Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D7FHQ7bY37VxVJo3dEVjpPapxpbzHkMLgQKTznGbQaxb/0/3136382e39302e3131342e302f32342d3234203d3e20323635313837.roa
File:                     3136382e39302e3131342e302f32342d3234203d3e20323635313837.roa (raw, json)
Hash identifier:          /KVk8cohvBGgSQRo4O3thuUddaaBFTmGVvRnMj4fTL4=
Subject key identifier:   39:68:5A:83:4F:29:BF:FB:1B:0D:57:CB:8C:32:11:FC:72:55:6F:DB
Certificate issuer:       /CN=81175370221E26181F39FB407E63064DEB20E6EE
Certificate serial:       37CC68959241A70725B000246FD35E518E7BF194
Authority key identifier: 81:17:53:70:22:1E:26:18:1F:39:FB:40:7E:63:06:4D:EB:20:E6:EE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/81175370221E26181F39FB407E63064DEB20E6EE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D7FHQ7bY37VxVJo3dEVjpPapxpbzHkMLgQKTznGbQaxb/0/3136382e39302e3131342e302f32342d3234203d3e20323635313837.roa
Signing time:             Fri 28 Jul 2023 01:00:00 +0000
ROA not before:           Fri 28 Jul 2023 00:55:00 +0000
ROA not after:            Fri 26 Jul 2024 01:00:00 +0000
asID:                     265187
IP address blocks:        168.90.114.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:cc:68:95:92:41:a7:07:25:b0:00:24:6f:d3:5e:51:8e:7b:f1:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=81175370221E26181F39FB407E63064DEB20E6EE
        Validity
            Not Before: Jul 28 00:55:00 2023 GMT
            Not After : Jul 26 01:00:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:fd:60:03:66:4a:f5:bf:a9:ea:c9:a0:26:10:
                    73:3e:fd:80:60:52:d2:93:ea:83:a5:56:fb:bf:b9:
                    2d:e8:aa:87:f8:de:02:4b:7b:9f:68:5d:9b:35:ba:
                    e6:ab:a6:fc:13:34:40:c6:66:f0:73:23:c1:fa:80:
                    45:96:b7:6a:61:04:64:0e:98:79:ad:c5:3a:86:80:
                    c5:8a:12:0f:88:4b:2f:63:a4:c6:85:51:f8:45:41:
                    af:96:9e:ba:ac:7d:48:4e:76:ff:d4:f6:30:36:16:
                    2b:0e:21:7c:25:e8:ae:6d:5e:39:1d:f7:d4:68:1e:
                    68:81:31:54:fe:96:ef:5c:7c:19:e6:1e:13:5f:f9:
                    84:14:2a:c7:0f:e0:71:90:ac:16:2a:2b:6c:ef:05:
                    14:3b:da:86:26:e5:36:2d:9c:da:91:66:64:cb:8b:
                    7e:53:69:b7:1f:a6:0f:43:f5:0c:6c:70:f0:f0:a0:
                    1e:f9:0b:88:61:d6:26:f9:b5:2b:80:27:40:63:48:
                    33:4f:2a:9f:95:6c:a4:fd:ae:8e:82:32:e9:b5:b2:
                    d8:ed:50:13:44:20:21:bf:83:ab:52:56:7a:17:df:
                    dd:42:5e:dd:ff:f4:59:4b:91:b6:5c:10:57:83:40:
                    13:0e:50:5b:0a:0a:42:e3:95:9b:bd:a5:41:f9:3a:
                    c9:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:68:5A:83:4F:29:BF:FB:1B:0D:57:CB:8C:32:11:FC:72:55:6F:DB
            X509v3 Authority Key Identifier:
                keyid:81:17:53:70:22:1E:26:18:1F:39:FB:40:7E:63:06:4D:EB:20:E6:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D7FHQ7bY37VxVJo3dEVjpPapxpbzHkMLgQKTznGbQaxb/0/81175370221E26181F39FB407E63064DEB20E6EE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/81175370221E26181F39FB407E63064DEB20E6EE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D7FHQ7bY37VxVJo3dEVjpPapxpbzHkMLgQKTznGbQaxb/0/3136382e39302e3131342e302f32342d3234203d3e20323635313837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.90.114.0/24

    Signature Algorithm: sha256WithRSAEncryption
         68:90:f8:cc:df:a4:14:ad:68:e1:db:8f:ba:d2:c5:dd:b3:ae:
         fe:eb:02:51:af:ab:fe:29:96:74:1b:8c:23:91:8c:2e:30:d9:
         8a:3f:02:30:c2:40:92:d3:4a:c4:85:c1:8d:12:ca:28:b1:93:
         72:31:07:27:a9:ce:d3:47:60:0a:41:a6:67:02:88:08:df:65:
         14:8d:8d:e4:01:64:58:42:8a:2e:58:47:9e:ec:53:b2:d0:34:
         54:47:29:7b:0f:ba:1b:82:60:0e:71:54:88:f8:4f:09:b1:8f:
         ee:b3:20:dc:39:b6:14:5e:cd:67:bb:e4:7c:1e:e8:1c:93:b5:
         80:52:de:7a:06:b9:c6:ad:37:f4:9d:3f:54:cb:eb:be:77:ea:
         56:73:74:8a:69:8b:0f:d8:fa:ac:5e:c2:cf:b5:55:7a:2c:38:
         61:19:0d:98:0f:d4:29:5e:22:5e:4b:66:f9:76:cd:e8:b4:f5:
         58:57:89:ae:bb:23:e1:0c:fa:92:f3:ed:1b:e9:c0:6a:e8:0c:
         b0:00:27:fd:74:d8:fe:53:89:1a:b3:3e:4c:a4:c6:30:a5:d1:
         cd:b0:4a:ac:1d:64:94:b8:95:56:a5:b7:49:47:ed:3c:31:7f:
         d7:76:97:5e:e0:e5:72:ca:62:a4:37:d5:d6:82:3b:31:97:42:
         8d:12:32:0b
-----BEGIN CERTIFICATE-----
MIIHQzCCBiugAwIBAgIUN8xolZJBpwclsAAkb9NeUY578ZQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODExNzUzNzAyMjFFMjYxODFGMzlGQjQwN0U2MzA2NERF
QjIwRTZFRTAeFw0yMzA3MjgwMDU1MDBaFw0yNDA3MjYwMTAwMDBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQzlGRDYwMDM2NjRBRjVCRkE5
RUFDOUEwMjYxMDczM0VGRDgwNjA1MkQyOTNFQTgzQTU1NkZCQkZCOTJERThBQTg3
RjhERTAyNEI3QjlGNjg1RDlCMzVCQUU2QUJBNkZDMTMzNDQwQzY2NkYwNzMyM0Mx
RkE4MDQ1OTZCNzZBNjEwNDY0MEU5ODc5QURDNTNBODY4MEM1OEExMjBGODg0QjJG
NjNBNEM2ODU1MUY4NDU0MUFGOTY5RUJBQUM3RDQ4NEU3NkZGRDRGNjMwMzYxNjJC
MEUyMTdDMjVFOEFFNkQ1RTM5MURGN0Q0NjgxRTY4ODEzMTU0RkU5NkVGNUM3QzE5
RTYxRTEzNUZGOTg0MTQyQUM3MEZFMDcxOTBBQzE2MkEyQjZDRUYwNTE0M0JEQTg2
MjZFNTM2MkQ5Q0RBOTE2NjY0Q0I4QjdFNTM2OUI3MUZBNjBGNDNGNTBDNkM3MEYw
RjBBMDFFRjkwQjg4NjFENjI2RjlCNTJCODAyNzQwNjM0ODMzNEYyQTlGOTU2Q0E0
RkRBRThFODIzMkU5QjVCMkQ4RUQ1MDEzNDQyMDIxQkY4M0FCNTI1NjdBMTdERkRE
NDI1RURERkZGNDU5NEI5MUI2NUMxMDU3ODM0MDEzMEU1MDVCMEEwQTQyRTM5NTlC
QkRBNTQxRjkzQUM5RDcwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAyf1gA2ZK9b+p6smgJhBzPv2AYFLSk+qDpVb7v7kt6KqH+N4CS3uf
aF2bNbrmq6b8EzRAxmbwcyPB+oBFlrdqYQRkDph5rcU6hoDFihIPiEsvY6TGhVH4
RUGvlp66rH1ITnb/1PYwNhYrDiF8JeiubV45HffUaB5ogTFU/pbvXHwZ5h4TX/mE
FCrHD+BxkKwWKits7wUUO9qGJuU2LZzakWZky4t+U2m3H6YPQ/UMbHDw8KAe+QuI
YdYm+bUrgCdAY0gzTyqflWyk/a6OgjLptbLY7VATRCAhv4OrUlZ6F9/dQl7d//RZ
S5G2XBBXg0ATDlBbCgpC45WbvaVB+TrJ1wIDAQABo4ICUTCCAk0wHQYDVR0OBBYE
FDloWoNPKb/7Gw1Xy4wyEfxyVW/bMB8GA1UdIwQYMBaAFIEXU3AiHiYYHzn7QH5j
Bk3rIObuMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0Q3RkhRN2JZMzdWeFZK
bzNkRVZqcFBhcHhwYnpIa01MZ1FLVHpuR2JRYXhiLzAvODExNzUzNzAyMjFFMjYx
ODFGMzlGQjQwN0U2MzA2NERFQjIwRTZFRS5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC84MTE3NTM3MDIyMUUyNjE4MUYzOUZCNDA3RTYzMDY0REVCMjBF
NkVFLmNlcjCBrgYIKwYBBQUHAQsEgaEwgZ4wgZsGCCsGAQUFBzALhoGOcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9EN0ZIUTdiWTM3VnhWSm8zZEVW
anBQYXB4cGJ6SGtNTGdRS1R6bkdiUWF4Yi8wLzMxMzYzODJlMzkzMDJlMzEzMTM0
MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM1MzEzODM3LnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA
qFpyMA0GCSqGSIb3DQEBCwUAA4IBAQBokPjM36QUrWjh24+60sXds67+6wJRr6v+
KZZ0G4wjkYwuMNmKPwIwwkCS00rEhcGNEsoosZNyMQcnqc7TR2AKQaZnAogI32UU
jY3kAWRYQoouWEee7FOy0DRURyl7D7obgmAOcVSI+E8JsY/usyDcObYUXs1nu+R8
Hugck7WAUt56BrnGrTf0nT9Uy+u+d+pWc3SKaYsP2PqsXsLPtVV6LDhhGQ2YD9Qp
XiJeS2b5ds3otPVYV4muuyPhDPqS8+0b6cBq6AywACf9dNj+U4kasz5MpMYwpdHN
sEqsHWSUuJVWpbdJR+08MX/Xdpde4OVyymKkN9XWgjsxl0KNEjIL
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:01 2024 by rpki-client on console-fra.rpki-client.org