                    b5:bf:c4:01:d8:69:04:af:ce:b0:ee:3f:d5:8a:f3:
                    d1:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:46:55:94:A7:D6:00:9E:A0:8E:DD:D5:B5:25:51:A1:97:14:3F:D9
            X509v3 Authority Key Identifier:
                keyid:C2:1F:01:13:A7:A3:11:E6:D6:82:C1:93:89:72:61:9E:61:43:35:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CPBgxJeXp5rNbdL2SYbEKGUAf5cvhqMzBF3T7dPn3HUm/0/C21F0113A7A311E6D682C1938972619E614335EC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C21F0113A7A311E6D682C1938972619E614335EC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CPBgxJeXp5rNbdL2SYbEKGUAf5cvhqMzBF3T7dPn3HUm/0/3136382e3232382e31382e302f32342d3234203d3e20323633303537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.228.18.0/24

    Signature Algorithm: sha256WithRSAEncryption
         60:e2:be:10:34:68:44:63:0c:70:2a:82:10:7a:79:27:7b:20:
         a3:a9:ef:e1:9e:c1:c0:89:34:55:1c:8f:19:ab:02:df:4a:19:
         41:ce:01:1d:c3:3b:c0:01:83:13:a5:ae:6e:dd:bf:35:68:31:
         7b:33:33:e8:50:c5:50:d9:24:04:69:d8:00:b0:01:55:7b:fa:
         3c:c3:2c:e8:ab:b9:19:bc:24:4d:01:96:37:dd:c6:f6:0c:25:
         4a:cf:41:cd:21:68:0a:0a:4e:c5:88:c7:b7:7c:2c:92:8b:6e:
         9b:a7:ea:45:04:02:de:59:e6:d0:99:ff:f0:f4:dd:76:b1:c4:
         0d:e3:c3:72:b5:8e:56:09:26:77:a9:b4:fc:a1:a9:fa:d5:16:
         40:54:2e:11:72:8e:be:67:38:b0:4a:20:ec:9f:10:d3:1f:b8:
         87:3b:2f:64:ea:81:b0:82:8d:14:82:79:e9:76:02:93:45:93:
         94:e6:37:bc:35:2a:0a:8e:f6:68:0b:1c:67:59:8d:95:63:e9:
         61:ac:b6:6f:98:84:0a:fe:6c:6c:ae:28:f9:12:0f:22:93:af:
         60:df:a6:dd:b4:0f:00:85:80:85:05:8d:d1:81:13:b2:5f:0c:
         3a:9f:34:60:8f:d0:18:a0:be:47:04:fc:8a:e5:91:9e:bc:00:
         43:7b:fe:c8
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUCFFabJDswLXPO20lT8VR1vP5hW8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzIxRjAxMTNBN0EzMTFFNkQ2ODJDMTkzODk3MjYxOUU2
MTQzMzVFQzAeFw0yMjA1MTMyMDAzMTJaFw0yMzA1MTIyMDA4MTJaMDMxMTAvBgNV
BAMTKDk2NDY1NTk0QTdENjAwOUVBMDhFRERENUI1MjU1MUExOTcxNDNGRDkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKQqqSYNokPRy6C72lD+shcDrO
5KDi1kvGV+5PNZu26MW0tVspSyxhOe4PctlZ5untJZS8YhuoofXBBlm92zrBIoAa
OJmK/mKpV52RQIXVTb92QxdT2uof/9DVdUEaIGG3yhvRDgzDezyGbz0KS66BT6Ut
fVgmVjQDfVzec07dVoM2a64WksMqKRvk4S5NfQfOQI3PiVHUjy+wgAeJdQOKvyVg
VmWZNVfubRQMy7+TuDP5wpuJfSE2/FEq/2BegSWYydkOKrOZ1eauYIEmuHSd+SYT
821CVg3fbcwzzfzJWkTUywATEpp/yAHs2MR2I7W/xAHYaQSvzrDuP9WK89EDAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUlkZVlKfWAJ6gjt3VtSVRoZcUP9kwHwYDVR0j
BBgwFoAUwh8BE6ejEebWgsGTiXJhnmFDNewwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ1BCZ3hKZVhwNXJOYmRMMlNZYkVLR1VBZjVjdmhxTXpCRjNUN2RQbjNI
VW0vMC9DMjFGMDExM0E3QTMxMUU2RDY4MkMxOTM4OTcyNjE5RTYxNDMzNUVDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0MyMUYwMTEzQTdBMzExRTZE
NjgyQzE5Mzg5NzI2MTlFNjE0MzM1RUMuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0NQQmd4SmVYcDVyTmJkTDJTWWJFS0dVQWY1Y3ZocU16QkYzVDdkUG4zSFVtLzAv
MzEzNjM4MmUzMjMyMzgyZTMxMzgyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzMzMDM1Mzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBACo5BIwDQYJKoZIhvcNAQELBQADggEBAGDivhA0
aERjDHAqghB6eSd7IKOp7+GewcCJNFUcjxmrAt9KGUHOAR3DO8ABgxOlrm7dvzVo
MXszM+hQxVDZJARp2ACwAVV7+jzDLOiruRm8JE0BljfdxvYMJUrPQc0haAoKTsWI
x7d8LJKLbpun6kUEAt5Z5tCZ//D03XaxxA3jw3K1jlYJJneptPyhqfrVFkBULhFy
jr5nOLBKIOyfENMfuIc7L2TqgbCCjRSCeel2ApNFk5TmN7w1KgqO9mgLHGdZjZVj
6WGstm+YhAr+bGyuKPkSDyKTr2Dfpt20DwCFgIUFjdGBE7JfDDqfNGCP0BigvkcE
/IrlkZ68AEN7/sg=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:23 2024 by rpki-client on console-fra.rpki-client.org